- Community - mailman.kantarainitiative.org

please RSVP - RSA Dinner Tuesday
by Kaliya 28 Feb '10

28 Feb '10

Hi everyone. We have a location - a great Indian Restaurant across from the Hilton in SF. The menu they have for us is up on our website. http://icdinner.eventbrite.com/ We begin gathering at 7pm and dinner will be served at 7:30. The Ping Party begins at 9pm at Mars 789 Brannan St. @7th in San Francisco Looking forward to seeing you. -Kaliya

1 0

Winner of first annual Kantara Initiative MVP award
by Dervla O'Reilly 22 Feb '10

22 Feb '10

On behalf of Roger Martin, Interim Executive Director ========================================= Throughout our first year of work within the Kantara Initiative, it has become clear how much energy and excitement there has been around innovation and harmonization across various identity projects. It takes a lot of effort to help foster the development of identity specifications, operational frameworks and related programs. We have been fortunate to be supported in this effort by so many dedicated partners and individual contributors. In an effort to recognize, in some small part, the enormous effort put forth by the participants, we initiated the first annual Kantara Initiative Most Valuable Participant (MVP) award for 2009. The community as a whole nominated individuals who they thought worked the hardest, showed the most leadership, and provided the most valuable contributions to the work of our Work Groups and Discussion Groups during 2009. The Leadership Council then selected the MVP from the outstanding list of nominees. It is my pleasure to announce that Trent Adams has won the first annual Kantara Initiative MVP award. Trent will be recognized at Kantara Initiative's annual Identity Workshop at the RSA Security Conference in San Francisco on March 1st. While this award only recognizes a single individual, I hope you will also join me in congratulating all of the tireless contributors who have helped make this a strong first year for the Kantara Initiative. It is only through your collective hard work and dedication that we will succeed. Roger Martin Interim Executive Director ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative.org http://www.kantarainitiative.org Register for Kantara's annual workshop March 1, 2010 at the RSA Conference free of charge - http://bit.ly/Kantara_Initiative_RSA_Workshop_March1

1 0

Identity community dinner on Tuesday
by Kaliya 18 Feb '10

18 Feb '10

Here is the RSVP to the identity community dinner on Tuesday evening. http://icdinner.eventbrite.com I look forward to seeing all of you who are coming to RSA there :) -Kaliya

1 0

Early-bird rate full conference pass for RSA Security Conference
by Dervla O'Reilly 18 Feb '10

18 Feb '10

I would like to extend the offer of 4 early bird rate full conference delegates passes for the RSA Security Conference in San Francisco March 1-5, 2010 at the Moscone Center, San Francisco. The early bird pass is $1,495USD (original valued is $2,195). I can offer one pass per person to the first 4 persons who respond to this message on a first come-first serve basis. Our annual identity pre-conference workshop is March 1, we hope you to see you there. One of the contractual benefits with the RSA organizers for our workshop is the offering of a few early bird rate passes so we're happy to extend this opportunity to our community. Please respond back to me directly if you are interested, dervla (at) kantarainitiative (dot) org. Cheers, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative.org http://www.kantarainitiative.org Register for Kantara's annual workshop March 1, 2010 at the RSA Conference free of charge - http://bit.ly/Kantara_Initiative_RSA_Workshop_March1

1 0

(no subject)
by Roger Sullivan 18 Feb '10

18 Feb '10

Brett, Your friends at Kantara Initiative wanted you to have something by which to remember us. (As if you could ever forget!) In sum, THANK YOU from all of us for all your hard work and being such a great partner through all our adventures. And, a big thanks to Dervla and Joni for pulling this together. -- HYPERLINK "http://www.oracle.com/" \nOracle Roger Sullivan | Vice President Phone: +1 781 744 0767 | Mobile: +1 978 828 3520 Oracle Identity Management 10 Van de Graaff Drive | Burlington, MA 01803 HYPERLINK "http://www.oracle.com/commitment" \nGreen Oracle Oracle is committed to developing practices and products that help protect the environment

5 4

Update : Panelists for Government of Canada Consultation on Cyber Authentication (note Kantara participation)
by Kenneth.Dagg＠tbs-sct.gc.ca 15 Feb '10

15 Feb '10

Cyber Authentication Renewal Program Industry Consultation February 16, 2010 Crown Plaza Hotel, Ballroom B 101 Lyon Street, Ottawa, Ontario Update on Panelists for Industry Consultation Open Discussion Public Works and Government Services Canada (PWGSC) and Treasury Board Secretariat (TBS) wish to provide an update on the open discussion portion of the industry consultation planned for February 16, 2010. Specifically, the following associations will be sending representatives to form part of the Panel: - Colin Soutar, Advanced Card Technology Canada (ACT Canada<http://www.actcda.com/>) - Brian O'Higgins, Information Technology Association of Canada (ITAC<http://www.itac.ca/>) - Paul Madsen, Kantara Initiative<http://kantarainitiative.org/> The association representatives will be participating as industry experts, and will share insight and experience during the open discussion portion of the industry consultation. During this time, all industry consultation participants will have the opportunity to ask questions and engage in open discussions. To express your interest in attending this session, please send an email to ConsultationSPTI.ITSSConsultation(a)tpsgc-pwgsc.gc.ca<mailto:ConsultationSPTI.ITSSConsultation@tpsgc-pwgsc.gc.ca>. *** Programme de renouvellement de l'authentification électronique Consultation de l'industrie les 16 et 17 février 2010** Hôtel Crown Plaza, Salle de bal B 101, rue Lyon, Ottawa, Ontario Mise à jour des panelistes pour la discussion ouverte lors de la consultation de l'industrie Travaux publics et services gouvernementaux Canada (TPSGC) et le Secrétariat du Conseil du Trésor (SCT) souhaite fournir une mise à jour à propos de la plénière ouverte, portion de la consultation de l'industrie qui se tiendra le 16 février 2010. Les associations suivantes enverront des représentants pour prendre part au panel : - Colin Soutar, Advanced Card Technology Canada (ACT Canada<http://www.actcda.com/>) - Brian O'Higgins, Information Technology Association of Canada (ITAC<http://www.itac.ca/>) - Paul Madsen, Kantara Initiative<http://kantarainitiative.org/> Les représentants des différentes associations participeront en tant qu'experts pour l'industrie et partageront leur expérience ainsi que leur impression lors de la plénière ouverte. Pendant cette période, tous les participants de la consultation de l'industrie auront l'opportunité de poser des questions et d'engager des discussions ouvertes. Si vous êtes intéressé par cette session, s'il-vous-plaît, envoyer un courriel à l'adresse suivante : ConsultationSPTI.ITSSConsultation(a)tpsgc-pwgsc.gc.ca<mailto:ConsultationSPTI.ITSSConsultation@tpsgc-pwgsc.gc.ca>. Kenneth Dagg Senior Project Co-ordinator | Coordonnateur de projet supérieur Security & Identity Management | Sécurité et gestion de l'identité Chief Information Officer Branch | Direction du dirigeant principal de l'information Treasury Board of Canada Secretariat | Secrétariat du Conseil du Trésor du Canada Ottawa, Canada K1A 0R5 Kenneth.Dagg(a)tbs-sct.gc.ca Telephone | Téléphone 613-957-7041 / Facsimile | Télécopieur 613-952-3820 / Teletypewriter | Téléimprimeur 613-957-9090 Government of Canada | Gouvernement du Canada [X]

1 0

Update : Agenda for Government of Canada Consultation on Cyber Authentication (note IAF adoption)
by Kenneth.Dagg＠tbs-sct.gc.ca 15 Feb '10

15 Feb '10

Agenda Cyber Authentication Renewal Program Industry Consultation February 16, 2010 Crown Plaza Hotel, Ballroom B 101 Lyon Street, Ottawa, Ontario Time Duration Agenda Item Participants 8:30 a.m. - 9:00 a.m. 30 minutes Check in for registered participants All 9:00 a.m. - 9:15 a.m. 15 minutes Welcoming Remarks & Introduction of Christine Payant Jérôme Thauvette (Facilitator) Director General, Acquisitions Branch, Public Works and Government Services Canada (PWGSC) 9:15 a.m. - 9:35 a.m. 20 minutes Presentation: Cyber Authentication Renewal Program: A Collaborative Approach to a Federated Model Christine Payant Director General, Product Management, Information Technology Services, PWGSC 9:35 a.m. - 9:40 a.m. 5 minutes Introduction of Pierre Boucher Jérôme Thauvette 9:40 a.m. - 10:20 a.m. 40 minutes Presentation: Cyber Authentication Renewal Program: Industry Consultation Pierre Boucher Executive Director, Security and Identity Management, Chief Information Officer Branch, Treasury Board of Canada Secretariat 10:20 a.m. -10:25 a.m. 5 minutes Wrap up Jérôme Thauvette 10:25 a.m. - 10:45 a.m. 20 minutes Health Break All 10:45 a.m. - 10:50 a.m. 5 minutes Welcome back and introduction of Open Forum/ Discussion Jérôme Thauvette 10:50 a.m. - 11:50 a.m. 60 minutes Open Forum - Panel Discussion & Questions Government of Canada Pierre Boucher (TBS, Chief Information Officer Branch) Scott Leslie (PWGSC, Acquisitions Branch) Christine Payant (PWGSC, Information Technology Services Branch) Panel: Association representatives : Colin Soutar, Advanced Card Technology, Canada Brian O'Higgins, Information Technology Association of Canada (ITAC) Paul Madsen, Kantara Initiative All industry participants 11:50 noon - 12:00 p.m. 10 minutes Next Steps and Closing Remarks Jérôme Thauvette 12:00 p.m. - 1:00 p.m. 60 minutes Networking Lunch Break (lunch not provided) On your own 1:00 - 5:00 4 hours One-on-One Sessions** Panel: Pierre Boucher (TBS) Stephane Richard (PWGSC) Christine Payant (PWGSC) ** Individual one-on-one sessions are targeted to existing/potential credential service providers. Ordre du jour Projet de renouvellement de l'authentification électronique Consultation auprès de l'industrie Le 16 février 2010 - Hotel Crown Plaza, Salle de danse B 101, rue Lyon, Ottawa (Ontario) Heure Durée Points à l'ordre du jour Participants 8 h 30 à 9 h 30 minutes Inscription des participants Tous 9 h à 9 h 15 15 minutes Mot de bienvenue et introduction de Christine Payant Jérôme Thauvette (animateur) Directeur général, Direction générale des approvisionnements Travaux publics et Services gouvernementaux Canada (TPSGC) 9 h 15 à 9 h 35 20 minutes Présentation : Projet de renouvellement de l'authentification électronique : une approche coopérative d'un modèle fédéré Christine Payant Directrice générale, Gestion des produits, Services d'infotechnologie, TPSGC 9 h 35 à 9 h 40 5 minutes Introduction de Pierre Boucher Jérôme Thauvette 9 h 40 à 10 h 20 40 minutes Présentation : Projet de renouvellement de l'authentification électronique : consultation auprès de l'industrie Pierre Boucher Directeur exécutif, Gestion de la sécurité et de l'identité, Direction du dirigeant principal de l'information, Secrétariat du Conseil du Trésor du Canada 10 h 20 à 10 h 25 5 minutes Retour sur la première partie Jérôme Thauvette 10 h 25 à 10 h 45 20 minutes Pause-santé Tous 10 h 45 à 10 h 50 5 minutes Reprise de la séance et introduction à la discussion ouverte Jérôme Thauvette 10 h 50 à 11 h 50 60 minutes Discussion ouverte - Discussion en groupe et questions Gouvernement du Canada Pierre Boucher (SCT, Direction du dirigeant principal de l'information) Scott Leslie (TPSGC, Direction générale des approvisionnements) Christine Payant (TPSGC, Direction générale des services d'infotechnologie) Experts : Représentants d'association Colin Soutar, Advanced Card Technology, Canada Brian O'Higgins, Information Technology Association of Canada (ITAC) Paul Madsen, Kantara Initiative Tous les participants de l'industrie 11 h 50 à 12 h 10 minutes Discussion sur les prochaines étapes et mot de la fin Jérôme Thauvette 12 h à 13 h 60 minutes Pause repas de réseautage (repas non fourni) Libre 13 h à 17 h 4 heures Séances individualisées** Experts : Pierre Boucher (SCT) Stéphane Richard (TPSGC) Christine Payant (TPSGC) ** Les séances individualisées s'adressent aux fournisseurs de services d'identification éventuels/existants. Kenneth Dagg Senior Project Co-ordinator | Coordonnateur de projet supérieur Security & Identity Management | Sécurité et gestion de l'identité Chief Information Officer Branch | Direction du dirigeant principal de l'information Treasury Board of Canada Secretariat | Secrétariat du Conseil du Trésor du Canada Ottawa, Canada K1A 0R5 Kenneth.Dagg(a)tbs-sct.gc.ca Telephone | Téléphone 613-957-7041 / Facsimile | Télécopieur 613-952-3820 / Teletypewriter | Téléimprimeur 613-957-9090 Government of Canada | Gouvernement du Canada [X]

1 0

Early bird registration ends Feb. 12 for Kantara Initiative Conference
by Dervla O'Reilly 11 Feb '10

11 Feb '10

The early bird registration deadline ends tomorrow, Friday February 12 for $195USD. The next level fee increases to $250USD until March 9. The sleeping room block deadline at the Springhill Suites has been extended to Monday February 15. Nightly rates are $105USD + taxes which includes breakfast buffet and WiFi. Discount code details are available at our conference page Join us for our open-for-all dinner is Wednesday, March 10, 6:45-8:15pm at downtown Portland's Oba Restaurant. The price for the 3-course dinner including one beverage is $45USD. Event information is available at our conference page - review the agenda, maps and nearby hotel details. Please let me know if any questions regarding the Conference. Cheers, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative.org http://www.kantarainitiative.org Register for Kantara's annual workshop March 1, 2010 at the RSA Conference free of charge - http://bit.ly/8rPWVM

1 0

Need your input on your standards testing needs
by Newlands, Ellen J 10 Feb '10

10 Feb '10

Dear Kantara Community, The Kantara Initiative Interoperability program is actively working to understand your interoperability testing needs with regard to the certification of some of the more widely-used and emerging identity and access management standards. We developed this short survey (just one page!) to help us determine what standards testing is important to you in the coming year: http://www.surveymonkey.com/s/ki_interoperability_program Thank you in advance for your response. Regards; Ellen Newlands Acting Interoperability Review Board Co-Chair

1 0

Diverse Market Leaders from the Identity Ecosystem Converge to Stage Kantara Initiative's RSA Security Pre-Conference workshop March 1 2010
by Dervla O'Reilly 10 Feb '10

