- Community - mailman.kantarainitiative.org

Some Interesting Tweets re: MITREid, IDESG, NSTIC, ID.me, and Kantara
by Joni Brennan 06 Aug '13

06 Aug '13

Hello - We realize that some people tweet, others email, while others "do social" (FB and LinkedIn etc). We wanted to capture a couple of interesting tweets as of late for those of you who may not use twitter regularly. Please feel free to share the items below with your networks and colleagues. 1. #MITREid is the latest #Kantara CSP Approved at LoA1 - Congrats to MITREid!! http://bit.ly/ki-csp-mitreid 2. @NSTICNPO blog calls out #Kantara Initiative recognizing recent trends in verifying ID Ecosystem models. Read More http://bit.ly/17p29WH 3. Thanks to #Kantara member @TroopID / @IDme on @FedNewsRadio talking #Kantara, #nstic , and #idesg >> listen http://bit.ly/17Yvlpz Best Regards, Joni Brennan

1 0

Of Possible Interest: Kantara participates in CA Luminaries Series - 5 minute high impact tech talks
by Joni Brennan 02 Aug '13

02 Aug '13

Dear Kantara Initiative community, Kantara had the pleasure of taking part in a series of 5 minute technology talks hosted by CA as part of their Luminaries program. If you've not heard about it and would like to browse the talks please visit: http://www.ca.com/us/content/page/Innovation-Imperative/Luminaries-Take-5.a… The speakers participating were excellent and we certainly enjoyed the opportunity to participate! The talk we gave for Katnara was focused on healthcare reform and why Federated Identity, Security, and Privacy tech and policy adoption are going to move at lightening speed in the time ahead. Thanks to CA for the opportunity to share our experiences in Federated IdM regarding healthcare! Best Regards, Joni

2 1

Crowd Tilt - UMA and OpenID Connect plug-ins for Apache
by Joni Brennan 30 Jul '13

30 Jul '13

Of Kantara Community Interest... If you've been contributing or even tracking the development of User Managed Access in the Kantara UMA Group then you already know the momentum of UMA and the unique place that it holds for usability of OAuth 2, OpenID Connect and beyond. Recent developments have been swelling around the fostering of a web server plug in approach to drive adoption, use case realization, and more. I won't go on to much further because our friends at Gluu have done a great job summarizing the current opportunities. Even better - they've kicked off a crowd funding campaign to support the ability to put concrete action in motion! Learn about how you can join the effort from the details and link below. Finally if you have a Kantara Initiative touching effort you'd like us to consider socializing via our channels please don't hesitate to reach to me. We're love to support the efforts of our members and community! ----- From: http://www.gluu.co/.grrn ----- It would be so awesome if we (meaning the citizens of the Internet) had plugins for popular web servers to make it easier to use OAuth2 to authenticate a person, and to authorize them to access certain URLs. The web server plugin is a tried and true approach to protecting web resources (both files and APIs...) without requiring a Web programmer to know much about complex authentication and authorization protocols. Shibboleth, the most widely adopted open source SAML platform, uses this approach for its Shibboleth SP software. According to the Netcraft survey in April 2013, Apache HTTPD had 54% of the web server market, approximately 341M servers. Take out Google’s 23M servers, and the number is even higher. Its a good place to start. To date, open source web server plugins have delivered on authentication, not authorization. Large companies can afford to buy expensive software for authorization from companies like CA, Oracle and IBM. These monolithic enterprise software vendors write web server plugins that used proprietary protocols to register and communicate with a central policy server. However, because of their price, most web developers just do without central authorization. Thanks to the hard work of the UMA community, a profile of OAuth2 has been defined to accomplish authorization. OX has implemented this standard, enabling organizations to define their access policies using Java, Python, or web services. Gluu has agreed to implement an open source java client (“OXD”) that can be deployed locally on the web server to handle the OAuth2 messaging. The only piece that is missing is the plugin to the web server. This project will actually deliver two OAuth2 plugins for Apache HTTPD server: (1) a plugin for OpenID Connect to handle the OAuth2 authentication (2) a plugin for for UMA, to handle the OAuth2 authorization. The design for the UMA plugin is documented on the OX Project wiki: http://www.gluu.co/.glcw Gluu has identified a resource to work on the project. In his cover letter, he wrote : “I have been working on writing apache modules for a reverse proxy product to provide single sign functionality. I've worked on projects to develop 10 custom modules to address the business needs of our product. I even have working knowledge on open source apache modules such as mod_proxy, mod_proxy_http, mod_cache, mod_disk_cache etc and having thorough understanding on apr library , pools.." This is a new funding model for us. We’re hoping that companies and integrators who want to see more options for open source authentication and authorization will support the effort. The intent is to donate the code produced by this effort to a non-profit, such as the Kantara Foundation, who could help develop a self-sustaining business model to fund future upgrade and fixes for the Apache plugin, and to create plugins for other web servers like IIS, nginx, or even popular CMS / CRM platforms such as WordPress and SugarCRM. In this way, this project could kickstart a new development ecosystem which will ultimately make the Internet a safer place for everyone.

1 0

Fwd: [WG-eGov] ICAM Job Opportunities at SSA
by Joni Brennan 29 Jul '13

29 Jul '13

Dear Community, The enclosed opportunity that may be of interest. Best Regards, Joni Brennan Kantara Initiative | Executive Director Building Trusted Identity Ecosystems - It takes a village! Slides: http://bit.ly/ki-june-2013 ---------- Forwarded message ---------- Date: Wed, Jul 24, 2013 at 5:28 AM Subject: [WG-eGov] ICAM Job Opportunities at SSA *Kantara Initiative Members**, please share with your smart contacts interested in serving their fellow citizens: * The Social Security Administration, located in Baltimore, is looking to fill a few information security positions fairly soon. We have direct-hire authority; please send your resume to SSA (i.e., these jobs are not posted on USAJOBS). We are looking to hire at the GS-9, GS-11, GS-12 or GS-13 levels depending on experience and education; in particular, SSA is looking for the following skills sets for various vacancies: *Positions in Identity, Credential, and Access Management (ICAM):* - Individuals with experience in automating ICAM processes. - Workflows in Identity Management platforms - JAVA developers with experience developing secure applications - NET developers with experience developing secure applications - Individuals that have taken paper-based information security processes and converted to electronic applications. *Positions in Policy and in Technical Operations:* - Individuals with strong analytical skills to work in a team environment while assisting agency stakeholders with the identification and mitigation of information security weaknesses. - Individuals with strong technical writing skills to work in a team environment on developing information security awareness training materials and procedures with an agency-wide focus. - Individuals with experience researching and developing new or improved information security policies and procedures. - Individuals with experience conveying information security policies and procedures clearly and concisely in written and verbal format. - Individuals with experience in developing information security procedures and systems for establishing and assessing the effectiveness of administrative controls designed to prevent waste, loss or unauthorized use. *Positions in fraud prevention:* - Individuals with experience in examining fraud in the public or private sector. - Individuals with experience conducting fraud detection activities such as following data trails and reviewing digital evidence. - Individuals with experience conducting computer forensics analysis in support of fraud examination - Individuals with experience effectively communicating forensics and fraud findings in a written and verbal manner. For those at the entry level, we have a career ladder position, which comes with 2-years of in-house training to help new cyber security professionals get on-the-job training & mentoring as they "break into" the field as a career. I’ve attached some background information about SSA and our office. If interested, please have candidates send their application to Marci Elkin, (Office of Information Security) at *marci.elkin(a)ssa.gov*<marci.elkin(a)ssa.gov?subject=ICAM%20Job%20Opportunities>for immediate consideration. Sincerely, Jack Leipold -- Director, Division of Identity, Credential, and Access Management _______________________________________________ WG-eGov mailing list WG-eGov(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-egov

1 0

Server maintenance on July 25/26, 2013
by Oliver Maerz 18 Jul '13

18 Jul '13

In an effort to provide reliable Kantara Initiative web based services our servers will be upgraded on July 25 and 26, 2013. During the maintenance the websites will be temporarily offline. Please let me know if you have any questions regarding the upgrade/maintenance. Thanks, Oliver -- *Oliver Maerz* External Consultant *Kantara Initiative* +1 (503) 468-4188 oliver (at) kantarainitiative.org http://www.kantarainitiative.org The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. No representation is made on its accuracy or completeness of the information contained in this electronic message. Certain assumptions may have been made in the preparation of this material as at this date, and are subject to change without notice. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. Please reply to Oliver Maerz and destroy all copies of this message and any attachments from your system.

1 0

Kantara Spotlight on ... you!
by Joni Brennan 25 Jun '13

25 Jun '13

Hello Kantara Community, Did you know that we recently put the Kantara Spotlight on Kantara Members TroopID (http://kantarainitiative.org/spotlight-on-kantara-member-troop-id/) If you're a Kantara Member and would like us to put the Spotlight on you please let me know. We're looking forward to Spotlighting the great work of your organization! Best Regards, Joni Joni Brennan Kantara Initiative | Executive Director voice:+1 732-226-4223 email: joni @ kantarainitiative.org Building Trusted Identity Ecosystems - It takes a village! Slides: http://bit.ly/ki-june-2013

1 0

Kantara Response to FTC IoT Privacy and Security Implications
by Joni Brennan 13 Jun '13

