May 2010 - Community - mailman.kantarainitiative.org

An observation: SSO's are consolidating and/or collaborating more
by Brett McDowell 23 Jul '10

23 Jul '10

This email notice prompted me to share an observation with this community list. CEN and CENELEC are essentially consolidating. FSTC & BITS have essentially consolidated (or are somewhere along in the process). Liberty Alliance & Concordia Project are consolidating into Kantara Initiative. Electronic Authentication Partnership & Raddichio consolidated with Liberty Alliance before that. OpenID Foundation & Information Card Foundation seem to be consolidating their trust framework activities into the OIF/OIE project/organization. OASIS is more directly involved with various "non-accredited industry consortia" than I've ever seen before. ISOC is investing time and dollars into Kantara Initiative and W3C (among others no doubt). There are probably other moves like this in the identity, security, and privacy space that I'm forgetting to mention or haven't actually stumbled upon yet. For discussion: why is this happening, and is it a good thing for standards development and/or adoption? It's no secret that standards setting organizations are feeling the impact of the economic downturn and consolidation is one of several options each group faces. Many of you subscribed to this mailing list are pretty close to several of these consolidation/cooperation projects. I hoping some of you will share your personal observations about how this strategy is working and where you think this is all headed -- is this trend going to reverse or continue? -- Brett Begin forwarded message: > > From: Penny Sarah [mailto:spenny@cencenelec.eu] > Sent: 11 February 2010 18:03 > To: Coop_all; CGF_Email List > Subject: CEN and CENELEC new email addresses > > > > > Dear Madam, > Dear Sir, > > The close collaboration between CEN and CENELEC, which was consolidated by the creation of a common CEN-CENELEC Management Centre (CCMC) at the beginning of this year, is now further reflected in our new e-mail address: flastname(a)cencenelec.eu. > > For example, if you wish to contact CCMC Communication Unit Manager, Elisabeth Brodthagen use ebrodthagen(a)cencenelec.eu > > Please make a note of our new email addresses and amend your contact lists accordingly. > > In attachment you will find the organization chart of the CEN-CENELEC Management Centre as well as a telephone and e-mail directory of all CCMC staff. > > Our postal address is: > > CEN-CENELEC Management Centre > Avenue Marnix 17 > B-1000 Brussels > > We would appreciate if you could distribute this email in your organisation. > > Should you have any enquiries, please send an e-mail to communication(a)cencenelec.eu. > > Best regards, > > Sarah PENNY > Director – External Relations >

9 14

Kantara Initiative announces the formation of the Federation Interoperability Work Group (FIWG)
by Dervla O'Reilly 24 May '10

24 May '10

Kantara Community, The Kantara Initiative is pleased to announce the formation of the Kantara Initiative Federation Interoperability Work Group (FIWG). The purpose of this Work Group is to profile existing specifications to define an interoperable trust infrastructure for use by parties participating in Trust Frameworks. This will allow entities to determine the certification status and configuration parameters of entities outside of their local federation. For more information on the Interoperability Workgroup, please visit the Federation Interoperability home page at http://kantarainitiative.org/confluence/display/fiwg/Home - Join this Group - Review their Charter - IPR Policy - Creative Commons Share-Alike Attribution - Mail list and archives This Work Group is open to the public and ANY interested party may sign up to Participate. If you or your colleagues would like to join this group, simply complete the Group Participation Agreement here: http://signup.kantarainitiative.org/?selectedGroup=24 John Bradley will convene the group and welcomes you to join our kick off conference call on Wednesday, June 2, 7am PDT where we will discuss goals, scope and leadership nominations. The group will meet on a weekly basis towards the IOP at Burton Catalyst in San Diego end of July, reverting to bi-weekly thereafter. Bridge details: Skype: +9900827042954214 US Dial-In: +1-201-793-9022 Room Code: 2954214 If you have any questions about the Kantara Initiative or how to get involved please don't hesitate to send us a message (support(a)kantarainitiative.org ) or use the contact form here: http://kantarainitiative.org/confluence/display/GI/Contact+Us We look forward to your participation. Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

