- DG-BCTF - mailman.kantarainitiative.org

NOTICE: Proposal to archive BCTF and move works to FIWG
by Joni Brennan 31 Mar '15

31 Mar '15

(cc'd Leadership Council Officers) Dear BCTF, This message is to inform the BCTF of a proposal to consolidate the BCTF work within the Federation Interoperability WG. Working via the Leadership Council, the active FIWG has agreed to accept a contribution of the BCTF works and to continue their development lifecycle. This notice is to advise the BCTF that the Leadership Council (LC) will take actions to move BCTF works to FIWG and to subsequently close the BCTF on the next LC meeting scheduled for April 8th. The BCTF mail list and wiki will then be archived for reference. BCTF participants who wish to continue to contribute to BCTF works are invited to join the FIWG. https://kantarainitiative.org/confluence/x/MYZ7Ag Strong objections to this proposal should be sent to the BCTF list or directly to me should you prefer for privacy. If no objections are communicated, the plan will move forward as proposed. We thank you for your continued contributions to Kantara Initiative toward innovating digital identity solutions and practices! Best Regards, Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

Updated Trust Framework Survey
by Rainer Hoerbe 22 Jun '12

22 Jun '12

As proposed at the last call I updated the list on the Wiki with the data collected for the presentation at the EEMA conference last week. Please not following updates on the Trust Framework Survey page: Added new trust frameworks and more data columns. Now over 110 federations are included, a lot more data was collected, some clean-up done. A breakdown of the data by some categories shows the distribution by country, industry, technology etc. I added a "Top 5 per category" list. The title was renamed from "Implemented Trust Frameworks" to "Global Trust Framework Survey" The slides of my presentation in Paris can be downloaded here. @Patrick: How is the status of proposing a Kantara Report to the LC? Best regards Rainer

1 0

BCTF DG: ad hoc meeting
by Rainer Hoerbe 06 Jun '12

06 Jun '12

Please note the next conference call for the Business Cases for Trust Federations: Location Local time Time zone UTC offset Vienna (Austria - Vienna) Mittwoch, 6. Juni 2012, 21:00:00 CEST UTC+2 hours London (United Kingdom - England) Mittwoch, 6. Juni 2012, 20:00:00 BST UTC+1 hour Auckland (New Zealand) Donnerstag, 7. Juni 2012, 07:00:00 NZST UTC+12 hours Vancouver (Canada - British Columbia) Mittwoch, 6. Juni 2012, 12:00:00 PDT UTC-7 hours Corresponding UTC (GMT) Mittwoch, 6. Juni 2012, 19:00:00 Agenda: 1. Implemented Trust Frameworks Extend the scheme for the "implemented Trust Frameworks" document and discuss further steps to produce an official Kantara Report. 2. AOB Teleconference Info: - Skype: +9900827044630912 - North American Dial-In: +1-201-793-9022 - Room Code: 4630912 Phone Numbers (Toll) Country Number *Long distance costs apply United States +1 (201) 793-9022 Canada +1 (201) 793-9022 Austria +43 (0) 720881948 Belgium +32 (0) 7 0357134 France +33 (0) 826109071 Germany +49 01805009527 Ireland +353 (0) 818270968 Italy +39 691717889 Italy +39 848390177 Spain +34 (9) 02885791 Switzerland +41 (0) 8 48560397 United Kingdom +44 (0) 8454018081

2 1

please select a date for an BCTF ad-hoc call
by Rainer Hoerbe 24 May '12

24 May '12

I would like to convene a meeting for the BCTF discussion group. There is one item on the agenda: Extend the scheme for the "implemented Trust Frameworks" document and discuss further steps to produce an official Kantara Report. Please select a date in this Doodle page: http://www.doodle.com/ryefyp6huwb3dre3 Best regards Rainer Hörbe

4 4

Congratulations to Rainer Hoerbe and Patrick Curry
by Anna Ticktin 04 May '12

04 May '12

Hello All— Join us in congratulating Rainer Hoerbe and Patrick Curry who have been re-elected and elected respectively as the Chairman and Vice-Chairman of the Business Cases for Trusted Federations Discussion Group in Kantara Initiative. Whilst the work effort looks for a more permanent home within Kantara's established working groups, we trust the leadership and guidance of these two to fully progress the BCTF initiative. Congratulations Rainer and Patrick! —> Anna Ticktin anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

