- Community - mailman.kantarainitiative.org

NOTICE: Public review for comments and IPR review for SP 800-63A and SP 800-63B Service Assessment Criteria
by Ruth Puente 15 Dec '17

15 Dec '17

Dear Kantara Initiative Members and Community, This is a formal notice. Members of the Kantara Initiative Identity Assurance Working Group (IAWG) have recently approved Identity Assurance Framework NIST SP 800-63A Service Assessment Criteria (KIAF-1430 63A_SAC v1.0) and Identity Assurance Framework NIST SP 800-63B Service Assessment Criteria (KIAF-1440 63B_SAC v1.0). The documents described below now enter a 45-day public comment and IPR review period in preparation for a member ballot to consider their approval as Kantara Initiative Recommendations. Documents (2): *Document 1*: Identity Assurance Framework: NIST SP 800-63A Service Assessment Criteria Version: 1.0 Document 1 Date: 2017-12-14 Document 1 URL: Download 63A_SAC v1.0 <https://kantarainitiative.org/confluence/download/attachments/96437464/KIAF…> *Document 2*: Identity Assurance Framework: NIST SP 800-63B Service Assessment Criteria Version: 1.0 Document 2 Date: 2017-12-14 Document 2 URL: Download 63B_SAC v1.0 <https://kantarainitiative.org/confluence/download/attachments/96437466/KIAF…> Overview of Documents: Kantara has historically based its ‘Operational’ Service Assessment Criteria on a broad interpretation of NIST’s SP 800-63 rev.2. With SP 800-63 rev.3 coming into full effect from 2018-06-21, Kantara is gearing-up to extend its Trust Framework Program to also provide for assessments against 800-63 rev.3. Kantara has developed criteria which will be used for SP 800-63 rev.3 conformity assessments for identity proofing and authentication functions, at the respective AL2, i.e. against the strictly normative requirements of SP 800-63A and ’63B at IAL2 and AAL2 respectively. This work could not have been accomplished by this time without the generous sponsorship of the criteria’s drafting Editor by ID.me. A sub-group of the Identity Assurance Working Group was assembled to review and provide recommended enhancements to these criteria, the participants of which are recognized within each of the attached documents. Kantara is now releasing these criteria for a 45-day Public Review. Accordingly, attached are two XLS documents, each with a document record, guidance for reviewers and (importantly) the forthcoming criteria. One document addresses the NIST requirements in SP 800-63A (KIAF-1430 63A_SAC v1.0) and the other the requirements in SP 800-63B (KIAF-1440 63B_SAC v1.0). Kantara invites your review of these documents and asks that you submit any comments and proposed revisions on or before 2018-01-29. Full details on commenting and submission are provided in the “Reviewers’ Guide”, in each document. We thank you for your time and interest. This is an open invitation to comment. Kantara Initiative solicits feedback from potential users, developers and, other interested parties, whether Kantara Initiative members or not, for the sake of improving the interoperability and quality of its technical work. Public Review and IPR Review Period Opens: 2017-12-15, 18:00 UTC Public Review and IPR Review Period Closes: 2018-1-29, 17:59 UTC To Comment on these documents: Full details on commenting and submission are provided in the “Reviewers’ Guide”, in each document. Note that any submissions are deemed to be contributed under the IPR Option of the WG: Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non-discriminatory (RAND). Intellectual Property Rights Notice: In accordance with the Kantara Initiative IPR Policy Article 5 and the Kantara Initiative Operating Procedures Article 6, you have a period of 45 days to review the criteria for any Necessary Claims that may be implicated by the criteria. While there is no requirement to review your patent portfolio for Necessary Claims, please be advised that unless you provide a licensing objection in accordance with the Kantara Initiative IPR Policy Article 5 or a notice of withdrawal in accordance with Kantara Initiative IPR Policy Article 6 on or before *2018-1-29, 17:59 UTC* you will have committed to the licensing provisions as set forth by the Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non-Discriminatory (RAND) IPR Policy with respect to any Necessary Claims implicated by the final approved criteria. Having signed the Group Participation Agreement (GPA) all members of the IAWG should be familiar with these documents, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark and license rights that read on an approved Kantara Initiative specification. Kantara Initiative invites any persons who know of any such claims to disclose these if they may be essential to the implementation of the above criteria so that these notices may be provided to the IAWG. To submit an IPR Necessary Claim, email staff(a)kantarainitiative.org with the subject "IAWG IPR CLAIM". Please contact the Kantara Initiative staff at staff(a)kantarainitiative.org with any questions regarding this notice. Best regards, Ruth Puente Executive Programme Manager Kantara Initiative Inc.

1 0

Assurance Assessment Scheme Version 5.0
by Ruth Puente 07 Jul '16

07 Jul '16

Dear Kantara Initiative Inc. Members and Community, Kantara Assurance Assessment Scheme, which explains how the Assurance Program operates, has been revised by the Assurance Review Board (ARB) to introduce process for material changes to a service during its grant period. This AAS revision introduces a specific process which CSPs and their selected Assessors shall follow when Un-scheduled Assessments are required as a result of changes to a CSP and/or its Approved service(s), or when the ARB requests such an assessment, both of which are addressed in §4.7. AAS v5.0 is attached and available at the Kantara website: http://kantarainitiative.org/confluence/display/LC/Identity+Assurance+Frame… All revisions between v4.0 and v5.0 are shown with a grey background. Best regards, Ruth Puente Executive Programme Manager Kantara Initiative Inc.

1 0

NOTICE: Document and IPR Review - SAC V4.6.0
by Ruth Puente 21 Jun '16

21 Jun '16

Gentle reminder ---------- Forwarded message ---------- From: Ruth Puente <ruth(a)kantarainitiative.org> Date: Thu, Jun 2, 2016 at 11:02 PM Subject: NOTICE: Document and IPR Review - SAC V4.6.0 To: community(a)kantarainitiative.org Dear Kantara Initiative Members and Community: This is a formal notification that the IAWG has approved the following document as Draft Recommendation for public comment and IPR Review: IAF 1400 Service Assessment Criteria Version 4.6.0. Please see attachment. Per Article 6 of the Operating Procedures, this email initiates a review and comment period of 45 days on this document. Comment and IPR Review: Opens: Today Closes: July 17, 2016, 17:00 Pacific Time If you choose to comment on this Draft Recommendation use the attached pro forma and return to secretariat(a)kantarainitiative.org with the subject "COMMENT SUBMISSION" IPR: If you wish to submit an IPR claim please do the following: IPR Claims may be sent to secretariat(a)kantarainitiative.org with the subject "IPR CLAIM" Best regards, Ruth Puente Executive Programme Manager Kantara Initiative Inc. www.kantarainitiative.org

1 0

NOTICE: Document and IPR Review - SAC V4.6.0
by Ruth Puente 03 Jun '16

03 Jun '16

Dear Kantara Initiative Members and Community: This is a formal notification that the IAWG has approved the following document as Draft Recommendation for public comment and IPR Review: IAF 1400 Service Assessment Criteria Version 4.6.0. Please see attachment. Per Article 6 of the Operating Procedures, this email initiates a review and comment period of 45 days on this document. Comment and IPR Review: Opens: Today Closes: July 17, 2016, 17:00 Pacific Time If you choose to comment on this Draft Recommendation use the attached pro forma and return to secretariat(a)kantarainitiative.org with the subject "COMMENT SUBMISSION" IPR: If you wish to submit an IPR claim please do the following: IPR Claims may be sent to secretariat(a)kantarainitiative.org with the subject "IPR CLAIM" Best regards, Ruth Puente Executive Programme Manager Kantara Initiative Inc. www.kantarainitiative.org

1 0

Presentation on Privacy criteria in the IAF - May 5 12pmPDT
by Ruth Puente 02 May '16

02 May '16

Dear Community and Stakeholders, The Identity Assurance Working Group meeting this Thursday, May 5 will start with a presentation from Jenn Behrens, Kimble and Associates privacy partner, who will provide a general overview of the relevant policy background for establishing privacy criteria in the identity assurance framework. Time: 12:00 -12:30 pm PDT/ 19:00 - 19:30 UTC Time Zone converter: http://www.timeanddate.com/worldclock/converter.html Dial in details: Please join the meeting from your computer, tablet or smartphone. https://global.gotomeeting.com/join/925479701 *You can also dial in using your phone.* United States : +1 (312) 757-3117 Access Code: 925-479-701 *More phone numbers* Canada : +1 (647) 497-9379 Sweden : +46 (0) 853 527 817 United Kingdom : +44 (0) 330 221 0099 Best regards, Ruth Puente Kantara Initiative

1 0

CERN presentation is now available
by Ruth Puente 07 Apr '16

07 Apr '16

Dear All, The video and slides of Hanna Short´s presentation are available at the Kantara Website: https://kantarainitiative.org/resources/webinars/ Best regards, Ruth Puente Kantara Initiative > > Dear Kantara Community and Stakeholders, >> >> We have invited CERN to give a presentation about their interesting >> projects on Authentication and Authorisation framework. Please find the >> details below. >> >> Date: Thursday, April 7, 2016 >> Time: 10:00am PDT / 17:00 UTC (GMT) >> Speaker: Hannah Short, CERN IT Fellow >> Presentation: Assurance profiles within the AARC Project >> >> Dial in details: >> Please join my meeting from your computer, tablet or smartphone. >> https://global.gotomeeting.com/join/214280925 >> You can also dial in using your phone. >> United States (Toll-free): 1 877 309 2073 >> United States : +1 (571) 317-3129 >> Access Code: 214-280-925 >> >> Hannah will focus on the various assurance related activities within the >> Authentication and Authorisation for Research and Collaboration (AARC), LoA >> profiles and the Security Incident Response Trust Framework for Federated >> Identity (SIRTFI), and give a brief overview of the AARC project. >> >> The AARC project brings together 20 different partners from among >> National Research and Education Networks (NRENs) organisations, >> e-Infrastructures service providers and libraries. AARC aims to develop and >> pilot an integrated cross-discipline authentication and authorisation >> framework, built on existing AAIs and on production federated >> infrastructures. More information: https://aarc-project.eu >> >> SIRTFI is a group supported by REFEDS, looking at processes for >> expressing security incident handling requirements as an assurance profile >> for federations and other requirements needed to effectively deploy and >> enhance incident response processes for FIM. More information: >> https://refeds.org/wp-content/uploads/2016/01/Sirtfi-1.0.pdf >> >> Best regards, >> >> Ruth Puente >> Kantara Initiative >> >> >

1 0

TODAY 10am PDT CERN presentation on Assurance profiles
by Ruth Puente 07 Apr '16

07 Apr '16

REMINDER Dear Kantara Community and Stakeholders, > > We have invited CERN to give a presentation about their interesting > projects on Authentication and Authorisation framework. Please find the > details below. > > Date: Thursday, April 7, 2016 > Time: 10:00am PDT / 17:00 UTC (GMT) > Speaker: Hannah Short, CERN IT Fellow > Presentation: Assurance profiles within the AARC Project > > Dial in details: > Please join my meeting from your computer, tablet or smartphone. > https://global.gotomeeting.com/join/214280925 > You can also dial in using your phone. > United States (Toll-free): 1 877 309 2073 > United States : +1 (571) 317-3129 > Access Code: 214-280-925 > > Hannah will focus on the various assurance related activities within the > Authentication and Authorisation for Research and Collaboration (AARC), LoA > profiles and the Security Incident Response Trust Framework for Federated > Identity (SIRTFI), and give a brief overview of the AARC project. > > The AARC project brings together 20 different partners from among National > Research and Education Networks (NRENs) organisations, e-Infrastructures > service providers and libraries. AARC aims to develop and pilot an > integrated cross-discipline authentication and authorisation framework, > built on existing AAIs and on production federated infrastructures. More > information: https://aarc-project.eu > > SIRTFI is a group supported by REFEDS, looking at processes for expressing > security incident handling requirements as an assurance profile for > federations and other requirements needed to effectively deploy and enhance > incident response processes for FIM. More information: > https://refeds.org/wp-content/uploads/2016/01/Sirtfi-1.0.pdf > > Best regards, > > Ruth Puente > Kantara Initiative > >

1 0

Reminder: April 7th CERN presentation on Assurance profiles
by Ruth Puente 05 Apr '16

05 Apr '16

Dear Kantara Community and Stakeholders, We have invited CERN to give a presentation about their interesting projects on Authentication and Authorisation framework. Please find the details below. Date: Thursday, April 7, 2016 Time: 10:00am PDT / 17:00 UTC (GMT) Speaker: Hannah Short, CERN IT Fellow Presentation: Assurance profiles within the AARC Project Dial in details: Please join my meeting from your computer, tablet or smartphone. https://global.gotomeeting.com/join/214280925 You can also dial in using your phone. United States (Toll-free): 1 877 309 2073 United States : +1 (571) 317-3129 Access Code: 214-280-925 Hannah will focus on the various assurance related activities within the Authentication and Authorisation for Research and Collaboration (AARC), LoA profiles and the Security Incident Response Trust Framework for Federated Identity (SIRTFI), and give a brief overview of the AARC project. The AARC project brings together 20 different partners from among National Research and Education Networks (NRENs) organisations, e-Infrastructures service providers and libraries. AARC aims to develop and pilot an integrated cross-discipline authentication and authorisation framework, built on existing AAIs and on production federated infrastructures. More information: https://aarc-project.eu SIRTFI is a group supported by REFEDS, looking at processes for expressing security incident handling requirements as an assurance profile for federations and other requirements needed to effectively deploy and enhance incident response processes for FIM. More information: https://refeds.org/wp-content/uploads/2016/01/Sirtfi-1.0.pdf Best regards, Ruth Puente Kantara Initiative

1 0

Invitation: CERN presentation on Assurance profiles
by Ruth Puente 24 Mar '16

24 Mar '16

Dear Kantara Community and Stakeholders, We have invited CERN to give a presentation about their interesting projects on Authentication and Authorisation framework. Please find the details below. Date: Thursday, April 7, 2016 Time: 10:00am PDT / 17:00 UTC (GMT) Speaker: Hannah Short, CERN IT Fellow Presentation: Assurance profiles within the AARC Project Dial in details: Please join my meeting from your computer, tablet or smartphone. https://global.gotomeeting.com/join/214280925 You can also dial in using your phone. United States (Toll-free): 1 877 309 2073 United States : +1 (571) 317-3129 Access Code: 214-280-925 Hannah will focus on the various assurance related activities within the Authentication and Authorisation for Research and Collaboration (AARC), LoA profiles and the Security Incident Response Trust Framework for Federated Identity (SIRTFI), and give a brief overview of the AARC project. The AARC project brings together 20 different partners from among National Research and Education Networks (NRENs) organisations, e-Infrastructures service providers and libraries. AARC aims to develop and pilot an integrated cross-discipline authentication and authorisation framework, built on existing AAIs and on production federated infrastructures. More information: https://aarc-project.eu SIRTFI is a group supported by REFEDS, looking at processes for expressing security incident handling requirements as an assurance profile for federations and other requirements needed to effectively deploy and enhance incident response processes for FIM. More information: https://refeds.org/wp-content/uploads/2016/01/Sirtfi-1.0.pdf Best regards, Ruth Puente Kantara Initiative

1 0

Invitation: CERN presentation on Assurance profiles
by Ruth Puente 25 Feb '16

25 Feb '16

Dear Kantara Community, We have invited CERN to give a presentation about their interesting projects on Authentication and Authorisation framework. Please find the details below. Date: Thursday, April 7, 2016 Time: 10:00am PDT / 17:00 UTC (GMT) Speaker: Hannah Short, CERN IT Fellow Presentation: Assurance profiles within the AARC Project Dial in details will be provided soon Hannah will focus on the various assurance related activities within the Authentication and Authorisation for Research and Collaboration (AARC), LoA profiles and the Security Incident Response Trust Framework for Federated Identity (SIRTFI), and give a brief overview of the AARC project. The AARC project brings together 20 different partners from among National Research and Education Networks (NRENs) organisations, e-Infrastructures service providers and libraries. AARC aims to develop and pilot an integrated cross-discipline authentication and authorisation framework, built on existing AAIs and on production federated infrastructures. More information: https://aarc-project.eu SIRTFI is a group supported by REFEDS, looking at processes for expressing security incident handling requirements as an assurance profile for federations and other requirements needed to effectively deploy and enhance incident response processes for FIM. More information: https://refeds.org/wp-content/uploads/2016/01/Sirtfi-1.0.pdf Best regards, Ruth Puente Kantara Initiative