13 Jun '13

Dear Kantara Community, Recently Kantara Initiative Trustees, Members and Participants provided their international and industry expertise to develop a brief response to a call for input by the US Federal Trade Commission (FTC) [1] regarding privacy and security implications of the Internet of Things (IoT). Pervasive implementation the IoT, and access control of associated data, will have significant implications with regard to Identity Management use cases and beyond. Kantara Initiative intends to address these implications through its network of experts and programs. The full response can be read on our Kantara blog [2]. We thank our stakeholders for their excellent input and we're looking forward to a workshop focusing on IoT that is being planned by FTC for the fall 2013. Please feel free to share the response with interested parties. We are very interested to hear feedback that can be shared on this list or via our contact form [3]. Joni Brennan Executive Director Kantara Initiative [1] http://www.ftc.gov/opa/2013/04/internetthings.shtm [2] http://kantarainitiative.org/privacy-and-security-iot/ [3] bit.ly/contact_kantara

7 18

The individual as an axiom (for the emergence of identity)
by Owen Thomas 28 May '13

28 May '13

Hello again. I've disclosed another piece on my blog about my belief that the individual is the underpinning axiom behind identity; a concept which I think the identity communities here and society in general are yet to accept and embrace. My Clique Space(TM) concept is ultimately based on the abstract notion of the individual - the only entity in this world which has the capability of making assertions. The individual is expressed in Clique Space as a collection of Clique Space Elements which are used to organise and project an individual's identity thorugh any type of device one wishes one's presence to be known. I hope you might find that what I'm trying to put together piques interest in what you're doing. Owen. -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 0

Server maintenance on May 27, 2013
by Oliver Maerz 27 May '13

27 May '13

In an effort to provide reliable Kantara Initiative web based services our servers will be upgraded later tonight. Starting 6 pm pacific websites and email will be temporarily offline. Please let me know if you have any questions regarding the upgrade/maintenance. Thanks, Oliver -- *Oliver Maerz* External Consultant *Kantara Initiative* +1 (503) 468-4188 oliver (at) kantarainitiative.org http://www.kantarainitiative.org The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. No representation is made on its accuracy or completeness of the information contained in this electronic message. Certain assumptions may have been made in the preparation of this material as at this date, and are subject to change without notice. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. Please reply to Oliver Maerz and destroy all copies of this message and any attachments from your system. -- *Oliver Maerz* External Consultant *Kantara Initiative* +1 (503) 468-4188 oliver (at) kantarainitiative.org http://www.kantarainitiative.org The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. No representation is made on its accuracy or completeness of the information contained in this electronic message. Certain assumptions may have been made in the preparation of this material as at this date, and are subject to change without notice. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. Please reply to Oliver Maerz and destroy all copies of this message and any attachments from your system.

1 0

Server maintenance on May 25, 2013
by Oliver Maerz 25 May '13

25 May '13

In an effort to provide reliable Kantara Initiative web based services our servers will be upgraded later tonight (Saturday, May 25, 2013). During the maintenance the websites and email may be temporarily offline. Please let me know if you have any questions regarding the upgrade/maintenance. Thanks, Oliver -- *Oliver Maerz* External Consultant *Kantara Initiative* +1 (503) 468-4188 oliver (at) kantarainitiative.org http://www.kantarainitiative.org The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. No representation is made on its accuracy or completeness of the information contained in this electronic message. Certain assumptions may have been made in the preparation of this material as at this date, and are subject to change without notice. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. Please reply to Oliver Maerz and destroy all copies of this message and any attachments from your system.

1 0

Individual Sovereignty and Identity in Clique Space.
by Owen Thomas 24 May '13

24 May '13

Hello people. I thought I might put a short something in my blog that discloses how the individual emerges as a "Sovereign" entity in Clique Space, and how this sovereignty can be asserted to other Clique Space users. I hope maybe it has resonance with some of you. Get back to me if it does. Owen. -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 0

Equivalence of Clique Space access model to RBAC.
by Owen Thomas 13 May '13

13 May '13

Hello people. I'm hoping this might be seen as a reasonable question that other members of this mail list might be able to help me with. I'm looking at the UML for RBAC I have found on Wikipedia<http://upload.wikimedia.org/wikipedia/en/c/c3/RBAC.jpg>(a source as reliable as any I have found) and I find that the Clique Space resource access model (CSRAM... maybe) corresponds loosely to the UML if one makes the following substitutions: Oganisation -> Clique Space Role -> Mode Profile Permission -> Property Operation -> Enabling Constraint User/Role Constraint -> Affiliation Subject -> Sovereign Session -> Connection With the exception of the property and the Enabling Constraint, all of these substitutions in the above list are made with Clique Space Elements. The concept of the Enabling Constraint and the Clique Space Elements were disclosed in my patent, but the concept of the property became an artefact that emerged in subsequent development. However, there appears to be no equivalent in Clique Space to the Role Activation Constraint class in the RBAC UML. I would appreciate it if someone could please point me to an explanation of, or fill me in with the function of the Role Activation Constraint. Thanks, Owen. -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 2

