November 2015 - DG-IDoT - mailman.kantarainitiative.org

IDoT TeleCon
by Ingo.Friese＠telekom.de 29 Jul '16

29 Jul '16

Dear All, I hope you are all doing well. I'd like to remind you that our next IDoT-call is coming up today. I'm looking forward to talking to you! PS: Unfortunately Aninda won't be able to attend, so we won't discuss the ADEPT-project. But let's have an update about other things. Best regards Ingo Date and Time * Thursday, April 30th, at 7am PT (time chart)<http://www.timeanddate.com/worldclock/fixedtime.html?msg=IDoT+Conf+Call&iso…> * Voice: Skype: +99051000000481 or US +1-805-309-2350<tel:%2B1-805-309-2350> / Alternate Toll +1 (714) 551-9842<tel:%2B1%20%28714%29%20551-9842> (international dial-in lines<http://kantarainitiative.org/confluence/x/KYC_/>), room code 613-2898# * (Turbobridge call options<https://www.turbobridge.com/join.html>) Agenda Smart discovery document, SXSW report AOB Kind regards Ingo Friese Deutsche Telekom AG T-Labs (Research & Innovation) Dipl.-Ing. Ingo Friese Winterfeldtstr. 21, 10781 Berlin +4930835358148<tel:%2B4930835358148> (Phone) +49391580216849<tel:%2B49391580216849> (Fax) E-Mail: ingo.friese(a)telekom.de<mailto:ingo.friese@telekom.de> www.telekom.com<http://www.telekom.com/> Life is for sharing. DEUTSCHE TELEKOM AG Supervisory Board: Prof. Dr. Ulrich Lehner (Chairman) Board of Management: René Obermann (Chairman), Reinhard Clemens, Niek Jan van Damme, Timotheus Höttges, Dr. Thomas Kremer, Claudia Nemat, Prof. Dr. Marion Schick Commercial register: Amtsgericht Bonn HRB 6794 Registered office: Bonn Big changes start small - conserve resources by not printing every e-mail.