BCTF DG Leadership Elections
by Anna Ticktin 19 Apr '12

19 Apr '12

Hello All— What follows is a secret ballot to elect leadership in the Kantara Initiative Business Cases for Trusted Federations (BCTF DG). We received the following nominees and ask that you complete the ballot and submit your vote to staff [at] kantarainitiative [dot] org as directed in item [3] below. Nominee for Chairman: Rainer Hoerbe Nominee for Vice Chairman: Patrick Curry 1. MOTION: To elect the following candidates nominated for the identified officer roles in Kantara BCTF DG. Nominee for Chairman: Rainer Hoerbe Nominee for Vice Chairman: Patrick Curry (Duties of the Chairmen are captured in section 4.4.1 and 4.4.2 of the Operating Procedures.) 2. TERMS: Per section 4.7 of the Operating Procedures, this vote requires a majority vote, or at least 6 affirmative votes, to pass. http://kantarainitiative.org/confluence/download/attachments/2293776/KI+Ope… 3. BALLOT CLOSE DATE: This vote is being issued as a secret ballot, so please reply to staff[at]kantarainitiative[dot]org no later than Friday, 27 April 2012 at 17:00 PT. Additionally, please include in your SUBJECT line "Vote for BCTF DG Leadership. " 4. PROPOSED VOTE: If you are currently a VOTING member, please respond with your vote. If you are not certain of your voting status, the roster of participants is available here: http://kantarainitiative.org/confluence/display/bctf/Participant+Roster I cast my ballot as follows regarding the motion listed above. ________ YES ________ NO * ________ ABSTAIN * IF NO VOTE, Please include the rationale for your “no vote” to help facilitate resolution: ______________________________________________________________________ 5. MEMBER NAME/AFFILIATION: ______________________________________________________________________ —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Leadership Nominations
by Anna Ticktin 23 Mar '12

23 Mar '12

Hello All— Thanks in advance for your time and thoughtful consideration. Pasted below is the call for BCTF Leadership nominations: This note serves as a reminder that nominations are open for leadership positions within the Business Cases for Trusted Federations Discussion Group in Kantara Initiative. http://kantarainitiative.org/confluence/display/bctf/Home Any and all participants and members are eligible for positions. Per section 4.4 of the Operating Procedures, nominations are opening for the following position: 1. Chair/Vice-Chair (duties detailed in section 4.4.1 and 4.4.2 of the Operating Procedures) a. Secretary will serve by appointment of the Chair Please send your nominations to staff (at) kantarainitiative (dot) org. You may nominate yourself or any other member or participant (participant roster is available here: http://kantarainitiative.org/confluence/display/bctf/Participant+Roster Please include in your subject line "Nominations for BCTF DG Leadership." Nominations will be open until 17:00 PST 6 April 2012. At that time, we will compile the nominations, contact the nominees to confirm their interest in serving in a given capacity, and move forward with a ballot election. If you have any questions on this process, the associated duties, etc, please do not hesitate to contact staff (at) kantarainitiative (dot) org. Regards, —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Update on activities and documents
by Rainer Hoerbe 17 Feb '12

17 Feb '12

1. I presented the idea of creating an official Kantara report on the status quo of federation projects to Kantara's LC on Feb. 15. The conclusion was to ask IAWG to host this activity, possibly as a sub-group, to benefit from broader attention. In addition will Patrick and I pursue the idea convincing some people to research the topic in an academic context. 2. I updated the list of implemented federation projects with new data, now approx. 50 projects, and added a column on quantitative structures to gauge each federation size in terms of users, IDPs and SPs. I ask subscribers of this group to contribute data to that table - many of these projects were described by Liberty/Kantara in the past, so I think that our community should know something about it. - Rainer ----------- This mail contains a riddle. If you search carefully you might find a hidden message that asks you for a contribution to the BCTF Wiki ;-)

1 0

REMINDER! BCTF DG telecon currently underway! Pls Join!
by Anna Ticktin 02 Feb '12

02 Feb '12

> DIAL-IN: > > LINE B > * Skype:+99051000000481 > * US Dial-In: +1-805-309-2350 | Conference ID: 613-2898 > > > DATE: > Thursday, 02 / 02 / 2012 > > TIME: > 11h PT / 14h ET / 19h UTC —> Anna Ticktin anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Slides for meeting
by Rainer Hoerbe 02 Feb '12