Join your Kantara peers for dinner - IIW & IDESG next week
by Andrew Hughes 10 May '13

10 May '13

Hello Kantara community - many of us will be at IIW and/or IDESG meetings next week, which presents a great opportunity for us to have a good meal, swap stories, make connections and generally catch up with each other. We are planning a *Kantara dinner on Friday May 10*, at a time and convenient place to be finalized this week. If you are interested in joining us, please respond to this note - we'll have some tables reserved. For those familiar with Mountain View / Santa Clara, if you have restaurant suggestions, please send them to me. Hope to see you at the dinner or during the week andrew. PS This is an unsponsored event and each person will be responsible for their bill. *Andrew Hughes, CISSP, CISM* Director, Trust Framework Sustainment Program *Kantara Initiative* andrew(a)kantarainitiative.org skype: andrewhughes3000(a)gmail.com +1 250 888 9474

1 1

Fwd: [community] survey of privacy features of authentication technologies
by Owen Thomas 09 May '13

09 May '13

I've given the example again minus the grammatical errors and confusion in the number of diners on my blog<http://owenpaulthomas.blogspot.com.au/2013/05/another-clique-spacetm-usage-…> . -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 0

Fwd: [community] survey of privacy features of authentication technologies
by Owen Thomas 09 May '13

09 May '13

---------- Forwarded message ---------- From: Owen Thomas <owen.paul.thomas(a)gmail.com> Date: 9 May 2013 13:17 Subject: Re: [community] survey of privacy features of authentication technologies To: David Chadwick <d.w.chadwick(a)kent.ac.uk> Cc: Peter Bachman <peterb(a)cequs.com>, Stephen Wilson < swilson(a)lockstep.com.au>, "community(a)lists.idcommons.net" < community(a)lists.idcommons.net>, Samer Wazan <aswazan(a)gmail.com> Hello again. I apologise that I'm not too well informed of the debate in privacy; x.509 certificates, IETF, OASIS are acronyms that fly too far above my head to reach. However, I would like to give my own view of privacy and authentication in relation to my Clique Space idea. Hopefully, the example I use here will illustrate some general features people consider salient. Say, I and three others are going out to have a dinner at a restaurant. The occasion is that it is a mother's day dinner out, and I am taking my mother (one of the other three people) out to dinner. I am paying for her dinner, but the other two individual is paying for themselves. Say, we all live in a world where Clique Space is commonplace. What, you might wonder, does this mean? At the most abstract level, this means that you possess one or more Agent Devices and you use your Agent Devices to cooperate with Agent Devices of other people in Cliques which form, grow, shrink, and disband within and between administrative domains called Clique Spaces. Agent Devices are devices like any other and have a physical manifestation like phones, cars, and computers. Other things like credit cards, Facebook pages, twitter accounts, bank accounts, and other abstract entities having no physical existence can be considered devices in Clique Space if they can exchange state information with one or more Agent Devices. Now, back to the restaurant example, myself and the other three co-diners walk into the restaurant and meet the waiter. Before we are ushered to our table, the waiter verifies with us who is in our Clique, and who the Clique's Owner will be. I say I will be the Clique's Owner as I know who will be paying for who's meal; the waiter, an individual who has activated their "waiter" Affiliation through a selected Identity, gives me the Identity through which they have done this. I possess relevant Identities of my co-diners, and I use all Identities to form the Clique that I will own. This Clique lasts for the duration of our meal. The restaurant uses the information in their account and in the service record of our waiter. I use the Clique to assert that I will pay for myself and my mother. The third diner accepts the condition that they pay for their own meal or the Clique wouldn't have been able to form. The waiter has joined my Clique because the Clique I have formed accepts that payment will be automatically deducted from each diner's account into the restaurant's account sufficient to pay the bill of service. Each Participant has the opportunity to persist their individual Clique Space activity; interactions with others constitute this activity, and so each Participant has the opportunity to keep a record of this Clique in case there is any contention as to the bill, the proportion of the bill payed by each diner, the service offered by the waiter, or the activity recorded against other media like the bank's transaction system. Each Participant except my mother disclosed their bank's transaction facility as a medium in this Clique. When the Clique formed, the devices that compose each Participant's transaction facility were nominated in the relevant Participant as Connections - activated against the relevant Identities by these identities to be expressed in the corresponding Participant. Again, the Clique cannot form if the media requirements set by the Clique's Owner candidate (my candidate Participant) are not met by all other candidate Participants. Hence, the Clique will only form if the medium and all constraints regarding the usage of this medium are met by all candidate Participants. Actual Participant instances will only be instantiated when constraint affinity can be met, and can only exist while ever constraint affinity can continue to be met. I think my example fits in with privacy and an authentication mechanisms featured by other contributors in this thread, and there might be others who would like to discuss how these mechanisms might work. Owen. -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 0