1 0

Reminder to Get Out the UMA Vote!
by Joni Brennan 11 Dec '15

11 Dec '15

Dear Kantara Community, Please take the opportunity to participate in the open eBallot for UMA here: - https://www.surveymonkey.com/r/737G5MJ The eBallot is open now and closes on December 23rd. Only Kantara Members are eligible to participate. - Confirm Membership status here: https://kantarainitiative.org/members/ - Contact the Kantara Team: https://kantarainitiative.org/contact-us/ Best Regards, - Joni

1 0

All Member Ballot for the approval of UMA V1.0.1
by Jane Celusak 09 Dec '15

09 Dec '15

Reminder: Opened on 7 December 2015 the All Member Ballot for the approval of: *Draft Recommendation: User-Managed Access (UMA) Profile of OAuth 2.0 Copy of Draft Recommendation: https://docs.kantarainitiative.org/uma/draft-uma-core.html <https://docs.kantarainitiative.org/uma/draft-uma-core.html> Draft Recommendation: OAuth 2.0 Resource Set Registration Copy of Draft Recommendation: https://docs.kantarainitiative.org/uma/draft-oauth-resource-reg.html <https://docs.kantarainitiative.org/uma/draft-oauth-resource-reg.html>* These documents have been made available to the public and for IPR Revew for 45 days, all comments have been recorded and addressed and approved by the UMA Working Group. The Kantara Initiative Leadership Council has voted to certify the Draft Recommendations for this all Member Ballot to ratify as Final. This All Member Ballot will close at the end of the day 23 December 2015. In order to fulfill a quorum on the vote there must be a 15% Membership participation and in order to pass the vote requires super majority of those who participate in the ballot (at least 10 votes with at least 8 positive). Please follow this link to cast your vote: https://www.surveymonkey.com/r/737G5MJ Best regards, Jane Jane Celusak Program Manager Kantara Initiative Piscataway, NJ USA 08854 (o) 732.562.6056/(c) 973-951-4565 j <http://t.sidekickopen30.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJW7t5XX48…> .celusak(a)ieee.org

1 0

Call to Action: Open Consent & Create Open Interoperability
by Mark Lizar 30 Nov '15

30 Nov '15

Dear Kantara Community, Please excuse this advertising nature of this email as it is not the intention to spam the Kantara Community, but, to raise support for a revolution in data control with the creation of real consent. In the last week in the Consent & Information Sharing-WG was apart of the MIT Media Labs Future Commerce Hackathon & Unconference, and we have developed a a project for a Privacy Day (Jan 28) campaign called - I Don’t Agree. The aim of the I Don’t Agree campaign is to create a civic action that will carry from 2016 until 2017 and was designed to put the CIS work to good use in a pilot that uses both the MVCR:Consent Receipt and also experiments with asserting consent preference and user submitted terms. The project is about recognising that what is called consent is not real consent, it is at best assent, through contracts of adhesion. Real consent is open, it is a right we have, not a contract of adhesion, with the unreadable expectation that people read un-readable terms. At this time, people are not able to see what they have consented to, unable to withdraw consent, and unable to provide companies with their own preferences in order to create trust. Companies are themselves burdened with closed policy infrastructure, where each company has their own version of what privacy is, and your customers have no clear way to see the good people who wish to control their own data. So far, the project includes a Presentation <https://docs.google.com/presentation/d/1a7rVNFULxttnf8xlZKHYKlZw88XuNurqQZC…> made at the hackathon and a mock up a landing page called http://www.idontagree.org <http://www.idontagree.org/home.html>. This CIS project has the support of Sandy Peatland’s team and Dazza from MIT Media labs. This was presented to the European Commission, who also is now looking to endorse and support this project. With this campaign, we aim to trail blaze a new era in personal data control, and to create a project that is an anchor for interoperability that can ignite the personal data ecosystem. The project has the ambition of running until Feb 2017. Holding workshops and focusing on interoperability of protocols, projects and products that enable people to create trust and express consent preferences in an open trust based marketplace. Over the next 14 months we aim to build real infrastructure for people to manage their own data and we aim to facilitate this infrastructure to people on Privacy Day Jan 28, 2017, The project is strategically planned to correspond with the fall of the Safe Harbor agreement and the announcement of new European Data Protection Regulation that will clearly specify the requirement for real consent in information sharing, before it comes into force in 2017. As this is not the typical standard or trust focused project in Kantara I would like to invite members of the Kantara community to show your support, with your company logo, and/or to provide a pledge of financial support so that we can kick off this project across not only the USA, but Europe as well. If you are interested in showing your support please get in touch directly, pass this email around and participate as individual by standing up and saying “I Don’t Agree” on Jan 28, 2016. Kind Regards, Mark Lizar Co-Chair Consent & Information Sharing Work Group

