- Community - mailman.kantarainitiative.org

Individual Sovereignty and Identity in Clique Space.
by Owen Thomas 24 May '13

24 May '13

Hello people. I thought I might put a short something in my blog that discloses how the individual emerges as a "Sovereign" entity in Clique Space, and how this sovereignty can be asserted to other Clique Space users. I hope maybe it has resonance with some of you. Get back to me if it does. Owen. -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 0

Equivalence of Clique Space access model to RBAC.
by Owen Thomas 13 May '13

13 May '13

Hello people. I'm hoping this might be seen as a reasonable question that other members of this mail list might be able to help me with. I'm looking at the UML for RBAC I have found on Wikipedia<http://upload.wikimedia.org/wikipedia/en/c/c3/RBAC.jpg>(a source as reliable as any I have found) and I find that the Clique Space resource access model (CSRAM... maybe) corresponds loosely to the UML if one makes the following substitutions: Oganisation -> Clique Space Role -> Mode Profile Permission -> Property Operation -> Enabling Constraint User/Role Constraint -> Affiliation Subject -> Sovereign Session -> Connection With the exception of the property and the Enabling Constraint, all of these substitutions in the above list are made with Clique Space Elements. The concept of the Enabling Constraint and the Clique Space Elements were disclosed in my patent, but the concept of the property became an artefact that emerged in subsequent development. However, there appears to be no equivalent in Clique Space to the Role Activation Constraint class in the RBAC UML. I would appreciate it if someone could please point me to an explanation of, or fill me in with the function of the Role Activation Constraint. Thanks, Owen. -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 2

Join your Kantara peers for dinner - IIW & IDESG next week
by Andrew Hughes 10 May '13

10 May '13

Hello Kantara community - many of us will be at IIW and/or IDESG meetings next week, which presents a great opportunity for us to have a good meal, swap stories, make connections and generally catch up with each other. We are planning a *Kantara dinner on Friday May 10*, at a time and convenient place to be finalized this week. If you are interested in joining us, please respond to this note - we'll have some tables reserved. For those familiar with Mountain View / Santa Clara, if you have restaurant suggestions, please send them to me. Hope to see you at the dinner or during the week andrew. PS This is an unsponsored event and each person will be responsible for their bill. *Andrew Hughes, CISSP, CISM* Director, Trust Framework Sustainment Program *Kantara Initiative* andrew(a)kantarainitiative.org skype: andrewhughes3000(a)gmail.com +1 250 888 9474

1 1

Fwd: [community] survey of privacy features of authentication technologies
by Owen Thomas 09 May '13

09 May '13

I've given the example again minus the grammatical errors and confusion in the number of diners on my blog<http://owenpaulthomas.blogspot.com.au/2013/05/another-clique-spacetm-usage-…> . -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 0

Fwd: [community] survey of privacy features of authentication technologies
by Owen Thomas 08 May '13