Re: [Kantara - Community] Prototype nearing a demonstrable implementation.
by Owen Thomas 26 Apr '13

26 Apr '13

Hello people. I don't know to which group this letter might be best addressed, so I hope it piques some interest to members of the groups to which I have made this reply. Some of you might remember a fella by the name of Owen Thomas who was exploring his own idea about a system that could communicate a person's real-time presence through the devices one claimed possession of. Thus far, his journey, commenced in 2004 when he received the inspiration for the concept, has continued as a solitary indulgence. Anyway, I have said before that I was nearing an implementation, and I found that I had spoken too early in these previous occasions. Hence, I do not now wish to disappoint by promising something which might not eventuate. However, I feel that I could be nearing a significant milestone: the abstract nature at the core of my concept appears to me to be nearing a form of completeness where I think I might be able to cobble together a simple demonstration. I want to emphasise my circumspection: the core of Clique Space(TM), my concept which is intentionally very abstract, may soon be in a state where I will be able to demonstrate an implementation over some very simple media. I urge you to reply to this message if you would like to know more. I am implementing this thing in Java, and if you know Java SE, I may disclose source code listings. You may be taken aback a bit by my use of generics, but in as much as my use of generics has helped me work out logic errors before they turn into runtime bugs, I do not believe my progress to the point where I find myself now, could have been any faster. To reiterate: Clique Space(TM) is a concept where one's presence is projected over devices one possesses to others who likewise use Clique Space to project their presence through whatever devices they have. Clique Space allows the individual to engage different devices depending not only on the devices' physical characteristics, but also on preferences set by the individual and groups to which the individual is affiliated. I believe this concept is so flexible that it reduces the entire variety of individual interaction down to the disclosure or non-disclosure of "components" which describe individual characteristics. Although this assertion requires testing, my hunch since August/September 2004 has only solidified. I believe that in this concept, I have come up with a mechanism that reduces the complexity of interaction to a question of scale: different device types are described in "Media Profiles", so that in order to use a device on Clique Space, one merely needs the correct Media Profile. All interactions in Clique Space are modelled as Cliques; an Clique contains two or more Participants which are one or more devices commandeered by their owner (through an Identity) to engage one or more other member Participants in a systematic way. This Clique is governed by constraints, and the Clique only exists while sufficient constraint affinity can be maintained. I probably need some interested people to lend me a hand in the production of Media Profiles. Get back to me some time. Owen. On 21 August 2011 20:28, Owen Thomas <owen.paul.thomas(a)gmail.com> wrote: > Hello Claims Agent people. > > I don't mean to bother you too much, but if you have ever looked upon my > solitary endeavour with some interest, you might like to know that I think > my prototype has thus far developed most (not all - there are still > significant pieces missing - and these pieces may require much more time > than has transpired to get me this far) of the functionality that would be > present in any product that pays true respect to my vision of a real-time > cyberspatial identity metasystem. Hence, I believe I may be able to > demonstrate something of interest to people who are technically > unchallenged in Java SE. > > If perhaps you might like to know more, then please get back to me. > > Whatever you do, enjoy your week. > > Owen. > > -- > Employment-from-home. Make mine part-time. > You've go a job for me working full-time from an office? No thanks. > Clique Space(TM). Practical, Ubiquitous, Individual, and Real-time > Security and Identity in Cyberspace. > Research paper on Clique Space: http://ssrn.com/abstract=1714848 > Owen's Garden of Thought: http://owenpaulthomas.blogspot.com/ > Twitter: @CliqueSpace > <http://www.elance.com/CliqueSpace>www.cliquespace.net > Skype: owen.paul.thomas > Mobile: +61 401 493 433 > > -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 0

Charities on behalf of Anne Smedinghoff
by Joni Brennan 16 Apr '13

16 Apr '13

Dear Kantara Community, Recently many of you have expressed heart felt concern and asked what you can personally do to show memorial to Tom Smedinghoff's daughter Anne. The family recently posted a blog article indicating charities they prefer donations made to in lieu of flowers etc. Kantara Initiative BoT and LC has also sent a letter directly to the Smedinghoff family to extend our thoughts and prayers at this time. If you would like to donate on behalf of Anne's memory please see the below. - Take Care Joni Brennan Executive Director, Kantara Initiative http://annesmedinghoff.com/?p=22 The Smedinghoff family has been touched by the outpouring of support from people around the world looking for ways to help continue Anne’s work. In lieu of sending flowers, we ask that you consider supporting organizations that are engaged in the same great work that Anne dedicated herself to so selflessly. *Aschiana Foundation: **To provide education and training to working street children through Aschiana in Afghanistan. **http://www.aschiana-foundation.org/index.php* *Afghan Girls Financial Assistance Fund:** To aid young Afghan women who seek a college education in the USA. AGFAF identifies promising young women, matches them with participating educational institutions and American host families and provides financial support for expenses not covered by either these institutions or host families. *http://www.agfaf.org *Help the Afghan Children:* D*edicated to improving the lives of children in Afghanistan through quality education and helping them become educated, healthy, productive citizens. *http://www.helptheafghanchildren.org *SOLA, Afghanistan (School of Leadership, Afghanistan):* D*edicated to furthering education and leadership opportunities in Afghanistan and the world for the new generation of Afghanistan, especially for women. *http://www.sola-afghanistan.org/