1 0

Announcing: Kantara Initiative internationalizes its Trusted Identity Services Community
by Joni Brennan 17 Nov '15

17 Nov '15

Kantara Initiative internationalizes its Trusted Identity Services community welcoming GakuNin, Europoint, and athenahealth PISCATAWAY, NJ – November 17th, 2015 – Kantara Initiative is proud to announce further internationalization of its Identity Assurance Program welcoming GakuNin Access Federation, Europoint, and athenahealth to the Kantara league of industry leaders. The growth of the Kantara Trust Status List of services and assessors enhances opportunities for international market development. GakuNin Access Federation is the first Kantara Accredited Assessor qualified to perform Katnara Assessments at Assurance Level 1 in the jurisdiction of Japan. GakuNin is leading the trust framework construction among various sectors in Japan including business, government, and academia. Europoint continues to pioneer international leadership by becoming re-Accredited as a Kantara Assessor qualified to perform Kantara Assessments at Assurance Levels 1,2,3, and 4 in the jurisdictions of Europe and the United States. athenahealth is the newest Kantara Initiative Approved Credential Service Provider qualified to offer credential services at Assurance Level 3 in the jurisdiction of the United States. The industry leadership of athenahealth connects a broader vision to the Kantara Identity Assurance Program. Joni Brennan, Kantara Executive Director said, “The Kantara ID Assurance Program delivers the value of interoperability internationally through the leadership of long-time Kantara Accredited Assessor Europoint and now with the newly Accredited Assessor GakuNin Federation. Providing value in the healthcare sector, Kantara is also thrilled to welcome innovating athenahealth as the newest Kantara Approved CSP.” Prof. Jun Adachi, Chair of Committee for GakuNin said, “We would like to share the global baseline that is achieved by leveraging a trust framework. GakuNin has joined and participated in Kantara Initiative to help us to address these needs.” To learn more about GakuNin Access Federation, please visit http://www.gakunin.jp/ Björn Sjöholm, CEO of Europoint said, “We are excited to continue our work within the Kantara community as Accredited Assessors. We are convinced that international standardization is the way to achieve confidence and assurance for electronic identities.” To learn more about Europoint, please visit www.europoint.se About Kantara Initiative Kantara Initiative is a membership non-profit organization that provides strategic vision and real world innovation for the digital identity transformation. Developing initiatives including: Identity Relationship Management, User Managed Access (EIC Award Winner for Innovation in Information Security 2014), Identities of Things, and Minimum Viable Consent Receipt.

1 0

Fw: new message
by gershon＠qroot.com 29 Oct '15

29 Oct '15

Hello! New message, please read <http://freshandcleanservicesva.com/breath.php?1j> gershon(a)qroot.com

1 0

REVIEW NOTICE: UMA Draft Specification Document and IPR Review
by Joni Brennan 07 Oct '15

07 Oct '15

Dear Kantara Initiative Members and Community: This is a formal notification that the UMA Work Group has approved the following documents as Working Group Draft Specifications for public comment and IPR Review: Title of Documents (click the titles to view the documents): - User-Managed Access (UMA) Profile of OAuth 2.0 V1.0.1 <https://docs.kantarainitiative.org/uma/draft-uma-core-v1_0_1.html> - OAuth 2.0 Resource Set Registration V1.0.1 <https://docs.kantarainitiative.org/uma/draft-oauth-resource-reg-v1_0_1.html> In accordance with the Katnara Initiative Operating Procedures, this email initiates a review and comment period of 45 days on these documents. Comment and IPR Review: - Opens: Today, Friday, 18 September 2015 - Closes: Monday, 2 November 2015, 23:59 Pacific Time To comment on these Draft Recommendations use one of the following options for participation: 1. Use the comment form: http://contact.kantarainitiative.org/comment/ 2. Send your comment via email to support @ kantarainitiative.org with the subject “UMA WG COMMENT SUBMISSION" NOTE: We are aware of the formatting issue resulting in some space characters showing up as question marks. We will solve this problem before final publication. IPR NOTICE: UMA WG Participants <http://kantarainitiative.org/confluence/display/uma/Participant+Roster> are required to make claims to IPR regarding these technical documents. If you are not an UMA WG Participant you have no IPR licensing obligation to any of these documents. If you wish to submit an IPR claim please do the following: 1. IPR Claims may be sent to support @ kantarainitiative.org with the subject “UMA WG IPR CLAIM” Happy reviewing and best regards, Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 1

Of Possible Interest: IEEE-ISTO Member Only Webinar - Ecosystem IP Management for Market Collaborations
by Joni Brennan 24 Sep '15

