- Community - mailman.kantarainitiative.org

Announcing the OTTO WG: Open Trust Taxonomy for OAuth2
by Joni Brennan 17 Jun '15

17 Jun '15

Dear Kantara Community, We are pleased to announce the formation of the OTTO WG! OTTO stands for Open Trust Taxonomy for OAuth2. Learn more about the OTTO WG: http://kantarainitiative.org/confluence/display/OTTO/Home Join the OTTO WG: http://signup.kantarainitiative.org/?selectedGroup=36 The working group will develop the basic structures needed for the creation of multi-party federations between OAuth2 entities. The intent is to create a foundation of trust and drive down the cost of collaboration by publishing technical and legal information. These structures will include the set of APIs and related data structures enabling an OAuth entity to manage which entities it trusts and for other OAuth entities to discover members of the federation and details of the services. The Work Group is necessary to bring together collaborators from existing SAML federations and the OAuth community to collaborate on a draft solution that meets their shared goals in this area and takes into account lessons learned from the past ten years of SAML. Specifically, this Work Group is responsible for: - Developing a set of use cases and requirements that are specific enough to guide the specification design work - Developing a set of modular draft specifications meeting these use cases and requirements - Overseeing the contribution of each resulting draft specification to a standards-setting organization The APIs and data structures will enable discovery of the members of the federation and details about their services, key material and technical capabilities. The final scope will be refined after consideration of the use cases. Existing SAML Federation XML structures will inform this work, but the data structures will not be expressed in XML but in JSON. The functions supported in existing SAML federations should be supported. Additionally, support for a more efficient and scalable discovery process and dynamic integration process will be considered. Welcome OTTO WG to our community! Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

Kantara Initiative Virtual Plenary June 23 - Join. Innovate. Trust.
by Joni Brennan 15 Jun '15

15 Jun '15

Dear Kantara Initiative Community, We are pleased to announce our first virtual plenary event taking place on June 23. This event will be in the form of a 3 hour webinar where each of the Kantara groups will present their latest findings. We'll have opportunities to share, ask questions, and discuss. All of this in the spirit of "connecting the dots" of our activities and learning how we can help each other to succeed. If you are a Kantara Member seeking to know more about the over all activities of Kantara Initiative the virtual plenary is a great opportunity. If your not a Member this is a great chance to learn more about how we can help your organization to reach its goals. Kantara Initiative Virtual Plenary - Join. Innovate. Trust. Date: June 23, 2015 Time: 8am - 11am PT Check Your Local Time: http://bit.ly/1C9aT3m Register: http://bit.ly/ki-plenary1-2015 *Agenda:* Time Group Presenter Topic 8:00 10mins Intro Sal D'Agostino & Joni Brennan Kantara Initiative: Join. Innovate. Trust. 8:10 20mins IRM <https://kantarainitiative.org/confluence/display/irm/> Sal D'Agostino & Joni Brennan - Overview of the Design Principles of Relationships - Context of real world IRM application 8:30 20mins UMA <https://kantarainitiative.org/confluence/display/uma> Eve Maler, ForgeRock - Demo of User-Managed Access (UMA) - UMA where consent means "U Must Ask" 8:50 20mins IDoT <https://kantarainitiative.org/confluence/display/IDoT> Ingo Friese, Deutsche Telekom - Identities of Things Landscape and Use Cases 9:10 20mins CIS <https://kantarainitiative.org/confluence/display/infosharing> Mark Lizar - Overview of Consent & Information Sharing (CIS) Work Group - Why is the Minimum Viable Consent Receipt (MVCR) needed - Value proposition and Real World use 9:30 10mins Virtual Coffee Break - Interest Polls - Tweet Chat Questions - Connections & Collaborations 9:40 5mins Welcome Back Sal D'Agostino & Joni Brennan - Review feedback over the coffee break etc 9:45 15mins Identity Assurance <http://kantarainitiative.org/confluence/display/idassurance> Ken Dagg - What is IAWG - number of members, leadership, call frequency, charter - Work plan for 2015 - Accomplishments to date in 2015 - Current work items - What does the future hold - Results from the UK study 10:00 15mins HIA <https://kantarainitiative.org/confluence/display/healthidassurance> Pete Palmer, MedAllies - Overview: Health Identity Assurance (HIA) Work Group - Why Health care Identity Assurance is important for your organization 10:15 45mins eGov <https://kantarainitiative.org/confluence/display/eGov> Colin Wallis, New Zealand Government Department of Internal Affairs - Industry update from Connect.gov - Featuring experts from GSA, SecureKey, ID.me, Verizon 11:00 5mins Closing / Thanks Sal D'Agostino & Joni Brennan Best Regards, Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

