Windows CardSpace(WCS)

Windows Cardspace是新一代的统一身份验证解决方案。它与微软之前的Passport是有相似之处，但也有不同之处的。这篇博客简要地对其进行介绍

1. 运行机制

• • Vista和Win 7自动具有该功能。XP需要安装SP3才有。
  • 隔离的进程（Session隔离）
  • 背景其实是一个图片，灰色的，不会有任何变化（包括时钟），用一个图片只是为了减少用户的疑虑。
  • infocard.exe(wcs引擎）,icardagt.exe(代理程序）——它们之间通讯

2. 标识提供着(identity provider)

• • 负责验证身份信息的一方

3. 个人卡和托管卡

• • 个人卡其实是存储在本地的，它的信息是有限的（是规定的那么几项），个人卡其实是自己充当验证提供者。
  • :/Users/ /AppData/Local/Microsoft/CardSpace/CardSpace.db on Windows Vista.
    :/Documents and Settings/ /Local Settings/Application Data/Microsoft/
    CardSpace/CardSpace.db on Windows XP and Windows Server 2003
  • 托管卡则是存在在特定的第三方提供商处的。它的信息不存在本地
  • 本质上，它们是一样的。只是信息提供方不一样。

4. 个人卡的信息

Given Name = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname";
Email Address = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress";
Surname = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname";
Street Address = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/streetaddress";
Locality = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/locality";
State/Province = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/stateorprovince";
Postal Code = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/postalcode";
Country = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/country";
Home Phone = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/homephone";
Other Phone = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/otherphone";
Mobile Phone = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/mobilephone";
Date of Birth = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dateofbirth";
Gender = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/gender";
PPID = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier";