- Community - mailman.kantarainitiative.org

NOTICE: Public review for comments and IPR review for SP 800-63A and SP 800-63B Service Assessment Criteria
by Ruth Puente 15 Dec '17

15 Dec '17

Dear Kantara Initiative Members and Community, This is a formal notice. Members of the Kantara Initiative Identity Assurance Working Group (IAWG) have recently approved Identity Assurance Framework NIST SP 800-63A Service Assessment Criteria (KIAF-1430 63A_SAC v1.0) and Identity Assurance Framework NIST SP 800-63B Service Assessment Criteria (KIAF-1440 63B_SAC v1.0). The documents described below now enter a 45-day public comment and IPR review period in preparation for a member ballot to consider their approval as Kantara Initiative Recommendations. Documents (2): *Document 1*: Identity Assurance Framework: NIST SP 800-63A Service Assessment Criteria Version: 1.0 Document 1 Date: 2017-12-14 Document 1 URL: Download 63A_SAC v1.0 <https://kantarainitiative.org/confluence/download/attachments/96437464/KIAF…> *Document 2*: Identity Assurance Framework: NIST SP 800-63B Service Assessment Criteria Version: 1.0 Document 2 Date: 2017-12-14 Document 2 URL: Download 63B_SAC v1.0 <https://kantarainitiative.org/confluence/download/attachments/96437466/KIAF…> Overview of Documents: Kantara has historically based its ‘Operational’ Service Assessment Criteria on a broad interpretation of NIST’s SP 800-63 rev.2. With SP 800-63 rev.3 coming into full effect from 2018-06-21, Kantara is gearing-up to extend its Trust Framework Program to also provide for assessments against 800-63 rev.3. Kantara has developed criteria which will be used for SP 800-63 rev.3 conformity assessments for identity proofing and authentication functions, at the respective AL2, i.e. against the strictly normative requirements of SP 800-63A and ’63B at IAL2 and AAL2 respectively. This work could not have been accomplished by this time without the generous sponsorship of the criteria’s drafting Editor by ID.me. A sub-group of the Identity Assurance Working Group was assembled to review and provide recommended enhancements to these criteria, the participants of which are recognized within each of the attached documents. Kantara is now releasing these criteria for a 45-day Public Review. Accordingly, attached are two XLS documents, each with a document record, guidance for reviewers and (importantly) the forthcoming criteria. One document addresses the NIST requirements in SP 800-63A (KIAF-1430 63A_SAC v1.0) and the other the requirements in SP 800-63B (KIAF-1440 63B_SAC v1.0). Kantara invites your review of these documents and asks that you submit any comments and proposed revisions on or before 2018-01-29. Full details on commenting and submission are provided in the “Reviewers’ Guide”, in each document. We thank you for your time and interest. This is an open invitation to comment. Kantara Initiative solicits feedback from potential users, developers and, other interested parties, whether Kantara Initiative members or not, for the sake of improving the interoperability and quality of its technical work. Public Review and IPR Review Period Opens: 2017-12-15, 18:00 UTC Public Review and IPR Review Period Closes: 2018-1-29, 17:59 UTC To Comment on these documents: Full details on commenting and submission are provided in the “Reviewers’ Guide”, in each document. Note that any submissions are deemed to be contributed under the IPR Option of the WG: Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non-discriminatory (RAND). Intellectual Property Rights Notice: In accordance with the Kantara Initiative IPR Policy Article 5 and the Kantara Initiative Operating Procedures Article 6, you have a period of 45 days to review the criteria for any Necessary Claims that may be implicated by the criteria. While there is no requirement to review your patent portfolio for Necessary Claims, please be advised that unless you provide a licensing objection in accordance with the Kantara Initiative IPR Policy Article 5 or a notice of withdrawal in accordance with Kantara Initiative IPR Policy Article 6 on or before *2018-1-29, 17:59 UTC* you will have committed to the licensing provisions as set forth by the Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non-Discriminatory (RAND) IPR Policy with respect to any Necessary Claims implicated by the final approved criteria. Having signed the Group Participation Agreement (GPA) all members of the IAWG should be familiar with these documents, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark and license rights that read on an approved Kantara Initiative specification. Kantara Initiative invites any persons who know of any such claims to disclose these if they may be essential to the implementation of the above criteria so that these notices may be provided to the IAWG. To submit an IPR Necessary Claim, email staff(a)kantarainitiative.org with the subject "IAWG IPR CLAIM". Please contact the Kantara Initiative staff at staff(a)kantarainitiative.org with any questions regarding this notice. Best regards, Ruth Puente Executive Programme Manager Kantara Initiative Inc.