4 24

Fwd: Invitation to DEF Conference
by j stollman 20 Nov '15

20 Nov '15

I thought that this IoT conference in Europe might be of interest. --------------------------------- Jeff Stollman stollman.j(a)gmail.com 1 202.683.8699 Truth never triumphs — its opponents just die out. Science advances one funeral at a time. Max Planck ---------- Forwarded message ---------- From: Carla Ciminera <cciminera(a)ecobrussels.eu> Date: Fri, Nov 20, 2015 at 9:55 AM Subject: Invitation to DEF Conference To: stollman.j(a)gmail.com Dear Jeff, On behalf of Jacques Bus, Secretary General of Digital Enlightenment Forum, I would like to invite you to a high level one-day conference in Brussels on *The Future of the Internet of Things in Europe* Thursday, November 26, 2015 The Hotel Boulevard de Waterloo 38, 1000 Brussels Full conference programme below. The conference and all refreshments are free of charge. If you would like to register, please respond to this email. If you have any additional questions, please do not hesitate to contact me. Kind regards, *Carla Ciminera* Tel: +32-2-345 7203 Gsm: +32-474-956859 email: cciminera(a)ecobrussels.eu <cciminera(a)ecobrussels.be> *On behalf of Digital Enlightenment Forum* *Conference presented and organised by:* *In cooperation with AIOTI: the Allliance for Internet of Things Innovation* *The Future of the Internet of Things in Europe* Thursday, November 26, 2015 The Hotel Boulevard de Waterloo 38, 1000 Brussels 9.00–9.30: *Welcome and Coffee* 9.30–10.00: *Welcome by the President of DEF*, George Metakides *IoT EU approach and expectations*, Mario Campolargo, (Director EC/CNECT) *Key notes on the emergence of an IoT Ecosystem* 10.00–10.25: Technology developments - Karabet Krikorian (Head of WEU IoT & Industry 4.0 Solution Innovation, Huawei) 10.25-10.50: Services development - Wim de Waele (Eggsplore, BE) *Coffee* 11.15-12.15: *Panel session on IoT policy* Chair: Thibaut Kleiner (EC/CNECT) - Introduction by the Chair - AIOTI policy paper – Robert MacDougal (chair AIOTI Policy WG, Vodafone) - IoT and Microsoft - Cornelia Kutterer (Policy Director Microsoft EMEA) - Changes in the IoT landscape - Sébastien Ziegler (IoT Forum, Mandat Intl) Discussion *Lunch* 13.15-14.15: *Panel session on IoT Standards* Chair: Yun Chao Hu (Director Standardisation and Partnership Strategies, Huawei) - Introduction by the Chair - AIOTI work on Standards - Patrick Guillemin (Chair AIOTI Standards WG, ETSI) (TBC) - IoT Product standards - Harm Jan Arendshorst (Head IoT product development , Verizon) - Lessons learned - Ulrich Seldeslachts (LSEC, BE) Discussion 14.15-15.00 *Key notes on Trust and Societal Impact* IoT and ISOC perspective - Frédéric Donck (ISOC) The citizen at the heart of IoT - Jacqui Taylor (FlyingBinary, UK) *Coffee* 15.30-17.00: *Panel session on IoT Applications * Chair: Thanassis Tiropanis (Web Science Institute, Univ of Southampton, UK) - Introduction by the Chair - Agriculture - Tamme van der Wal (AeroVision, NL) - Communication - Markus Dillinger (director for Industry Communication Applications, Huawei) - Smart cities - Hans Schaffers (Saxion Un.) - Manufacturing - Patrick Kennedy (EFFRA) Discussion 17.00-17.15: *Closing remarks* 17.15-18.30: *Cocktail and networking* Updates: https://digitalenlightenment.org/event/future-internet-things-europe

1 0

Identity of things privacy misuse case
by Scott Shorter 20 Nov '15

20 Nov '15

Hi all, This is the news item that I mentioned on the call: http://arstechnica.com/tech-policy/2015/11/beware-of-ads-that-use-inaudible… Thanks, Scott -- ========================================================== *Scott Shorter, Principal Security Engineer* Electrosoft *–* Fueling Customer Success Through Outstanding Value and Trust! *Woman-Owned, Minority-Owned Small Business | ISO 9001 | CMMI Level 2 * sshorter(a)electrosoft-inc.com (Email); http://www.electrosoft-inc.com (Web) ==========================================================

1 0

blockchain-based identity solution
by j stollman 20 Nov '15

20 Nov '15

All, This solution is currently available for individuals. I see no reason to not be able to apply it to Things: onename.com --------------------------------- Jeff Stollman stollman.j(a)gmail.com 1 202.683.8699 Truth never triumphs — its opponents just die out. Science advances one funeral at a time. Max Planck On Fri, Oct 23, 2015 at 9:36 AM, <Ingo.Friese(a)telekom.de> wrote: > Hello, > > I hope you are all doing well. I’d like to remind you that our next > IDoT-call is coming up today. > > I’m looking forward to talking to you! > > Best regards > > Ingo > > *Date and Time* > > - Friday, October 23th, at 7am PT (time chart) > <http://www.timeanddate.com/worldclock/fixedtime.html?msg=IDoT+Conf+Call&iso…> > - Voice: Skype: +99051000000481 or US +1-805-309-2350 / Alternate > Toll +1 (714) 551-9842 (international dial-in lines > <http://kantarainitiative.org/confluence/x/KYC_/>), room code > 613-2898# > - (Turbobridge call options <https://www.turbobridge.com/join.html>) > > > > _______________________________________________ > DG-IDoT mailing list > DG-IDoT(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/dg-idot > >