1 0

Kantara Initiative Announces Identity Assurance Framework 2.0
by Dervla O'Reilly 17 May '10

17 May '10

Dear Kantara Community, The following press release crossed the wire today. = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = Kantara Initiative Announces Identity Assurance Framework 2.0 Piscataway, NJ 17 May 2010 – Kantara Initiative, a global identity consortium promoting technical interoperability and harmonization to grow trust in Identity and Identity Access Management standards, products, and service deployments, today announced approval of its Identity Assurance Framework (IAF) 2.0 as a formal Kantara Initiative Recommendation. Building upon previous identity assurance efforts within the Electronic Authentication Partnership, Liberty Alliance Project, and now Kantara Initiative, the IAF 2.0 Recommendation is the prime work deliverable of Kantara Initiative’s Identity Assurance Working Group. IAF 2.0 offers a standardized approach to define policies and practices for Credential Service Providers (CSPs), relying parties, and operators of federated identity networks to trust each other’s users and information transactions at known, commonly agreed upon levels of assurance. Built upon the 4 commonly accepted levels of assurance scaling from low (Assurance Level 1) to high (Assurance Level 4) risk contexts, IAF 2.0 offers a common set of rules that enables interoperability across programs. Designed to be technology agnostic, no specific requirements for technology protocol use are defined by IAF 2.0 and, as such, this framework has the potential to catalyze a whole new marketplace in the identity management market. “IAF 2.0 establishes the criteria for a harmonized, industry- recognized identity assurance standard,” said Frank Villavicencio, executive vice president, Identropy Inc., and Kantara Initiative Identity Assurance Work Group chair. “It is a Framework that provides clear definitions of identity assurance levels across various aspects of the identity lifecycle, which allows organizations to more easily federate.” IAF 2.0 is available for adoption and may be profiled to provide additional requirements for specific industry verticals, regardless of their current technology deployment. IAF 2.0 Recommendation is publicly available from: http://kantarainitiative.org/confluence/display/GI/Identity+Assurance+Frame… “Kantara Initiative encourages governments, healthcare, financial services, and other vertical communities to adopt the identity Assurance Framework 2.0 in an effort to build harmonization and trust across all major technology protocols and jurisdictional policy requirements worldwide,” offered Rich Furr, head, global regulatory affairs compliance, SAFE-BioPharma Association and Kantara Initiative Identity Assurance Working Group vice chair. “This approval of the Kantara Recommendation adds even more momentum to the growing adoption of IAF as the de facto common standard for establishing that trust.” IAF 2.0 is comprised of a set of six documents that includes an overview publication, the IAF Glossary, a summary document on Assurance Levels, and an Assurance Assessment Scheme, which encompasses the associated assessment and certification program. There are also several subordinate documents, such as the Service Assessment Criteria which establishes baseline criteria for general organizational conformity, identity proofing, credential strength, and credential management services against which all (CSPs) will be evaluated. “Requiring Credential Service Providers to be certified through the Kantara Initiative Assurance Accreditation and Certification Program even further increases the level of trust in information transactions,” said Nigel Tedeschi, IdM and PKI solutions designer at British Telecommunications and Kantara Initiative Assurance Review Board chair. About the Kantara Initiative Assurance Accreditation and Certification Program The Kantara Initiative Identity Assurance Accreditation and Certification Program operationalizes the use of the IAF 2.0 so that organizations can adopt and certify end-user, CSP and Relying Party trust in services. It provides public and private sector organizations with a uniform means of relying on digital credentials issued by a variety of identity providers (credential service providers) in order to advance trusted identity and facilitate trusted public access to online services and information. Interoperability of e-authentication systems, mutual acceptance of rules, policies and supporting business processes is critical to the cost-effective operation of safe and secure systems that perform essential electronic transactions and tasks across industry lines. Kantara Initiative anticipates accrediting assessors (or auditors) and certifying CSPs deployed across industry lines using a wide variety of open/standard identity technology. For more information on the program or how to apply visit: http://kantarainitiative.org/confluence/display/certification/Identity+Assu… About Kantara Initiative Kantara Initiative is a global, open, public-private, technology- agnostic forum comprised of identity ecosystem stakeholders. Co- founded by Liberty Alliance, Internet Society, and the Information Card Foundation, among others, its inspired mission is to promote technical interoperability and harmonization; to develop policy frameworks for operational interoperability and; to provide certification and assessment programs to grow trust in the standards, products, and service deployments. Kantara Initiative freely provides the governance and resources whereby diverse members of the ecosystem successfully collaborate on a diverse portfolio of common policy frameworks, technical specifications and deployment guidelines driven by the identity community, industry and governments from around the world. For more information about getting involved in Kantara Initiative, visit http://www.kantarainitiative.org. ### Media Contact Michelle Hunt Kantara Initiative Michelle.Hunt(a)ieee-isto.org +1 732 981-3434 ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