1 0

Assurance Assessment Scheme Version 5.0
by Ruth Puente 07 Jul '16

07 Jul '16

Dear Kantara Initiative Inc. Members and Community, Kantara Assurance Assessment Scheme, which explains how the Assurance Program operates, has been revised by the Assurance Review Board (ARB) to introduce process for material changes to a service during its grant period. This AAS revision introduces a specific process which CSPs and their selected Assessors shall follow when Un-scheduled Assessments are required as a result of changes to a CSP and/or its Approved service(s), or when the ARB requests such an assessment, both of which are addressed in §4.7. AAS v5.0 is attached and available at the Kantara website: http://kantarainitiative.org/confluence/display/LC/Identity+Assurance+Frame… All revisions between v4.0 and v5.0 are shown with a grey background. Best regards, Ruth Puente Executive Programme Manager Kantara Initiative Inc.

1 0

NOTICE: Document and IPR Review - SAC V4.6.0
by Ruth Puente 21 Jun '16

21 Jun '16

Gentle reminder ---------- Forwarded message ---------- From: Ruth Puente <ruth(a)kantarainitiative.org> Date: Thu, Jun 2, 2016 at 11:02 PM Subject: NOTICE: Document and IPR Review - SAC V4.6.0 To: community(a)kantarainitiative.org Dear Kantara Initiative Members and Community: This is a formal notification that the IAWG has approved the following document as Draft Recommendation for public comment and IPR Review: IAF 1400 Service Assessment Criteria Version 4.6.0. Please see attachment. Per Article 6 of the Operating Procedures, this email initiates a review and comment period of 45 days on this document. Comment and IPR Review: Opens: Today Closes: July 17, 2016, 17:00 Pacific Time If you choose to comment on this Draft Recommendation use the attached pro forma and return to secretariat(a)kantarainitiative.org with the subject "COMMENT SUBMISSION" IPR: If you wish to submit an IPR claim please do the following: IPR Claims may be sent to secretariat(a)kantarainitiative.org with the subject "IPR CLAIM" Best regards, Ruth Puente Executive Programme Manager Kantara Initiative Inc. www.kantarainitiative.org

1 0

NOTICE: Document and IPR Review - SAC V4.6.0
by Ruth Puente 02 Jun '16

02 Jun '16

Dear Kantara Initiative Members and Community: This is a formal notification that the IAWG has approved the following document as Draft Recommendation for public comment and IPR Review: IAF 1400 Service Assessment Criteria Version 4.6.0. Please see attachment. Per Article 6 of the Operating Procedures, this email initiates a review and comment period of 45 days on this document. Comment and IPR Review: Opens: Today Closes: July 17, 2016, 17:00 Pacific Time If you choose to comment on this Draft Recommendation use the attached pro forma and return to secretariat(a)kantarainitiative.org with the subject "COMMENT SUBMISSION" IPR: If you wish to submit an IPR claim please do the following: IPR Claims may be sent to secretariat(a)kantarainitiative.org with the subject "IPR CLAIM" Best regards, Ruth Puente Executive Programme Manager Kantara Initiative Inc. www.kantarainitiative.org

1 0

Presentation on Privacy criteria in the IAF - May 5 12pmPDT
by Ruth Puente 02 May '16

02 May '16

Dear Community and Stakeholders, The Identity Assurance Working Group meeting this Thursday, May 5 will start with a presentation from Jenn Behrens, Kimble and Associates privacy partner, who will provide a general overview of the relevant policy background for establishing privacy criteria in the identity assurance framework. Time: 12:00 -12:30 pm PDT/ 19:00 - 19:30 UTC Time Zone converter: http://www.timeanddate.com/worldclock/converter.html Dial in details: Please join the meeting from your computer, tablet or smartphone. https://global.gotomeeting.com/join/925479701 *You can also dial in using your phone.* United States : +1 (312) 757-3117 Access Code: 925-479-701 *More phone numbers* Canada : +1 (647) 497-9379 Sweden : +46 (0) 853 527 817 United Kingdom : +44 (0) 330 221 0099 Best regards, Ruth Puente Kantara Initiative