1 0

tachometer
by Salvatore D'Agostino 06 Nov '15

06 Nov '15

https://www.gov.uk/tachographs/overview Salvatore D'Agostino IDmachines LLC 1264 Beacon Street, #5 Brookline, MA 02446 USA http://www.idmachines.com <http://www.idmachines.com/> http://idmachines.blogspot.com <http://idmachines.blogspot.com/> @idmachines +1 617.201.4809 ph +1 617.812.6495 fax

1 0

Fwd: [WG-UMA] NIST Seeks Comments on New Project Aimed at Protecting Privacy Online
by Scott Shorter 06 Nov '15

06 Nov '15

FYI an interesting conversation, and see Eve's link for that paper I mentioned. ---------- Forwarded message ---------- From: Eve Maler <eve(a)xmlgrrl.com> Date: Thu, Oct 29, 2015 at 2:23 AM Subject: Re: [WG-UMA] NIST Seeks Comments on New Project Aimed at Protecting Privacy Online To: Mark Dobrinic <mdobrinic(a)cozmanova.com> Cc: "wg-uma(a)kantarainitiative.org UMA" <wg-uma(a)kantarainitiative.org> Okay, I’ll be the contrarian, just for fun. As I commented to a couple of people regarding the relatively recent academic paper Toward Mending Two Nation-Scale Brokered Identification Systems <http://www0.cs.ucl.ac.uk/staff/G.Danezis/papers/popets15-brokid.pdf>, everything is tradeoffs. And it’s arguable that the governments in those cases made the operationally and more citizen-acceptable tradeoff for privacy vs. what the researchers recommended. Quoting/paraphrasing myself from previous threads on this topic: I suspected from a brief article <http://www.computing.co.uk/ctg/news/2414194/govuk-verify-identity-managemen…> on the subject that the reporter probably had trouble divining exactly what the problem with the FCCX and UK.Gov <http://uk.gov> Verify systems actually was, since it wasn't explained at all, nor what the proposed solution was... and it's all extremely subtle. And I'm not even seeing a huge outcry or even all that much gov followup/panicked defense after. The researchers found a limitation in the tradeoff choice that the FCCX and UK.Gov <http://uk.gov> Verify system designers made. This tradeoff prizes the ability for the user to use an online service ("relying party") and an identity provider, free from worrying that the two will discover who the other is, over the perfect ability for a pseudonymous identifier and attributes representing the user to pass unseen through the broker in the middle (the broker makes this "service blinding" possible). The researchers propose some clever encryption tricks to guard against the broker seeing things, and go further and propose a new user-chosen "identity integration" service that could handle the tricks. Given that brokered systems, and the "older" protocols such as SAML already in use, and the encryption tricks they suggest, and user interfaces that force users to choose services, are all considered extremely heavyweight and expensive in various ways, I give the researchers' suggestions a nil chance of succeeding in the current environment. And given that users have a variety of incentives to share enough attributes in everyday circumstances to routinely become identifiable (Latanya Sweeney's research in particular is famous for