In effect, today, credentials aren't portable. Ideally, users would be able to use a common set of credentials with their desktop and laptop PCs, PDAs, cell phones, and other Internet-ready devices. There are at least two possible solutions for providing credential portability. In general, the security provided by such systems will be less than is provided in systems using hardware tokens, as the hardware tokens tend to be more resistant to improper inspection and modification. However, in many environments, the security offered will be sufficient.
Availability is also at a premium.
Credentials must be available to many different types of client with different characteristics in terms of processing power, storage and network connectivity. The purpose of this working group is therefore to gather requirements for a solution or set of solutions beneficial to the Internet community, establish a framework for these, and to develop, adapt, or adopt the required protocols and credential formats necessary to achieve interoperability.