Code of Conduct

From IDESG Wiki
Jump to navigation Jump to search

Full Title or Meme

For the purposes of Identity Management, Code of Conduct applies to the actors in the identification of users and the protection of user data supplied during the process of Authentication or Authorization.

Actors

A typical list of actors in Identity Management which exhibits some overlap:

  1. User Agent
  2. Resource Server
  3. Identifier or Attribute Provider
  4. Authorization Server
  5. Credential Service Provider

Conext

Exisnging examples

Problems

The scope of a Code of Conduct is not always clear. In particular it can address either the intent of the actor, the actions of the actor, or the result of the action.

  • For example the Code of Hammurabi was thoroughly results oriented.

    Law #53: "If any one be too apathetic to keep his dam in primly condition, and does not so keep it; if then the dam break and all the fields be flooded, then shall he in whose dam the break occurred be sold for money, and the money shall replace the crops which he has caused to be ruined."

  • Professions like Engineering focus on the actions of the engineers in creating the design. These codes are typically mandatory and violations can result in significant liability actions.

    Law #53: "If any one be too a

Solutions

This is a list of some of the codes listed by their intended audience.

Healthcare

Aerospace and Defense

References