discovering these properties), it's very questionable whether the researchers' preference for tradeoffs vs. the nations' preference is the correct one. On 25 Oct 2015, at 7:49 AM, Mark Dobrinic <mdobrinic(a)cozmanova.com> wrote: Yes, that. Always looking at privacy from linkablility and anonymity perspectives. An Identity Broker with privacy in mind has the responsibility to protect those properties. Through policy, but also some funky cryptography could be applied to assist there. But yeah, in the end they have the potential to only make things worse from a privacy point of view, and not better. Cheers! Mark On 24/10/15 08:24, Justin Richer wrote: My view on this remains “to increase privacy get rid of brokers”. A full mesh SAML or PKI federation is untenable, so that’s why we’ve deployed brokers in the past. But OIDC, with dynamic client registration and server discovery, is built for this. I believe wee need to move towards this model. Is anyone interested in writing up a response to that effect with me? Perhaps we could run a session on it at IIW this week for those of us that will be there (including myself). — Justin On Oct 23, 2015, at 8:29 AM, Andrew Hughes <andrewhughes3000(a)gmail.com <mailto:andrewhughes3000@gmail.com <andrewhughes3000(a)gmail.com>>> wrote: Hi UMAnitarians - not sure if you've seen this notice yet I'm vice-chair of IAWG & we are probably going to assemble comments on this. "Privacy-Enhanced Identity Brokers" Comments to inform a new collaborative project & eventual 1800 series Practice Guide at the NIST NCCoE Due 18 December http://www.nist.gov/itl/acd/ncce/20151022privacy.cfm *Andrew Hughes *CISM CISSP Independent Consultant *In Turn Information Management Consulting* o +1 650.209.7542 <tel:%2B1%20650.209.7542> m +1 250.888.9474 <tel:%2B1%20250.888.9474> 1249 Palmer Road, Victoria, BC V8P 2H8 AndrewHughes3000(a)gmail.com <mailto:AndrewHughes3000@gmail.com> ca.linkedin.com/pub/andrew-hughes/a/58/682/ <http://ca.linkedin.com/pub/andrew-hughes/a/58/682/> *Identity Management | IT Governance | Information Security * _______________________________________________ WG-UMA mailing list WG-UMA(a)kantarainitiative.org <mailto:WG-UMA@kantarainitiative.org> http://kantarainitiative.org/mailman/listinfo/wg-uma _______________________________________________ WG-UMA mailing list WG-UMA(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-uma _______________________________________________ WG-UMA mailing list WG-UMA(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-uma Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com _______________________________________________ WG-UMA mailing list WG-UMA(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-uma -- ========================================================== *Scott Shorter, Principal Security Engineer* Electrosoft *–* Fueling Customer Success Through Outstanding Value and Trust! *Woman-Owned, Minority-Owned Small Business | ISO 9001 | CMMI Level 2 * sshorter(a)electrosoft-inc.com (Email); http://www.electrosoft-inc.com (Web) ==========================================================