02 Feb '12

http://kantarainitiative.org/confluence/download/attachments/45057980/what+…

1 0

REMINDER : AdHoc this Thursday!! Pls note the new dial-in
by Anna Ticktin 01 Feb '12

01 Feb '12

DIAL-IN: LINE B * Skype:+99051000000481 * US Dial-In: +1-805-309-2350 | Conference ID: 613-2898 DATE: Thursday, 02 / 02 / 2012 TIME: 11h PT / 14h ET / 19h UTC AGENDA to Come! —> Anna Ticktin anna(a)kantarainitiative.org anna(a)ieee-isto.org

3 3

PRIORITY!! AdHoc BCTF-DG telecon proposed! Pls respond!
by Anna Ticktin 26 Jan '12

26 Jan '12

Hello Folks! Please respond to the doodle poll below with your availability for the proposed telecon tentatively scheduled for next Thursday, 2 February 2012. (NOTE: all times are in Pacific Time). http://doodle.com/rkd4zwthtg3w3u7i Regards. —> Anna Ticktin anna(a)kantarainitiative.org anna(a)ieee-isto.org

3 5

Re: [DG-BCTF] [WG-UMA] UMA & Kantara Cloud Best Practices
by Neil McEvoy 04 Dec '11

04 Dec '11

Thank you Salvatore. Yes I'd like to focus on a use case too, and actually this cuts across a number of WG's and provides a common focus for how Cloud might apply to them. Recently EHealth Ontario joined our 'Canadian Cloud Best Practices Council' (http://canadacloud.biz/cloud-best-practices-council/) with a view to collaborating on developing new innovations. They have their own Federated Identity program called 'ONE ID' - http://www.ehealthontario.on.ca/programs/one_id.asp, which is more theory than it is reality at the moment, and so I'd like to propose Kantara is the ideal way to implement it. They're focused just on the authentication function at the moment, but I think ONE ID is the ideal metaphor for a broader citizen-centric identity architecture, and so how we might additionally incorporate UMA principles would be very productive. I'd also like to explore how this would correlate with a single identifier, like XDI i-names et al. Kind regards, Neil. ----- Original Message ----- From: Salvatore D'Agostino To: 'Neil McEvoy' ; wg-uma(a)kantarainitiative.org Sent: Friday, November 18, 2011 5:58 AM Subject: RE: [WG-UMA] UMA & Kantara Cloud Best Practices Neil, Speaking for myself it would be good to move ahead a use case. Is there a particular vertical, I was thinking that given the needs around health care that we could actually serve eGov and Health IT folks as well. As you will see we UMAnitarians are a cooperative lot, so curious about others ideas. We (UMA) also have a need to progress our trust model so maybe this can help focus on use case as well. Thanks for the interest. Sal From: wg-uma-bounces(a)kantarainitiative.org [mailto:wg-uma-bounces@kantarainitiative.org] On Behalf Of Neil McEvoy Sent: Friday, November 18, 2011 12:45 AM To: wg-uma(a)kantarainitiative.org Subject: [WG-UMA] UMA & Kantara Cloud Best Practices Greetings UMAnitarians I'm new to the list, and by way of introduction I'd like to highlight I'm in process of setting up a new Kantara WG, called Kantara Cloud Identity and Security Best Practices - This will define the intersection between Cloud Computing and Kantara Federated Identity standards. As part of this process I'm seeking to identify complimentary relationships with other WGs. Concerns over data privacy and controls is the #1 concern over Cloud hosting, so it would seem protocols like UMA are fundamental to success of the Cloud, and given the evolution of IT applications, vice versa. I'd love to hear any ideas for collaboration in this area.. Kind regards, --- Neil McEvoy Founder and President Level 5 Consulting http://L5Consulting.net neil.mcevoy(a)l5consulting.net

