- DG-AM - mailman.kantarainitiative.org

REMINDER & AGENDA: AMDG telcon 19-June-2012
by Heather Flanagan 19 Jun '12

19 Jun '12

Hi all - The full agenda is available online: http://kantarainitiative.org/confluence/x/XYKOAw Date and Time Date: Tuesday, 19 / 06 / 2012 Time: 11h PT / 14h ET / 19h UTC Dial in: * Skype: +99051000000481 * US Dial-In: +1-805-309-2350 | Room Code: 613-2898 Agenda AGENDA: Administrative Roll Call New member introduction - no new members Agenda confirmation Approval of Minutes: AMDG Notes 2012-06-05 Action item review Discussion Deciding our own next steps refining gaps and recommendations, determining what should be handled by existing groups vs. what will require a new group F2F in DC - Aug 8-10 Latest Attribute Management news

1 1

Gaps and Recommendations Summary Slides
by Salvatore D'Agostino 18 Jun '12

18 Jun '12

For discussion tomorrow along with other items on agenda. Attached copy as last delivered to OIX AX WG, also presented same to OASIS Trust Elevation TC.

1 0

FYI - PHI Conference Washington DC Aug 8-10
by Joni Brennan 14 Jun '12

14 Jun '12

Note that there is also a conference occurring in Washington DC Aug 8-10 for PHI. People may want to attend both or it may make travel more worthwhile for some so have to travel. Thanks http://events.r20.constantcontact.com/register/event?oeidk=a07e5y1f8346cfc0… Join C-level privacy, security and financial executives from the U.S. Healthcare Industry in an interactive event designed to: Build, present and defend a business case for PHI security initiatives tailored exclusively for their enterprise Accelerate approval of privacy and security initiatives that are “stalled” due to difficulty calculating ROI for internal business case Become a “trusted advisor” in development of the business case for enhanced investment in privacy and security Acquire insights on solutions as strategic investments to gain market advantage versus commodity or compliance cost to be minimized Create a “value at risk” to calculate ROI for future privacy and security initiatives and determine investment level Designed to enhance the business case for protecting PHI before the upcoming budget cycle. Prepare for answering: What is the value of the PHI we are protecting? What is the appropriate level of investment to protect our PHI? What is the ROI of these investments? =Joni Joni Brennan Kantara Initiative | Executive Director voice:+1 732-226-4223 email: joni @ ieee-isto.org Slideshare - Building Trusted Identity Ecosystems - It takes a village! http://www.slideshare.net/kantarainitiative/kantara-may-2012

1 0

Fwd: [KI-LC] REVIEW DRAFT: Kantara Initiative Position Paper - NSTIC Steering Group Formation v0.2
by Heather Flanagan 08 Jun '12

08 Jun '12

Hi all - (sorry for the duplicate post, for those who saw this on another list). If any of you have comments on this draft, please let Sal, Keith, or I know and we will take it to the LC. Thanks! -Heather ----- Forwarded Message ----- From: "Joni Brennan" <joni(a)ieee-isto.org> To: LC(a)kantarainitiative.org, "dg-nstic" <dg-nstic(a)kantarainitiative.org> Sent: Thursday, June 7, 2012 3:32:33 PM Subject: [KI-LC] REVIEW DRAFT: Kantara Initiative Position Paper - NSTIC Steering Group Formation v0.2 Hello LC and NSTIC DG, Please find attached the early draft of Kantara Position Paper - NSTIC Steering Group Formation This is a draft - which means - now is the time for you members to submit your comments and edits - both general and specific. I will amalgamate comments received. A few notes. Please send with in one week for inclusion in the next draft. The following Groups please send in your group representative edits / copy as appropriate. If your group does not align or have context then you have no action to take. - AMDG - BCTF - Consumer ID WG - HIAWG - Telco ID WG - Japan WG (I'm not sure that Japan will have input as this is a US strategy but the opportunity is open for this group as well!) - other KI stakeholders not included above (?) UMA WG - Eve I got your comments but would like to know which of the stakeholder groups you see UMA aligning with. Once we see which stakeholder groups Kantara groups are aligning with we will be able to work forward toward final input. Please note that the NSTIC Governance recommendation calls for organizations / individuals to identify with ONE stakeholder group [1]. I believe this is a challenge as many organizations will find overlap. Our approach should be to either - Reach consensus on one stakeholder group to identify with OR - Provide input regarding how the governance should change to allow for organizations / individuals to align with multiple stakeholder groups. Remember this is our opportunity to help shape the NSTIC steering governance model and highlight the significant work that Kantara is already progressing in the space. [1] Recommendation 25: Each Stakeholder should be required to “self-identify” into the stakeholder group which it considers best represents its primary role or interest in the Identity Ecosystem. Self-identification into one stakeholder category at a time would prevent organizations that may play multiple roles in the Identity Ecosystem from exerting undue influence by gaining more than one vote on the Management Council. Importantly, individuals that do not wish to self-identify into one of the other 13 stakeholder groups may choose to participate as an Unaffiliated Individual. I look forward to working with you to publish this paper. =Joni Joni Brennan Kantara Initiative | Executive Director voice:+1 732-226-4223 email: joni @ ieee-isto.org Slideshare - Building Trusted Identity Ecosystems - It takes a village! http://www.slideshare.net/kantarainitiative/kantara-may-2012 _______________________________________________ LC mailing list LC(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/lc