08 May '13

---------- Forwarded message ---------- From: Owen Thomas <owen.paul.thomas(a)gmail.com> Date: 9 May 2013 13:17 Subject: Re: [community] survey of privacy features of authentication technologies To: David Chadwick <d.w.chadwick(a)kent.ac.uk> Cc: Peter Bachman <peterb(a)cequs.com>, Stephen Wilson < swilson(a)lockstep.com.au>, "community(a)lists.idcommons.net" < community(a)lists.idcommons.net>, Samer Wazan <aswazan(a)gmail.com> Hello again. I apologise that I'm not too well informed of the debate in privacy; x.509 certificates, IETF, OASIS are acronyms that fly too far above my head to reach. However, I would like to give my own view of privacy and authentication in relation to my Clique Space idea. Hopefully, the example I use here will illustrate some general features people consider salient. Say, I and three others are going out to have a dinner at a restaurant. The occasion is that it is a mother's day dinner out, and I am taking my mother (one of the other three people) out to dinner. I am paying for her dinner, but the other two individual is paying for themselves. Say, we all live in a world where Clique Space is commonplace. What, you might wonder, does this mean? At the most abstract level, this means that you possess one or more Agent Devices and you use your Agent Devices to cooperate with Agent Devices of other people in Cliques which form, grow, shrink, and disband within and between administrative domains called Clique Spaces. Agent Devices are devices like any other and have a physical manifestation like phones, cars, and computers. Other things like credit cards, Facebook pages, twitter accounts, bank accounts, and other abstract entities having no physical existence can be considered devices in Clique Space if they can exchange state information with one or more Agent Devices. Now, back to the restaurant example, myself and the other three co-diners walk into the restaurant and meet the waiter. Before we are ushered to our table, the waiter verifies with us who is in our Clique, and who the Clique's Owner will be. I say I will be the Clique's Owner as I know who will be paying for who's meal; the waiter, an individual who has activated their "waiter" Affiliation through a selected Identity, gives me the Identity through which they have done this. I possess relevant Identities of my co-diners, and I use all Identities to form the Clique that I will own. This Clique lasts for the duration of our meal. The restaurant uses the information in their account and in the service record of our waiter. I use the Clique to assert that I will pay for myself and my mother. The third diner accepts the condition that they pay for their own meal or the Clique wouldn't have been able to form. The waiter has joined my Clique because the Clique I have formed accepts that payment will be automatically deducted from each diner's account into the restaurant's account sufficient to pay the bill of service. Each Participant has the opportunity to persist their individual Clique Space activity; interactions with others constitute this activity, and so each Participant has the opportunity to keep a record of this Clique in case there is any contention as to the bill, the proportion of the bill payed by each diner, the service offered by the waiter, or the activity recorded against other media like the bank's transaction system. Each Participant except my mother disclosed their bank's transaction facility as a medium in this Clique. When the Clique formed, the devices that compose each Participant's transaction facility were nominated in the relevant Participant as Connections - activated against the relevant Identities by these identities to be expressed in the corresponding Participant. Again, the Clique cannot form if the media requirements set by the Clique's Owner candidate (my candidate Participant) are not met by all other candidate Participants. Hence, the Clique will only form if the medium and all constraints regarding the usage of this medium are met by all candidate Participants. Actual Participant instances will only be instantiated when constraint affinity can be met, and can only exist while ever constraint affinity can continue to be met. I think my example fits in with privacy and an authentication mechanisms featured by other contributors in this thread, and there might be others who would like to discuss how these mechanisms might work. Owen. -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 0

Re: [Kantara - Community] Prototype nearing a demonstrable implementation.
by Owen Thomas 26 Apr '13

26 Apr '13

Hello people. I don't know to which group this letter might be best addressed, so I hope it piques some interest to members of the groups to which I have made this reply. Some of you might remember a fella by the name of Owen Thomas who was exploring his own idea about a system that could communicate a person's real-time presence through the devices one claimed possession of. Thus far, his journey, commenced in 2004 when he received the inspiration for the concept, has continued as a solitary indulgence. Anyway, I have said before that I was nearing an implementation, and I found that I had spoken too early in these previous occasions. Hence, I do not now wish to disappoint by promising something which might not eventuate. However, I feel that I could be nearing a significant milestone: the abstract nature at the core of my concept appears to me to be nearing a form of completeness where I think I might be able to cobble together a simple demonstration. I want to emphasise my circumspection: the core of Clique Space(TM), my concept which is intentionally very abstract, may soon be in a state where I will be able to demonstrate an implementation over some very simple media. I urge you to reply to this message if you would like to know more. I am implementing this thing in Java, and if you know Java SE, I may disclose source code listings. You may be taken aback a bit by my use of generics, but in as much as my use of generics has helped me work out logic errors before they turn into runtime bugs, I do not believe my progress to the point where I find myself now, could have been any faster. To reiterate: Clique Space(TM) is a concept where one's presence is projected over devices one possesses to others who likewise use Clique Space to project their presence through whatever devices they have. Clique Space allows the individual to engage different devices depending not only on the devices' physical characteristics, but also on preferences set by the individual and groups to which the individual is affiliated. I believe this concept is so flexible that it reduces the entire variety of individual interaction down to the disclosure or non-disclosure of "components" which describe individual characteristics. Although this assertion requires testing, my hunch since August/September 2004 has only solidified. I believe that in this concept, I have come up with a mechanism that reduces the complexity of interaction to a question of scale: different device types are described in "Media Profiles", so that in order to use a device on Clique Space, one merely needs the correct Media Profile. All interactions in Clique Space are modelled as Cliques; an Clique contains two or more Participants which are one or more devices commandeered by their owner (through an Identity) to engage one or more other member Participants in a systematic way. This Clique is governed by constraints, and the Clique only exists while sufficient constraint affinity can be maintained. I probably need some interested people to lend me a hand in the production of Media Profiles. Get back to me some time. Owen. On 21 August 2011 20:28, Owen Thomas <owen.paul.thomas(a)gmail.com> wrote: > Hello Claims Agent people. > > I don't mean to bother you too much, but if you have ever looked upon my > solitary endeavour with some interest, you might like to know that I think > my prototype has thus far developed most (not all - there are still > significant pieces missing - and these pieces may require much more time > than has transpired to get me this far) of the functionality that would be > present in any product that pays true respect to my vision of a real-time > cyberspatial identity metasystem. Hence, I believe I may be able to > demonstrate something of interest to people who are technically > unchallenged in Java SE. > > If perhaps you might like to know more, then please get back to me. > > Whatever you do, enjoy your week. > > Owen. > > -- > Employment-from-home. Make mine part-time. > You've go a job for me working full-time from an office? No thanks. > Clique Space(TM). Practical, Ubiquitous, Individual, and Real-time > Security and Identity in Cyberspace. > Research paper on Clique Space: http://ssrn.com/abstract=1714848 > Owen's Garden of Thought: http://owenpaulthomas.blogspot.com/ > Twitter: @CliqueSpace > <http://www.elance.com/CliqueSpace>www.cliquespace.net > Skype: owen.paul.thomas > Mobile: +61 401 493 433 > > -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 0