1 0

CERN presentation is now available
by Ruth Puente 07 Apr '16

07 Apr '16

Dear All, The video and slides of Hanna Short´s presentation are available at the Kantara Website: https://kantarainitiative.org/resources/webinars/ Best regards, Ruth Puente Kantara Initiative > > Dear Kantara Community and Stakeholders, >> >> We have invited CERN to give a presentation about their interesting >> projects on Authentication and Authorisation framework. Please find the >> details below. >> >> Date: Thursday, April 7, 2016 >> Time: 10:00am PDT / 17:00 UTC (GMT) >> Speaker: Hannah Short, CERN IT Fellow >> Presentation: Assurance profiles within the AARC Project >> >> Dial in details: >> Please join my meeting from your computer, tablet or smartphone. >> https://global.gotomeeting.com/join/214280925 >> You can also dial in using your phone. >> United States (Toll-free): 1 877 309 2073 >> United States : +1 (571) 317-3129 >> Access Code: 214-280-925 >> >> Hannah will focus on the various assurance related activities within the >> Authentication and Authorisation for Research and Collaboration (AARC), LoA >> profiles and the Security Incident Response Trust Framework for Federated >> Identity (SIRTFI), and give a brief overview of the AARC project. >> >> The AARC project brings together 20 different partners from among >> National Research and Education Networks (NRENs) organisations, >> e-Infrastructures service providers and libraries. AARC aims to develop and >> pilot an integrated cross-discipline authentication and authorisation >> framework, built on existing AAIs and on production federated >> infrastructures. More information: https://aarc-project.eu >> >> SIRTFI is a group supported by REFEDS, looking at processes for >> expressing security incident handling requirements as an assurance profile >> for federations and other requirements needed to effectively deploy and >> enhance incident response processes for FIM. More information: >> https://refeds.org/wp-content/uploads/2016/01/Sirtfi-1.0.pdf >> >> Best regards, >> >> Ruth Puente >> Kantara Initiative >> >> >

1 0

TODAY 10am PDT CERN presentation on Assurance profiles
by Ruth Puente 07 Apr '16

07 Apr '16

REMINDER Dear Kantara Community and Stakeholders, > > We have invited CERN to give a presentation about their interesting > projects on Authentication and Authorisation framework. Please find the > details below. > > Date: Thursday, April 7, 2016 > Time: 10:00am PDT / 17:00 UTC (GMT) > Speaker: Hannah Short, CERN IT Fellow > Presentation: Assurance profiles within the AARC Project > > Dial in details: > Please join my meeting from your computer, tablet or smartphone. > https://global.gotomeeting.com/join/214280925 > You can also dial in using your phone. > United States (Toll-free): 1 877 309 2073 > United States : +1 (571) 317-3129 > Access Code: 214-280-925 > > Hannah will focus on the various assurance related activities within the > Authentication and Authorisation for Research and Collaboration (AARC), LoA > profiles and the Security Incident Response Trust Framework for Federated > Identity (SIRTFI), and give a brief overview of the AARC project. > > The AARC project brings together 20 different partners from among National > Research and Education Networks (NRENs) organisations, e-Infrastructures > service providers and libraries. AARC aims to develop and pilot an > integrated cross-discipline authentication and authorisation framework, > built on existing AAIs and on production federated infrastructures. More > information: https://aarc-project.eu > > SIRTFI is a group supported by REFEDS, looking at processes for expressing > security incident handling requirements as an assurance profile for > federations and other requirements needed to effectively deploy and enhance > incident response processes for FIM. More information: > https://refeds.org/wp-content/uploads/2016/01/Sirtfi-1.0.pdf > > Best regards, > > Ruth Puente > Kantara Initiative > >

1 0

Reminder: April 7th CERN presentation on Assurance profiles
by Ruth Puente 05 Apr '16