Fwd: NOTICE: Public Comment and CISWG IPR Review - Minimum Viable Consent Receipt
by Marissa Jadrosich 22 May '15

22 May '15

Dear Kantara Members and Community, The 45-day review period has now ended on 15 May 2015. We received one comment that will be sent to the working group to address. Should you have any questions or concerns, please let me know. Kind regards, Marissa --------- Marissa Jadrosich Program Manager for Kantara Initiative Phone: 732-465-5895 Email: marissa(a)kantarainitiative.org Website: www.kantarainitiative.org ---------- Forwarded message ---------- From: Joni Brennan <joni(a)kantarainitiative.org> Date: Fri, May 22, 2015 at 1:23 PM Subject: Fwd: NOTICE: Public Comment and CISWG IPR Review - Minimum Viable Consent Receipt To: Marissa Jadrosich <marissa(a)kantarainitiative.org> ---------- Forwarded message --------- From: Joni Brennan <joni(a)kantarainitiative.org> Date: Tue, Mar 31, 2015 at 3:05 PM Subject: NOTICE: Public Comment and CISWG IPR Review - Minimum Viable Consent Receipt To: community <community(a)kantarainitiative.org> Cc: trustees(a)kantarainitiative.org <trustees(a)kantarainitiative.org>, wg-infosharing(a)kantarainitiative.org <wg-infosharing(a)kantarainitiative.org>, LC(a)kantarainitiative.org <LC(a)kantarainitiative.org> Dear Kantara Initiative Members and Community: This is a formal NOTICE: The CISWG has approved the following document as Working Group Draft Specification for public comment and IPR Review: *Title of Document:* (click the title to view the document) - Minimum Viable Consent Receipt Specification <http://t.sigopn03.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsRs8YvW5…> Per Section 5 of the Operating Procedures, this email initiates a review and comment period of 45 days on these documents. *Duration of Comment and IPR Review: * - Opens: Today - Closes: May 15, 2015, 23:59 Pacific Time * How to participate:* 1. Use the comment form: http://contact.kantarainitiative.org/comment/ or 2. Send your comment in an email to support(a)kantarainitiative.org with the subject "CISWG COMMENT SUBMISSION" *IPR Notice: * CISWG Participants <http://t.sigopn03.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsRs8YvW5…> are required to make claims to IPR regarding these technical documents. If you are not an CISWG Participant you have no IPR licensing obligation to any of these documents. To submit an IPR claim do the following: - Send IPR Claims to support(a)kantarainitiative.org with the subject "CISWG IPR CLAIM" Kind regards, Marissa --------- Marissa Jadrosich Program Manager for Kantara Initiative Phone: 732-465-5895 Email: marissa(a)kantarainitiative.org Website: www.kantarainitiative.org

1 0

unsubscribe
by Randy Vanderhoof (SCA) 30 Apr '15

30 Apr '15

Sincerely, Randy Vanderhoof ************************************************* Randy Vanderhoof, Executive Director, Smart Card Alliance (also Director - EMV Migration Forum) <mailto:rvanderhoof@smartcardalliance.org> rvanderhoof(a)smartcardalliance.org <http://www.smartcardalliance.org/> www.smartcardalliance.org Direct Phone: (1)609.587.4208 Office Phone: (1)800.556.6828 Cell: (1)609.731.8251 Please visit our online <http://www.smartcardalliance.org/pages/membership-information> membership information site for more details Upcoming Smart Card Alliance Conference Events: *NEW DATE* <http://www.smartcardalliance.org/activities-next-conference/> 2015 Government Conference - June 9-10, 2015, Washington DC <http://www.smartcardalliance.org/activities-next-conference/> 2015 Smart Card Alliance Members Meeting, October 4-6, 2015, Phoenix, AZ <http://www.nfcsolutionssummit.com/> 2015 NFC Solutions Summit, October 7-8, 2015, Phoenix AZ <http://www.smartcardalliance.org/pages/activities-next-conference> All Upcoming Smart Card Alliance Conference Events Visit <http://www.emv-connection.com/> EMV Connection - A Smart Card Alliance Site for the latest information about the EMV Migration in the USA