4 5

ONE-ID as a Service
by Neil McEvoy 02 Dec '11

02 Dec '11

Hi folks I have just joined the Health ID Assurance and Business Case for Federations groups. By way of introduction I am in process of starting a new Kantara WG - Cloud Identity and Security Best Practices, which will focus on the overlap between Kantara programs and Cloud Computing. As part of this I'm looking to define partnering relationships to the other WG's, and here's my initial suggestion for doing so below: I'm working with EHealth Ontario, where they have their own similar program called 'ONE ID' - http://www.ehealthontario.on.ca/programs/one_id.asp So I'd like to propose to them: - How the Kantara Health ID program could be applied in this scenario to implement a Federated Identity system - Via a first step of documenting the business case for doing so The main output from the Kantara Cloud group will be to define how the Kantara standards can be implemented via 'IDaaS' - Identity as a Service, and so this exercise will then further clarify how it could be applied for this industry requirement, so creating 'ONE ID as a Service'. Let me know thoughts and ideas for how best to move this forward, Thanks and regards, --- Neil McEvoy Founder and President Level 5 Consulting http://L5Consulting.net neil.mcevoy(a)l5consulting.net

4 5

AM DG Charter Ready - Seeking Convener
by Joni Brennan 10 Aug '11

10 Aug '11

Hello, The Attribute Management Draft Charter (attached) has received great response and input. The Charter seems ready to move forward. However we are lacking a Convener. We need an individual to volunteer as Convener to get the DG moving. This person could choose to seek group consensus to stay on as a leader or step down during subsequent DG elections. I'm asking for a volunteer(s) to respond to me directly (and please cc' Anna @ kantarainitiative.org) Note: responding to the full list distro will trigger a series of bounces so please just send to Anna and I. Once we have a volunteer the charter can go to LC to move forward. Thanks in advance! =Joni Joni Brennan IEEE-ISTO Kantara Initiative | Executive Director voice:+1 732-226-4223 email: joni @ ieee-isto.org gtalk: jonibrennan skype: upon request Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

1 0

For KI WG/DG Review: Draft Attribute Management DG Charter
by Joni Brennan 04 Aug '11

04 Aug '11

Hello WGs / DGs, The WGs/DGs copied are being contacted because this draft charter identifies each group as 'related' to this discussion. Recently the IAWG has discussed a desire to explore work around Attribute Management. The draft DG charter below was crafted, with IAWG input, to capture that discussion and to define a scope which focuses on: - Identification of KI stakeholder requirements - Discovery of works in progress already (both internal and external to KI) - Performance of gap analysis (between the KI requirements and the works in progress) - Development of recommendation on how Kantara should move forward. Potentially to: - seek to adopt works in progress (external to KI) - seek to engage in collaboration on works in progress (external to KI) - seek to form a KI WG to develop new Attribute Management work(s) We have 2 requests at this time: 1. Send comments back at your earliest convenience. For timing, we'd like to move this forward next week. 2. Confirm if you would 'sign-on' as a proposer (item 6) Thank you in advance for your time, comments and endorsement for this draft. * > DRAFT CHARTER ATTRIBUTE MANAGEMENT DISCUSSION GROUP > * > > *(1) DISCUSSION GROUP NAME* (and any acronym or abbreviation of the name): > The DG name, acronym and abbreviation must not include trademarks not owned > by the Organization, or content that is infringing, harmful, or > inappropriate. > > *Attribute Management Discussion Group (AMDG)* > > *(2) DISCUSSION TOPIC/PURPOSE/MOTIVATION:* Please provide a clear > statement of the topic, purpose, and/or motivation for requesting the > formation of this DG. > The purpose of this Discussion Group is to: > - IDENTIFY: Consensus on a working definition of "Attribute" for purposes > of fulfilling further bullets below. > - IDENTIFY: Kantara Initiative stakeholder requirements regarding Attribute > Management. > - DISCOVER: Attribute Management activities under development both internal > and external to Kantara Initiative. > - GAP ANALYSIS: Attribute Management KI stakeholder requirements compared > to work under development (both internal and external to KI) > - RECOMMEND: scope of work, potential KI adoption of external works, > collaboration with external organizations and/or new WG in KI to perform > design phase of Attribute Management based on requirements, discovery and > gap analysis. > > Areas of consideration include Attribute: > - Assurance > - Schema > - Provisioning > - Binding > - Consent Management (Release, Notice, Privacy) > > Related to the commonality in verticals including: > - Finance, Pharmaceutical, Telecommunications, Jurisdictional, etc > > NOTE: The duration of this group is expected to be generally short in > nature as the group mission is to discover, analyze for gaps and then make a > recommendation. The estimated duration of the DG is approximately 6 months > (or further as decided by the AMDG voting Participants.)* > * > > *(3) LEADERSHIP:* Proposed DG Chair subject to confirmation by a vote of > the DG Participants. > > *NEEDED** > * > > *(4) AUDIENCE:* Anticipated Participants in this DG. > > Actors: > - Identity Providers > - Relying Parties / Data Recipients > > Related KI Groups: > - eGovernment WG > - Identity Assurance WG > - Privacy and Public Policy WG > - Federation Interoperability WG > - Trust Framework Meta-Model WG > - Business Cases for Trusted Federation > - Information Sharing WG > - User Managed Access WG > > Related External Groups: > - ANSI > - NASPO > - OASIS > - Research and Education Federation (REFEDS) > - OIX > - IDABC for Claims > > Related works: > - Simple Cloud Identity Management (SCIM) > - Service Provisioning Mark-up Language (SPML) > - Personal Data Store* > * > > *(5) COPYRIGHT POLICY:* The Organization approved Intellectual Property > Rights Policy to cover any copyright material that may be produced as a > result of DG 'Participants' posts to the wiki or email archives. > > <http://kantarainitiative.org/confluence/download/attachments/2293776/Kantar…> > > Kantara Initiative IPR Policy<http://kantarainitiative.org/confluence/download/attachments/2293776/Kantar…>- Creative Commons Share-Alike Attribution > * > * > > *(6) PROPOSERS:* Names, email addresses, and any constituent affiliations > of at least the minimum set of proposers required to support forming the DG. > At least 3 Participants are required to request formation of a DG. > > 1. Helen Hill, HIMSS > 2. <insert> > 3. <insert> > > > >