10 Feb '10

Below is the press release that crossed the wire this morning regarding Kantara Initiative's annual identity workshop March 1 at the RSA Security Conference. We're looking forward to a great day and hope to see you at the event. I encourage you to register for this free workshop using the code1310KANEXPO for an Expo only pass - select Kantara Initiative from the ‘Registration Package’ page. ===================== Diverse Market Leaders from the Identity Ecosystem Converge to Stage Kantara Initiative’s RSA Security Pre-Conference Workshop on “Technology, Policy and Compliance for Identity Services in 2010 and Beyond” Gain State-of-Identity Insight of common Cloud/SaaS scenarios and recent developments in assurance, multi-protocol interoperability, privacy-enablement and more from Enterprise and Consumer Market Leaders. Piscataway, NJ, 8 February 2010 Kantara Initiative announced today its annual public Identity Workshop at the RSA Security Conference. The one-day event to be held on March 1st from 8:00am- 5:00pm in the Moscone Center in San Francisco is designed to equip attendees with the vital information required to ensure success in employing the right identity management approach with the proper considerations. Recent developments in identity assurance, multi-protocol interoperability, liability models, usability, privacy-enablement and identity services certification will be spotlighted by key market leaders including Google, Oracle, CA, Aetna, NTT and Ping Identity. “If you run a login system of any type (Enterprise, Consumer, SaaS vendor) you will find this workshop to be packed with information about major changes in the space, both in terms of security design and new functionality that can improve your identity infrastructure,” reveals Eric Sachs, Product Manager for Google Security. “Since its inception nearly one year ago, Kantara Initiative has built momentum for service deployment across the identity ecosystem,” says Roger Sullivan, Oracle. “This workshop will help deployers understand how to connect the dots between cloud computing and identity management”. “Identity protocols like SAML, OpenID, OAuth, and Information Cards continue to evolve,” says Paul Madsen, Identity Management Researcher at NTT. “This workshop will discuss recent developments, and present opportunities for combining the protocols in useful ways.” “Identity Assurance is the key to successful, secure transactions across the emerging National Health Information Network, “ explains Mark Coderre, Head of Security Architecture for Aetna. “At this workshop we will be showcasing what the healthcare industry is doing with Kantara Initiative programs to improve the security of sensitive data transactions across operational boundaries.” The identity workshop will feature a series of presentations, panels and demonstrations of common Cloud/SaaS deployment scenarios and innovations from various market leaders. Technology, Policy and Compliance for identity Services in 2010 & Beyond is open to the public and to all RSA Conference attendees. To register for this free Kantara Initiative workshop, please click http://www.emc.com/microsites/rsa-conference/2010/usa/registration-and-rate… and use the code: 1310KANEXPO for the Expo only pass and select Kantara Initiative from the ‘Registration Package’ page. Note that this pass only allows access to the Kantara Initiative workshop on March 1. About Kantara Initiative Kantara Initiative is a global, open, public-private, technology- agnostic forum comprised of identity ecosystem stakeholders. Co- founded by Liberty Alliance, Internet Society, and the Information Card Foundation, among others, its inspired mission is to promote technical interoperability and harmonization; to develop policy frameworks for operational interoperability and; to provide certification and assessment programs to grow trust in the standards, products, and service deployments. Kantara Initiative freely provides the governance and resources whereby diverse members of the ecosystem successfully collaborate on a diverse portfolio of common policy frameworks, technical specifications and deployment guidelines driven by the identity community, industry and governments from around the world. For more information about getting involved in Kantara Initiative, visit www.kantarainitiative.org. Media Contact Michelle Hunt Kantara Initiative Michelle.Hunt(a)ieee-isto.org (732) 981.3434 (o) ### ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative.org http://www.kantarainitiative.org

1 0

Fwd: CSI SX 2010: Call for Papers open, event date May 26-27 at the San Francisco Marriott Marquis
by Dervla O'Reilly 09 Feb '10

09 Feb '10

The paper submissions deadline for CSI SX 2010 is March 17, 2010. Is anyone interested to collaborate and submit a session(s) on behalf of Kantara? Please let me know, I can help with the submission. Dervla >> From: <Rosilia.Montalvo(a)ubm.com> >> Date: February 4, 2010 1:09:04 PM EST >> To: <brett(a)projectliberty.org> >> Subject: CSI SX 2010: Call for Papers >> >> Dear Brett McDowell, >> >> The Call for Papers for CSI SX 2010 is now open. Submissions are >> due by March 17, 2010. CSI SX 2010 will take place May 26-27, 2010 >> at the San Francisco Marriott Marquis in San Francisco, CA. >> >> CSI is looking for security professionals, business leaders and >> technology providers to address current key security topics, as >> well as share best practices, experience and case studies. The CSI >> SX 2010 program will focus on the challenges of managing security >> in an increasingly mobile business environment and show >> organizations how to stay secure while increasing business agility. >> >> We invite you to submit and become a part of this select crowd. The >> deadline for submissions is March 17, 2010. >> >> Thank you for your continued support of our events. Should you have >> any questions, feel free to contact me. >> >> Best, >> Rosie >> >> Rosie Montalvo >> Event Specialist >> Computer Security Institute :: UBM International Media >> 11 West 19th Street, 3rd Fl., NY, NY 10011 >> Rosilia.Montalvo(a)ubm.com >> Phone +1.212.600.3018 >> www.GoCSI.com :: www.CSIsx.com :: www.CSIannual.com >> >> =========================== >> Unsubscribe information. You received this email because you >> participated in past CSI Events. If you do not want any other >> correspondence from us, please change your Opt In preferences at https://www.cmpevents.com/?M=$FLL1JIGDHH1J1D1D1D1D1MHIJG1D1D >

1 0

A system that models and coordinates real-time and near-real time device activity and interactivity.
by Owen Thomas 04 Feb '10

04 Feb '10

Hi Sampo. I've started this message in a separate thread. I hope the new title is appropriate. See my replies where appropriate below. 2010/2/1 <sampo(a)symlabs.com> > Owen Thomas wrote: > > Hello Robin. > > > > May I pick you up there on what you say about "spanning borders", and > > apply > > Clique Space to it. The notion of Clique spanning and Clique Space > > federations model many collaborative endeavours of the physical world in > a > > virtual context. > > We are doing very similar research in the EU funded TAS3 project. Our > notion is to make the plumbing (e.g. metadata exchange and basic > trust establishment) fully automatic, but then rely on trust > computation and scoring to determine exatly how close collaboration > is possible with a given partner. This also connects with user > driven access control. > > Our business model for building the Circles-of-Trust appears as > Annex E (really in the end of the document) of TAS3 architecture, > available from http:/zxid.org/tas3/ "TAS3 Architecture Deliverable". > > Another interesting initiative in this same space is the > Internet of Subjects (IoS), http://www.iosf.org/ which advocates > that the institutional web of trust should be a not-for-profit > entity, such as a trust (pardon the pun) or foundation. This model > does not require government to perform this function, but it > clearly states that the entity should not have a commercial > conflict of interest. I am trying to architect > this such that multiple such foundations could coexist. > Indeed, it looks as both organisations are on to a similar bone to myself. However, there do seem to differences (merely complimentary - I envisage that there would be mutual advantage to getting Clique Space and these architectures to cooperate) and so let me attempt to explain some of the differences in relation to Clique Space. I have had a very quick look over TAS3 and IoS and these are some of the impressions I draw from each. TAS3 appears to concentrate on a authorisation/authentication mechanism for access to and transfer of electronically stored personal information. In this regard, Clique Space differs in that it was primarily conceived by me to handle real-time and near real-time operation of devices. The page that is displayed directly from the IoS link you provide explains the organisations philosophy stating that the only one who ultimately owns personal data is the person to whom it relates. This is a similar philosophy to the one that motivated me to conceive Clique Space. Again, the notion of Personal Data Stores and the like leads me to conclude that IoS is based around information storage and retrieval, and not device activity. So, a bit more on the technical side... There are a few things to consider with regard to a device and the network infrastructure it uses; Clique Space is neutral with regard to physical networks because devices may use different physical networks to "the internet". Hence, while multiple Clique Spaces might exist on one network (say, "the internet") one Clique Space may also span multiple networks. The "one Clique Space - multiple networks" paradigm may be achieved through federating multiple sub Clique Spaces, but this may be complicated, and I would envisage it would be easier simply to use Media Profiles, and do what is necessary to bring physical access to other networks on an internet based Clique Space through one or more Agent Devices that were underlying members of the associated Agent Collaboration. > > Now, regarding the proprietary technology of Institutional Web of Trust, > if this IPR gets released on royalty-free basis, but with revocation > of license in case of law suit, I would actually view this as valuable > founding capital for the foundation. It is pretty clear that such > universal CoT would be disruptive business model, so if the foundation > had in its portfolio a couple of patents, it could quite well defend > itself, and its users, against the hostile forces. > > Cheers, > --Sampo > I have registered a patent for the technology. Its strength may yet be tested, and it is currently a PCT in international phase. It lapses 15 July. I do not know what I am going to do at this moment with regard to turning this into a business should I get that chance. What I need is venture capital to help secure national phase patent applications, people willing to help in ongoing development of the system, and people to ultimately manage a public Clique Space. I envisage that the Clique Space system would be available free-of-charge so that anyone can set up and run a proprietary Clique Space without having to worry about outlay for the software. I would also be averse to charging users for registration of Accounts. I believe this would not only create resistance in the product's uptake, but runs against my philosophical notions of the sacrosanct nature of the self; I don't expect to be charged for existing in a physical world, so I will not accept the proposition that I might be charged for existence in a virtual extension. The majority of revenue would be realised through federating proprietary Clique Spaces to the public Clique Space and in the registration of Account Profiles. I think the registration of Media Profiles might not provide a stable source of income for the public Clique Space, so I'm a bit reluctant to advocate charging their registration. I may re-enrol at my alma mater to do a research Masters degree with Clique Space as the subject. I'm trying to get this uni involved in supporting Clique Space, and they have set up a time for me to give a seminar on the subject. It would be great to hear that you or anyone else here might be able to help me in any way. Thanks, Owen. -- www.cliquespace.net Clique Space(TM) Facebook Group: http://www.facebook.com/group.php?gid=81335296379 Owen's Garden of Thought: http://owenpaulthomas.blogspot.com/

2 3

Kantara Initiative Conference - Early bird registration & room block deadline
by Dervla O'Reilly 03 Feb '10

03 Feb '10

This is a friendly reminder regarding registration and room block deadlines approaching related to the Conference March 9-11, 2010 at Intel's campus in Oregon. - Early-bird registration deadline is Feb. 12 for $195USD, then $250USD thereafter until March 9. - Sleeping room block deadline at the Springhill Suites is Feb. 9 for $105USD + taxes. Event information is available at our conference page - review the agenda, maps and nearby hotel details. We have a great rate per night for $105USD at the SpringHill Suites by Marriott - review the discount code details at our conference page We invite you to sign up for our open-for-all dinner is Wednesday, March 10, 6:45-8:15pm at Portland's Oba Restaurant. The price for the 3-course dinner including one beverage is $45USD. Please let me know if any questions regarding the Conference. Cheers, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative.org http://www.kantarainitiative.org Register for Kantara's annual workshop March 1, 2010 at the RSA Conference free of charge - http://bit.ly/8rPWVM

1 0

Announcing Government of Canada Consultation on Cyber Authentication (note IAF adoption)
by Brett McDowell 02 Feb '10

02 Feb '10

At the request of our friends to the north, I'm pleased to share this announcement from the Government of Canada. Here it is verbatim in both English and French. Note the reference to Kantara Initiative in the 3rd paragraph. I strongly endorse and recommend you participate in this consultation, if at all possible. --------------------------------------------------------------------------------------------------------------- Government of Canada Industry Consultation on Cyber Authentication Renewal Program Industry Consultation: February 16, 2010 Optional One-on-one Sessions: February 16 - 18, 2010 National Capital Region In collaboration with the Treasury Board of Canada Secretariat (TBS), Public Works and Government Services Canada (PWGSC) is inviting representatives of private-sector organizations to participate in consultations on the Cyber Authentication Renewal Program. The Government of Canada (GC) is investigating solutions that would allow individuals the option of using their existing credentials in order to gain online access to government programs and services. This proposed approach would provide flexibility to both departments and agencies, and to individuals who access these services. It would allow departments and agencies to use credentials that are appropriate to the sensitivity of their service offerings, while allowing individuals to choose the credential they wish to use to access any online GC services. The GC is considering basing its accreditation framework initially on the Kantara Initiative's* Service Assessment Criterion and Assurance Assessment Scheme. The GC is inviting industry organizations to participate in a consultation on February 16, 2010, to validate and refine its approach to electronic authentication, and to gather information on how it will solicit and accredit external credential service providers - using a federated model. The industry consultation will be followed by optional one-on-one sessions beginning the afternoon of February 16, 2010 and concluding by close of business February 18, 2010. For further information, please send an email to ConsultationSPTI.ITSSConsultation(a)tpsgc-pwgsc.gc.ca, or visit the event posting on MERX. *The Kantara Initiative (http://kantarainitiative.org/) is a group of individuals, developers, organizations, governments, and technology providers that, in 2009, amalgamated several long standing foundations and associations from the identity community. The goal of the Kantara Initiative is to harmonize and coordinate the actions of this community to help ensure secure, identity-based, online interactions while preventing misuse of personal information. --------------------------------------------------------------------------------------------------------------- Consultations auprès de l'industrie sur le programme de renouvellement de l'authentification électronique du gouvernement du Canada Consultations auprès de l'industrie : 16 février 2010 Séances individuelles facultatives : 16 au 18 février 2010 Région de la capitale nationale Travaux publics et Services gouvernementaux Canada (TPSGC), en collaboration avec le Secrétariat du Conseil du Trésor (SCT), invite les représentants des organisations du secteur privé à participer aux consultations sur le programme de renouvellement de l'authentification électronique. Le gouvernement du Canada est à la recherche de solutions qui donneraient aux utilisateurs la possibilité d'utiliser leur justificatif existant afin d'accéder en ligne à des services et à des programmes gouvernementaux. Cette approche proposée offrirait de la flexibilité aux ministères, aux organismes et aux utilisateurs. Elle permettrait aux ministères et aux organismes d'utiliser des justificatifs appropriés en fonction de la sensibilité des services offerts, tout en permettant aux utilisateurs de choisir le justificatif qu'ils veulent utiliser pour accéder à tous les services gouvernementaux en ligne. Le gouvernement du Canada envisage tout d'abord de fonder son cadre d'accréditation sur les Service Assessment Criterion (critères d'évaluation de service) et l'Assurance Assessment Scheme (programme d'évaluation de l'assurance) de l'initiative Kantara*. Le gouvernement du Canada invite les organisations de l'industrie à participer à des consultations le 16 février 2010 pour valider et préciser son approche à l'égard de l'authentification électronique et pour recueillir des renseignements sur la manière dont le gouvernement sollicitera et accréditera les fournisseurs externes de services de justificatifs en utilisant un modèle fédéré. Les consultations menées auprès de l'industrie seront suivies de séances individuelles facultatives qui commenceront le 16 février 2010 en après-midi et se termineront à la fermeture des bureaux le 18 février 2010. Pour obtenir de plus amples renseignements, envoyez un courriel à l'adresse ConsultationSPTI.ITSSConsultation(a)tpsgc-pwgsc.gc.ca, ou visitez le site du MERX pour l'annonce d'évènements. *L'initiative Kantara (http://kantarainitiative.org/)est un regroupement de gens, de développeurs, d'organismes, de gouvernements et de fournisseurs de technologie qui, en 2009, a fusionné plusieurs fondations et associations de longue date de la communauté d'identité. L'objectif de l'initiative Kantara est d'harmoniser et de coordonner les actions de cette communauté pour faire en sorte que les interactions en ligne sont sécuritaires et basées sur l'identité en plus de prévenir l'utilisation malveillante des renseignements personnels.

3 2

Institutional Web of Trust
by Michael Duffy 01 Feb '10

01 Feb '10

We believe we have *THE* *solution that will realize the vision of the Kantara Initiative*: Ensure secure, identity-based, online interactions while preventing misuse of personal information so that networks will become privacy protecting and more natively trustworthy environments. We realize that is a bold statement. We humbly ask the members of the Kantara Initiative to review our approach: *Digital credentials on NFC enabled smart phones will soon transform the world of identity management.* *The Trust Nexus* is a startup company located in Austin, TX. We hold intellectual property rights that will enable us to build the infrastructure for secure identity in the digital age. *Whoever controls the infrastructure for secure identity will also play a leading role in the emerging world of m-Commerce.* The basic question is, how can trust be established in the digital age? If you and I have never met and I come to your website or place of business, how can you be confident that I am who I say that I am? *The Trust Nexus answers this basic question regarding the establishment of trust.* A key component of our infrastructure will be an easy to use *digital wallet* where credentials can be securely provisioned and transactions occur smoothly. This digital wallet will be the *cornerstone of NFC technologies on mobile devices* and provide the interface for identity, marketing and financial services. *Every aspect of digital life that depends on identity and transactions will flow through the digital wallet. * The digital wallet on NFC enabled smart phones will be one of *the most valuable assets in the digital age*. The digital wallet and supporting infrastructure will be based on industry standards that will *enable the mobile network operators (MNOs) to meter services that flow through their networks and participate in new marketing/advertising models.* The identity infrastructure we have designed will eliminate the possibility of identity theft for all participants, protect consumers and financial institutions from fraudulent transactions, greatly reduce cyber-crime and solve many of the systemic problems of the current Public Key Infrastructure system, especially the problems of certificate revocation lists (CRLs) and on-line status checking. Our solution is simple, practical and transparent to the consumer. Consumer acceptance will be rapid and widespread. Our solution secures identity, protects individual privacy and prevents the establishment of monolithic government control. Under our system, the user is always in control of his/her credentials. The essence of our approach is very different from the "Big Brother" approach recently announced by India. Rather than creating a centralized directory of private information, we will create a central repository containing a collection of institutional decisions which will establish an *Institutional Web of Trust*. Compared to a decentralized web of trust which creates a web of individuals with, "the expectation that anyone receiving [a list of signatures] will trust at least one or two of the signatures", we will create a system where *trusted institutions legitimize individual identity*. Additionally, the *Institutional Web of Trust* established by *The Trust Nexus* will have centralized controller processes that rely greatly on self-management and automation resulting in great efficiencies. Digital wallets on NFC enabled smart phones will enable users to secure their private keys and control/present their digital credentials. Because a user's identity will be authenticated by the processes of *The Trust Nexus* (not a trust authority) there is no need for a trust authority to issue and vouch for public/private keys for individual users. It is only necessary that the public key be registered and the private key be secured. Users can self-issue their keys. *The Trust Nexus* does not secure identity by, "making personal data harder to steal". Rather, identity is secured by self-managing logical inconsistencies within the system, resolving identity conflicts and preventing fraudulent transactions. As Bruce Schneier, author and security guru, pointed out, "Proposed [identity theft] fixes tend to concentrate on the first issue--making personal data harder to steal--whereas the real problem is the second [preventing fraudulent transactions]. If we're ever going to manage the risks and effects of electronic impersonation [identity theft], *we must concentrate on preventing and detecting fraudulent transactions*." [Solving Identity Theft] In essence, there are a *limited number of institutions worldwide* (measured in thousands) that truly matter when it comes to legitimizing identity. Digital wallets on smart phones will enable the efficient association of unique public/private keys to a specific legal identity (legal name and legal address). If there is a non-unique association, an inconsistency arises in the system. If the association is unique and verified by one or more legitimate institutions an individual's identity is secure (as long as the private key which he/she controls is secure). In the process of adding a credential to a user's digital wallet, the provisioning institution (government agency, bank, university, etc.) will calculate a secure hash value (numerical representation) of the credential combined with information from the user's *primary credential* (legal identity). This hash value will be encrypted with the user's private key and then encrypted again with the provisioning institution's private key; this encrypted hash value will then be stored in *The Trust Nexus Repository* representing *an institutional validation of the user's identity.* This dual encryption establishes that the credential was associated with the user during the provisioning process rather than simply asserting the association by a reference from the repository. Also, There is no need to store any specific information (account number, balance, etc.) about user's account. The user is in complete control of the information he/she presents and his/her privacy is maintained. When a user presents a credential from his/her digital wallet a transaction ID will be sent from the authenticating system to the user's digital wallet, be encrypted with the user's private key and sent back to the authenticating system. The user can be authenticated by decrypting the transaction ID with the user's public key from *The Trust Nexus Repository*. The credential can be authenticated by calculating the hash value of the credential and then decrypting the hash value stored in *The Trust Nexus Repository* with the institution's public key and the user's public key. In a variation of this process the provisioning institution does not store the encrypted hash value in *The Trust Nexus Repository*; rather, the provisioning institution itself maintains a repository and a reference to the repository is authenticated by an entry contained within *The Trust Nexus Repository* (through the institution's primary credential). In this way an institution could *federate the identity* of it's users (or a subset of its users) simply by adding (or modifying) a credential to each of it's user's digital wallets and creating an institutional reference within *The Trust Nexus Repository*. As part of the federation process, cooperating institutions will most likely create standard authorization levels for various services and provision these levels as part of a user's credential. For example, a coalition of universities may have authorization levels for library services that will enable users to access any library within the coalition; government organizations may provision security levels within a user's credential that enable inter-agency access to resources; etc. There is significant debate regarding the effectiveness of biometrics in identity management. When a user is not present (authenticating over a network) there are fatal problems with biometric authentication. Most significantly, "The main security problem with biometrics is the inability to create a new secret. If you allow your fingerprint to be digitized and sent across a network or scanned by a compromised scanner, it can be stolen. Then someone has a digital copy of your fingerprint." Even if a method of biometric identification proved to be completely reliable, security issues would still remain. There would be opportunities to steal someone's biometric signature and forge their identity credentials, especially if there was a massive store of private personal data; one successful attack could essentially render the entire system ineffective. When a user is present bio-metric data can be an effective authenticator. It will be possible to *store bio-metric data within a user's credential* (not within a central repository) when the credential is created by the provisioning institution. When a user presents the credential verifying the biometric data in the credential against the individual in real time will provide enhanced security along with verifying the encrypted transaction code against the user's public key in *The Trust Nexus Repository* and verifying the encrypted hash code of the credential against *The Trust Nexus Repository*. While there are many types of biometric identifiers, one of the simplest and most usable is a photograph of the human face verified by a human being. Any credential in a user's digital wallet that includes a photograph (driver's license, passport, bank debit card, etc.) will be highly reliable when a user presents the credential in person. Why would a major institution (bank, university, corporation, government agency, etc.) utilize *The Trust Nexus Repository* instead of its own internal system? When there is no need for an external third party to rely on a user's credential an institution may very well utilize its own internal repository. In this same case, smaller institutions, for reasons of convenience and cost, might still utilize *The Trust Nexus Repository*. Whenever a third party (a party other than the provisioning institution) must relay on a user's credential, the key services *The Trust Nexus Repository* provides are assurance that the user is unique and trustworthy, assurance that the provisioning institution is unique and trustworthy and assurance that the credential is trustworthy. Also, *The Trust Nexus Repository* creates a "*data synergy effect*" which establishes an *Institutional Web of Trust* (when multiple institutions validate a unique user's identity the identity becomes more secure and trustworthy). If a unique user has digital credentials for a state driver's license, a passport, a bank debit card, a university ID, insurance cards, credit cards, etc., all independently validated by trustworthy institutions, that user's identity is secure and highly trustworthy. Similar to credit ratings, both individuals and institutions will have "*trust ratings*" within *The Trust Nexus Repository*. A centralized notification service will also be provided when credentials are lost or stolen. The uniqueness test for legal identities within *The Trust Nexus Repository* helps to secure identity and prevent identity theft. If there is a non-unique association, an inconsistency arises in the system. Also, easy access for online status checking establishes the currency of a user's credentials in case the user's digital wallet is lost or stolen. And most importantly, *The Trust Nexus* creates a "*data synergy effect*" which establishes an *Institutional Web of Trust*. Additionally, our system provides *the "Holy Grail" for single sign on*. All computers will soon have an interface (USB plugin or internal card) that will enable NFC interactions with mobile devices. The digital wallet on a user's cell phone will be provisioned with credentials containing specified authorizations different systems and services. Rather than logging into a directory or utilizing a complex federated identity process, a user will log onto his/her cell phone with a PIN and a voice authentication signature. The user (or the authenticating system) will then select the appropriate credential for the specified system or service with no need to enter another user name or password (the user's private key will be used to encrypt a transaction ID). This approach also *solves the "Keys to the Kingdom" problem* where a single sign on to a directory service opens access to all the user's systems and services. We are confident we have a transforming technology and a clear vision of the future. *No one has found a conceptual flaw in the system.* Existing providers of identity management services should not see *The Trust Nexus* as a competitor; rather, they should see us as an infrastructure provider (similar to the electric power grid that has hundreds of energy providers). Best regards, Michael Duffy CEO / CTO ~ The Trust Nexus http://www.thetrustnexus.com