24 Sep '15

Dear Kantara Community, Please find included details of your possible interest regarding an upcoming IEEE-ISTO Member only webinar. Kantara Initiative Members are eligible to attend. Registration information is included. Best Regards - Joni IEEE-ISTO is hosting a member only webinar on 30 September. In this webinar, you will hear from IEEE-ISTO program leaders on the topic of Intellectual Property <http://bit.ly/1MpNrIA>. For full details, please see below. *IEEE-ISTO Member Only Webinar* *What *- IEEE-ISTO Webinar - Managing Ecosystem Intellectual Property: Driving Successful Outcomes via Market Collaborations *When *- 30 September 2015, 11 AM EDT *Abstract* While technical associations and other organizations regularly generate intellectual property, protecting and leveraging it is rarely a top priority. In this webinar, you will learn: - How intellectual property considerations are managed in some IEEE-ISTO federation member programs - Understand the value of the policies they employ - Leverage your association’s intellectual property - Discover models that can potentially grow non-dues revenue and create value for your members *This special presentation is exclusive for IEEE-ISTO member program participants. * <http://bit.ly/1MpNrIA> *Speakers* *Adam Newman*, Sr. Director Business Development & Alliance Management, IEEE and IEEE-ISTO Executive Relationship Manager Mr. Newman has more than 20 years industry experience in developing and managing business related to technology development. He is responsible for developing and diversifying the business of the IEEE Standards Association as well as the IEEE Industry Standards Technology Association. He’s been an in demand speaker at conferences throughout the world on technical and business issues surrounding telecommunications interconnection, numbering and number portability and he holds a patent in that area. He has also provided testimony at the Congressional and Senate Committee and Sub-Committee level and has been a frequenter presenter at the FCC and its North American Numbering Council. He is a member of ASAE. *Peter Lefkin, CAE*, Managing Director, MIPI Alliance, IEEE-ISTO Peter Lefkin is the Managing Director of the MIPI Alliance since February 2011, having returned to the role after leading the establishment of its operational support structure in 2004. The MIPI Alliance Managing Director is the senior staff executive responsible for all MIPI Alliance activities and operations from strategy development to implementation. The Managing Director serves by appointment of the MIPI Alliance Board of Directors. Peter also serves in the role of Corporate Secretary. Prior to joining MIPI Alliance, Peter served in various roles in support of the IEEE Industry Standards and Technology Organization (IEEE-ISTO) as one of two founding employees. Peter served as ISTO’s COO/CFO from January 1999 through February 2009 after which his focus was dedicated to support the vision, mission, goals and growth of the organization through business development and marketing as its Business Development and Marketing Executive from February 2009 through February 2012. During this time, Peter led the formation of the IEEE Conformity Assessment Program (ICAP) in the role of Director to develop conformity assessment programs in support of IEEE Standards. *Joan Brennan*, Executive Director, Kantara Initiative, IEEE-ISTO Joni has over a decade of service to the IEEE Standards Association (SA) and Industry Standards and Technology Organization (IEEE-ISTO) as a Technology Evangelist. In this role, Joni builds diplomatic and collaborative relationships within and across communities of interest. She leads Kantara Initiative as their Executive Director. Kantara Initiative, a Trust Framework Provider, provides Accreditation and Approval verifications for Identity Providers / Credential Service Providers to be deemed qualified to connect to the US federation hub Connect.gov. Joni has helped to ensure that the Kantara Initiative program is aligned with OpenStand principles and referenced in multiple eGovernment strategies including: United States, Government of Canada, New Zealand, and Sweden. She has provided talks around the globe covering Identity Federation and Privacy for organizations including RSA, IdentityNext .SE, Federal Weekly, and CA Luminaries (one of a select chosen industry speakers). She participates in international organizations and industry standards committees including: OECD ITAC, ISOC, IEEE, OASIS SSTC, ISO SC27 WG5, and ITU-T SG17 Q6. She has served as the NSTIC / IDESG Trust Framework WG Chair. She has provided testimony regarding Trusted Identity and Access Management systems for the US Office of National Coordinator (ONC) Health IT Security and Privacy (HITSP) committee as well.

1 0

VOTE - To help us get to SXSW 2016
by Joni Brennan 11 Aug '15

11 Aug '15

Dear Kantara Community, As you may be aware Kantara has participated in the last 2 SXSW Interactive events. In our first entry UMA took the center stage sharing with ISOC, and Tor. Last year our IDoT session strong generated excitement and interest. This year we hope to make the cut again with our session focused on digital consent. We've submitted a panel including: Mark Lizar, Robin Wilton and Ian Glazer. If we are selected we'll discuss issues around consent in the context of identity relationship management and UMA. Submission selection is very competitive. To get there we'll need your vote! Please take a moment to vote for our session. You'll be asked to create an account and we're sorry about that. This is a rule set by SXSW. We hope that SXSW might federate identity in the future! http://panelpicker.sxsw.com/vote/48349 Summary: Clicking “Agree” for consent on-line is outdated. In the real world, asking for consent is unusual. I don't ask a barista for consent to get coffee. A barista doesn't ask me for consent to serve me. Social norms enable the barista and I to feel "OK" for specific exchanges. The on-line world is different. People are constantly asked for consent which effectively trains them to click "Agree". Policy makers are starting to codify for consent as if consent is an assumed optimal solution. We can build trust in the Internet and reduce friction by upgrading “Agree” buttons to provide people with a record of what personal information they have shared, but that's only the beginning of our story. Best Regards, Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

OECD-ITAC Newsletter Published - Kantara's Consent Receipt Featured
by Joni Brennan 28 Jul '15

28 Jul '15

Dear Community, The OECD-ITAC summer newsletter has been published. http://www.internetac.org/archives/category/newsletter In addition to all of the excellent articles, your very own Kantara CISWG Consent Receipt is featured. Kantara Initiative Board Member IEEE-SA is also featured discussing a new era of IoT and protection of economic and social activities. We hope you enjoy the newsletter and please feel free to share the link with your colleagues. The Internet Technical Advisory Committee (ITAC) to the OECD brings together the counsel and expertise of technically focused organizations, in a decentralized and networked approach to policy formulation for the Internet economy. The main purpose of ITAC is to contribute constructively to Internet-related policies developed in the OECD. It mostly contributes to the work of the OECD Committee on Digital Economy Policy (CDEP) and its specific working parties such as the Working Party on Communications and Infrastructure Services Policy (CISP) and the Working Party on Security and Privacy in the Digital Economy (WPSDE). Best Regards, Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