1 0

Attending EIC 2013 in Munich?
by Joni Brennan 15 Apr '13

15 Apr '13

Dear Katnara Members and Community, Will you be attending EIC 2013 in Munich? If so we hope you can join us that the special Kantara workshop day as well as for our panel. Details: http://www.id-conf.com/events/eic2013-kantara We have special discounts for Kantara Members and Community. Please let me know if you're attending and would like a special discount code. Additionally, If you're interested in actually joining our workshop panel discussions please also let me know as we may have some speaking spaces left. Best Regards, Joni

1 0

Call for participation: Cloud Identity and Security Best Practices Work Group
by Heather Flanagan 04 Mar '13

04 Mar '13

Kantara Initiative is pleased to announce the formation of the Cloud Identity and Security Best Practices (CloudIDSec WG)**. Find out below how to join this exciting new group! The core purpose of the CloudIDSec WG is to identify the overlap between the field of Cloud Computing and the Kantara federated identity programs, with a view to defining: * *How Cloud Computing can be leveraged to implement Kantara specifications (e.g. Identity Assurance Framework components) – *This will define specifications for 'IDaaS' – Identity as a Service. What configurations of software can Cloud Service Providers implement; How can they be audited to verify compliance, etc., * *How Kantara can help advance Cloud Security best practices - *Define how Kantara Assurance and Interop Programs can be applied to enhance security of Cloud environments, particularly in line with achieving compliance with Government standards and linked to Government Privacy Audit policies. This Work Group will develop technical specifications and recommendations around: * *IDaaS design models - *Technical blueprints for IDaaS based on Kantara Assurance and Interop recommendations, criteria and other related Kantara working group outputs. . * *RFP templates – *Enable government issues to issue tenders for IDaaS approved to their national ID requirements. * *Marketing white paper – *A joint Kantara / CBPN white paper on CloudIDSec best practices. Thanks to Neil McEvoy, founder of the Cloud Best Practices Network, who will act as Interim Chair. For more information on the CloudIDSec WG, please visit the home page: http://kantarainitiative.org/confluence/x/f4XEAw Join the CloudIDSec DG: http://signup.kantarainitiative.org/?selectedGroup=33 Review the Charter: http://kantarainitiative.org/confluence/x/ioXEAw Mailing list archive: http://kantarainitiative.org/pipermail/wg-cloudidsec/ Copyright Policy: *Kantara IPR Option: Patent Copyright RAND <http://kantarainitiative.org/confluence/pages/viewpage.action?pageId=410256…>* We welcome your participation! -- Heather Flanagan Technical Program Coordinator Kantara Initiative Skype: hlflanagan email: heather(a)kantarainitiative.org

1 0

Kantara Workshop @ HIMSS13
by Joni Brennan 01 Mar '13

01 Mar '13

http://kantarainitiative.org/kantara-initiative-to-appear-at-himss13/ Kantara Initiative is proud to support this annual event that helps HIT professionals make the right decisions for their organizations. With initiatives such as E-Prescribing Controlled Substances, Directed Exchange, Meaningful Use Stage 2, and S&I Framework’s esMD, this topic couldn’t be more relevant to many HIMSS attendees. As part of our support for the event Kantara Initiative will host a discussion on-site Tuesday March 5th, 3:30 to 6:30 to focus on: Trust and Assurance Workshop: NIST 800-63 Equivalent, Identity Credentialing, Authentication and Identity Proofing. This discussion will include guest thought leaders from the healthcare space including: *Experian, Equifax, ApeniMED, DirectTrust.org, SecureKey, Surescripts* and others. *Where:* HIMSS - New Orleans Convention Center *Date:* Tuesday, March 5th *Time:* 3:30 - 6:30 *Room:* 252 3:30 - 4:00 - Welcome & Level Setting 4:00 - 5:00 - Each expert shares their thoughts on the 'lay of the land' around eHealth, AuthN, Identity Proofing and Management - Trends (important things being done that are worth knowing for the long haul) - Transparents (important things people keep looking *through* instead of *at*) - Tropes (technology metaphors that have perhaps become dull with overuse) - Transients (shiny new things that are unlikely to stick around) -- yes, you each should go there... - Q&A 5:00 - 6:00 - Aligning the policies - What do you see as the role of government lead requirements, like NIST 800-63 regarding the eHealth Authentication space? - What can healthcare learn (or benefit from) around previous lessons learned in private sector authentication practices? - Regarding Industry Consortia, like Kantara Initiative for example, how does your organization determine where to get involved in shaping industry? - With so many standards, agencies, active and emerging initiatives how do you identify the opportunities and steer through the challenges? - How do interoperability and alignment to baseline standards enable your organization to be a leader in eHealth Authentication? - How does your organization see activities like that of FICAM and possible NSTIC playing a role? - What are the broader implications of these initiatives to NwHIN (Nationwide Health Information Networks)? - Q&A 6:00 - 6:30 - A call to Action & Closing Remarks

