What is OpenID and how it works?

Many websites offer features that are only available to users who first log-in to the system. In a typical application, user identity is confirmed ("authenticated") upon entering the username and password for the account. This approach is straightforward and works, but there are drawbacks. Users are usually required to remember a username/password for every website they use, which can be problematic.

OpenID is an open standard that defines a way that web-based applications can authenticate users by delegating the responsibility of authentication to identity providers. With OpenID, users have a single identity that can be used on any OpenID-enabled application, and they only need to remember one password.
In this article, I describe the OpenID authentication system and show how a web application built with Ruby on Rails can use OpenID to authenticate its users.

How OpenID works?
OpenID relies on the HTTP protocol to exchange messages between users and "identity providers." Consider a user named Bob, whose identity provider is my OpenID (www.myopenid.com). Bob uses the Drupal content management system that happens to be an OpenID consumer. Here's the general workflow when Bob logs into his Drupal account through OpenID:

1. Arthur visits any OpenID-driven website.
2. Arthur enters his OpenID identity URI, "arthur-id.myopenid.com," in the login form and clicks a Submit button. That's his OpenID identity URI, which looks like a website address but identifies Bob and his identity provider.
3. Arthur's web browser is redirected to a web page served by myOpenID, where he is prompted for his password.
4. Arthur enters his OpenID password and clicks a Submit button.
5. myOpenID confirms Arthur's password, and his web browser is redirected to the website he opened with automated log-in.

Arthur entered his password only on the identity provider website, and never on the consumer website. The user's password is not shared with the consumer and only needs to be submitted once by users to the identity provider, preferably over a secure connection.

The following diagram best explains how OpenID works:

Benefits of using OpenID:

OpenID is an open standard that defines a way that web-based applications can authenticate users via a single identity. OpenID provides several benefits to users and developers. Users only need to remember one username (their identity URI) and password to access multiple applications. With a simple cookie and Remember Me checkbox, an OpenID identity provider can act as a convenient Single Sign-On (SSO) solution for someone who uses multiple OpenID consumers.

OpenID identity providers are responsible for the authentication of users It's nowadays common for web apps to offer OpenID support as an alternative to traditional authentication methods, but letting experts handle password security reduces the risk of accounts being compromised.

You will be glad to know that Google also provides OpenID. Use http://openid-provider.appspot.com to know your OpenID provided by Google.

Reference: Dr Dobb's

Circuit Filter in Stock Market

SEBI has introduced a rule known as Circuit Breaker in the stock market for both Index and Stock specific circuit limits. The circuit filter limit is introduced with the intention to reduce the speculations in the market and stock-specific trading.

There are two ways to apply a circuit filter: Upper circuit filter and Lower circuit filter. Depending upon the increase or decrease in stock price the respective circuit filter will be applied. So when buying stocks in the current stock markets you must first learn about the stock market and know the stock market prices and then consider online trading stocks.

Index-specific Circuit Filter:

This filter applies to either Sensex or Nifty whichever is breached earlier. Now there are three filters for Index-based circuit at 10%, 15% and 20%.

• If either Sensex or Nifty falls 10% before 1:00 pm, trading halts for one hour in the market. If the index drops after 1.00 pm but before 2:30 pm, trading halts for a half-hour. If the index drops after 2:30 pm, there will be no halt for trading at a 10% level and the market would continue trading for the remaining time.
• If either Sensex or Nifty falls 15% before 1:00 pm, trading halts for two hours in the market. If the index drops after 1:00 pm but before 2:00 pm, trading halts for one hour. If the index drops on or after 2:00 pm, there will be no trading for the remaining time.
• In case of a 20% drop in either of the index, the trading halts for the remaining day.

This percentage of circuit filters are revised after every quarter and new percentages arrive for the next quarter.

Stock specific Circuit Filter:

Stock specific circuit filters are applied in both BSE and NSE index. The percentage for circuit filter limit is 2%, 5%, 10% and 20%. 

When a stock is on the upper circuit limit there will be only buyers in the market and no seller exists and hence the price is up. 

On the other hand, a lower circuit limit is when there are only sellers in the market for that stock and hence the stock price is down.