Charities on behalf of Anne Smedinghoff
by Joni Brennan 15 Apr '13

15 Apr '13

Dear Kantara Community, Recently many of you have expressed heart felt concern and asked what you can personally do to show memorial to Tom Smedinghoff's daughter Anne. The family recently posted a blog article indicating charities they prefer donations made to in lieu of flowers etc. Kantara Initiative BoT and LC has also sent a letter directly to the Smedinghoff family to extend our thoughts and prayers at this time. If you would like to donate on behalf of Anne's memory please see the below. - Take Care Joni Brennan Executive Director, Kantara Initiative http://annesmedinghoff.com/?p=22 The Smedinghoff family has been touched by the outpouring of support from people around the world looking for ways to help continue Anne’s work. In lieu of sending flowers, we ask that you consider supporting organizations that are engaged in the same great work that Anne dedicated herself to so selflessly. *Aschiana Foundation: **To provide education and training to working street children through Aschiana in Afghanistan. **http://www.aschiana-foundation.org/index.php* *Afghan Girls Financial Assistance Fund:** To aid young Afghan women who seek a college education in the USA. AGFAF identifies promising young women, matches them with participating educational institutions and American host families and provides financial support for expenses not covered by either these institutions or host families. *http://www.agfaf.org *Help the Afghan Children:* D*edicated to improving the lives of children in Afghanistan through quality education and helping them become educated, healthy, productive citizens. *http://www.helptheafghanchildren.org *SOLA, Afghanistan (School of Leadership, Afghanistan):* D*edicated to furthering education and leadership opportunities in Afghanistan and the world for the new generation of Afghanistan, especially for women. *http://www.sola-afghanistan.org/

1 0

Attending EIC 2013 in Munich?
by Joni Brennan 15 Apr '13

15 Apr '13

Dear Katnara Members and Community, Will you be attending EIC 2013 in Munich? If so we hope you can join us that the special Kantara workshop day as well as for our panel. Details: http://www.id-conf.com/events/eic2013-kantara We have special discounts for Kantara Members and Community. Please let me know if you're attending and would like a special discount code. Additionally, If you're interested in actually joining our workshop panel discussions please also let me know as we may have some speaking spaces left. Best Regards, Joni

1 0

Call for participation: Cloud Identity and Security Best Practices Work Group
by Heather Flanagan 04 Mar '13

