January 2012 - DG-AM - mailman.kantarainitiative.org

Conference call snafu
by Keith Hazelton 17 Jan '12

17 Jan '12

It seems the group's contract for conference calls expired at the end of the year. Plan B? --Keith Hazelton

2 1

Kantara Attribute Manasgement Discussion Group
by Salvatore D'Agostino 15 Jan '12

15 Jan '12

Hello, Glad to see first responder site and about the SPML - FERO mapping and demonstration. http://www.firstresponder.gov/FRBlog/Default.aspx Our discussion group is looking at attributes such as the F/ERO and would be very interested to know the attributes in the schema. I have had some previous links to the F/ERO and CIKR activity while at CoreStreet and have followed the activity of the technology transfer working group and first responder authentication credential efforts. We are reaching out to organizations to brief or listen during a weekly call http://kantarainitiative.org/confluence/display/AMDG/Calendar also see the minutes and repository of our activities. Thanks for a POC to follow up. Sincerely, Sal Salvatore D'Agostino, CSCIP Chair, Kantara Initiative Attribute Management Discussion Group IDmachines LLC |1264 Beacon Street, #5 | Brookline, MA 02446 | USA http:\\www.idmachines.com <http://www.idmachines.com/> | http:\\idmachines.blogspot.com <http://idmachines.blogspot.com/> | @idmachines +1 617.201.4809 ph | +1 617.812.6495 fax

1 0

FW: Cross operator Project
by Salvatore D'Agostino 13 Jan '12

13 Jan '12

Thanks Ingo. I appreciate the answer to a basic question. I have copied the group. From: Ingo.Friese(a)telekom.de [mailto:Ingo.Friese@telekom.de] Sent: Friday, January 13, 2012 11:32 AM To: sal(a)idmachines.com Subject: AW: Cross operator Project Thank you. I doubt that there is a listat least at DT. But it could be a nice objective of the project to recommend few.. In fact there a hundreds of attributes spread over different data stores in a Telco. Starting from home address of the contract owner up to the duration of the last phone call Von: Salvatore D'Agostino [mailto:sal@idmachines.com] Gesendet: Freitag, 13. Januar 2012 17:18 An: Friese, Ingo; gael.gourmelen(a)orange.com; jonas.k.o.hogberg(a)ericsson.com; thanh-van.do(a)telenor.com; joni(a)ieee-isto.org Cc: fulup(a)fridu.net; Keith.Uber(a)ubisecure.com Betreff: RE: Cross operator Project Thanks for the copy on this, looks like a very good idea and plan. Do you have a list of authoritative and other attributes in the AAA ID, it would be very helpful to the discussion group. From: Ingo.Friese(a)telekom.de [mailto:Ingo.Friese@telekom.de] Sent: Friday, January 13, 2012 9:54 AM To: gael.gourmelen(a)orange.com; jonas.k.o.hogberg(a)ericsson.com; thanh-van.do(a)telenor.com; joni(a)ieee-isto.org Cc: fulup(a)fridu.net; Keith.Uber(a)ubisecure.com; sal(a)idmachines.com Subject: Cross operator Project Hi, find attached the next version of the proposal. Please have a look at it and if you have any remark or something seems unclear please give feedback. You are a kind of Test person group. After your feedback Ill send this proposal out to several groups and organizations to find partners. I mentioned your Company/Organization (Ericsson, Orange, Telenor, Kantara) as potential project partners. I hope this is ok for you, since we had first talks about the project. If its not okplease contact me! Thank you in advance! Looking forward to have an interesting project with you! Best, Ingo Viele Grüße Ingo Friese Deutsche Telekom AG T-Labs (Research & Innovation) Ingo Friese Winterfeldtstr. 21, 10781 Berlin +4930835358148 (Tel.) +49391580216849 (Fax) E-Mail: ingo.friese(a)telekom.de www.telekom.com Erleben, was verbindet. Deutsche Telekom AG Aufsichtsrat: Prof. Dr. Ulrich Lehner (Vorsitzender) Vorstand: René Obermann (Vorsitzender), Dr. Manfred Balz, Reinhard Clemens, Niek Jan van Damme, Timotheus Höttges, Edward Kozel, Claudia Nemat, Thomas Sattelberger Handelsregister: Amtsgericht Bonn HRB 6794 Sitz der Gesellschaft: Bonn WEEE-Reg.-Nr. DE50478376 Große Veränderungen fangen klein an Ressourcen schonen und nicht jede E-Mail drucken.