11 18

Re: [Kantara - Community] Institutional Web of Trust
by Michael Duffy 31 Jan '10

31 Jan '10

I think repositories only hold value if the storage and retrieval of information can be validated to be trusted, secure, reliable, and honest in its representations. We agree with Brian's statement. Within the *Institutional Web of Trust Repository* institutions will be authenticated by established certificate authorities. The major certificate authorities have high level processes for institutional authentication and security; these processes have established a record of reliability over many years. Institutions will have a vested interest in maintaining the validity of their certificates within the *Institutional Web of Trust Repository*. Since trust is an intangible value, I find it to be an unobtainable goal in ecommerce activities based on concepts that are not managed in accordance with good policies or even their own statements. IMHO any system that is self-managed is quite frankly a disaster and provides me as an informed consumer no level of trust or assurances proclaimed by any system or solution said to be good for goodness sakes. Self managed is equivalent to saying trust me because I say so. It is certainly our goal to have good policies. Assuming that processes of self-management can not be incorporated into good policies is a fallacious line of reasoning (http://www.opifexphoenix.com/reasoning/fallacies/slipperyslope.htm) Simply because a system involves self-management does not mean the system will inevitably end in disaster. From the user standpoint, the self-management aspect of our system is very slight. When a user activates his/her NFC enabled smart phone there will be a registration process where the user's legal identity and public key will be registered with the *Institutional Web of Trust Repository*. This process will be transparent to the user. There really is no way for certificate authorities or governments to manage the issuance and assurance of billions of private/public keys. A process in which users can self-register their own keys enables a workable world wide system. However, after reading Brian's response I can see that the term "self-management" is tinged with unreliability. We will remove this term from our presentation and replace it with "self-registered". I also don't understand why it is referred to as a "centralized" repository and then it is explained to be a "group" of repositories. Maybe it is just me, but isn't that a "distributed" model? Good point. That is clearly a mistake in our presentation. It is very likely each nation or groups of nations (EEC) will have its own central repository (replicated geographically). World wide, it will be a distributed model. Also, how do you ensure the individual is always in control of their key? I think that statement is simply not true, grandiose, and terrible misleading -- and not a basis of building any trust; as no system could ever ensure that the action of all its individuals was consistent and the same. Currently, there is a great deal of controversy regarding the security of data on mobile devices. Once the Trusted Platform Module (http://en.wikipedia.org/wiki/Trusted_Platform_Module) is instituted on mobile devices this controversy should abate. Of course, a user's cell phone which contains their digital wallet may be lost or stolen just as physical wallet can be lost or stolen. The *Institutional Web of Trust Repository *will have processes for canceling and reestablishing credentials. I think the International [Institutional] Web of Trust is a trap of old concepts, proclaiming protections that are perceived based on biased assessments, and one of the most frightening concepts for ensuring trust and identities that I have listened to in quite awhile. These statements are frighteningly hyperbolic and uniformed. If I go to my local bank and in the process of provisioning my digital debit card onto my cell phone ~ the banking system calculates a hash value of the credential ~ then that hash value is encrypted with my private key ~ then encrypted again with the banks private key ~ then the dual encrypted value is stored *Institutional Web of Trust Repository *that value represents an institutional validation of the my identity (without storing any private information about the user). The weight of multiple institutional validations makes the user's identity more trustworthy. When a user presents a credential from his/her digital wallet a transaction ID will be sent from the authenticating system to the user's digital wallet, be encrypted with the user's private key and sent back to the authenticating system. The user can be authenticated by decrypting the transaction ID with the user's public key from the *Institutional Web of Trust Repository*. The credential can be authenticated by calculating the hash value of the credential and then decrypting the hash value stored in the *Institutional Web of Trust Repository* with the institution's public key and the user's public key. *All in all, this is really a very simple system based on existing technologies.* The key nuance is that we store institutional validations, we do not store private data. Best regards, Michael Duffy CEO / CTO ~ The Trust Nexus http://www.thetrustnexus.com Brian Dilley wrote: > > Actually, I find that a "web" is a tangled mesh in which to entrap and > is a term that infringes on other trademarks and is a symbol that > doesn't inspire trust at all -- said the fly to the spider. I think > repositories only hold value if the storage and retrieval of > information can be validated to be trusted, secure, reliable, and > honest in its representations. Since trust is an intangible value, I > find it to be an unobtainable goal in ecommerce activities based on > concepts that are not managed in accordance with good policies or even > their own statements. IMHO any system that is self-managed is quite > frankly a disaster and provides me as an informed consumer no level of > trust or assurances proclaimed by any system or solution said to be > good for goodness sakes. Self managed is equivalent to saying trust > me because I say so. > > > > Also, the wallet idea has come and gone and a second showing will most > likely result in the same...I also don't understand why it is referred > to as a "centralized" repository and then it is explained to be a > "group" of repositories. Maybe it is just me, but isn't that a > "distributed" model? Also, how do you ensure the individual is always > in control of their key? I think that statement is simply not true, > grandiose, and terrible misleading -- and not a basis of building any > trust; as no system could ever ensure that the action of all its > individuals was consistent and the same. Therefore, the International > Web of Trust is seriously flawed by allowing such an assumption to be > the core value of its model. > > > > I really think this whole message has been completely self-promoting > and quite a story about X.509 certificates but vaguely disguised as a > wallet, and I think the International Web of Trust is a trap of old > concepts, proclaiming protections that are perceived based on biased > assessments, and one of the most frightening concepts for ensuring > trust and identities that I have listened to in quite awhile. > > > > This is exactly why such organizations as IETF, ANSI, ISO, AICPA, NIST > and Kantara are so much in need to prevent such flawed solutions as > this "web of trust" from being accepted by the electronic commerce > community. > > > > /_(My corporate cell phone number has been changed, if you could > please update your records that would be great.)_/ > > > > Sincerely, > > Brian > > Brian Dilley CISA / CIPP / CGEIT > > President > > */ /* > > */GSA Advantage! - Use our GSA Schedule 70 Today! > <http://www.evalid8.com/services/gsaschedule70.html>/*__ > > > > Office: (866) 465 - 6005 > > Fax: (443) 957 - 9005 > > Cell: *(443) 955 - 9885* > > Web: http://www.evalid8.com <http://www.evalid8.com/> > > > > This electronic message contains information from eValid8^® that may > be confidential, proprietary or otherwise protected from disclosure > and is only intended for the recipient. If you should have received > this transmission in error, we do make mistakes when selecting > addressees, please notify the email originator at info(a)evalid8.com > <mailto:info@evalid8.com> and please delete that email message from > your mailbox. eValid8^® wants to be safe on the Internet, and we > honor clients and people's privacy. To read our Privacy Statement, > click on this link, > http://www.evalid8.com/contactus/privacystatement.html . > > ------------------------------------------------------------------------ > > *From:* community-bounces(a)kantarainitiative.org > [mailto:community-bounces@kantarainitiative.org] *On Behalf Of > *Michael Duffy > *Sent:* Saturday, January 30, 2010 12:49 PM > *To:* Joni Brennan > *Cc:* community(a)kantarainitiative.org > *Subject:* Re: [Kantara - Community] Institutional Web of Trust > > > > As requested, we have voided all company references and provided a > brief summary. Again, we apologize for the inappropriate post. > > Here is an overview of the *Institutional Web of Trust* concept: > > ************************************************************** > Executive Summary:* For the purpose of securing identity, rather than > creating a centralized directory or multiple directories of private > information, it will be far better to create a central repository > containing a collection of institutional decisions which will > establish an *Institutional Web of Trust*. In essence, there are a > *limited number of institutions worldwide* (measured in thousands) > that truly matter when it comes to legitimizing identity. Digital > wallets on smart phones will enable the efficient association of > unique public/private keys to a specific legal identity (legal name > and legal address). If there is a non-unique association, an > inconsistency arises in the system. If the association is unique and > verified by one or more legitimate institutions an individual's > identity is secure (as long as the private key which he/she controls > is secure). > > This system secures identity, protects individual privacy and prevents > the establishment of monolithic government control. Under this > system, the user is always in control of his/her credentials. > > This system makes a simplified and efficient federation process > possible. An institution could *federate the identity* of it's users > (or a subset of its users) simply by adding (or modifying) a > credential to each of it's user's digital wallet and creating an > institutional reference within *The Institutional Web of Trust > Repository*. > > This system provides *the "Holy Grail" for single sign on*. > ************************************************************* > * > Digital credentials on NFC enabled smart phones will soon transform > the world of identity management. *Within three years there will be > corporate and government deployments where all members of the > organization are issued NFC enabled smart phones for the purpose of > identity management. > > The basic question is, how can trust be established in the digital > age? If you and I have never met and I come to your website or place > of business, how can you be confident that I am who I say that I am? > *The Institutional Web of Trust will resolve this basic question > regarding the establishment of trust.* > > A key component of the infrastructure will be an easy to use *digital > wallet* where credentials can be securely provisioned and transactions > occur smoothly. This digital wallet will be the *cornerstone of NFC > technologies on mobile devices* and provide the interface for > identity, marketing and financial services. *Every aspect of digital > life that depends on identity and transactions will flow through the > digital wallet. * > > This identity infrastructure will eliminate the possibility of > identity theft for all participants, protect consumers and financial > institutions from fraudulent transactions, greatly reduce cyber-crime > and solve many of the systemic problems of the current Public Key > Infrastructure system, especially the problems of certificate > revocation lists (CRLs) and on-line status checking. > > The solution is simple, practical and transparent to the consumer. > Consumer acceptance will be rapid and widespread. The solution secures > identity, protects individual privacy and prevents the establishment > of monolithic government control. Under this system, the user is > always in control of his/her credentials. > > The essence of the approach is very different from the "Big Brother" > approach recently announced by India. Rather than creating a > centralized directory of private information, there will be a central > repository containing a collection of institutional decisions which > will establish an *Institutional Web of Trust*. > > Compared to a decentralized web of trust which creates a web of > individuals with, "the expectation that anyone receiving [a list of > signatures] will trust at least one or two of the signatures", we will > create a system where *trusted institutions legitimize individual > identity*. Additionally, the *Institutional Web of Trust* will have > centralized controller processes that rely greatly on self-management > and automation resulting in great efficiencies. > > Digital wallets on NFC enabled smart phones will enable users to > secure their private keys and control/present their digital > credentials. Because a user's identity will be authenticated by the > processes of *The Institutional Web of Trust* (not a trust authority) > there is no need for a trust authority to issue and vouch for > public/private keys for individual users. It is only necessary that > the public key be registered and the private key be secured. Users can > self-issue their keys. > > *The Institutional Web of Trust* does not secure identity by, "making > personal data harder to steal". Rather, identity is secured by > self-managing logical inconsistencies within the system, resolving > identity conflicts and preventing fraudulent transactions. > > As Bruce Schneier, author and security guru, pointed out, "Proposed > [identity theft] fixes tend to concentrate on the first issue--making > personal data harder to steal--whereas the real problem is the second > [preventing fraudulent transactions]. If we're ever going to manage > the risks and effects of electronic impersonation [identity theft], > *we must concentrate on preventing and detecting fraudulent > transactions*." [Solving Identity Theft] > > In essence, there are a *limited number of institutions worldwide* > (measured in thousands) that truly matter when it comes to > legitimizing identity. Digital wallets on smart phones will enable > the efficient association of unique public/private keys to a specific > legal identity (legal name and legal address). If there is a > non-unique association, an inconsistency arises in the system. If the > association is unique and verified by one or more legitimate > institutions an individual's identity is secure (as long as the > private key which he/she controls is secure). > > In the process of adding a credential to a user's digital wallet, the > provisioning institution (government agency, bank, university, etc.) > will calculate a secure hash value (numerical representation) of the > credential combined with information from the user's *primary > credential* (legal identity). This hash value will be encrypted with > the user's private key and then encrypted again with the provisioning > institution's private key; this encrypted hash value will then be > stored in *The Institutional Web of Trust Repository* representing *an > institutional validation of the user's identity.* > > This dual encryption establishes that the credential was associated > with the user during the provisioning process rather than simply > asserting the association by a reference from the repository. Also, > There is no need to store any specific information (account number, > balance, etc.) about user's account. The user is in complete control > of the information he/she presents and his/her privacy is maintained. > > When a user presents a credential from his/her digital wallet a > transaction ID will be sent from the authenticating system to the > user's digital wallet, be encrypted with the user's private key and > sent back to the authenticating system. The user can be authenticated > by decrypting the transaction ID with the user's public key from *The > Institutional Web of Trust Repository*. The credential can be > authenticated by calculating the hash value of the credential and then > decrypting the hash value stored in *The Institutional Web of Trust > Repository* with the institution's public key and the user's public key. > > In a variation of this process the provisioning institution does not > store the encrypted hash value in *The Institutional Web of Trust > Repository*; rather, the provisioning institution itself maintains a > repository and a reference to the repository is authenticated by an > entry contained within *The Institutional Web of Trust Repository* > (through the institution's primary credential). In this way an > institution could *federate the identity* of it's users (or a subset > of its users) simply by adding (or modifying) a credential to each of > it's user's digital wallets and creating an institutional reference > within *The Institutional Web of Trust Repository*. > > As part of the federation process, cooperating institutions will most > likely create standard authorization levels for various services and > provision these levels as part of a user's credential. For example, a > coalition of universities may have authorization levels for library > services that will enable users to access any library within the > coalition; government organizations may provision security levels > within a user's credential that enable inter-agency access to > resources; etc. > > There is significant debate regarding the effectiveness of biometrics > in identity management. When a user is not present (authenticating > over a network) there are fatal problems with biometric > authentication. Most significantly, "The main security problem with > biometrics is the inability to create a new secret. If you allow your > fingerprint to be digitized and sent across a network or scanned by a > compromised scanner, it can be stolen. Then someone has a digital copy > of your fingerprint." > > Even if a method of biometric identification proved to be completely > reliable, security issues would still remain. There would be > opportunities to steal someone's biometric signature and forge their > identity credentials, especially if there was a massive store of > private personal data; one successful attack could essentially render > the entire system ineffective. > > When a user is present bio-metric data can be an effective > authenticator. It will be possible to *store bio-metric data within a > user's credential* (not within a central repository) when the > credential is created by the provisioning institution. When a user > presents the credential, verifying the biometric data in the > credential against the individual in real time will provide enhanced > security along with verifying the encrypted transaction code against > the user's public key and verifying the encrypted hash code of the > credential against the value stored in *The Institutional Web of Trust > Repository*. > > While there are many types of biometric identifiers, one of the > simplest and most usable is a photograph of the human face verified by > a human being. Any credential in a user's digital wallet that > includes a photograph (driver's license, passport, bank debit card, > etc.) will be highly reliable when a user presents the credential in > person. > > Why would a major institution (bank, university, corporation, > government agency, etc.) utilize *The Institutional Web of Trust > Repository* instead of its own internal system? When there is no need > for an external third party to rely on a user's credential an > institution may very well utilize its own internal repository. In > this same case, smaller institutions, for reasons of convenience and > cost, might still utilize *The Institutional Web of Trust Repository*. > > Whenever a third party (a party other than the provisioning > institution) must relay on a user's credential, the key services *The > Institutional Web of Trust Repository* provides are assurance that the > user is unique and trustworthy, assurance that the provisioning > institution is unique and trustworthy and assurance that the > credential is trustworthy. Also, *The Institutional Web of Trust > Repository* creates a "*data synergy effect*" which establishes