1 0

Update to Kantara Initiative Speakers bureau list
by Dervla O'Reilly 13 May '10

13 May '10

Kantara community, Kantara is repurposing it's speakers(a)kantarainitiative.org list serve for use with the blogger community. This list serve is dedicated to centralize Kantara-related speaking opportunities and Kantara-centric blog messaging. Some of you are already blogging on behalf of the organization - thanks as always for starting and sharing the conversation(s). As we add bloggers to our speakers@ list serve, I encourage you to participate and subscribe. Please reply to Dervla O'Reilly, dervla[at]kantarainitiative[dot]org if you want to join this list. Cheers, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

1 0

Kantara Initiative welcomes new member Mary Ruddy
by Dervla O'Reilly 12 May '10

12 May '10

Please join us in welcoming new member Mary Ruddy. Mary's primary areas of interest are Concordia and ULX. Mary is also proposing a new Federation Interoperability Work Group, stay tuned for further details. We look forward to her participation. Regards, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

2 1

Kantara Initiative welcomes new member Anakam
by Dervla O'Reilly 11 May '10

11 May '10

Please join us in welcoming new member Anakam at Member Level 0. Their primary areas of interest are eGovernment, Healthcare Identity Assurance Work Group. We look forward to Anakam's participation and involvement. Regards, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

1 0

Announcement: Kantara Initiative Leadership and Support Changes
by Joni Brennan 07 May '10

07 May '10

(This message is sent on the behalf of Matthew Gardiner, President of Kantara Initiative) Colleagues of the Kantara Initiative Greetings from Munich Germany where I was attending the European Identity Conference 2010. A number of other Kantara folk were also in attendance. As my first note to the community as Kantara president I want to take this opportunity to update you on some changes that have taken place recently within the initiative. Firstly, we have just said goodbye to a number of colleagues of longstanding, namely the Rogers (both Sullivan & Martin) and Bill Smith. Roger Sullivan has retired from Oracle and thus simultaneously retired from his position as Kantara President and as a member of the BoT. Roger Martin has finished up his duties as Interim ED after previously finishing up as AOL’s member of the BoT. Also with the official phase out of the Liberty Alliance, Bill Smith has finished his duties as the Liberty representative to the BoT. They all are doing well and wish Kantara nothing but success. I thank them for their work over the years. So those are the goodbyes, what about the hellos? - As the sitting VP of Kantara I automatically take over as President and serve out the remaining term for calendar 2010. - We have just restructured the Kantara staff, promoting Joni to Managing Director of Kantara with the entire Kantara staff reporting to her. We also have opened up a spot for a new staff person that will take over some of Joni’s responsibilities in the role of Technical Program Coordinator (if you have ideas for someone for this role, please pass them to Joni). Given this change in Joni’s responsibilities we have suspended our search for a new ED. We think this new structure will be effective in moving Kantara forward. - Roger Sullivan will be replaced on the BoT by his former colleague at Oracle, Vadim Lander. - Lucy Lynch who is currently on the BoT from ISOC and is the Secretary of Kantara is also taking on the role of Treasurer from Roger Martin. Thanks to Lucy. - IEEE-ISTO (Kantara’s parent organization) is expanding their support role of Kantara to include both financial services as well as marketing support. The bottom line is we think this structure and approach continues to position us well to do well for the identity industry and our members. One final thought for now…please encourage others both inside and outside your organization to participate in the working/discussion groups, become full members, as well as take part in the interoperability and assurance programs, as we literally need to bring the community together to take the industry forward faster. Best Regards, Matthew Gardiner Matthew Gardiner Director of Product Marketing Security & Compliance BU CA, Inc. matthew.gardiner(a)ca.com 508-628-8598