1 0

Kantara Attribute Management Discussion group
by Salvatore D'Agostino 11 Jan '12

11 Jan '12

Thanks for the offer to discuss attribute management and SCIM on the call today. Our calendar is here, and the wiki has other information on our activity and desire to have a draft on topic out next month. http://kantarainitiative.org/confluence/display/AMDG/Calendar Let us know which one of these Tuesdays works for someone and we can put it on the agenda. Thanks again, Sal

1 0

Revocation Gap in Attribute Management
by Salvatore D'Agostino 10 Jan '12

10 Jan '12

This recent NISTIR makes a few points for possible reference/inclusion in draft report, I will add it to the repository. http://csrc.nist.gov/publications/drafts/nistir-7817/Draft-NISTIR-7817.pdf Sal

1 0

question about our charter
by Heather Flanagan 06 Jan '12

06 Jan '12

Hi all - As I'm working on compiling our notes and discussions in a set of recommendations, it occurs to me that we haven't really (as far as I know) talked about this part of our mandate: IDENTIFY: Kantara Initiative stakeholder requirements regarding Attribute Management. We have a lot of information about activities going on in the attribute management space in our repository, and we have a list of groups working on definitions, but do we actually have a list of what's actually required? Anyone have thoughts/opinions on this? -Heather

2 1

Notes from breakout session regarding attributes from the Mapping the Identity Ecosystem workshop
by Heather Flanagan 04 Jan '12

04 Jan '12

Who is interested in attributes? - Notes from the ISOC Identity Ecosystem Working Group Open Groups defining standards / schemas / frameworks OIX Attribute Exchange: only having its first meeting this week . IETF: ABFAB. MACE-DIR / eduperson / SHAC. More closed defining standards / schemas / frameworks ITU SG 17 U10: open to liaison with experts on board and open to members. ISO. These are possibly at a higher level than attribute schema. Discussion / implementation groups: Kantara Attribute Discussion Group. REFEDS Attribute Release. Other. SCIM. eID initiatives. Problem areas Sharing across the groups it is difficult to share across where information is closed off by non-release before final / copyright / behind closed doors. The earlier in the process you share work, the easier interoperability is later. Where is convergence? How are we ensuring that the correct feedback is being created when outputs / schemas / proposals are coming out of these groups? Is Kantara the feature for this? Solutions: making John Bradley be the lynch-pin. use existing discussion groups – Kantara is the obvious place. Go out to all the places having discussions – unscaleable. What is the “internet of things” attribute schema? MIBS (++). Attributes of things as well as attributes of people. Devices – as identity consumers as well as having identities themselves. Is device identity more a projection of personal identity? Too much, too many, too patchy. Collision-resistant namespaces - the OpenID Connect approach. Solutions: A simple way to design attribute schema. Attribute registry? Things that don’t assume that there will be one of every type. Agreement around extensibility. IANA? Context provider – in what context can I use this context? Where does the conversation about this happen? Who operates an attribute registry? We need real participants who will benefit from this. Fostering Implementation Developing the business case, putting time and effort in to adoption of what we have now. Discussions to be had around what is the right scope to put around the structure of attributes – filtering, flexibility, assertion. Solutions: ???? Unclear spaces Language code – still not a coherent way to express preferred language. Solutions: write up an RFC on problematic points? OVERALL ACTION: Give these notes to OIX and Kantara