an > *Institutional Web of Trust* (when multiple institutions validate a > unique user's identity the identity becomes more secure and trustworthy). > > If a unique user has digital credentials for a state driver's license, > a passport, a bank debit card, a university ID, insurance cards, > credit cards, etc., all independently validated by trustworthy > institutions, that user's identity is secure and highly trustworthy. > Similar to credit ratings, both individuals and institutions will have > "*trust ratings*" within *The Institutional Web of Trust Repository*. > A centralized notification service will also be provided when > credentials are lost or stolen. > > The uniqueness test for legal identities within *The Institutional Web > of Trust Repository* helps to secure identity and prevent identity > theft. If there is a non-unique association, an inconsistency arises > in the system. Also, easy access for online status checking > establishes the currency of a user's credentials in case the user's > digital wallet is lost or stolen. > > Additionally, the system provides *the "Holy Grail" for single sign > on*. All computers will soon have an interface (USB plugin or internal > card) that will enable NFC interactions with mobile devices. The > digital wallet on a user's cell phone will be provisioned with > credentials containing specified authorizations for different systems > and services. Rather than logging into a directory or utilizing a > complex federated identity process, a user will log onto his/her cell > phone with a PIN and/or a voice authentication signature. The user (or > the authenticating system) will then select the appropriate credential > for the specified system or service with no need to enter another user > name or password (the user's private key will be used to encrypt a > transaction ID). This approach also *solves the "Keys to the Kingdom" > problem* where a single sign on to a directory service opens access to > all the user's systems and services. > > Additionally, the system will enable a process of *mutual > authentication* that will prevent phishing scams. The user's > credential and the institution's credential could both contain a list > of valid URLs which could be matched during the sign on process. > > Existing providers of identity management services should not see *The > Institutional Web of Trust* as a competitor; rather, they should see > it as an infrastructure service (similar to the electric power grid > that has hundreds of energy providers). > > This identity infrastructure will be created with government resources > and be managed to a great extent as a public trust. > > Best regards, > > Michael Duffy > CEO / CTO ~ The Trust Nexus > http://www.thetrustnexus.com > > > > Joni Brennan wrote: > > Thanks Mike, > > It seems like you have a product and you're telling us about it. We > don't allow these types of messages here. So you have a few choices > of how to interact. > > 1 - Parse your email down to a very brief idea and some questions that > the group could respond to. (This mode is more aligned with the true > nature of the list.) Again - as it reads now it's a product > advertisement which is *prohibited. > * > 2 - Browse our groups list from the homepage here > http://kantarainitiative.org. You may find a group you could join and > then share your idea there. > > 3 - Start your own Work or Discussion Group to discuss your identity > based solutions ideas. If you're interested in this path please ping > me directly so we can discuss and I can learn more about your goals. > >From there I could help you to determine if this is appropriate work > material for Kantara or not. > > Cheers - Joni > > On Fri, Jan 29, 2010 at 10:04 AM, Michael Duffy > <thetrustnexus(a)austin.rr.com <mailto:thetrustnexus@austin.rr.com>> wrote: > > My apologies. > > A member of your group actually suggested we post to the community list. > > Our goal was not to promote the company but to discuss the ideas > related to an Institutional Web of Trust with the leading experts in > the field of identity. > > Is there another existing list that would better suit this purpose? > > If not, perhaps Kantara could create such a list (e.g., > ideas(a)kantarainitiative.org <mailto:ideas@kantarainitiative.org>). > > Mike > > > > > Roger Sullivan wrote: > > Let me echo Brett's sentiments. > > None of Kantara's lists are to be used for promotion of oneself or one's company. > > Please refrain from doing that. > > Roger Sullivan > President, Kantara Initiative > > > -----Original Message----- > From: Brett McDowell [mailto:email@brettmcdowell.com] > Sent: Friday, January 29, 2010 11:04 AM > To: Thomas Hardjono > Cc: community(a)kantarainitiative.org <mailto:community@kantarainitiative.org> > Subject: Re: [Kantara - Community] Institutional Web of Trust > > That is certainly not its intent and if it becomes used in that way I > fear we will see mass un-subscription which will undermine our ability > to communicate with each other. So I would ask that all subscribers > refrain from using this list for any form of advertising. > > Thank you, > > || Brett McDowell, Executive Director, Kantara Initiative > > On Fri, Jan 29, 2010 at 10:59 AM, Thomas Hardjono > <standards(a)hardjono.net> <mailto:standards@hardjono.net> wrote: > >> My apologies for asking this trivial question, >> >> but is this Kantara mailing-list allowed to be >> >> used for "advertising" emails? >> >> >> >> Regards. >> >> >> >> /thomas/ >> >> >> >> >> >> >> >> __________________________________________ >> >> Thomas Hardjono >> >> MIT Kerberos Consortium >> >> Massachusetts Institute of Technology >> >> 77 Massachusetts Ave W92-152 >> >> Cambridge, MA 02139 >> >> >> >> email: hardjono[at]mit.edu <http://mit.edu> >> >> web: http://www.kerberos.org >> >> mobile: +1 781-729-9559 >> >> desk: +1 617-715-2451 >> >> __________________________________________ >> >> >> >> >> >> >> >> From: community-bounces(a)kantarainitiative.org <mailto:community-bounces@kantarainitiative.org> >> [mailto:community-bounces@kantarainitiative.org] On Behalf Of Michael Duffy >> Sent: Friday, January 29, 2010 8:47 AM >> To: community(a)kantarainitiative.org <mailto:community@kantarainitiative.org> >> Subject: [Kantara - Community] Institutional Web of Trust >> >> >> >> We believe we have THE solution that will realize the vision of the Kantara >> Initiative: Ensure secure, identity-based, online interactions while >> preventing misuse of personal information so that networks will become >> privacy protecting and more natively trustworthy environments. >> >> We realize that is a bold statement. We humbly ask the members of the >> Kantara Initiative to review our approach: >> >> Digital credentials on NFC enabled smart phones will soon transform the >> world of identity management. >> >> The Trust Nexus is a startup company located in Austin, TX. We hold >> intellectual property rights that will enable us to build the infrastructure >> for secure identity in the digital age. Whoever controls the infrastructure >> for secure identity will also play a leading role in the emerging world of >> m-Commerce. >> >> The basic question is, how can trust be established in the digital age? If >> you and I have never met and I come to your website or place of business, >> how can you be confident that I am who I say that I am? The Trust Nexus >> answers this basic question regarding the establishment of trust. >> >> A key component of our infrastructure will be an easy to use digital wallet >> where credentials can be securely provisioned and transactions occur >> smoothly. This digital wallet will be the cornerstone of NFC technologies on >> mobile devices and provide the interface for identity, marketing and >> financial services. Every aspect of digital life that depends on identity >> and transactions will flow through the digital wallet. >> >> The digital wallet on NFC enabled smart phones will be one of the most >> valuable assets in the digital age. The digital wallet and supporting >> infrastructure will be based on industry standards that will enable the >> mobile network operators (MNOs) to meter services that flow through their >> networks and participate in new marketing/advertising models. >> >> The identity infrastructure we have designed will eliminate the possibility >> of identity theft for all participants, protect consumers and financial >> institutions from fraudulent transactions, greatly reduce cyber-crime and >> solve many of the systemic problems of the current Public Key Infrastructure >> system, especially the problems of certificate revocation lists (CRLs) and >> on-line status checking. >> >> Our solution is simple, practical and transparent to the consumer. Consumer >> acceptance will be rapid and widespread. Our solution secures identity, >> protects individual privacy and prevents the establishment of monolithic >> government control. Under our system, the user is always in control of >> his/her credentials. >> >> The essence of our approach is very different from the "Big Brother" >> approach recently announced by India. Rather than creating a centralized >> directory of private information, we will create a central repository >> containing a collection of institutional decisions which will establish an >> Institutional Web of Trust. >> >> Compared to a decentralized web of trust which creates a web of individuals >> with, "the expectation that anyone receiving [a list of signatures] will >> trust at least one or two of the signatures", we will create a system where >> trusted institutions legitimize individual identity. Additionally, the >> Institutional Web of Trust established by The Trust Nexus will have >> centralized controller processes that rely greatly on self-management and >> automation resulting in great efficiencies. >> >> Digital wallets on NFC enabled smart phones will enable users to secure >> their private keys and control/present their digital credentials. Because a >> user's identity will be authenticated by the processes of The Trust Nexus >> (not a trust authority) there is no need for a trust authority to issue and >> vouch for public/private keys for individual users. It is only necessary >> that the public key be registered and the private key be secured. Users can >> self-issue their keys. >> >> The Trust Nexus does not secure identity by, "making personal data harder to >> steal". Rather, identity is secured by self-managing logical >> inconsistencies within the system, resolving identity conflicts and >> preventing fraudulent transactions. >> >> As Bruce Schneier, author and security guru, pointed out, "Proposed >> [identity theft] fixes tend to concentrate on the first issue--making >> personal data harder to steal--whereas the real problem is the second >> [preventing fraudulent transactions]. If we're ever going to manage the >> risks and effects of electronic impersonation [identity theft], we must >> concentrate on preventing and detecting fraudulent transactions." [Solving >> Identity Theft] >> >> In essence, there are a limited number of institutions worldwide (measured >> in thousands) that truly matter when it comes to legitimizing identity. >> Digital wallets on smart phones will enable the efficient association of >> unique public/private keys to a specific legal identity (legal name and >> legal address). If there is a non-unique association, an inconsistency >> arises in the system. If the association is unique and verified by one or >> more legitimate institutions an individual's identity is secure (as long as >> the private key which he/she controls is secure). >> >> In the process of adding a credential to a user's digital wallet, the >> provisioning institution (government agency, bank, university, etc.) will >> calculate a secure hash value (numerical representation) of the credential >> combined with information from the user's primary credential (legal >> identity). This hash value will be encrypted with the user's private key >> and then encrypted again with the provisioning institution's private key; >> this encrypted hash value will then be stored in The Trust Nexus Repository >> representing an institutional validation of the user's identity. >> >> This dual encryption establishes that the credential was associated with the >> user during the provisioning process rather than simply asserting the >> association by a reference from the repository. Also, There is no need to >> store any specific information (account number, balance, etc.) about user's >> account. The user is in complete control of the information he/she presents >> and his/her privacy is maintained. >> >> When a user presents a credential from his/her digital wallet a transaction >> ID will be sent from the authenticating system to the user's digital wallet, >> be encrypted with the user's private key and sent back to the authenticating >> system. The user can be authenticated by decrypting the transaction ID with >> the user's public key from The Trust Nexus Repository. The credential can be >> authenticated by calculating the hash value of the credential and then >> decrypting the hash value stored in The Trust Nexus Repository with the >> institution's public key and the user's public key. >> >> In a variation of this process the provisioning institution does not store >> the encrypted hash value in The Trust Nexus Repository; rather, the >> provisioning institution itself maintains a repository and a reference to >> the repository is authenticated by an entry contained within The Trust Nexus >> Repository (through the institution's primary credential). In this way an >> institution could federate the identity of it's users (or a subset of its >> users) simply by adding (or modifying) a credential to each of it's user's >> digital wallets and creating an institutional reference within The Trust >> Nexus Repository. >> >> As part of the federation process, cooperating institutions will most likely >> create standard authorization levels for various services and provision >> these levels as part of a user's credential. For example, a coalition of >> universities may have authorization levels for library services that will >> enable users to access any library within the coalition; government >> organizations may provision security levels within a user's credential that >> enable inter-agency access to resources; etc. >> >> There is significant debate regarding the effectiveness of biometrics in >> identity management. When a user is not present (authenticating over a >> network) there are fatal problems with biometric authentication. Most >> significantly, "The main security problem with biometrics is the inability >> to create a new secret. If you allow your fingerprint to be digitized and >> sent across a network or scanned by a compromised scanner, it can be stolen. >> Then someone has a digital copy of your fingerprint." >> >> Even if a method of biometric identification proved to be completely >> reliable, security issues would still remain. There would be opportunities >> to steal someone's biometric signature and forge their identity credentials, >> especially if there was a massive store of private personal data; one >> successful attack could essentially render the entire system ineffective. >> >> When a user is present bio-metric data can be an effective authenticator. >> It will be possible to store bio-metric data within a user's credential (not >> within a central repository) when the credential is created by the >> provisioning institution. When a user presents the credential verifying the >> biometric data in the credential against the individual in real time will >> provide enhanced security along with verifying the encrypted transaction >> code against the user's public key in The Trust Nexus Repository and >> verifying the encrypted hash code of the credential against The Trust Nexus >> Repository. >> >> While there are many types of biometric identifiers, one of the simplest and >> most usable is a photograph of the human face verified by a human being. >> Any credential in a user's digital wallet that includes a photograph >> (driver's license, passport, bank debit card, etc.) will be highly reliable >> when a user presents the credential in person. >> >> Why would a major institution (bank, university, corporation, government >> agency, etc.) utilize The Trust Nexus Repository instead of its own internal >> system? When there is no need for an external third party to rely on a >> user's credential an institution may very well utilize its own internal >> repository. In this same case, smaller institutions, for reasons of >> convenience and cost, might still utilize The Trust Nexus Repository. >> >> Whenever a third party (a party other than the provisioning institution) >> must relay on a user's credential, the key services The Trust Nexus >> Repository provides are assurance that the user is unique and trustworthy, >> assurance that the provisioning institution is unique and trustworthy and >> assurance that the credential is trustworthy. Also, The Trust Nexus >> Repository creates a "data synergy effect" which establishes an >> Institutional Web of Trust (when multiple institutions validate a unique >> user's identity the identity becomes more secure and trustworthy). >> >> If a unique user has digital credentials for a state driver's license, a >> passport, a bank debit card, a university ID, insurance cards, credit cards, >> etc., all independently validated by trustworthy institutions, that user's >> identity is secure and highly trustworthy. Similar to credit ratings, both >> individuals and institutions will have "trust ratings" within The Trust >> Nexus Repository. A centralized notification service will also be provided >> when credentials are lost or stolen. >> >> The uniqueness test for legal identities within The Trust Nexus Repository >> helps to secure identity and prevent identity theft. If there is a >> non-unique association, an inconsistency arises in the system. Also, easy >> access for online status checking establishes the currency of a user's >> credentials in case the user's digital wallet is lost or stolen. And most >> importantly, The Trust Nexus creates a "data synergy effect" which >> establishes an Institutional Web of Trust. >> >> Additionally, our system provides the "Holy Grail" for single sign on. All >> computers will soon have an interface (USB plugin or internal card) that >> will enable NFC interactions with mobile devices. The digital wallet on a >> user's cell phone will be provisioned with credentials containing specified >> authorizations different systems and services. Rather than logging into a >> directory or utilizing a complex federated identity process, a user will log >> onto his/her cell phone with a PIN and a voice authentication signature. The >> user (or the authenticating system) will then select the appropriate >> credential for the specified system or service with no need to enter another >> user name or password (the user's private key will be used to encrypt a >> transaction ID). This approach also solves the "Keys to the Kingdom" problem >> where a single sign on to a directory service opens access to all the user's >> systems and services. >> >> We are confident we have a transforming technology and a clear vision of the >> future. No one has found a conceptual flaw in the system. Existing >> providers of identity management services should not see The Trust Nexus as >> a competitor; rather, they should see us as an infrastructure provider >> (similar to the electric power grid that has hundreds of energy providers). >> >> Best regards, >> >> Michael Duffy >> CEO / CTO ~ The Trust Nexus >> http://www.thetrustnexus.com >> >> >> >> >> >> >> _______________________________________________ >> Community mailing list >> Community(a)kantarainitiative.org <mailto:Community@kantarainitiative.org> >> http://kantarainitiative.org/mailman/listinfo/community >> >> >> > _______________________________________________ > Community mailing list > Community(a)kantarainitiative.org <mailto:Community@kantarainitiative.org> > http://kantarainitiative.org/mailman/listinfo/community > _______________________________________________ > Community mailing list > Community(a)kantarainitiative.org <mailto:Community@kantarainitiative.org> > http://kantarainitiative.org/mailman/listinfo/community > > > > > _______________________________________________ > Community mailing list > Community(a)kantarainitiative.org <mailto:Community@kantarainitiative.org> > http://kantarainitiative.org/mailman/listinfo/community > > > > > -- > Joni Brennan > IEEE-ISTO > Kantara Initiative > Program Director > voice:+1 732-226-4223 > email: joni @ ieee-isto.org <http://ieee-isto.org> > gtalk: jonibrennan > skype: upon request > > Join the conversation on the community@ list - > http://kantarainitiative.org/mailman/listinfo/community > > >