05 Apr '16

Dear Kantara Community and Stakeholders, We have invited CERN to give a presentation about their interesting projects on Authentication and Authorisation framework. Please find the details below. Date: Thursday, April 7, 2016 Time: 10:00am PDT / 17:00 UTC (GMT) Speaker: Hannah Short, CERN IT Fellow Presentation: Assurance profiles within the AARC Project Dial in details: Please join my meeting from your computer, tablet or smartphone. https://global.gotomeeting.com/join/214280925 You can also dial in using your phone. United States (Toll-free): 1 877 309 2073 United States : +1 (571) 317-3129 Access Code: 214-280-925 Hannah will focus on the various assurance related activities within the Authentication and Authorisation for Research and Collaboration (AARC), LoA profiles and the Security Incident Response Trust Framework for Federated Identity (SIRTFI), and give a brief overview of the AARC project. The AARC project brings together 20 different partners from among National Research and Education Networks (NRENs) organisations, e-Infrastructures service providers and libraries. AARC aims to develop and pilot an integrated cross-discipline authentication and authorisation framework, built on existing AAIs and on production federated infrastructures. More information: https://aarc-project.eu SIRTFI is a group supported by REFEDS, looking at processes for expressing security incident handling requirements as an assurance profile for federations and other requirements needed to effectively deploy and enhance incident response processes for FIM. More information: https://refeds.org/wp-content/uploads/2016/01/Sirtfi-1.0.pdf Best regards, Ruth Puente Kantara Initiative

1 0

Invitation: CERN presentation on Assurance profiles
by Ruth Puente 24 Mar '16

24 Mar '16

Dear Kantara Community and Stakeholders, We have invited CERN to give a presentation about their interesting projects on Authentication and Authorisation framework. Please find the details below. Date: Thursday, April 7, 2016 Time: 10:00am PDT / 17:00 UTC (GMT) Speaker: Hannah Short, CERN IT Fellow Presentation: Assurance profiles within the AARC Project Dial in details: Please join my meeting from your computer, tablet or smartphone. https://global.gotomeeting.com/join/214280925 You can also dial in using your phone. United States (Toll-free): 1 877 309 2073 United States : +1 (571) 317-3129 Access Code: 214-280-925 Hannah will focus on the various assurance related activities within the Authentication and Authorisation for Research and Collaboration (AARC), LoA profiles and the Security Incident Response Trust Framework for Federated Identity (SIRTFI), and give a brief overview of the AARC project. The AARC project brings together 20 different partners from among National Research and Education Networks (NRENs) organisations, e-Infrastructures service providers and libraries. AARC aims to develop and pilot an integrated cross-discipline authentication and authorisation framework, built on existing AAIs and on production federated infrastructures. More information: https://aarc-project.eu SIRTFI is a group supported by REFEDS, looking at processes for expressing security incident handling requirements as an assurance profile for federations and other requirements needed to effectively deploy and enhance incident response processes for FIM. More information: https://refeds.org/wp-content/uploads/2016/01/Sirtfi-1.0.pdf Best regards, Ruth Puente Kantara Initiative

1 0

Invitation: CERN presentation on Assurance profiles
by Ruth Puente 25 Feb '16

25 Feb '16

Dear Kantara Community, We have invited CERN to give a presentation about their interesting projects on Authentication and Authorisation framework. Please find the details below. Date: Thursday, April 7, 2016 Time: 10:00am PDT / 17:00 UTC (GMT) Speaker: Hannah Short, CERN IT Fellow Presentation: Assurance profiles within the AARC Project Dial in details will be provided soon Hannah will focus on the various assurance related activities within the Authentication and Authorisation for Research and Collaboration (AARC), LoA profiles and the Security Incident Response Trust Framework for Federated Identity (SIRTFI), and give a brief overview of the AARC project. The AARC project brings together 20 different partners from among National Research and Education Networks (NRENs) organisations, e-Infrastructures service providers and libraries. AARC aims to develop and pilot an integrated cross-discipline authentication and authorisation framework, built on existing AAIs and on production federated infrastructures. More information: https://aarc-project.eu SIRTFI is a group supported by REFEDS, looking at processes for expressing security incident handling requirements as an assurance profile for federations and other requirements needed to effectively deploy and enhance incident response processes for FIM. More information: https://refeds.org/wp-content/uploads/2016/01/Sirtfi-1.0.pdf Best regards, Ruth Puente Kantara Initiative

1 0