1 0

Going to RSA next week? Please join Kantara for breakfast
by Andrew Hughes 19 Feb '13

19 Feb '13

If you are attending the RSA Conference in San Francisco next week, please join Kantara for breakfast on Tuesday February 26. This is a great opportunity to meet other Kantara stakeholders face to face in an informal setting - to share a meal and put faces to names. What: Breakfast with You, the Kantara Initiative Community When: Tuesday, 26 February 2013 When: 07:30 Pacific Time (GMT -8) Where: Marriott Marquis, 55 4th St, San Francisco Please reply if you are able to join us - we look forward to seeing you in San Francisco! Andrew. *Andrew Hughes* Director, Trust Framework Sustainment Program *Kantara Initiative* andrew(a)kantarainitiative.org andrewhughes3000(a)gmail.com skype: andrewhughes3000(a)gmail.com +1 250 888 9474

1 0

INVITE: Kantara Non-Profits On the Loose - RSA 2013 Feb 26
by Joni Brennan 15 Feb '13

15 Feb '13

Dear Kantara Community, Join Kantara and partners at our "Non-Profits On the Loose" RSA hospitality night using your RSA badge or this invite. Kantara extends gratitude to our sponsors: Equifax, Experian Public Sector, ForgeRock, IEEE-SA, Internet Society, Nomura Research Institute, and OpenStand. Please feel free to share this invite with others who may have interest. We look forward to seeing you there! Best Regards, Joni Brennan | Executive Director | Kantara Initiative [image: Inline image 2]

1 0

Kantara Events - Through April 2013
by Joni Brennan 14 Feb '13

14 Feb '13

Hello, If you are curious where Katnara will be present or holding meetings you can find it on the events page which is up to date here: http://kantarainitiative.org/confluence/display/GI/Events Also listed here for your convenience: Feb 25, 2013 What: Board of Trustee F2F Where: Hub, San Francisco Time: 12:00 - 17:00 PST Feb 26, 2013 What: Non-Profits on the Loose - an RSA Hospitality Night Where: RSA 2013 - Minna Gallery, San Francisco (map) Time: 17:00-20:00 PST Mar 4-5, 2013 What: Japan Cloud Identity Summit Details: https://jics.nii.ac.jp/English/ Where: Hitotsubashi Hall, Tokyo, Japan Time: 10:00 - 18:00 Speaker: Leif Johansson Mar 5, 2013 What: Workshop: NIST 800-63 Equivalent, Identity Credentialing, Authentication and Identity Proofing. Where: HIMSS, New Orleans, Louisiana Time: 15:30-18:30 EST Panels Including: Aetna, ApeniMed, DirectTrust, SureScripts, SecureKey, Experian, Equifax, Apr 23, 2013 What: Moving IAM to the Cloud Where: CA World - Las Vegas Details: https://caworld.activeevents.com/connect/sessionDetail.ww?SESSION_ID=4763&t… Time: 15:45 - 16:45