1 0

Re: [Kantara - Community] Institutional Web of Trust
by Joni Brennan 30 Jan '10

30 Jan '10

Hello, In the Kantara Initiative context, the Trust Framework discussions take place across a fair subset of the Kantara Work and Discussion Groups. But the best starting places would be... The Identity Assurance Work Group (IAWG) [1]. Privacy and Public Policy specific context discussions take place in the Privacy and Public Policy Work Group (P3WG) [2]. Relating to health care specific concerns one should see the Healthcare Identity Assurance Work Group (HIAWG) [3]. There are other groups that could, and should, be mentioned here but these 3 would make a good starting point. On each of the WG home pages you'll find links to review their mail archives and also to Join each group. To become a Participant in any of these groups follow the link to 'Join', indicate agreement to the group's IPR policy and submit the form. Start here: [1] http://kantarainitiative.org/confluence/display/idassurance [2] http://kantarainitiative.org/confluence/display/p3wg [3] http://kantarainitiative.org/confluence/display/healthidassurance - Joni On Sat, Jan 30, 2010 at 6:43 AM, Hal Warren <hwarren(a)openidsociety.org>wrote: > In spite of the inappropriateness of Michael Duffy’s message, it raises an > important question regarding the militation of trust. The answer impacts > all of our futures. > > Trusted digital identity requires engineering and deserves careful > consensus. There is no current single solution that meets the need to > jack-up the bandwidth of human-to-human communication. This engineering > problem needs to be solved by engineers. The standard for measurement > should be simple: that which increases the reliable throughput of > human-to-human transactions wins. It is all about the protocols and we need > to be a bit “protocol agnostic” and solution focused. > > The trust model presented by Michael falls far short. Trust should be > available from the location where it naturally occurs, be it my municipality > to validate my residency, my professional affiliations, my educational > institutions, my family affiliations, my religious affiliations, etc. This > requires a complex faceted framework through which such trusted claims can > be transmitted and validated. > > Where does the discussion on the architecture of the trust framework take > place? Who is there? > > Hal > > Hallie D. Warren, III > President > OpenID Society > 2020 Pennsylvania Ave., NW #364 > Washington, DC 20006 > phone: 202-640-1953 > email: hwarren(a)OpenIDsociety.org > > > > On Jan 29, 2010, at 2:13 PM, Joni Brennan wrote: > > Thanks Mike, > > It seems like you have a product and you're telling us about it. We don't > allow these types of messages here. So you have a few choices of how to > interact. > > 1 - Parse your email down to a very brief idea and some questions that the > group could respond to. (This mode is more aligned with the true nature of > the list.) Again - as it reads now it's a product advertisement which is > *prohibited. > * > 2 - Browse our groups list from the homepage here > http://kantarainitiative.org. You may find a group you could join and > then share your idea there. > > 3 - Start your own Work or Discussion Group to discuss your identity based > solutions ideas. If you're interested in this path please ping me directly > so we can discuss and I can learn more about your goals. From there I could > help you to determine if this is appropriate work material for Kantara or > not. > > Cheers - Joni > > On Fri, Jan 29, 2010 at 10:04 AM, Michael Duffy < > thetrustnexus(a)austin.rr.com> wrote: > >> My apologies. >> >> A member of your group actually suggested we post to the community list. >> >> Our goal was not to promote the company but to discuss the ideas related >> to an Institutional Web of Trust with the leading experts in the field of >> identity. >> >> Is there another existing list that would better suit this purpose? >> >> If not, perhaps Kantara could create such a list (e.g., >> ideas(a)kantarainitiative.org) >> >> Mike >> >> >> >> Roger Sullivan wrote: >> >> Let me echo Brett's sentiments. >> >> None of Kantara's lists are to be used for promotion of oneself or one's company. >> >> Please refrain from doing that. >> >> Roger Sullivan >> President, Kantara Initiative >> >> >> -----Original Message----- >> From: Brett McDowell [mailto:email@brettmcdowell.com <email(a)brettmcdowell.com>] >> Sent: Friday, January 29, 2010 11:04 AM >> To: Thomas Hardjono >> Cc: community(a)kantarainitiative.org >> Subject: Re: [Kantara - Community] Institutional Web of Trust >> >> That is certainly not its intent and if it becomes used in that way I >> fear we will see mass un-subscription which will undermine our ability >> to communicate with each other. So I would ask that all subscribers >> refrain from using this list for any form of advertising. >> >> Thank you, >> >> || Brett McDowell, Executive Director, Kantara Initiative >> >> On Fri, Jan 29, 2010 at 10:59 AM, Thomas Hardjono<standards(a)hardjono.net> <standards(a)hardjono.net> wrote: >> >> >> My apologies for asking this trivial question, >> >> but is this Kantara mailing-list allowed to be >> >> used for "advertising" emails? >> >> >> >> Regards. >> >> >> >> /thomas/ >> >> >> >> >> >> >> >> __________________________________________ >> >> Thomas Hardjono >> >> MIT Kerberos Consortium >> >> Massachusetts Institute of Technology >> >> 77 Massachusetts Ave W92-152 >> >> Cambridge, MA 02139 >> >> >> >> email: hardjono[at]mit.edu >> >> web: http://www.kerberos.org >> >> mobile: +1 781-729-9559 >> >> desk: +1 617-715-2451 >> >> __________________________________________ >> >> >> >> >> >> >> >> From: community-bounces(a)kantarainitiative.org >> [mailto:community-bounces@kantarainitiative.org <community-bounces(a)kantarainitiative.org>] On Behalf Of Michael Duffy >> Sent: Friday, January 29, 2010 8:47 AM >> To: community(a)kantarainitiative.org >> Subject: [Kantara - Community] Institutional Web of Trust >> >> >> >> We believe we have THE solution that will realize the vision of the Kantara >> Initiative: Ensure secure, identity-based, online interactions while >> preventing misuse of personal information so that networks will become >> privacy protecting and more natively trustworthy environments. >> >> We realize that is a bold statement. We humbly ask the members of the >> Kantara Initiative to review our approach: >> >> Digital credentials on NFC enabled smart phones will soon transform the >> world of identity management. >> >> The Trust Nexus is a startup company located in Austin, TX. We hold >> intellectual property rights that will enable us to build the infrastructure >> for secure identity in the digital age. Whoever controls the infrastructure >> for secure identity will also play a leading role in the emerging world of >> m-Commerce. >> >> The basic question is, how can trust be established in the digital age? If >> you and I have never met and I come to your website or place of business, >> how can you be confident that I am who I say that I am? The Trust Nexus >> answers this basic question regarding the establishment of trust. >> >> A key component of our infrastructure will be an easy to use digital wallet >> where credentials can be securely provisioned and transactions occur >> smoothly. This digital wallet will be the cornerstone of NFC technologies on >> mobile devices and provide the interface for identity, marketing and >> financial services. Every aspect of digital life that depends on identity >> and transactions will flow through the digital wallet. >> >> The digital wallet on NFC enabled smart phones will be one of the most >> valuable assets in the digital age. The digital wallet and supporting >> infrastructure will be based on industry standards that will enable the >> mobile network operators (MNOs) to meter services that flow through their >> networks and participate in new marketing/advertising models. >> >> The identity infrastructure we have designed will eliminate the possibility >> of identity theft for all participants, protect consumers and financial >> institutions from fraudulent transactions, greatly reduce cyber-crime and >> solve many of the systemic problems of the current Public Key Infrastructure >> system, especially the problems of certificate revocation lists (CRLs) and >> on-line status checking. >> >> Our solution is simple, practical and transparent to the consumer. Consumer >> acceptance will be rapid and widespread. Our solution secures identity, >> protects individual privacy and prevents the establishment of monolithic >> government control. Under our system, the user is always in control of >> his/her credentials. >> >> The essence of our approach is very different from the "Big Brother" >> approach recently announced by India. Rather than creating a centralized >> directory of private information, we will create a central repository >> containing a collection of institutional decisions which will establish an >> Institutional Web of Trust. >> >> Compared to a decentralized web of trust which creates a web of individuals >> with, "the expectation that anyone receiving [a list of signatures] will >> trust at least one or two of the signatures", we will create a system where >> trusted institutions legitimize individual identity. Additionally, the >> Institutional Web of Trust established by The Trust Nexus will have >> centralized controller processes that rely greatly on self-management and >> automation resulting in great efficiencies. >> >> Digital wallets on NFC enabled smart phones will enable users to secure >> their private keys and control/present their digital credentials. Because a >> user's identity will be authenticated by the processes of The Trust Nexus >> (not a trust authority) there is no need for a trust authority to issue and >> vouch for public/private keys for individual users. It is only necessary >> that the public key be registered and the private key be secured. Users can >> self-issue their keys. >> >> The Trust Nexus does not secure identity by, "making personal data harder to >> steal". Rather, identity is secured by self-managing logical >> inconsistencies within the system, resolving identity conflicts and >> preventing fraudulent transactions. >> >> As Bruce Schneier, author and security guru, pointed out, "Proposed >> [identity theft] fixes tend to concentrate on the first issue--making >> personal data harder to steal--whereas the real problem is the second >> [preventing fraudulent transactions]. If we're ever going to manage the >> risks and effects of electronic impersonation [identity theft], we must >> concentrate on preventing and detecting fraudulent transactions." [Solving >> Identity Theft] >> >> In essence, there are a limited number of institutions worldwide (measured >> in thousands) that truly matter when it comes to legitimizing identity. >> Digital wallets on smart phones will enable the efficient association of >> unique public/private keys to a specific legal identity (legal name and >> legal address). If there is a non-unique association, an inconsistency >> arises in the system. If the association is unique and verified by one or >> more legitimate institutions an individual's identity is secure (as long as >> the private key which he/she controls is secure). >> >> In the process of adding a credential to a user's digital wallet, the >> provisioning institution (government agency, bank, university, etc.) will >> calculate a secure hash value (numerical representation) of the credential >> combined with information from the user's primary credential (legal >> identity). This hash value will be encrypted with the user's private key >> and then encrypted again with the provisioning institution's private key; >> this encrypted hash value will then be stored in The Trust Nexus Repository >> representing an institutional validation of the user's identity. >> >> This dual encryption establishes that the credential was associated with the >> user during the provisioning process rather than simply asserting the >> association by a reference from the repository. Also, There is no need to >> store any specific information (account number, balance, etc.) about user's >> account. The user is in complete control of the information he/she presents >> and his/her privacy is maintained. >> >> When a user presents a credential from his/her digital wallet a transaction >> ID will be sent from the authenticating system to the user's digital wallet, >> be encrypted with the user's private key and sent back to the authenticating >> system. The user can be authenticated by decrypting the transaction ID with >> the user's public key from The Trust Nexus Repository. The credential can be >> authenticated by calculating the hash value of the credential and then >> decrypting the hash value stored in The Trust Nexus Repository with the >> institution's public key and the user's public key. >> >> In a variation of this process the provisioning institution does not store >> the encrypted hash value in The Trust Nexus Repository; rather, the >> provisioning institution itself maintains a repository and a reference to >> the repository is authenticated by an entry contained within The Trust Nexus >> Repository (through the institution's primary credential). In this way an >> institution could federate the identity of it's users (or a subset of its >> users) simply by adding (or modifying) a credential to each of it's user's >> digital wallets and creating an institutional reference within The Trust >> Nexus Repository. >> >> As part of the federation process, cooperating institutions will most likely >> create standard authorization levels for various services and provision >> these levels as part of a user's credential. For example, a coalition of >> universities may have authorization levels for library services that will >> enable users to access any library within the coalition; government >> organizations may provision security levels within a user's credential that >> enable inter-agency access to resources; etc. >> >> There is significant debate regarding the effectiveness of biometrics in >> identity management. When a user is not present (authenticating over a >> network) there are fatal problems with biometric authentication. Most >> significantly, "The main security problem with biometrics is the inability >> to create a new secret. If you allow your fingerprint to be digitized and >> sent across a network or scanned by a compromised scanner, it can be stolen. >> Then someone has a digital copy of your fingerprint." >> >> Even if a method of biometric identification proved to be completely >> reliable, security issues would still remain. There would be opportunities >> to steal someone's biometric signature and forge their identity credentials, >> especially if there was a massive store of private personal data; one >> successful attack could essentially render the entire system ineffective. >> >> When a user is present bio-metric data can be an effective authenticator. >> It will be possible to store bio-metric data within a user's credential (not >> within a central repository) when the credential is created by the >> provisioning institution. When a user presents the credential verifying the >> biometric data in the credential against the individual in real time will >> provide enhanced security along with verifying the encrypted transaction >> code against the user's public key in The Trust Nexus Repository and >> verifying the encrypted hash code of the credential against The Trust Nexus >> Repository. >> >> While there are many types of biometric identifiers, one of the simplest and >> most usable is a photograph of the human face verified by a human being. >> Any credential in a user's digital wallet that includes a photograph >> (driver's license, passport, bank debit card, etc.) will be highly reliable >> when a user presents the credential in person. >> >> Why would a major institution (bank, university, corporation, government >> agency, etc.) utilize The Trust Nexus Repository instead of its own internal >> system? When there is no need for an external third party to rely on a >> user's credential an institution may very well utilize its own internal >> repository. In this same case, smaller institutions, for reasons of >> convenience and cost, might still utilize The Trust Nexus Repository. >> >> Whenever a third party (a party other than the provisioning institution) >> must relay on a user's credential, the key services The Trust Nexus >> Repository provides are assurance that the user is unique and trustworthy, >> assurance that the provisioning institution is unique and trustworthy and >> assurance that the credential is trustworthy. Also, The Trust Nexus >> Repository creates a "data synergy effect" which establishes an >> Institutional Web of Trust (when multiple institutions validate a unique >> user's identity the identity becomes more secure and trustworthy). >> >> If a unique user has digital credentials for a state driver's license, a >> passport, a bank debit card, a university ID, insurance cards, credit cards, >> etc., all independently validated by trustworthy institutions, that user's >> identity is secure and highly trustworthy. Similar to credit ratings, both >> individuals and institutions will have "trust ratings" within The Trust >> Nexus Repository. A centralized notification service will also be provided >> when credentials are lost or stolen. >> >> The uniqueness test for legal identities within The Trust Nexus Repository >> helps to secure identity and prevent identity theft. If there is a >> non-unique association, an inconsistency arises in the system. Also, easy >> access for online status checking establishes the currency of a user's >> credentials in case the user's digital wallet is lost or stolen. And most >> importantly, The Trust Nexus creates a "data synergy effect" which >> establishes an Institutional Web of Trust. >> >> Additionally, our system provides the "Holy Grail" for single sign on. All >> computers will soon have an interface (USB plugin or internal card) that >> will enable NFC interactions with mobile devices. The digital wallet on a >> user's cell phone will be provisioned with credentials containing specified >> authorizations different systems and services. Rather than logging into a >> directory or utilizing a complex federated identity process, a user will log >> onto his/her cell phone with a PIN and a voice authentication signature. The >> user (or the authenticating system) will then select the appropriate >> credential for the specified system or service with no need to enter another >> user name or password (the user's private key will be used to encrypt a >> transaction ID). This approach also solves the "Keys to the Kingdom" problem >> where a single sign on to a directory service opens access to all the user's >> systems and services. >> >> We are confident we have a transforming technology and a clear vision of the >> future. No one has found a conceptual flaw in the system. Existing >> providers of identity management services should not see The Trust Nexus as >> a competitor; rather, they should see us as an infrastructure provider >> (similar to the electric power grid that has hundreds of energy providers). >> >> Best regards, >> >> Michael Duffy >> CEO / CTO ~ The Trust Nexushttp://www.thetrustnexus.com >> >> >> >> >> >> >> _______________________________________________ >> Community mailing listCommunity@kantarainitiative.orghttp://kantarainitiative.org/mailman/listinfo/community >> >> >> _______________________________________________ >> Community mailing listCommunity@kantarainitiative.orghttp://kantarainitiative.org/mailman/listinfo/community >> _______________________________________________ >> Community mailing listCommunity@kantarainitiative.orghttp://kantarainitiative.org/mailman/listinfo/community >> >> >> _______________________________________________ >> Community mailing list >> Community(a)kantarainitiative.org >> http://kantarainitiative.org/mailman/listinfo/community >> >> > > > -- > Joni Brennan > IEEE-ISTO > Kantara Initiative > Program Director > voice:+1 732-226-4223 > email: joni @ ieee-isto.org > gtalk: jonibrennan > skype: upon request > > Join the conversation on the community@ list - > http://kantarainitiative.org/mailman/listinfo/community > > > _______________________________________________ > Community mailing list > Community(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/community > > > -- Joni Brennan IEEE-ISTO Kantara Initiative Program Director voice:+1 732-226-4223 email: joni @ ieee-isto.org gtalk: jonibrennan skype: upon request Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

