I cannot believe the number of truly uninformed comments in this post.

There are those who believe all software patents should be invalidated because they are merely ideas. One of the commentators at Ipwatchdog gives a great refutation of this assertion: "...you clearly do not understand computers and software if you believe they are abstract ideas. The arguments against software patents have a fundamental flaw. As any electrical engineer knows and software developer should know, solutions to problems implemented in software can also be realized in hardware, i.e., electronic circuits. The main reason for choosing a software solution is the ease in implementing changes, the main reason for choosing a hardware solution is speed of processing. Therefore, a time critical solution is more likely to be implemented in hardware. While a solution that requires the ability to add features easily will be implemented in software. Software is just a method of converting a general purpose electronic circuit (computer) into a application specific electronic circuit. As a result, to be intellectually consistent those people against software patents also have to be against patents for electronic circuits."

If you have a great idea for an information technology system and this system is novel and useful you should be able to patent it.

The problem of junk patents can be solved by better processes at the USPTO. Getting rid of all software patents because there are junk patents is literally, "throwing the baby out with the bathwater."

You can be certain that any type of "reform" that comes out of the current corrupt system in Washington will favor large corporations, because they are the ones who can most effectively bribe our politicians.

Are there any worthy alternatives? Does any service truly compete with TimeWarner? I live in Austin, the AT&T service is a second tier competitor. TimeWarner is a monopoly in our area. They should be regulated as such.

We have created an authentication system, "Trusted Node Authentication", that answers many of the questions raised in this article. We we can answer the most fundamental question, "How can trust be established over the Internet?"

http://www.forbintechnologies.com/forbinTechnologi esWeb/trustedNodeAuthentication.do?ref=109401245

This system has has now been reviewed by several academics and authors with an expertise in security. While most have pointed out the challenge of convincing ISPs to join the consortium, no one has found a conceptual flaw in the "Trusted Node Authentication(TM)" system.

Here is a brief overview:

A major consolidation of Internet Service Providers (ISPs) over the last five years provides the opportunity to create a new authentication system. (In the U.S., twenty-two of the major ISPs now control 75% of the market.)

Forbin Technologies is a startup company located in Austin, TX. We have designed a, "Trusted Node Authentication(TM)" system, that will solve many of the systemic problems of the current Public Key Infrastructure system, especially the problems of certificate revocation lists (CRLs) and on-line status checking.

This system could also provide the "holy grail" for single sign-on. We believe the simple and efficient single sign-on process for "Trusted Node Authentication(TM)" is far superior to the "federated identity" process provided by the Liberty Alliance framework.

Because of its non-proprietary nature and its ease of use, "Trusted Node Authentication(TM)" could become the cornerstone of a new identity management structure popularly referred to as Identity 2.0. "In Identity 2.0, usage of identity more closely resembles today's offline identity systems, but with the advantages of a digital medium. As with a driver's license, the issuer provides the user with a certified document containing claims. The user can then choose to show this information when the situation requires." (Burton Group)

Microsoft's CardSpace and the open-source Higgins project (supported by IBM) are the two leading Identity 2.0 technologies. OpenID and Sxip are also players in this space. None of these systems has an effective authentication mechanism built in or expressly defined. Without authentication these systems are simply profile management systems and not identity management systems. (Higgins and CardSpace provide a workflow for authentication from an "Identity Provider"; however, they do not answer the question as to why a "Security Token" from an "Identity Provider" should be trusted.)

The basic question is, how can trust be established over the Internet? If you and I have never met and I come to your website, how can you be confident that I am who I say that I am? "Trusted Node Authentication(TM)" answers this basic question regarding the establishment of trust.

Sincerely,

Mike Duffy
CEO / CTO
Forbin Technologies