1 0

Invite to the European Trust and Identity Workshop
by Joni Brennan 30 Jan '13

30 Jan '13

Kantara Initiative supports the European Trust and Identity Workshop event as part of ongoing activities to build shared infrastructure, value, and experience to Identity and Access Management systems. As a Trust Framework Provider and operator, Kantara Initiative has strong interest to ensure that internet identity systems are developed transparently and in a multi-stakeholder environment. European Trust and Identity Workshop supports that interest through its activity and outreach helping to connect European interests with similar interests on a global scale. We encourage Kantara Members and Participants to attend the European Trust and IdentityWorkshop. Event: European Trust and Identity Workshop When: February 12-13, 2013 Where: Vienna, Austria. Details: http://identityworkshop.eu The European Trust and Identity Workshop will focus on the following areas: - Technology. Developing feasible and open standards. - Trust Frameworks. Establishing new paradigms and policy sets. - Usability. How can users navigate different identities and understand their data? - Economy. How can identity services fit into businesses requirements and opportunities for all stakeholders? - Interoperability. On which levels and areas is interoperability necessary or feasible? This is a cross-cutting concern for technical, legal and business views. - Deployment and operation. How can different options be supported and exploited in the best way, given the whole range of places and devices. - EU project challenges. The European Commission’s projects related to trust and identity like STORK and eID regulation are landmarks on the roadmap. How do other actors relate to and utilize those projects? The meeting focus areas are of direct relevance to Kantara Groups including but not limited to: - Identity Assurance<http://kantarainitiative.org/confluence/display/idassurance>: maintaining the life cycle development of the Identity Assurance Framework (the core of current Katnara Trust Framework offering) - Federation Interoperability<http://kantarainitiative.org/confluence/display/fiwg>: Focusing on enabling interoperability of federations through development of profiles and test plans at the technology protocol level. - Trust Framework Meta Model<http://kantarainitiative.org/confluence/display/TFMMWG>: Developing landscape and analytical view of trust framework development and deployment across verticals and jurisdictions. - eGovernment <http://kantarainitiative.org/confluence/display/eGov>: Focused on alignments and opportunities for interoperability of both technology and policy within and across multiple jurisdictions. - Business Cases for Trusted Federation<http://kantarainitiative.org/confluence/display/bctf>: Collecting and analyzing business model use cases (planned and operational) for Trusted Federations. - Telecommunications Identity<http://kantarainitiative.org/confluence/display/telcoid>: Focused on interoperability and evolution of federations from a telecommunications perspective. We encourage interested organizations and individuals to attend the EuropeanTrust and Identity Workshop and join Katnara Initiative in supporting shared infrastructure alignments via open and transparent multi-stakeholder participation. We look forward to your participation! Event: European Trust and Identity Workshop When: February 12-13, 2013 Where: Vienna, Austria. Details: http://identityworkshop.eu Best Regards, Joni Brennan Executive Director Kantara Initiative

1 0

Kantara will be at HIMSS 2013 - Will You?
by Joni Brennan 16 Jan '13

16 Jan '13

As we ramp up a year busy with progress and activities Kantara is please to host a workshop at HIMSS 2013 read the details below. Will you (your organization) be there as well? Let us know (reply to me) and come visit us on-site! Kantara Initiative to Appear at HIMSS13<http://kantarainitiative.org/kantara-initiative-to-appear-at-himss13/> New Orleans welcomes the 2013 HIMSS Annual Conference and Exhibition, March 3-7, 2013, at the Ernest N. Morial Convention Center. More than 36,000 healthcare industry professionals are expected to attend to discuss health information technology issues and review innovative solutions designed to transform healthcare. *Kantara Initiative *is proud to support this annual event that helps HIT professionals make the right decisions for their organizations. *As part of our support for the event Kantara Initiative will host a discussion on-site Tuesday March 5th, 3:30 to 6:30 to focus on: Trust and Assurance Workshop: NIST 800-63 Equivalent, Identity Credentialing, Authentication and Identity Proofing. This discussion will include guest thought leaders from the healthcare space including SureScripts, DirectTrust.org and others. * Conference education sessions include pre-conference symposia on ICD-10, clinical and business intelligence, health information exchanges, clinical engineering, innovation, meaningful use, nursing informatics, physicians’ IT, and RFID and RTLS in healthcare. More than 300 peer-reviewed sessions, including workshops and roundtables, round out education offerings at HIMSS13. President Bill Clinton leads a keynote roster that also includes James Carville, political consultant, and Karl Rove, media contributor and former deputy chief of staff and senior advisor to President George W. Bush. The Meaningful Use Experience, new to HIMSS13, is designed to help providers find EHR solutions that are certified for acute or ambulatory facilities. The exhibition also features knowledge sharing that focuses on usability and proven implementations. To learn more about the *Kantara Initiative*, visit us at *our workshop on-site (details in the HIMSS13 Program)* during HIMSS13 or visit the *Kantara web site at kantarainitiative.org*. Visit the *HIMSS13 web site at www.himssconference.org* for more information on the conference. # # # About HIMSS HIMSS is a cause-based, not-for-profit organization exclusively focused on providing global leadership for the optimal use of information technology (IT) and management systems for the betterment of healthcare. Founded 52 years ago, HIMSS and its related organizations are headquartered in Chicago with additional offices in the United States, Europe and Asia. HIMSS represents nearly 50,000 individual members, of which more than two thirds work in healthcare provider, governmental and not-for-profit organizations. HIMSS also includes over 570 corporate membersand more than 225 not-for-profit partner organizations that share our mission of transforming healthcare through the effective use of information technology and management systems. HIMSS frames and leads healthcare practices and public policy through its content expertise, professional development, research initiatives, and media vehicles designed to promote information and management systems’ contributions to improving the quality, safety, access, and cost-effectiveness of patient care. To learn more about HIMSS and to find out how to join us and our members in advancing our cause, please visit our website at www.himss.org.

1 0