1 0

Re: [Kantara - Community] Institutional Web of Trust
by Michael Duffy 30 Jan '10

30 Jan '10

We *strongly agree* with Hal's statement: "Trust should be available from the location where it naturally occurs, be it my municipality to validate my residency, my professional affiliations, my educational institutions, my family affiliations, my religious affiliations, etc." This is exactly what the *Institutional Web of Trust *does. When a credential is provisioned to a user's digital wallet by a state driver's license agency, bank, municipality, professional association, educational institution, Internet community (there will be a World of WarCraft credential for maintaining levels and attributes) or even a village group, *a record of that localized decision* is stored in the *Institutional Web of Trust Repository*. *The **Institutional Web of Trust Repository** provides a service which makes localized decisions verifiable. *If my local bank provisions a debit card to my digital wallet the *Institutional Web of Trust Repository *will make it possible for anyone to verify that credential. Among other positive results, this system will greatly reduce financial fraud. Note: The "repository" will be a world wide collection of inter-connected repositories, most of which will be run under government supervision by a coalition of mobile network operators. We *strongly disagree* with Hal's statement: "This requires a complex faceted framework through which such trusted claims can be transmitted and validated." When it comes to technology systems, simplicity and elegance are far better than, "a complex faceted framework". As an Internet based protocol OpenID was ambitious in its scope; however, it failed to create a coherent security model (http://www.slideshare.net/itickr/open-id-security-issues-2468599) it failed to gain consumer support (How many of the more than two hundred million Yahoo users who have access to OpenID are using OpenID?) and most significantly it failed to take into account that, *"Digital credentials on NFC enabled smart phones will soon transform the world of identity management."* * *Best regards, Michael Duffy CEO / CTO ~ The Trust Nexus http://www.thetrustnexus.com Hal Warren wrote: > In spite of the inappropriateness of Michael Duffy’s message, it > raises an important question regarding the militation of trust. The > answer impacts all of our futures. > > Trusted digital identity requires engineering and deserves careful > consensus. There is no current single solution that meets the need to > jack-up the bandwidth of human-to-human communication. This > engineering problem needs to be solved by engineers. The standard for > measurement should be simple: that which increases the reliable > throughput of human-to-human transactions wins. It is all about the > protocols and we need to be a bit “protocol agnostic” and solution > focused. > > The trust model presented by Michael falls far short. Trust should be > available from the location where it naturally occurs, be it my > municipality to validate my residency, my professional affiliations, > my educational institutions, my family affiliations, my religious > affiliations, etc. This requires a complex faceted framework through > which such trusted claims can be transmitted and validated. > > Where does the discussion on the architecture of the trust framework > take place? Who is there? > > Hal > > Hallie D. Warren, III > President > OpenID Society > 2020 Pennsylvania Ave., NW #364 > Washington, DC 20006 > phone: 202-640-1953 > email: hal(a)OpenIDsociety.org <mailto:hal@OpenIDsociety.org> > > > On Jan 29, 2010, at 2:13 PM, Joni Brennan wrote: > >> Thanks Mike, >> >> It seems like you have a product and you're telling us about it. We >> don't allow these types of messages here. So you have a few choices >> of how to interact. >> >> 1 - Parse your email down to a very brief idea and some questions >> that the group could respond to. (This mode is more aligned with >> the true nature of the list.) Again - as it reads now it's a product >> advertisement which is *prohibited. >> * >> 2 - Browse our groups list from the homepage here >> http://kantarainitiative.org <http://kantarainitiative.org/>. You >> may find a group you could join and then share your idea there. >> >> 3 - Start your own Work or Discussion Group to discuss your identity >> based solutions ideas. If you're interested in this path please ping >> me directly so we can discuss and I can learn more about your goals. >> From there I could help you to determine if this is appropriate work >> material for Kantara or not. >> >> Cheers - Joni >> >> On Fri, Jan 29, 2010 at 10:04 AM, Michael Duffy >> <thetrustnexus(a)austin.rr.com <mailto:thetrustnexus@austin.rr.com>> wrote: >> >> My apologies. >> >> A member of your group actually suggested we post to the >> community list. >> >> Our goal was not to promote the company but to discuss the ideas >> related to an Institutional Web of Trust with the leading experts >> in the field of identity. >> >> Is there another existing list that would better suit this purpose? >> >> If not, perhaps Kantara could create such a list (e.g., >> ideas(a)kantarainitiative.org <mailto:ideas@kantarainitiative.org>). >> >> Mike >> >> >> >> Roger Sullivan wrote: >>> Let me echo Brett's sentiments. >>> >>> None of Kantara's lists are to be used for promotion of oneself or one's company. >>> >>> Please refrain from doing that. >>> >>> Roger Sullivan >>> President, Kantara Initiative >>> >>> >>> -----Original Message----- >>> From: Brett McDowell [mailto:email@brettmcdowell.com] >>> Sent: Friday, January 29, 2010 11:04 AM >>> To: Thomas Hardjono >>> Cc: community(a)kantarainitiative.org <mailto:community@kantarainitiative.org> >>> Subject: Re: [Kantara - Community] Institutional Web of Trust >>> >>> That is certainly not its intent and if it becomes used in that way I >>> fear we will see mass un-subscription which will undermine our ability >>> to communicate with each other. So I would ask that all subscribers >>> refrain from using this list for any form of advertising. >>> >>> Thank you, >>> >>> || Brett McDowell, Executive Director, Kantara Initiative >>> >>> On Fri, Jan 29, 2010 at 10:59 AM, Thomas Hardjono >>> <standards(a)hardjono.net> <mailto:standards@hardjono.net> wrote: >>> >>>> My apologies for asking this trivial question, >>>> >>>> but is this Kantara mailing-list allowed to be >>>> >>>> used for "advertising" emails? >>>> >>>> >>>> >>>> Regards. >>>> >>>> >>>> >>>> /thomas/ >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> __________________________________________ >>>> >>>> Thomas Hardjono >>>> >>>> MIT Kerberos Consortium >>>> >>>> Massachusetts Institute of Technology >>>> >>>> 77 Massachusetts Ave W92-152 >>>> >>>> Cambridge, MA 02139 >>>> >>>> >>>> >>>> email: hardjono[at]mit.edu <http://mit.edu/> >>>> >>>> web: http://www.kerberos.org <http://www.kerberos.org/> >>>> >>>> mobile: +1 781-729-9559 >>>> >>>> desk: +1 617-715-2451 >>>> >>>> __________________________________________ >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> From: community-bounces(a)kantarainitiative.org <mailto:community-bounces@kantarainitiative.org> >>>> [mailto:community-bounces@kantarainitiative.org] On Behalf Of Michael Duffy >>>> Sent: Friday, January 29, 2010 8:47 AM >>>> To: community(a)kantarainitiative.org <mailto:community@kantarainitiative.org> >>>> Subject: [Kantara - Community] Institutional Web of Trust >>>> >>>> >>>> >>>> We believe we have THE solution that will realize the vision of the Kantara >>>> Initiative: Ensure secure, identity-based, online interactions while >>>> preventing misuse of personal information so that networks will become >>>> privacy protecting and more natively trustworthy environments. >>>> >>>> We realize that is a bold statement. We humbly ask the members of the >>>> Kantara Initiative to review our approach: >>>> >>>> Digital credentials on NFC enabled smart phones will soon transform the >>>> world of identity management. >>>> >>>> The Trust Nexus is a startup company located in Austin, TX. We hold >>>> intellectual property rights that will enable us to build the infrastructure >>>> for secure identity in the digital age. Whoever controls the infrastructure >>>> for secure identity will also play a leading role in the emerging world of >>>> m-Commerce. >>>> >>>> The basic question is, how can trust be established in the digital age? If >>>> you and I have never met and I come to your website or place of business, >>>> how can you be confident that I am who I say that I am? The Trust Nexus >>>> answers this basic question regarding the establishment of trust. >>>> >>>> A key component of our infrastructure will be an easy to use digital wallet >>>> where credentials can be securely provisioned and transactions occur >>>> smoothly. This digital wallet will be the cornerstone of NFC technologies on >>>> mobile devices and provide the interface for identity, marketing and >>>> financial services. Every aspect of digital life that depends on identity >>>> and transactions will flow through the digital wallet. >>>> >>>> The digital wallet on NFC enabled smart phones will be one of the most >>>> valuable assets in the digital age. The digital wallet and supporting >>>> infrastructure will be based on industry standards that will enable the >>>> mobile network operators (MNOs) to meter services that flow through their >>>> networks and participate in new marketing/advertising models. >>>> >>>> The identity infrastructure we have designed will eliminate the possibility >>>> of identity theft for all participants, protect consumers and financial >>>> institutions from fraudulent transactions, greatly reduce cyber-crime and >>>> solve many of the systemic problems of the current Public Key Infrastructure >>>> system, especially the problems of certificate revocation lists (CRLs) and >>>> on-line status checking. >>>> >>>> Our solution is simple, practical and transparent to the consumer. Consumer >>>> acceptance will be rapid and widespread. Our solution secures identity, >>>> protects individual privacy and prevents the establishment of monolithic >>>> government control. Under our system, the user is always in control of >>>> his/her credentials. >>>> >>>> The essence of our approach is very different from the "Big Brother" >>>> approach recently announced by India. Rather than creating a centralized >>>> directory of private information, we will create a central repository >>>> containing a collection of institutional decisions which will establish an >>>> Institutional Web of Trust. >>>> >>>> Compared to a decentralized web of trust which creates a web of individuals >>>> with, "the expectation that anyone receiving [a list of signatures] will >>>> trust at least one or two of the signatures", we will create a system where >>>> trusted institutions legitimize individual identity. Additionally, the >>>> Institutional Web of Trust established by The Trust Nexus will have >>>> centralized controller processes that rely greatly on self-management and >>>> automation resulting in great efficiencies. >>>> >>>> Digital wallets on NFC enabled smart phones will enable users to secure >>>> their private keys and control/present their digital credentials. Because a >>>> user's identity will be authenticated by the processes of The Trust Nexus >>>> (not a trust authority) there is no need for a trust authority to issue and >>>> vouch for public/private keys for individual users. It is only necessary >>>> that the public key be registered and the private key be secured. Users can >>>> self-issue their keys. >>>> >>>> The Trust Nexus does not secure identity by, "making personal data harder to >>>> steal". Rather, identity is secured by self-managing logical >>>> inconsistencies within the system, resolving identity conflicts and >>>> preventing fraudulent transactions. >>>> >>>> As Bruce Schneier, author and security guru, pointed out, "Proposed >>>> [identity theft] fixes tend to concentrate on the first issue--making >>>> personal data harder to steal--whereas the real problem is the second >>>> [preventing fraudulent transactions]. If we're ever going to manage the >>>> risks and effects of electronic impersonation [identity theft], we must >>>> concentrate on preventing and detecting fraudulent transactions." [Solving >>>> Identity Theft] >>>> >>>> In essence, there are a limited number of institutions worldwide (measured >>>> in thousands) that truly matter when it comes to legitimizing identity. >>>> Digital wallets on smart phones will enable the efficient association of >>>> unique public/private keys to a specific legal identity (legal name and >>>> legal address). If there is a non-unique association, an inconsistency >>>> arises in the system. If the association is unique and verified by one or >>>> more legitimate institutions an individual's identity is secure (as long as >>>> the private key which he/she controls is secure). >>>> >>>> In the process of adding a credential to a user's digital wallet, the >>>> provisioning institution (government agency, bank, university, etc.) will >>>> calculate a secure hash value (numerical representation) of the credential >>>> combined with information from the user's primary credential (legal >>>> identity). This hash value will be encrypted with the user's private key >>>> and then encrypted again with the provisioning institution's private key; >>>> this encrypted hash value will then be stored in The Trust Nexus Repository >>>> representing an institutional validation of the user's identity. >>>> >>>> This dual encryption establishes that the credential was associated with the >>>> user during the provisioning process rather than simply asserting the >>>> association by a reference from the repository. Also, There is no need to >>>> store any specific information (account number, balance, etc.) about user's >>>> account. The user is in complete control of the information he/she presents >>>> and his/her privacy is maintained. >>>> >>>> When a user presents a credential from his/her digital wallet a transaction >>>> ID will be sent from the authenticating system to the user's digital wallet, >>>> be encrypted with the user's private key and sent back to the authenticating >>>> system. The user can be authenticated by decrypting the transaction ID with >>>> the user's public key from The Trust Nexus Repository. The credential can be >>>> authenticated by calculating the hash value of the credential and then >>>> decrypting the hash value stored in The Trust Nexus Repository with the >>>> institution's public key and the user's public key. >>>> >>>> In a variation of this process the provisioning institution does not store >>>> the encrypted hash value in The Trust Nexus Repository; rather, the >>>> provisioning institution itself maintains a repository and a reference to >>>> the repository is authenticated by an entry contained within The Trust Nexus >>>> Repository (through the institution's primary credential). In this way an >>>> institution could federate the identity of it's users (or a subset of its >>>> users) simply by adding (or modifying) a credential to each of it's user's >>>> digital wallets and creating an institutional reference within The Trust >>>> Nexus Repository. >>>> >>>> As part of the federation process, cooperating institutions will most likely >>>> create standard authorization levels for various services and provision >>>> these levels as part of a user's credential. For example, a coalition of >>>> universities may have authorization levels for library services that will >>>> enable users to access any library within the coalition; government >>>> organizations may provision security levels within a user's credential that >>>> enable inter-agency access to resources; etc. >>>> >>>> There is significant debate regarding the effectiveness of biometrics in >>>> identity management. When a user is not present (authenticating over a >>>> network) there are fatal problems with biometric authentication. Most >>>> significantly, "The main security problem with biometrics is the inability >>>> to create a new secret. If you allow your fingerprint to be digitized and >>>> sent across a network or scanned by a compromised scanner, it can be stolen. >>>> Then someone has a digital copy of your fingerprint." >>>> >>>> Even if a method of biometric identification proved to be completely >>>> reliable, security issues would still remain. There would be opportunities >>>> to steal someone's biometric signature and forge their identity credentials, >>>> especially if there was a massive store of private personal data; one >>>> successful attack could essentially render the entire system ineffective. >>>> >>>> When a user is present bio-metric data can be an effective authenticator. >>>> It will be possible to store bio-metric data within a user's credential (not >>>> within a central repository) when the credential is created by the >>>> provisioning institution. When a user presents the credential verifying the >>>> biometric data in the credential against the individual in real time will >>>> provide enhanced security along with verifying the encrypted transaction >>>> code against the user's public key in The Trust Nexus Repository and >>>> verifying the encrypted hash code of the credential against The Trust Nexus >>>> Repository. >>>> >>>> While there are many types of biometric identifiers, one of the simplest and >>>> most usable is a photograph of the human face verified by a human being. >>>> Any credential in a user's digital wallet that includes a photograph >>>> (driver's license, passport, bank debit card, etc.) will be highly reliable >>>> when a user presents the credential in person. >>>> >>>> Why would a major institution (bank, university, corporation, government >>>> agency, etc.) utilize The Trust Nexus Repository instead of its own internal >>>> system? When there is no need for an external third party to rely on a >>>> user's credential an institution may very well utilize its own internal >>>> repository. In this same case, smaller institutions, for reasons of >>>> convenience and cost, might still utilize The Trust Nexus Repository. >>>> >>>> Whenever a third party (a party other than the provisioning institution) >>>> must relay on a user's credential, the key services The Trust Nexus >>>> Repository provides are assurance that the user is unique and trustworthy, >>>> assurance that the provisioning institution is unique and trustworthy and >>>> assurance that the credential is trustworthy. Also, The Trust Nexus >>>> Repository creates a "data synergy effect" which establishes an >>>> Institutional Web of Trust (when multiple institutions validate a unique >>>> user's identity the identity becomes more secure and trustworthy). >>>> >>>> If a unique user has digital credentials for a state driver's license, a >>>> passport, a bank debit card, a university ID, insurance cards, credit cards, >>>> etc., all independently validated by trustworthy institutions, that user's >>>> identity is secure and highly trustworthy. Similar to credit ratings, both >>>> individuals and institutions will have "trust ratings" within The Trust >>>> Nexus Repository. A centralized notification service will also be provided >>>> when credentials are lost or stolen. >>>> >>>> The uniqueness test for legal identities within The Trust Nexus Repository >>>> helps to secure identity and prevent identity theft. If there is a >>>> non-unique association, an inconsistency arises in the system. Also, easy >>>> access for online status checking establishes the currency of a user's >>>> credentials in case the user's digital wallet is lost or stolen. And most >>>> importantly, The Trust Nexus creates a "data synergy effect" which >>>> establishes an Institutional Web of Trust. >>>> >>>> Additionally, our system provides the "Holy Grail" for single sign on. All >>>> computers will soon have an interface (USB plugin or internal card) that >>>> will enable NFC interactions with mobile devices. The digital wallet on a >>>> user's cell phone will be provisioned with credentials containing specified >>>> authorizations different systems and services. Rather than logging into a >>>> directory or utilizing a complex federated identity process, a user will log >>>> onto his/her cell phone with a PIN and a voice authentication signature. The >>>> user (or the authenticating system) will then select the appropriate >>>> credential for the specified system or service with no need to enter another >>>> user name or password (the user's private key will be used to encrypt a >>>> transaction ID). This approach also solves the "Keys to the Kingdom" problem >>>> where a single sign on to a directory service opens access to all the user's >>>> systems and services. >>>> >>>> We are confident we have a transforming technology and a clear vision of the >>>> future. No one has found a conceptual flaw in the system. Existing >>>> providers of identity management services should not see The Trust Nexus as >>>> a competitor; rather, they should see us as an infrastructure provider >>>> (similar to the electric power grid that has hundreds of energy providers). >>>> >>>> Best regards, >>>> >>>> Michael Duffy >>>> CEO / CTO ~ The Trust Nexus >>>> http://www.thetrustnexus.com <http://www.thetrustnexus.com/> >>>> >>>> >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> Community mailing list >>>> Community(a)kantarainitiative.org <mailto:Community@kantarainitiative.org> >>>> http://kantarainitiative.org/mailman/listinfo/community >>>> >>>> >>>> >>> _______________________________________________ >>> Community mailing list >>> Community(a)kantarainitiative.org <mailto:Community@kantarainitiative.org> >>> http://kantarainitiative.org/mailman/listinfo/community >>> _______________________________________________ >>> Community mailing list >>> Community(a)kantarainitiative.org <mailto:Community@kantarainitiative.org> >>> http://kantarainitiative.org/mailman/listinfo/community >>> >>> >> >> _______________________________________________ >> Community mailing list >> Community(a)kantarainitiative.org >> <mailto:Community@kantarainitiative.org> >> http://kantarainitiative.org/mailman/listinfo/community >> >> >> >> >> -- >> Joni Brennan >> IEEE-ISTO >> Kantara Initiative >> Program Director >> voice:+1 732-226-4223 >> email: joni @ ieee-isto.org <http://ieee-isto.org/> >> gtalk: jonibrennan >> skype: upon request >> >> Join the conversation on the community@ list - >> http://kantarainitiative.org/mailman/listinfo/community >> >> >> _______________________________________________ >> Community mailing list >> Community(a)kantarainitiative.org <mailto:Community@kantarainitiative.org> >> http://kantarainitiative.org/mailman/listinfo/community >