2 1

FW: [trust-el] Call for additional method examples
by Sunday, Robert 03 Jan '12

03 Jan '12

For the interest of the KI Attribute Management Discussion Group ... Regards, Bob Sunday Cyber Authentication Initiative I Initiative d'authentification Cyber Chief Information Officer Branch | Direction du dirigeant principal de l'information Treasury Board of Canada Secretariat | Secrétariat du Conseil du Trésor du Canada Ottawa, Canada K1A 0R5 Office: 613-941-4764 Email: robert.sunday(a)tbs-sct.gc.ca Government of Canada | Gouvernement du Canada ________________________________ From: Sunday, Robert Sent: December 20, 2011 2:30 PM To: 'trust-el(a)lists.oasis-open.org' Subject: RE: [trust-el] Call for additional method examples While not exactly a method example, we feel that it is important to recognize the separation of identity from credentials. To this end I would like to point out the work done on the Pan-Canadian Assurance Model last year. (link below) There is a discussion of the separation of identity and credential and a discussion of compensating factor. The publicly available document is here http://www.iccs-isac.org/en/km/transformative/docs/Pan-Canadian%20Assurance… A corresponding deck can be found here: http://www.iccs-isac.org/en/km/transformative/pdf/assurance.asp Regards, Bob Sunday Cyber Authentication Initiative I Initiative d'authentification Cyber Chief Information Officer Branch | Direction du dirigeant principal de l'information Treasury Board of Canada Secretariat | Secrétariat du Conseil du Trésor du Canada Ottawa, Canada K1A 0R5 Office: 613-941-4764 Email: robert.sunday(a)tbs-sct.gc.ca Government of Canada | Gouvernement du Canada ________________________________ From: trust-el(a)lists.oasis-open.org [mailto:trust-el@lists.oasis-open.org] On Behalf Of Mary Ruddy Sent: December 8, 2011 9:42 AM To: trust-el(a)lists.oasis-open.org Subject: [trust-el] Call for additional method examples Thank you again to those who submitted the first 7 trust elevation method examples that we discussed at the Face-to-face meeting. Attached are the template format for method examples and a sample draft (KBA). Please submit your method examples using the template. (It is ok if they are rough, we have editors to polish them.) Let me know if you have any questions. We don't yet have any examples involving phones, so it would be particularly helpful to get some phone examples. Let me know what questions you have. Best regards, Mary

2 1

REMINDER & AGENDA: DGAM Telecon Tuesday 03 January 2012 11h PT / 14h ET / 19h UTC
by Heather Flanagan 03 Jan '12

03 Jan '12

DIAL-IN: * Skype: +99051000000481 * US Dial-In: +1-805-309-2350 | Room Code: 613-2898 (See http://kantarainitiative.org/wordpress/calendar/ for more international dial-in information) DATE: Tuesday, 03 January 2012 TIME: 11h PT / 14h ET / 19h UTC AGENDA: 1. Administrative a. Roll Call b. New member introduction c. Motion for minutes approval: Minutes 2011-12-20 2011-12-06 2011-11-08 (Do we want to do this as DG? It is not required) d. Agenda confirmation e. Action item review (see below) | 20111108-04 | all | Review the eGov requirements and see what information can be used/discussed at next call | 20111206-02 | Heather | Report on Mapping the Identity Ecosystem workshop, Amsterdam | 20111206-03 | Colin | Report back as liaison with OASIS Trust Elevation | 20111220-01 | Keith| send notes on discussion of the Mapping workshop from the Internet2 MACE-Dir call | 20111220-03 | Sal | update Current Industry Efforts to the OIX attribute working group and the OASIS trust elevation group | 20111220-04 | Keith | add a link to the Internet2/Kuali-Rice/registry group working on a data model to Current Industry Efforts | 20111220-05 | Sal | have an attribute gap session at IIW in January and report back | 20111220-06 | Sal | report back on the "13+3" DOD attributes | 20111220-07 | Heather | have initial discussion group report ready by February 14 call

1 1