2 3

BCTF-DG Meeting Notes 11 July 2011
by Anna Ticktin 11 Jul '11

11 Jul '11

Hello All— For a quick review of today's meeting notes, please click this link : http://kantarainitiative.org/confluence/display/bctf/BCTF-DG+Meeting+Notes+…. —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Dial In Reminder: BCTF-DG Telecon Monday 11 July - 10:00PST / 13:00 EST / 19:00 CEST
by Anna Ticktin 10 Jul '11

10 Jul '11

DIAL-IN: LINE B Skype: +9900827044630912 US Dial-In: +1-201-793-9022 | Room Code: 4630912 DATE: Monday, 11 July 2011 TIME: 10:00PST / 13:00 EST / 19:00 CEST AGENDA: 1. ADMINISTRATIVE: Roll Call Agenda confirmation Action item review 2. F/U on last meetings point "Planning for the DG activities". Please contribute your needs and requirements to enable us to plan. 3. AOB Adjourned —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

2 1

FW: EU Science Community Trust Federation (A single computing identity)
by Colin Wallis 27 Jun '11

27 Jun '11

FYI, courtesy of ITU-T lists.. Note that Kantara member Terena is mentioned here, so with that, and direct to the presenter, we could outreach with KI's uber- TF work and suggest they stop needlessly re-inventing too many wheels. Cheers Colin From: Martin.Euchner(a)itu.int [mailto:Martin.Euchner@itu.int] Sent: Monday, 27 June 2011 8:49 p.m. To: t09sg17q10(a)lists.itu.int; Martin.Euchner(a)itu.int Subject: [T17Q10] A single computing identity FYI: The article references a recent workshop on Federated identity system for scientific collaborations<http://indico.cern.ch/conferenceDisplay.py?confId=129364> at CERN. See: http://indico.cern.ch/contributionListDisplay.py?confId=129364 Presentation slides of particular interest are: IGTF: The International Grid Trust Federation - enabling an interoperable global trust fabric http://indico.cern.ch/materialDisplay.py?contribId=12&sessionId=3&materialI… --- http://www.isgtw.org/feature/single-computing-identity A single computing identity How do you make a federated identity system as secure as the passport system is for air travel? Feature | June 22, 2011 | By Adrian Giordani When a scientist or engineer decides to use a computer grid for the first time, they have to create, identify and become verified. It's a drawn out process of verification, but eventually they get access to powerful computing facilities for their project. The problem arises when the same person wants to access other infrastructures, for example a high-performance computer, they have to go through the same process again, and again, and again. Now, users and providers of e-infrastructure are trying to create a federated identity - that is, easy access to data and services through a single login and standardized security protocols. Then, a user's login would act much like a passport: the user's host organization, such as a university or research institute, provides an identity that allows the user to access the resources from any other infrastructure, much like a passport allows a citizen to travel between countries with an identifying document from their country of citizenship. A federated identity system<https://indico.cern.ch/event/129364> conference was held at CERN on 9th and 10th June, and it was the first step towards addressing issues of identity management. In attendance were software developers and system administrators from five scientific communities including the WLCG<http://lcg.web.cern.ch/lcg/>, European photon/neutron and Earth science communities and discussed how they enabled federation. This need for a federated identity is partially driven by the influx of youthful, 'Generation Y<http://www.guardian.co.uk/money/2008/may/25/workandcareers.worklifebalance>' researchers to academic institutions. "They are the Facebook generation," said Bob Jones, openlab<https://proj-openlab-datagrid-public.web.cern.ch/proj-openlab-datagrid-publ…> director at CERN<http://user.web.cern.ch/user/Welcome.asp>. "They have little tolerance for barriers and relics of the past. They want to share data with whom they want, when they want." It's also driven by the need for better collaboration between institutions. "The scientific community ... faces some significant challenges [such as] the sheer volume of data produced. This is driving a need for distributed solutions where data is hosted across multiple organizations," said Philip Kershaw, a software developer and expert in federated identity management for the British Atmospheric Data Centre (BADC<http://badc.nerc.ac.uk/home/>), and who presented at the conference about the requirements of users in Earth sciences. One of the crucial steps in creating federated identity is to develop a system for federated access which is secure. "Concepts of trust have had to be re-evaluated to address new challenges. There has been a need to go beyond traditional models of security expressed within the bounds of a single organization and enable access to data seamlessly across multiple organizations," said Kershaw. Kershaw worked with US - particularly those at Argonne National