Marissa has moved on - Welcome Jane!
by Joni Brennan 25 Jun '15

25 Jun '15

Dear Community, Our previous PM Marissa has moved on. We thank her for her support and wish her well. Please join me in welcoming Jane Celusak. Jane is currently on boarding and she is taking over Marissa's role providing light-touch support to the WGs / DGs and LC. Jane should be up an running over the next week or so. You may reach her via jane(a)kantarainitiative.org or staff(a)kantarainitiative.org Welcome Jane! Best Regards, Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

Announcing the OTTO WG: Open Trust Taxonomy for OAuth2
by Joni Brennan 17 Jun '15

17 Jun '15

Dear Kantara Community, We are pleased to announce the formation of the OTTO WG! OTTO stands for Open Trust Taxonomy for OAuth2. Learn more about the OTTO WG: http://kantarainitiative.org/confluence/display/OTTO/Home Join the OTTO WG: http://signup.kantarainitiative.org/?selectedGroup=36 The working group will develop the basic structures needed for the creation of multi-party federations between OAuth2 entities. The intent is to create a foundation of trust and drive down the cost of collaboration by publishing technical and legal information. These structures will include the set of APIs and related data structures enabling an OAuth entity to manage which entities it trusts and for other OAuth entities to discover members of the federation and details of the services. The Work Group is necessary to bring together collaborators from existing SAML federations and the OAuth community to collaborate on a draft solution that meets their shared goals in this area and takes into account lessons learned from the past ten years of SAML. Specifically, this Work Group is responsible for: - Developing a set of use cases and requirements that are specific enough to guide the specification design work - Developing a set of modular draft specifications meeting these use cases and requirements - Overseeing the contribution of each resulting draft specification to a standards-setting organization The APIs and data structures will enable discovery of the members of the federation and details about their services, key material and technical capabilities. The final scope will be refined after consideration of the use cases. Existing SAML Federation XML structures will inform this work, but the data structures will not be expressed in XML but in JSON. The functions supported in existing SAML federations should be supported. Additionally, support for a more efficient and scalable discovery process and dynamic integration process will be considered. Welcome OTTO WG to our community! Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

Kantara Initiative Virtual Plenary June 23 - Join. Innovate. Trust.
by Joni Brennan 15 Jun '15

15 Jun '15

Dear Kantara Initiative Community, We are pleased to announce our first virtual plenary event taking place on June 23. This event will be in the form of a 3 hour webinar where each of the Kantara groups will present their latest findings. We'll have opportunities to share, ask questions, and discuss. All of this in the spirit of "connecting the dots" of our activities and learning how we can help each other to succeed. If you are a Kantara Member seeking to know more about the over all activities of Kantara Initiative the virtual plenary is a great opportunity. If your not a Member this is a great chance to learn more about how we can help your organization to reach its goals. Kantara Initiative Virtual Plenary - Join. Innovate. Trust. Date: June 23, 2015 Time: 8am - 11am PT Check Your Local Time: http://bit.ly/1C9aT3m Register: http://bit.ly/ki-plenary1-2015 *Agenda:* Time Group Presenter Topic 8:00 10mins Intro Sal D'Agostino & Joni Brennan Kantara Initiative: Join. Innovate. Trust. 8:10 20mins IRM <https://kantarainitiative.org/confluence/display/irm/> Sal D'Agostino & Joni Brennan - Overview of the Design Principles of Relationships - Context of real world IRM application 8:30 20mins UMA <https://kantarainitiative.org/confluence/display/uma> Eve Maler, ForgeRock - Demo of User-Managed Access (UMA) - UMA where consent means "U Must Ask" 8:50 20mins IDoT <https://kantarainitiative.org/confluence/display/IDoT> Ingo Friese, Deutsche Telekom - Identities of Things Landscape and Use Cases 9:10 20mins CIS <https://kantarainitiative.org/confluence/display/infosharing> Mark Lizar - Overview of Consent & Information Sharing (CIS) Work Group - Why is the Minimum Viable Consent Receipt (MVCR) needed - Value proposition and Real World use 9:30 10mins Virtual Coffee Break - Interest Polls - Tweet Chat Questions - Connections & Collaborations 9:40 5mins Welcome Back Sal D'Agostino & Joni Brennan - Review feedback over the coffee break etc 9:45 15mins Identity Assurance <http://kantarainitiative.org/confluence/display/idassurance> Ken Dagg - What is IAWG - number of members, leadership, call frequency, charter - Work plan for 2015 - Accomplishments to date in 2015 - Current work items - What does the future hold - Results from the UK study 10:00 15mins HIA <https://kantarainitiative.org/confluence/display/healthidassurance> Pete Palmer, MedAllies - Overview: Health Identity Assurance (HIA) Work Group - Why Health care Identity Assurance is important for your organization 10:15 45mins eGov <https://kantarainitiative.org/confluence/display/eGov> Colin Wallis, New Zealand Government Department of Internal Affairs - Industry update from Connect.gov - Featuring experts from GSA, SecureKey, ID.me, Verizon 11:00 5mins Closing / Thanks Sal D'Agostino & Joni Brennan Best Regards, Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

