Internet Identity Timeline

As the number of people who remember these events seems likely to dwindle, I have started compiling an Internet Identity timeline. I have included events that I personally consider important, based on my own judgment and perspective. It is still far from complete, so if you know of something that should be included, please post the date, heading, source (such as a link), and why you think it matters in the comments here.

• 1998: XNS Project begins
• 1999: Microsoft Passport service launches. (https://news.microsoft.com/2001/08/12/microsoft-passport-brings-convenience-safety-to-e-commerce/)
• 2000: XNS ORG is established
• 2001: OpenID.net is registered by David Lehn
• 2001/1: SSTC begins at OASIS. (SAML standardization)
• 2001-03-19 Microsoft’s Bill Gates Previews New “HailStorm” Technologies to Usher In New Era of More Consistent, Personalized and User-Centric Experiences
  • Introduction to .Net My Services (2001-09)
    • The term user centric already appears here
• 2001-09-26: The Liberty Alliance Project launches. (PR News Wire: Industry Leaders to Form Network Identity Alliance-Liberty Alliance Project (2001/9/26) )
• 2002: XNS is donated to OASIS. The XRI WG begins.
• 2002-10: The 1st Digital ID World is held (Digital ID World Colorado 2002 brochure from Google Books)
• 2002: Mydentity, Ourdentity, Theirdentity: It appears as a follow-up to DIDW in the 2002-12-31 entry on Doc Searls Weblog, dated 2002/12/31 (http://doc.weblogs.com/2002/12/31), so perhaps it was introduced in the DIDW Closing Keynote in 2002?
• 2003: SAML 1.1 is released
• 2004-04: WS-Security 1.0 is released
• 2004: User Centric Identity (Dick Hardt)
• 2005-05: Laws of Identity (Kim Cameron)
• 2005-09-10: Identity 2.0: Dick Hardt. User Centric Identity. (@ O’reilly Open source conference OSCON).

• 2005-03-01: SAML 2.0 is released
• 2005-10: Internet Identity Workshop #1 is held
• 2006-02: WS-Security 1.1 is released
• 2006-09: VRM: On September 1, 2006, the term first appeared when Doc Searls introduced it on a Gillmor Gang podcast with Mike Vizard.
• 2007-03 : WS-Trust is released
• 2007-12 OpenID 2.0 is released, and development of OAuth 1.0 begins at IIW
• 2008-05 Development of UMA 1.0 begins
• 2009-05: The OAuth WG begins at the IETF. (At this point, it used key=value pairs.)
• 2009-10: Nishitani and Sakimura present the Contract Exchange draft at IIW
• 2009-12: Personal Data Ecosystem: The details are unclear, but the term appears at the FTC Privacy Roundtable on 2009-12-07 and is reproduced in the transcript. The moderator, Mr. MITHAL, uses the term while introducing Richard M. Smith, so the concept dates back at least to some point before then. https://www.ftc.gov/news-events/events-calendar/2009/12/exploring-privacy-roundtable-series
  Personal Data Ecosystem chart: https://www.ftc.gov/sites/default/files/documents/public_events/exploring-privacy-roundtable-series/personaldataecosystem.pdf
• 2010-01-15: Hardt. D, et al. publish OAuth WRAP
• 2010-01: The FTC Staff Report 2010 (https://www.ftc.gov/sites/default/files/documents/reports/federal-trade-commission-bureau-consumer-protection-preliminary-ftc-staff-report-protecting-consumer/101201privacyreport.pdf) refers to the above.
• 2010-03: Work begins on OpenID Artefact Binding (later Connect).
• 2010-05: The response in the OAuth 2.0 draft becomes JSON-based. At the same time, the OpenID AB response is also changed to JSON.
• 2012: Dr. Ann Cavoukian mentions PDE. Could Cavoukian, A., “Privacy by Design and the Emerging Personal Data Ecosystem” (2012)  be the first instance? Drummond Reed appears here.
• 2012-10: Standardization of the OAuth FW and Bearer Token Usage (RFC6749, 6750) is completed
• 2014-02: Standardization of OpenID Connect Core, Dynamic Registration, etc. is completed
• 2015-05: Standardization of JWS, JWE, JWK, JWA, and JWT is completed (RFC7515 – 7519)
• 2016-10: The FAPI WG begins