Laboratory<http://www.anl.gov/> - and European colleagues to develop the security architecture for the Earth System Grid Federation (ESGF), which integrates high performance computers with large-scale data and analysis servers and is expected to soon have 10,000 users spanning the globe. "Federated security is a large domain and problem space ... There are some big challenges to tackle in terms of how credentials and attributes are translated between domains and how trust is managed," said Kershaw. Does one size fit all? Users of ESGF access global climate model experiments, from Coupled Model Intercomparison Project, Phase 5 (CMIP5<http://cmip-pcmdi.llnl.gov/cmip5/>), of which the data archive is expected to be 2.4 petabytes. Due to this huge size and limitations in bandwidth for users around the world, a distributed solution was required for easier data access. It is typical of research in climate science to require access to multiple data sets from a variety of sources, including web browsers, command line tools such as GridFTP<http://www.globus.org/toolkit/data/gridftp/>, and rich-client tools such as CDAT<http://badc.nerc.ac.uk/help/software/cdat/>. Many of these tools work with HTTP<http://en.wikipedia.org/wiki/HTTP>, an established Internet protocol. "Given a distributed model you then need a federated security solution. For user authentication, this meant the use of technologies like OpenID," Kershaw said. OpenID<http://openid.net/> is a decentralized open standard that provides users with a single unique URL to access any of their online accounts. "It was selected because it was perceived as a simple protocol with good support in terms of software implementations," said Kershaw. However, OpenID is not without its security flaws. "We profiled its use stipulating HTTPS<http://en.wikipedia.org/wiki/HTTP%20Secure> for all interactions to make it more secure and also to enable us to white list Identity Providers (IdP)." Identity providers represent a user's academic institution. "So the system only accepts users from a given set of institutions trusted within the federation," Kershaw said. However, even this single-sign-on concept, although straightforward, can present challenges. One example is when a user creates multiple OpenID accounts unnecessarily. Kershaw said, "Users unfamiliar with the single-sign on concept can get confused in a federated system. It needs careful design of user interfaces and the right help and support to introduce users to concepts." There has been a need to go beyond traditional models of security expressed within the bounds of a single organization and enable access to data seamlessly across multiple organizations," said Philip Kershaw. Another problem is that OpenID is only suited to browser-based clients, so Kershaw and the ESGF development team had to develop an alternative solution for users who use other software clients. Their solution was: "By securing applications like OPeNDAP<http://www.opendap.org/> with SSL<http://en.wikipedia.org/wiki/Transport%20Layer%20Security> it became possible to exploit a Grid-like model for authentication. Users obtain short lived credentials from a MyProxy<http://grid.ncsa.illinois.edu/myproxy/> server hosted at their IdP. With this, they can configure non-browser based clients to authenticate over SSL with the OPeNDAP service," he said. Hydrology and oceanography scientific communities are also showing an interest in ESGF's federated approach. However, there are 'federated identity' alternatives to OpenID. In the US, for example, more than 4,500 users have been given single-sign on to access to TeraGrid<http://www.teragrid.org/>'s high-performance computing resources. They use Shibboleth<http://shibboleth.internet2.edu/>, which is an implementation of SAML<http://saml.xml.org/>, the security standard widely adopted by US-based campuses. For Jim Basney, a senior scientist working on TeraGrid, Shibboleth is a high quality service and has active community support. He said, "We have diverse requirements, and it is unlikely that a single standard will ever satisfy all cases. Ideally we will adopt approaches that are open, interoperable, and scalable, not just from a strictly technical perspective but also in terms of policy and community support." With kind regards Martin Euchner. Advisor of Study Group 17 Telecommunication Standardization Bureau (TSB) International Telecommunication Union (ITU) e-mail : Martin.Euchner(a)itu.int Phone : +41 22 730 5866 Mobile: +41 79 592 4688 URL : http://www.itu.int/ITU-T/studygroups/com17 Office No : M.415 [cid:image001.png@01CC35AB.3548E070] Place des Nations CH-1211 Geneva 20 Switzerland ==== CAUTION: This email message and any attachments contain information that may be confidential and may be LEGALLY PRIVILEGED. If you are not the intended recipient, any use, disclosure or copying of this message or attachments is strictly prohibited. If you have received this email message in error please notify us immediately and erase all copies of the message and attachments. Thank you. ====