1 0

Brett McDowell
by Roger Sullivan 28 Jan '10

28 Jan '10

Colleagues, It is with very mixed emotions that I inform you that Brett McDowell is resigning as Executive Director of Kantara Initiative as of February 10th to pursue another (great) employment opportunity. We are truly sad to see him go with all that he has contributed to both Liberty Alliance and Kantara Initiative over these past many years. Unceasingly positive, unfailingly energetic, and a walking encyclopedia about the Identity space, he has made our lives so much better for having walked (raced) with us on this journey. But, we are genuinely happy for him in this new opportunity and are confident that Brett will do very well indeed. Brett, on behalf of all of your friends at Kantara Initiative and beyond, congratulations and good fortune with your new adventure and thank you most sincerely for what you've done for us. Needless to say, we are looking for a new Executive Director for Kantara Initiative. The Board of Trustees has established a search committee to fill the position. If you or someone you know might be interested, please inquire at: HYPERLINK "mailto:ksearch@elists.isoc.org"ksearch(a)elists.isoc.org Best regards, -- HYPERLINK "http://www.oracle.com/" \nOracle Roger Sullivan | Vice President Phone: +1 781 744 0767 | Mobile: +1 978 828 3520 Oracle Identity Management 10 Van de Graaff Drive | Burlington, MA 01803 HYPERLINK "http://www.oracle.com/commitment" \nGreen Oracle Oracle is committed to developing practices and products that help protect the environment

2 1

Kantara Initiative Conference - March 9-11, 2010 in Oregon, USA
by Dervla O'Reilly 25 Jan '10

25 Jan '10

We look forward to you joining us for the second Kantara Initiative Conference, Tuesday-Thursday, March 9-11. Thanks again to Intel Corporation for hosting at their Hillsboro, Oregon campus. Early-bird registration is $195USD until Feb. 12, then $250 thereafter until March 9. Event information is available at our conference page - review the agenda, maps and nearby hotel details. We have a great rate per night for $105USD at the SpringHill Suites by Marriott - review the discount code details at our conference page We invite you to sign up for our open-for-all dinner is Wednesday, March 10, 6:45-8:15pm at Portland's Oba Restaurant. The price for the 3-course dinner including one beverage is $45USD. Please let me know if any questions regarding the Conference. Cheers, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative.org http://www.kantarainitiative.org Register for Kantara's annual workshop March 1, 2010 at the RSA Conference free of charge - http://bit.ly/8rPWVM

1 0

UMA Webinar - Making the world safe for User-Managed Access, Jan 29, 8-9:30am PST
by Dervla O'Reilly 22 Jan '10

22 Jan '10

We invite you to join us for a UMA Webinar - Making the world safe for User-Managed Access on Jan. 29, 8-9:30am PST. To benefit from the increasing number of services accessible over the Web, we're forced to "hand over the data" -- data that's sensitive, valuable, and personal -- and we end up paying a price in both privacy and convenience. The new User-Managed Access web protocol promises to help web users share their data more selectively using a central digital footprint dashboard, while helping websites get access to fresher and better-quality data when they need it. This session will review UMA benefits, progress to date, and next steps. Register here: https://ieee-isto.webex.com/ieee-isto/j.php?ED=118302377&RG=1&UID=105807765… Note that a maximum of 25 participants is allowed for this webinar, therefore a first-come, first-serve basis for registration. Please feel free to invite colleagues and friends. If questions, please contact dervla (at) kantarainitiative (dot) org ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative.org http://www.kantarainitiative.org Register for Kantara's annual workshop March 1, 2010 at the RSA Conference free of charge - http://bit.ly/8rPWVM

1 0

Eve Maler presenting User-Managed Access update to LC
by J. Trent Adams 18 Jan '10

18 Jan '10

All - For those interested in the work taking place in the User-Managed Access (UMA) Work Group [1], Eve Maler will be presenting an update to the Leadership Council this week: * Date: Wednesday, January 20, 2010 * Time: 4pm PST | 7pm EST * Teleconference Options: o Skype: +9900827043671716 o US Dial-In: +1-201-793-9022 | Room Code: 3671716 This update will take place during the last 30 minutes of the regular LC teleconference (which starts one hour earlier at 3pm PST). We hope to be able to record this update and make it available via the Identity Community Update DG as an MP3, in case you're unable to attend. This is a great opportunity for you to catch up with the UMA work in case you've been unable to keep up with their fast pace. See you then, Trent [1] http://kantarainitiative.org/confluence/display/uma/ -- J. Trent Adams =jtrentadams Outreach Specialist, Trust & Identity Internet Society http://www.isoc.org e) adams(a)isoc.org o) 703-439-2149

2 1

Concordia DG Surveys on Assurance & Authorization
by Paul Madsen 15 Jan '10

15 Jan '10

All, the Concordia DG has created 2 short (~ 10 questions) surveys around assurance & authorization issues. Authorization is one of the hottest topics in computing security today. Great strides have been made in the area of authentication, but the ultimate purpose of authentication is to provide input to authorization decisions. Security product vendors are offering packages that can serve as centralized authorization systems, or Policy Decision Points (PDPs) and Policy Enforcement Points (PEPs) in XACML parlance. These products generally offer integration kits for various applications and platforms. Many organizations have or are beginning to architect XACML-based, logically-centralized authorization systems. The purpose of this survey is to generate data about both the business and technical drivers for authorization in the enterprise today. http://www.surveymonkey.com/s/authz_survey More and more, industries & governments are choosing a 'Level of Assurance' (LOA) model as a means to provide federation partners appropriate confidence in identity data received from external 3rd parties. But is the LOA model the only possible mechanism? This survey is intended to tease out real requirements of federated participants - perhaps answering this question. http://www.surveymonkey.com/s/outsourced_id_data Please consider taking the surveys yourself, and/or spread the word to partners, colleagues, etc not involved in KI. Regards Paul Madsen & Tatsuki Sakushima Co-Chairs - Concordia DG

1 0

Fwd: OIF RFI Package
by Brett McDowell 14 Jan '10

14 Jan '10

I'd like to publicly thank Don Thibeau, Drummond Reed and the members of the OIF JSC for including Kantara Initiative in their outreach. Don has already made the attached RFI package public over on the OIDF mailing lists but since I've started getting questions from members of Kantara Initiative asking to see the RFI package I realized I need to explicitly share it with our community since many of you are not subscribed to OIDF lists. As I reported to Don, my next step is to discuss this with the Assurance Review Board, the oversight body for our Identity Assurance Accreditation and Certification Program. If you have ideas, comments, recommendations, questions, or concerns please send them to me directly, or to this public mailing list, or to the ARB(a)kantarainitiative.org mailing list (depending on the level of disclosure you are comfortable with) -- and, yes ARB@ has SPAM controls so your message will go in queue momentarily, but it will be pushed through quickly. Note that due to the nature of the ARB being the deliberative body deciding who passes or fails accreditation and certification applications, they operate under terms of confidentiality and they will honor any request you have to keep your comments confidential if you call that out explicitly in your email. As a reminder, the ARB is comprised of representatives from Aetna, BT, GSA, KPMG, and SUNET. Thank you in advance for contributing to the process. Brett McDowell | http://info.brettmcdowell.com | http://KantaraInitiative.org Begin forwarded message: > From: "Don Thibeau $OIDF ED$" <don(a)oidf.org> > Date: November 22, 2009 7:05:44 PM EST > To: "'Brett McDowell'" <email(a)brettmcdowell.com> > Subject: OIF RFI Package > > Dear Brett: > Thanks for your interest in working with the OpenID and Information Card Foundations. Here is the latest chapter in our conversations that began in last spring. > Since March of this year, the OpenID and the Information Card Foundations have collaborated on responding to US Government request to participate in its “Open Identity for Open Government Initiative.” Together with Kantara and InCommon, we have contributed to the development of the U.S. General Services Administration (GSA) Identity, Credential, and Access Management (ICAM) identity standards and certification requirements. The impact of our work with the government can be seen in the first set of deliverables at www.IDmanagement.gov published in September. As you know, ICAM’s Trust Framework Provider Adoption Process (TFPAP) established a new way to enable citizens to easily and safely engage with government websites, and ICAM’s Identity Scheme Adoption Process (ISAP) laid the techical foundation for government-approved profiles of open identity specifications. ICAM’s profiles for OpenID 2.0 and IMI 1.0 Information Cards profiles we published shortly afterwards. > The OIDF and ICF have been collaborating to develop an open approach to trust frameworks that will meet the needs of our respective communities. Two weeks ago at the OpenID Summit and again in three different sessions at the Internet Identity Workshop (IIW), ICF Executive Director Drummond Reed and I presented this approach to the community at large and asked for feedback, challenges, and contributions. These sessions produced a wealth of invaluable input and a strong concensus that OIDF and ICF should proceed with this approach, which the community dubbed the Open Identity Framework (OIF), as quickly as possible. > Immediately after IIW, the Boards of Directors of OIDF and ICF agreed to form a joint steering committee (JSC) to refine strategic goals, investigate operational alternatives, and guide deployment planning for the OIF. The JSC is composed of four representatives of companies that are members of both foundations and four community representatives, including the Chairs of both foundation boards. > The JSC started by carefully considering the goals and objectives of the Open Identity Framework (OIF) and weighing the tradeoffs between what aspects should be outsourced vs. what aspects were strategic and thus should remain “in-sourced”. The JSC then asked Drummond and I to prepare the attached Request For Information (RFI) to initiate discussions with prospective outsourcing partners. Because the JSC wants to make recommendations to the OIDF and ICF boards and set a course of action by year’s end, it wants to fast-track this RFI review process and expects a report in 30 days. > The attached RFI has two objectives: 1) to solicit your informed collaboration and feedback about how best to achieve the objectives of the OIF, and 2) to identify the potential outsourcing partners with whom we should proceed with more detailed negotiations. We have attached supplemental material that fully describes our approach to the OIF with the hope that it will be of benefit to your plans regardless of whether you decide to respond as a potential outsourcing partner. > The JSC partner selection criteria focuses on cost efficiencies, execution synergies, and compatible business models. You are welcome to provide general feedback as well as respond specifically to any or all of the activities described in the Outsourced Program Elements section. For needs in that section where you feel your organization would be a good outsourcing fit, please be specific as to how you would fulfill those needs. Please include pricing estimates broken out for each outsourced program element—the more detailed the better. > Please note that the OIDF and ICF reserve the right to change the timeline or other portions of this RFI at any time, as well as to cancel or reissue the RFI at any time without obligation or liability. Also, please designate any information contained in your response that is proprietary or confidential. While we will we will treat the material provided as business confidential, please note that both the OIDF and ICF operate in a transparent, open source business environment, so some commentary, discussion, or speculation may occur on mailing groups, blog posts etc. > Please email your response as a word document attachment to don(a)oidf.org before midnight EDT on 12/01/09. Of course, feel free to contact either Drummond or myself with questions, and we would be happy to arrange telecons or in-person meeting to discuss it as time permits. > Thank you again for your interest. > Don Thibeau > don(a)OIDF.org > Executive Director > The OpenID Foundation > http://openid.net

2 6

Kantara Initiative Workshop at RSA Conference, March 1 2010
by Dervla O'Reilly 14 Jan '10

14 Jan '10

We invite you to join us for our annual workshop at the RSA Conference March 1, 8am-5pm. This free workshop will showcase deployers and providers showing why distributed applications are poised for Internet- scale adoption. Gain state-of-identity insight through a series of presentations, panels and demonstrations of common Cloud/SaaS scenarios from diverse market leaders. We encourage our Bay area community to join us at the Moscone Center, San Francisco. You can review the agenda here: http://kantarainitiative.org/confluence/display/GI/Kantara+Initiative+Works… Sign up for our free workshop here: http://www.emc.com/microsites/rsa-conference/2010/usa/registration-and-rate… . Please use the code: 1310KANEXPO for the Expo only pass and select Kantara Initiative from the 'Registration Package' page. This pass only allows access to Kantara Initiative workshop on March 1. Read details about the Conference events March 1-5 here: http://www.rsaconference.com/2010/usa/discount/prospects.htm?gclid=CLaTn4-n… We look forward to seeing you there. Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative.org http://www.kantarainitiative.org Read the current Kantara Initiative newsletter - http://bit.ly/4IxsnK

1 0