1 0

Death and IIW...
by Kaliya 04 May '10

04 May '10

Hi Kantara I wanted to remind you the Internet Identity Workshop (@idworkshop), that many Kantara community members will be participating and it is just 2 weeks away May 17-19th. We already shifted to late registration pricing but if you use the discount code: Kantara it will give you regular pricing for another week until end day May 10th. We also have one day tickets now on sale. I am also putting on an event just after IIW - Digital Death Day (@digitaldeathday)- focused on all aspects of what happens to someone's online life after they die. Here are descriptions and links to both of these events & three other identity & privacy related events between now and August. Please spread the word to others who who would be interested & please forgive me on the cross posting I felt it was important to spread the word far and wide. Please send this note to other communities. Let me know if you have any questions. Regards, Kaliya Hamlin - Identity Woman, @identitywoman e-mail: kaliya(a)mac.om phone: 510 472-9069 1) Digital Death Day - May 20th, Mountain View digitaldeathday.com What happens to you Data After you DIE! How do you create a digital will? What are normative social network policies for memorialization? there are whole range of questions about online life and identity. This day will bring together diverse constituents interested the whole range of issues around digital death. 2) 10th Internet Identity Workshop, May 17-19th, Mountain View internetidentityworkshop.com Discount Code: Kantara gets you regular registration rate until midnight Monday May 10th One Day registrations are also available. This event brings together a community of innovators & implementors from large and small companies focused on open standards for distributed user-centric identity online. This promises to be the largest IIW to date. Government implementations, Personal-Data- Stores, Privacy Implications of Social Network Changes, Persona Management, and many other topics will be discussed - see the list of proposed topics here. 3) Computers Freedom and Privacy, June 15-18, San Jose www.cfp2010.org/ Includes an "unconference" afternoon June 16th Smart phones, social networking and the “internet of things” let us integrate the online world and computers more deeply into our lives -- and raise difficult questions, starting with whether we should have to give up our freedom and privacy in to reap the benefits of a constant connection to friends and information. 4) Ping Cloud Identity Summit, July 20-22, Keystone, CO www.cloudidentitysummit.com/ Includes an "unconference" afternoon July 21st Building Credibility in the Cloud. Change is upon us. Enterprise are asking architects to create and enact plans for the future, in a time when protocols are proliferating, services are moving to the cloud and perimeter security has been left behind. It is a time of change. Can the chaos be made to server you rather then the other say around. The best solutions will minimize application change, maximize business flexibility and monetize the benefit of cloud services. Discover them at the Cloud Identity Summit 2010. 5) Privacy Identity and Innovation, August 17-19th, Seattle, WA www.pii2010.com Includes a technology lab for privacy August 19th We realize that pii means different things to different people, and our goal is to find common ground to encourage dialogue and collaboration. Whether you are a privacy rights advocate or you believe privacy is indeed deade, pii2010 will offer a comprehensive look at how information is being created, shared, controlled, collected, stored and secured, how that is likely to change in the future and what it means for individuals, organizations and governments.

1 0