Fwd: NOTICE: Public Comment and CISWG IPR Review - Minimum Viable Consent Receipt
by Marissa Jadrosich 22 May '15

22 May '15

Dear Kantara Members and Community, The 45-day review period has now ended on 15 May 2015. We received one comment that will be sent to the working group to address. Should you have any questions or concerns, please let me know. Kind regards, Marissa --------- Marissa Jadrosich Program Manager for Kantara Initiative Phone: 732-465-5895 Email: marissa(a)kantarainitiative.org Website: www.kantarainitiative.org ---------- Forwarded message ---------- From: Joni Brennan <joni(a)kantarainitiative.org> Date: Fri, May 22, 2015 at 1:23 PM Subject: Fwd: NOTICE: Public Comment and CISWG IPR Review - Minimum Viable Consent Receipt To: Marissa Jadrosich <marissa(a)kantarainitiative.org> ---------- Forwarded message --------- From: Joni Brennan <joni(a)kantarainitiative.org> Date: Tue, Mar 31, 2015 at 3:05 PM Subject: NOTICE: Public Comment and CISWG IPR Review - Minimum Viable Consent Receipt To: community <community(a)kantarainitiative.org> Cc: trustees(a)kantarainitiative.org <trustees(a)kantarainitiative.org>, wg-infosharing(a)kantarainitiative.org <wg-infosharing(a)kantarainitiative.org>, LC(a)kantarainitiative.org <LC(a)kantarainitiative.org> Dear Kantara Initiative Members and Community: This is a formal NOTICE: The CISWG has approved the following document as Working Group Draft Specification for public comment and IPR Review: *Title of Document:* (click the title to view the document) - Minimum Viable Consent Receipt Specification <http://t.sigopn03.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsRs8YvW5…> Per Section 5 of the Operating Procedures, this email initiates a review and comment period of 45 days on these documents. *Duration of Comment and IPR Review: * - Opens: Today - Closes: May 15, 2015, 23:59 Pacific Time * How to participate:* 1. Use the comment form: http://contact.kantarainitiative.org/comment/ or 2. Send your comment in an email to support(a)kantarainitiative.org with the subject "CISWG COMMENT SUBMISSION" *IPR Notice: * CISWG Participants <http://t.sigopn03.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsRs8YvW5…> are required to make claims to IPR regarding these technical documents. If you are not an CISWG Participant you have no IPR licensing obligation to any of these documents. To submit an IPR claim do the following: - Send IPR Claims to support(a)kantarainitiative.org with the subject "CISWG IPR CLAIM" Kind regards, Marissa --------- Marissa Jadrosich Program Manager for Kantara Initiative Phone: 732-465-5895 Email: marissa(a)kantarainitiative.org Website: www.kantarainitiative.org

1 0

unsubscribe
by Randy Vanderhoof (SCA) 30 Apr '15

30 Apr '15

Sincerely, Randy Vanderhoof ************************************************* Randy Vanderhoof, Executive Director, Smart Card Alliance (also Director - EMV Migration Forum) <mailto:rvanderhoof@smartcardalliance.org> rvanderhoof(a)smartcardalliance.org <http://www.smartcardalliance.org/> www.smartcardalliance.org Direct Phone: (1)609.587.4208 Office Phone: (1)800.556.6828 Cell: (1)609.731.8251 Please visit our online <http://www.smartcardalliance.org/pages/membership-information> membership information site for more details Upcoming Smart Card Alliance Conference Events: *NEW DATE* <http://www.smartcardalliance.org/activities-next-conference/> 2015 Government Conference - June 9-10, 2015, Washington DC <http://www.smartcardalliance.org/activities-next-conference/> 2015 Smart Card Alliance Members Meeting, October 4-6, 2015, Phoenix, AZ <http://www.nfcsolutionssummit.com/> 2015 NFC Solutions Summit, October 7-8, 2015, Phoenix AZ <http://www.smartcardalliance.org/pages/activities-next-conference> All Upcoming Smart Card Alliance Conference Events Visit <http://www.emv-connection.com/> EMV Connection - A Smart Card Alliance Site for the latest information about the EMV Migration in the USA

1 0

Kantara at HIMSS15
by Marissa Jadrosich 09 Apr '15

09 Apr '15

Dear Kantara Initiative Community: Kantara Initiative will be presenting a workshop at HIMSS15, "Extending the Power of Consent with User-Managed Access and OpenUMA." *This workshop will explore the existing notice-and-consent paradigms of privacy have begun to fail dramatically — and as recent Pew surveys have demonstrated, people have begun to (ahem) notice. The discipline of privacy engineering aspires to “craft”, but finds it hard to break out the “compliance” rut. The User-Managed Access (UMA) standard and the OpenUMA open-source project are stepping into the breach with two essential elements that change the game: asynchronous consent and centralized consent management.* This event is sponsored by MedAllies and ForgeRock with special attendance from Debbie Bucci of HHS ONC. Debbie and Eve are co-chairs of the Health Relationship Trust (HEART) Working Group. Come and get your HEART questions answered!" *To register for the event, please click here <https://www.eventbrite.com/e/kantara-initiative-himss-2015-tickets-15276679…>. * Kind regards, Marissa --------- Marissa Jadrosich Program Manager for Kantara Initiative Phone: 732-465-5895 Email: marissa(a)kantarainitiative.org Website: www.kantarainitiative.org

1 0