1 0

REMINDER & AGENDA AMDG telcon, 5-June-2012
by Heather Flanagan 05 Jun '12

05 Jun '12

**In order to keep costs down for the Kantara Initiative, please use the Skype or regular toll dial-in where possible.** Date and Time Date: Tuesday, 05 / 06 / 2012 Time: 11h PT / 14h ET / 19h UTC Dial in: * Skype: +99051000000481 * US Dial-In: +1-805-309-2350 | Room Code: 613-2898 AGENDA: Administrative Roll Call New member introduction - no new members Agenda confirmation Action item review Discussion Report on feedback from internal and external groups to our report Cooperative work with P3 WG and Healthcare Identity Assurance WG Latest Attribute Management news

1 1

Cross collaborating meeting for HIA WG, IA WG, P3 WG & AM DG
by Dervla O'Reilly 05 Jun '12

05 Jun '12

All, Leadership of HIA WG, IA WG, P3 WG & AM DGs met today to socialise the idea of a cross collaboration meeting August 6-8. The idea is to offer an event in the D.C. area, kindly hosted by Surescripts at their Crystal City office. The event will focus on the inter connectivity and work of the Groups and share relevant components to make things interoperable. Then each Group would talk to their focussed deliverables and how they can be put in place. Stay tuned for further scope from Joni Brennan. What: Cross collaboration meeting When: August 6 - group leadership meeting, August 7 & 8 cross collaboration meeting Where: Surescripts Office, Crystal City Participants of the Groups: 1. Do we have enough group participation to attend this event? 2. What are the meeting room requirements for August 7 & 8? 3. Can you share thoughts regarding specific content you would like to see on the agenda Please provide your feedback by close of business Wednesday, June 6. Thanks everyone, Dervla ________________________ Dervla O’Reilly Program & Event Manager Kantara Initiative +1 415 731 4487 business +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org Learn more about Kantara Initiative membership: http://kantarainitiative.org/wordpress/membership/

1 2

Short update wrt final report and the Kantara LC
by Heather Flanagan 31 May '12

31 May '12

Hi all - When last we left our humble report, it was in the hands of the Kantara Leadership Council for review. Since then, the LC has had a bit of a time of it actually reaching quorum on the call, and so the necessary vote on whether to accept the report as an official Kantara document is moving to an e-vote. That will be sent out by Kantara staff and the LC will have 7 days to vote on it. If/when it is accepted as a Kantara doc, the LC will go over the individual recommendations to determine what the next steps should be (i.e. what new groups should be created, where can some/any/all of the work be done in existing groups, etc). In terms of feedback, so far I've received no comments from LC members not already involved in the creation of the doc. Outside Kantara, rumor has it that the document is being very well received. -Heather Flanagan

2 1

REMINDER: Agenda & Telecon info, 22-May-2012
by Heather Flanagan 29 May '12

29 May '12

Date: Tuesday, June 5, 2012 Time: 11h PT / 14h ET / 19h UTC Dial in: * Skype: +99051000000481 * US Dial-In: +1-805-309-2350 | Room Code: 613-2898 Agenda - http://kantarainitiative.org/confluence/x/EwCGAw AGENDA: Administrative Roll Call New member introduction - new members: Anil John Agenda confirmation Action item review Discussion Latest news Open Action Items Action Item Review : (*Action Items numbered as *YYYYMMDD-01 Assignee : description....) Action Item Assigned To Description Status Comments 20120508-01 Sal Present action items to Trust Elevation working group 20120508-02 Sal Add IIW links to repository 20120508-03 Abbie send link to ITU-T group to reach out with report findings 20120508-04 Heather send report to ISOC Attribute list *Complete* 20120508-05 Keith send out report and put as a discussion item for next MACE-Dir call on May 21 20120508-06 Heather collect input from LC and incorporate any suggestions in to report No feedback received yet 20120508-07 Sal Reach out to CIO Council Access Control Attribute working group New Action Item Next Meeting Date: Tuesday, June 5, 2012 Time: 11h PT / 14h ET / 19h UTC Dial in: * Skype: +99051000000481 * US Dial-In: +1-805-309-2350 | Room Code: 613-2898

2 1

FW: [scim] Feedback on the charter from IESG and IAB
by Salvatore D'Agostino 12 May '12

12 May '12

I updated /repository/industry efforts to include this MITRE reference. http://cybox.mitre.org/ It related to a renaming/positioning of SCIM based on comments that its not exactly simple or identity but ~federated attribute provisioning (my words). -----Original Message----- From: scim-bounces(a)ietf.org [mailto:scim-bounces@ietf.org] On Behalf Of Tony Rutkowski Sent: Friday, May 11, 2012 5:09 PM To: Brenner, Michael Ralf (Michael) Cc: scim(a)ietf.org; melinda.shore(a)gmail.com; Michael Hammer Subject: Re: [scim] Feedback on the charter from IESG and IAB This has now become generic enough that CybOX could be used at the interface. It's just been added to MAEC. If you're not familiar with CybOX, check out cybox.mitre.org Identity attributes are ultimately nothing more than observables. --tony On 5/11/2012 2:00 PM, Brenner, Michael Ralf (Michael) wrote: > IAPI: Identity Attributes Provisioning Interface _______________________________________________ scim mailing list scim(a)ietf.org https://www.ietf.org/mailman/listinfo/scim

1 0

Why LOA for Attributes Don’t Really Exist
by Rainer Hoerbe 10 May '12

10 May '12

Peter Alterman's analysis of attribute LoA: http://blog.idmanagement.gov/2012/05/why-loa-for-attributes-dont-really.htm…

1 0