1 0

Kantara at HIMSS15
by Marissa Jadrosich 09 Apr '15

09 Apr '15

Dear Kantara Initiative Community: Kantara Initiative will be presenting a workshop at HIMSS15, "Extending the Power of Consent with User-Managed Access and OpenUMA." *This workshop will explore the existing notice-and-consent paradigms of privacy have begun to fail dramatically — and as recent Pew surveys have demonstrated, people have begun to (ahem) notice. The discipline of privacy engineering aspires to “craft”, but finds it hard to break out the “compliance” rut. The User-Managed Access (UMA) standard and the OpenUMA open-source project are stepping into the breach with two essential elements that change the game: asynchronous consent and centralized consent management.* This event is sponsored by MedAllies and ForgeRock with special attendance from Debbie Bucci of HHS ONC. Debbie and Eve are co-chairs of the Health Relationship Trust (HEART) Working Group. Come and get your HEART questions answered!" *To register for the event, please click here <https://www.eventbrite.com/e/kantara-initiative-himss-2015-tickets-15276679…>. * Kind regards, Marissa --------- Marissa Jadrosich Program Manager for Kantara Initiative Phone: 732-465-5895 Email: marissa(a)kantarainitiative.org Website: www.kantarainitiative.org

1 0

Final Day to Vote for UMA @ RSAC!
by Joni Brennan 02 Apr '15

02 Apr '15

Hello Community, This is it...It's the final day to vote for RSA crowdsource sessions. Here's your chance to support even more UMA in your RSA event. Please take the time to give a quick thumbs up for these two UMA sessions. We won't mind if you tell your friends to do the same as well. Happy voting! *Protect your privacy and control your personal internet of things with UMA* - Sal D'Agostino, IDMachines - http://t.co/KedIzLIT8R - Summary: UMA is an OAuth profile for distributed access control that puts the user in charge of what gets shared and how it gets protected, even when the user is not there! It meets the need to improve privacy and security in the internet of things. See how to build the UMA stack including OpenID Connect and OAuth components using low cost open source hardware (Raspberry Pi B), OS (Debian) and a smart phone as credential. Physical access, home surveillance (IP video) and home automation uses shown. *Battle of the OAuth2 Profiles - OpenID vs UMA* - Mike Schwartz, Gluu - http://t.co/Oqg0F66Bhn - Summary: OpenID Connect allows clients of all types, including web-based, mobile, native and javascript applications, to request and receive information about authenticated sessions and end-users. So why do we need the User Managed Access (UMA) version 1.0 profile of OAuth? Isn't OpenID Connect good enough? This talk will discuss how UMA promises to standardize central policy enforcement, enabling people and organizations to better secure APIs and web resources across a heterogeneous vendor landscape. Best Regards, Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

NOTICE: Public Comment and CISWG IPR Review - Minimum Viable Consent Receipt
by Joni Brennan 31 Mar '15

31 Mar '15

Dear Kantara Initiative Members and Community: This is a formal NOTICE: The CISWG has approved the following document as Working Group Draft Specification for public comment and IPR Review: *Title of Document:* (click the title to view the document) - Minimum Viable Consent Receipt Specification <http://kantarainitiative.org/confluence/pages/viewpageattachments.action?pa…> Per Section 5 of the Operating Procedures, this email initiates a review and comment period of 45 days on these documents. *Duration of Comment and IPR Review: * - Opens: Today - Closes: May 15, 2015, 23:59 Pacific Time * How to participate:* 1. Use the comment form: http://contact.kantarainitiative.org/comment/ or 2. Send your comment in an email to support(a)kantarainitiative.org with the subject "CISWG COMMENT SUBMISSION" *IPR Notice: * CISWG Participants <http://kantarainitiative.org/confluence/display/infosharing/Participant+Ros…> are required to make claims to IPR regarding these technical documents. If you are not an CISWG Participant you have no IPR licensing obligation to any of these documents. To submit an IPR claim do the following: - Send IPR Claims to support(a)kantarainitiative.org with the subject "CISWG IPR CLAIM" Kind regards, Marissa --------- Marissa Jadrosich Program Manager for Kantara Initiative Phone: 732-465-5895 Email: marissa(a)kantarainitiative.org Website: www.kantarainitiative.org

1 0

Exclusive UMA Demo at HIMSS - Don't miss this opportunity!
by Joni Brennan 31 Mar '15

31 Mar '15

Dear Kantara Community please join us at HIMSS 2015 for this special event! *Kantara Initiative Presents:Extending the Power of Consent with User-Managed Access & OpenUMA* Existing notice-and-consent paradigms of privacy have begun to fail dramatically -- and as recent Pew surveys have demonstrated, people have begun to (ahem) notice. The discipline of privacy engineering aspires to "craft", but finds it hard to break out the "compliance" rut. The User-Managed Access (UMA) standard and the OpenUMA open-source project are stepping into the breach with two essential elements that change the game: asynchronous consent and centralized consent management. *Register for the Event <https://www.eventbrite.com/e/kantara-initiative-himss-2015-tickets-15276679…>* *Why attend:* Join leaders to discuss your opportunities and challenges discussing User-Management Access for Health and Identity. *Who should attend:* Innovators, Enterprise, Public Sector, Executives, Engineers, Privacy Officers, Futurists *Details:* April 15, 2015 at 7:00-8:30am McCormick Place, Room CC21B Best Regards, Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

