Community

Download

community@kantarainitiative.org

December 2017

1 participants
1 discussions

NOTICE: Public review for comments and IPR review for SP 800-63A and SP 800-63B Service Assessment Criteria
by Ruth Puente 15 Dec '17

15 Dec '17

Dear Kantara Initiative Members and Community, This is a formal notice. Members of the Kantara Initiative Identity Assurance Working Group (IAWG) have recently approved Identity Assurance Framework NIST SP 800-63A Service Assessment Criteria (KIAF-1430 63A_SAC v1.0) and Identity Assurance Framework NIST SP 800-63B Service Assessment Criteria (KIAF-1440 63B_SAC v1.0). The documents described below now enter a 45-day public comment and IPR review period in preparation for a member ballot to consider their approval as Kantara Initiative Recommendations. Documents (2): *Document 1*: Identity Assurance Framework: NIST SP 800-63A Service Assessment Criteria Version: 1.0 Document 1 Date: 2017-12-14 Document 1 URL: Download 63A_SAC v1.0 <https://kantarainitiative.org/confluence/download/attachments/96437464/KIAF…> *Document 2*: Identity Assurance Framework: NIST SP 800-63B Service Assessment Criteria Version: 1.0 Document 2 Date: 2017-12-14 Document 2 URL: Download 63B_SAC v1.0 <https://kantarainitiative.org/confluence/download/attachments/96437466/KIAF…> Overview of Documents: Kantara has historically based its ‘Operational’ Service Assessment Criteria on a broad interpretation of NIST’s SP 800-63 rev.2. With SP 800-63 rev.3 coming into full effect from 2018-06-21, Kantara is gearing-up to extend its Trust Framework Program to also provide for assessments against 800-63 rev.3. Kantara has developed criteria which will be used for SP 800-63 rev.3 conformity assessments for identity proofing and authentication functions, at the respective AL2, i.e. against the strictly normative requirements of SP 800-63A and ’63B at IAL2 and AAL2 respectively. This work could not have been accomplished by this time without the generous sponsorship of the criteria’s drafting Editor by ID.me. A sub-group of the Identity Assurance Working Group was assembled to review and provide recommended enhancements to these criteria, the participants of which are recognized within each of the attached documents. Kantara is now releasing these criteria for a 45-day Public Review. Accordingly, attached are two XLS documents, each with a document record, guidance for reviewers and (importantly) the forthcoming criteria. One document addresses the NIST requirements in SP 800-63A (KIAF-1430 63A_SAC v1.0) and the other the requirements in SP 800-63B (KIAF-1440 63B_SAC v1.0). Kantara invites your review of these documents and asks that you submit any comments and proposed revisions on or before 2018-01-29. Full details on commenting and submission are provided in the “Reviewers’ Guide”, in each document. We thank you for your time and interest. This is an open invitation to comment. Kantara Initiative solicits feedback from potential users, developers and, other interested parties, whether Kantara Initiative members or not, for the sake of improving the interoperability and quality of its technical work. Public Review and IPR Review Period Opens: 2017-12-15, 18:00 UTC Public Review and IPR Review Period Closes: 2018-1-29, 17:59 UTC To Comment on these documents: Full details on commenting and submission are provided in the “Reviewers’ Guide”, in each document. Note that any submissions are deemed to be contributed under the IPR Option of the WG: Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non-discriminatory (RAND). Intellectual Property Rights Notice: In accordance with the Kantara Initiative IPR Policy Article 5 and the Kantara Initiative Operating Procedures Article 6, you have a period of 45 days to review the criteria for any Necessary Claims that may be implicated by the criteria. While there is no requirement to review your patent portfolio for Necessary Claims, please be advised that unless you provide a licensing objection in accordance with the Kantara Initiative IPR Policy Article 5 or a notice of withdrawal in accordance with Kantara Initiative IPR Policy Article 6 on or before *2018-1-29, 17:59 UTC* you will have committed to the licensing provisions as set forth by the Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non-Discriminatory (RAND) IPR Policy with respect to any Necessary Claims implicated by the final approved criteria. Having signed the Group Participation Agreement (GPA) all members of the IAWG should be familiar with these documents, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark and license rights that read on an approved Kantara Initiative specification. Kantara Initiative invites any persons who know of any such claims to disclose these if they may be essential to the implementation of the above criteria so that these notices may be provided to the IAWG. To submit an IPR Necessary Claim, email staff(a)kantarainitiative.org with the subject "IAWG IPR CLAIM". Please contact the Kantara Initiative staff at staff(a)kantarainitiative.org with any questions regarding this notice. Best regards, Ruth Puente Executive Programme Manager Kantara Initiative Inc.

1 0