1 0

Agenda for BCTF ad hoc Tconf Monday 2011-06-27
by Rainer Hörbe 26 Jun '11

26 Jun '11

The ad-hoc meeting to replace this month regular meeting (that was on a holiday) is on Monday, 27 June 2011 19:00 CEDT; see the calendar for all the details: Date and Time WG telecon on Monday, 27 June 2011, at 10:00am PT (time chart) DIAL-IN: - Skype: +9900827044630912 - North American Dial-In: +1-201-793-9022 - Room Code: 4630912 Agenda Progress since Berlin: Draft of Cooperation Models for Trust Federations Draft of Business Models Planning: Wishes, requirements, resource AOB Rainer Hörbe ________________________ DG-BCTF mailing list dg-bctf(a)kantarainitiative.org

1 0

REMINDER: BCTF-DG AdHoc Telecon Monday 27 June 2011 10h PST / 13h EST / 19h CEST
by Anna Ticktin 23 Jun '11

23 Jun '11

> Hello All— > > This serves as a reminder that the BCRF-DG will be holding it's adhoc telecon next Monday. Please mark your calendars as a reminder for participation. > Rainer will follow with a complete agenda in advance of the call. > > > DATE: > Monday 27 June 2011 > > TIME: > 10h PST / 13h EST / 19h CEST > > > DIAL-IN: > - Skype: +9900827044630912 > - North American Dial-In: +1-201-793-9022 > - Room Code: 4630912 > > > —> Anna Ticktin > > Technical Program Coordinator > anna(a)kantarainitiative.org > anna(a)ieee-isto.org >