COMMUNITY NOTICE: Kantara Initiative "All Member Ballot" is now CLOSED
by Marissa Jadrosich 24 Mar '15

24 Mar '15

Dear Kantara Initiative Community: The eBallot is now closed. The motion to approve the release of the below mentioned Draft Recommendations as Kantara Initiative Recommendations has been unanimously passed. Should you have any questions or concerns, please let me know. Kind regards, Marissa --------- Marissa Jadrosich Program Manager for Kantara Initiative Phone: 732-465-5895 Email: marissa(a)kantarainitiative.org Website: www.kantarainitiative.org On Mon, Mar 23, 2015 at 1:00 PM, Marissa Jadrosich < marissa(a)kantarainitiative.org> wrote: > Dear Kantara Initiative Members: > > This is a gentle reminder that the UMA ballot will close today, March 23rd > at 4:50pm. If you haven't cast your vote, please do so now. > > Should you have any questions or concerns, please let me know. > > Kind regards, > > Marissa > > --------- > Marissa Jadrosich > Program Manager for Kantara Initiative > Phone: 732-465-5895 > Email: marissa(a)kantarainitiative.org > Website: www.kantarainitiative.org > > On Tue, Mar 3, 2015 at 8:50 AM, Marissa Jadrosich < > marissa(a)kantarainitiative.org> wrote: > >> Dear Kantara Initiative Members: >> >> This is an All Member Ballot to approve the release of the following >> Draft Recommendations as Kantara Initiative Recommendations. >> >> Title of Draft Recommendation: User-Managed Access (UMA) Profile of OAuth >> 2.0 >> Copy of Draft Recommendation: >> https://docs.kantarainitiative.org/uma/draft-uma-core.html >> >> Title of Draft Recommendation: OAuth 2.0 Resource Set Registration >> Copy of Draft Recommendation: >> https://docs.kantarainitiative.org/uma/draft-oauth-resource-reg.html >> >> >> This All-Member Ballot is open to all Members of Kantara Initiative. >> >> - Each Member organization may cast only one vote. >> - The Primary Representative from each Member organization should >> cast the Member's vote. >> - If you are unsure who your Primary Representative is please contact >> staff(a)kantarainitiative.org for assistance. >> >> Approval of this All Member Ballot requires a "Supermajority of those >> Voting, with at least 15% of all Members voting" (i.e. at least 75% of >> those casting a vote must vote to Approve). >> >> * Vote here:* https://www.surveymonkey.com/s/756DVHC >> >> *This ballot will close on March 23, 2015 at 23:59 UTC (4:59pm PT >> (UTC-7)) .* >> >> Should you have any questions or concerns, please let me know. >> >> Kind regards, >> >> Marissa >> >> --------- >> Marissa Jadrosich >> Program Manager for Kantara Initiative >> Phone: 732-465-5895 >> Email: marissa(a)kantarainitiative.org >> Website: www.kantarainitiative.org >> > >

1 0

COMMUNITY NOTICE: Kantara Initiative "All Member Ballot" is now OPEN
by Marissa Jadrosich 23 Mar '15

23 Mar '15

Dear Kantara Initiative Members: This is an All Member Ballot to approve the release of the following Draft Recommendations as Kantara Initiative Recommendations. Title of Draft Recommendation: User-Managed Access (UMA) Profile of OAuth 2.0 Copy of Draft Recommendation: https://docs.kantarainitiative.org/uma/draft-uma-core.html Title of Draft Recommendation: OAuth 2.0 Resource Set Registration Copy of Draft Recommendation: https://docs.kantarainitiative.org/uma/draft-oauth-resource-reg.html This All-Member Ballot is open to all Members of Kantara Initiative. - Each Member organization may cast only one vote. - The Primary Representative from each Member organization should cast the Member's vote. - If you are unsure who your Primary Representative is please contact staff(a)kantarainitiative.org for assistance. Approval of this All Member Ballot requires a "Supermajority of those Voting, with at least 15% of all Members voting" (i.e. at least 75% of those casting a vote must vote to Approve). * Vote here:* https://www.surveymonkey.com/s/756DVHC *This ballot will close on March 23, 2015 at 23:59 UTC (4:59pm PT (UTC-7)) .* Should you have any questions or concerns, please let me know. Kind regards, Marissa --------- Marissa Jadrosich Program Manager for Kantara Initiative Phone: 732-465-5895 Email: marissa(a)kantarainitiative.org Website: www.kantarainitiative.org

1 1