04 Mar '13

Kantara Initiative is pleased to announce the formation of the Cloud Identity and Security Best Practices (CloudIDSec WG)**. Find out below how to join this exciting new group! The core purpose of the CloudIDSec WG is to identify the overlap between the field of Cloud Computing and the Kantara federated identity programs, with a view to defining: * *How Cloud Computing can be leveraged to implement Kantara specifications (e.g. Identity Assurance Framework components) – *This will define specifications for 'IDaaS' – Identity as a Service. What configurations of software can Cloud Service Providers implement; How can they be audited to verify compliance, etc., * *How Kantara can help advance Cloud Security best practices - *Define how Kantara Assurance and Interop Programs can be applied to enhance security of Cloud environments, particularly in line with achieving compliance with Government standards and linked to Government Privacy Audit policies. This Work Group will develop technical specifications and recommendations around: * *IDaaS design models - *Technical blueprints for IDaaS based on Kantara Assurance and Interop recommendations, criteria and other related Kantara working group outputs. . * *RFP templates – *Enable government issues to issue tenders for IDaaS approved to their national ID requirements. * *Marketing white paper – *A joint Kantara / CBPN white paper on CloudIDSec best practices. Thanks to Neil McEvoy, founder of the Cloud Best Practices Network, who will act as Interim Chair. For more information on the CloudIDSec WG, please visit the home page: http://kantarainitiative.org/confluence/x/f4XEAw Join the CloudIDSec DG: http://signup.kantarainitiative.org/?selectedGroup=33 Review the Charter: http://kantarainitiative.org/confluence/x/ioXEAw Mailing list archive: http://kantarainitiative.org/pipermail/wg-cloudidsec/ Copyright Policy: *Kantara IPR Option: Patent Copyright RAND <http://kantarainitiative.org/confluence/pages/viewpage.action?pageId=410256…>* We welcome your participation! -- Heather Flanagan Technical Program Coordinator Kantara Initiative Skype: hlflanagan email: heather(a)kantarainitiative.org

1 0

Kantara Workshop @ HIMSS13
by Joni Brennan 01 Mar '13

01 Mar '13

http://kantarainitiative.org/kantara-initiative-to-appear-at-himss13/ Kantara Initiative is proud to support this annual event that helps HIT professionals make the right decisions for their organizations. With initiatives such as E-Prescribing Controlled Substances, Directed Exchange, Meaningful Use Stage 2, and S&I Framework’s esMD, this topic couldn’t be more relevant to many HIMSS attendees. As part of our support for the event Kantara Initiative will host a discussion on-site Tuesday March 5th, 3:30 to 6:30 to focus on: Trust and Assurance Workshop: NIST 800-63 Equivalent, Identity Credentialing, Authentication and Identity Proofing. This discussion will include guest thought leaders from the healthcare space including: *Experian, Equifax, ApeniMED, DirectTrust.org, SecureKey, Surescripts* and others. *Where:* HIMSS - New Orleans Convention Center *Date:* Tuesday, March 5th *Time:* 3:30 - 6:30 *Room:* 252 3:30 - 4:00 - Welcome & Level Setting 4:00 - 5:00 - Each expert shares their thoughts on the 'lay of the land' around eHealth, AuthN, Identity Proofing and Management - Trends (important things being done that are worth knowing for the long haul) - Transparents (important things people keep looking *through* instead of *at*) - Tropes (technology metaphors that have perhaps become dull with overuse) - Transients (shiny new things that are unlikely to stick around) -- yes, you each should go there... - Q&A 5:00 - 6:00 - Aligning the policies - What do you see as the role of government lead requirements, like NIST 800-63 regarding the eHealth Authentication space? - What can healthcare learn (or benefit from) around previous lessons learned in private sector authentication practices? - Regarding Industry Consortia, like Kantara Initiative for example, how does your organization determine where to get involved in shaping industry? - With so many standards, agencies, active and emerging initiatives how do you identify the opportunities and steer through the challenges? - How do interoperability and alignment to baseline standards enable your organization to be a leader in eHealth Authentication? - How does your organization see activities like that of FICAM and possible NSTIC playing a role? - What are the broader implications of these initiatives to NwHIN (Nationwide Health Information Networks)? - Q&A 6:00 - 6:30 - A call to Action & Closing Remarks

1 0