1 0

Re: [DG-BCTF] BCTF Tconf Whit Monday 19:00
by Rainer Hörbe 13 Jun '11

13 Jun '11

Let us dial in and see who will join. If it just the three of us I think would should postpone the meeting. Am 13.06.2011 um 18:19 schrieb Louie, Sarah I CITZ:EX: > Hi Rainer. Is this still happening today? > > > Sarah Louie, BSc (Computer Science), SCF (SABSA), CISSP > Application Security Architect > Information Security Branch, OCIO > Ministry of Labour, Citizens' Services and Open Government > Land: 250-952-6965 > BlackBerry: 250-415-2644 > www.cio.gov.bc.ca > > -----Original Message----- > From: Louie, Sarah I CITZ:EX > Sent: Friday, June 10, 2011 11:18 AM > To: 'Rainer Hörbe' > Subject: RE: [DG-BCTF] BCTF Tconf Whit Monday 19:00 > > Thank you. I am available. > > > Sarah Louie, BSc (Computer Science), SCF (SABSA), CISSP > Application Security Architect > Information Security Branch, OCIO > Ministry of Labour, Citizens' Services and Open Government > Land: 250-952-6965 > BlackBerry: 250-415-2644 > www.cio.gov.bc.ca > > > -----Original Message----- > From: Rainer Hörbe [mailto:rainer@hoerbe.at] > Sent: Friday, June 10, 2011 10:34 AM > To: Louie, Sarah I CITZ:EX > Cc: dg-bctf(a)kantarainitiative.org > Subject: Re: [DG-BCTF] BCTF Tconf Whit Monday 19:00 > > 10:00 Pacific > 19:00 Central European > >

2 2

Re: [DG-BCTF] BCTF Tconf Whit Monday 19:00
by Rainer Hörbe 10 Jun '11

10 Jun '11

10:00 Pacific 19:00 Central European Am 10.06.2011 um 19:15 schrieb Louie, Sarah I CITZ:EX: > Hi Rainer. 19:00 what country and time zone? > > > Sarah Louie, BSc (Computer Science), SCF (SABSA), CISSP > Application Security Architect > Information Security Branch, OCIO > Ministry of Labour, Citizens' Services and Open Government > Land: 250-952-6965 > BlackBerry: 250-415-2644 > www.cio.gov.bc.ca > > -----Original Message----- > From: dg-bctf-bounces(a)kantarainitiative.org [mailto:dg-bctf-bounces@kantarainitiative.org] On Behalf Of Rainer Hörbe > Sent: Friday, June 10, 2011 10:09 AM > To: dg-bctf(a)kantarainitiative.org > Subject: [DG-BCTF] BCTF Tconf Whit Monday 19:00 > > I would like to ask who will be available on Monday. > > Agenda items: > - Review of Berlin minutes > - Progress since Berlin (little) > - Planning: Wishes, requirements, resources > > Have a nice WE > Rainer > _______________________________________________ > DG-BCTF mailing list > DG-BCTF(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/dg-bctf

1 0

BCTF Tconf Whit Monday 19:00
by Rainer Hörbe 10 Jun '11

10 Jun '11

I would like to ask who will be available on Monday. Agenda items: - Review of Berlin minutes - Progress since Berlin (little) - Planning: Wishes, requirements, resources Have a nice WE Rainer

1 0

BERLIN F2F dial-in schedule—PLS READ!!!
by Anna Ticktin 06 May '11

06 May '11

Hello there— As we approach the Kantara F2F in Berlin, I want to highlight some wg calls will be shifted that week to allow for dial-in participation from members otherwise unable to attend in person. Given the interdependent agendas and efforts of many of our Assurance & Certification wgs, I'm pasting relevant sessions that may be of interest to members in addition to their regular telecon commitments. In accordance with past practices, this schedule presumes the regular weekly calls will be supplanted by the Berlin agenda unless otherwise agreed to by your WG. Please note these adjusted call times for the week of 16 May 2011 and adjust your schedules accordingly. (Dial-ins will follow. ) (All times are given in Central European Time and calculated for EST & PST. To ensure accuracy or check conversions for your particular times zone, please reference the world clock link.) Monday 16 May: • Business Cases for Trusted Federation DG 13h-15h CET / 7:00-9:00 EST • Assurance & Certification Sync Session 1 15:15h-17h CET / 9:15-11:00 EST / 6:15-8:00 PST • eGOV 15:15h-17h CET / 9:15-11:00 EST / 6:15-8:00 PST Tuesday 17 May: • P3WG 13h-15h CET / 7:00-9:00 EST • IAWG 15:15h-17h CET / 9:15-11:00 EST / 6:15-8:00 PST • eGOV 15:15h-17h CET / 9:15-11:00 EST / 6:15-8:00 PST Wednesday 18 May: • Assurance & Certification Sync Session 2 1513h-15h CET / 7:00-9:00 EST Again, dial-ins will follow. Regards. —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0