1 0

FW: [WG-UMA] NIST Seeks Comments on New Project Aimed at Protecting Privacy Online
by Salvatore D'Agostino 06 Nov '15

06 Nov '15

What Scott mentioned.. Good point. From: wg-uma-bounces(a)kantarainitiative.org [mailto:wg-uma-bounces@kantarainitiative.org] On Behalf Of Eve Maler Sent: Thursday, October 29, 2015 2:24 AM To: Mark Dobrinic Cc: wg-uma(a)kantarainitiative.org UMA Subject: Re: [WG-UMA] NIST Seeks Comments on New Project Aimed at Protecting Privacy Online Okay, I'll be the contrarian, just for fun. As I commented to a couple of people regarding the relatively recent academic paper Toward Mending Two Nation-Scale Brokered Identification Systems <http://www0.cs.ucl.ac.uk/staff/G.Danezis/papers/popets15-brokid.pdf> , everything is tradeoffs. And it's arguable that the governments in those cases made the operationally and more citizen-acceptable tradeoff for privacy vs. what the researchers recommended. Quoting/paraphrasing myself from previous threads on this topic: I suspected from a brief article <http://www.computing.co.uk/ctg/news/2414194/govuk-verify-identity-managemen t-system-riddled-with-severe-privacy-and-security-problems-warn-ucl-academic s> on the subject that the reporter probably had trouble divining exactly what the problem with the FCCX and UK.Gov Verify systems actually was, since it wasn't explained at all, nor what the proposed solution was... and it's all extremely subtle. And I'm not even seeing a huge outcry or even all that much gov followup/panicked defense after. The researchers found a limitation in the tradeoff choice that the FCCX and UK.Gov Verify system designers made. This tradeoff prizes the ability for the user to use an online service ("relying party") and an identity provider, free from worrying that the two will discover who the other is, over the perfect ability for a pseudonymous identifier and attributes representing the user to pass unseen through the broker in the middle (the broker makes this "service blinding" possible). The researchers propose some clever encryption tricks to guard against the broker seeing things, and go further and propose a new user-chosen "identity integration" service that could handle the tricks. Given that brokered systems, and the "older" protocols such as SAML already in use, and the encryption tricks they suggest, and user interfaces that force users to choose services, are all considered extremely heavyweight and expensive in various ways, I give the researchers' suggestions a nil chance of succeeding in the current environment. And given that users have a variety of incentives to share enough attributes in everyday circumstances to routinely become identifiable (Latanya Sweeney's research in particular is famous for discovering these properties), it's very questionable whether the researchers' preference for tradeoffs vs. the nations' preference is the correct one. On 25 Oct 2015, at 7:49 AM, Mark Dobrinic <mdobrinic(a)cozmanova.com> wrote: Yes, that. Always looking at privacy from linkablility and anonymity perspectives. An Identity Broker with privacy in mind has the responsibility to protect those properties. Through policy, but also some funky cryptography could be applied to assist there. But yeah, in the end they have the potential to only make things worse from a privacy point of view, and not better. Cheers! Mark On 24/10/15 08:24, Justin Richer wrote: My view on this remains "to increase privacy get rid of brokers". A full mesh SAML or PKI federation is untenable, so that's why we've deployed brokers in the past. But OIDC, with dynamic client registration and server discovery, is built for this. I believe wee need to move towards this model. Is anyone interested in writing up a response to that effect with me? Perhaps we could run a session on it at IIW this week for those of us that will be there (including myself). - Justin On Oct 23, 2015, at 8:29 AM, Andrew Hughes <andrewhughes3000(a)gmail.com <mailto:andrewhughes3000@gmail.com>> wrote: Hi UMAnitarians - not sure if you've seen this notice yet I'm vice-chair of IAWG & we are probably going to assemble comments on this. "Privacy-Enhanced Identity Brokers" Comments to inform a new collaborative project & eventual 1800 series Practice Guide at the NIST NCCoE Due 18 December http://www.nist.gov/itl/acd/ncce/20151022privacy.cfm *Andrew Hughes *CISM CISSP Independent Consultant *In Turn Information Management Consulting* o +1 650.209.7542 <tel:%2B1%20650.209.7542> m +1 250.888.9474 <tel:%2B1%20250.888.9474> 1249 Palmer Road, Victoria, BC V8P 2H8 AndrewHughes3000(a)gmail.com <mailto:AndrewHughes3000@gmail.com> ca.linkedin.com/pub/andrew-hughes/a/58/682/ <http://ca.linkedin.com/pub/andrew-hughes/a/58/682/> *Identity Management | IT Governance | Information Security * _______________________________________________ WG-UMA mailing list WG-UMA(a)kantarainitiative.org <mailto:WG-UMA@kantarainitiative.org> http://kantarainitiative.org/mailman/listinfo/wg-uma _______________________________________________ WG-UMA mailing list WG-UMA(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-uma _______________________________________________ WG-UMA mailing list WG-UMA(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-uma Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

FW: Gartner Report: Why DNS is mission-critical
by Ingo.Friese＠telekom.de 06 Nov '15

06 Nov '15

Hi all, Find attached a gartner report summary about “Why is DNS mission critical”? That fits perfect to our discovery thoughts in IDoT. Best Ingo From: Mildner, Frank Sent: Freitag, 6. November 2015 12:45 To: Friese, Ingo Subject: WG: Gartner Report: Why DNS is mission-critical FYI – passt doch in 5G ID und für unserer Kantara Kannste mal verteilen, wir haben hier in Da Netzprobleme Mit freundlichen Grüßen / Viele Grüße / Best Regards Frank Mildner DEUTSCHE TELEKOM AG T-Labs (Research & Innovation) Dipl.-Ing. Frank Mildner Deutsche-Telekom-Allee 7, 64295 Darmstadt +4961515834747 (Tel.) +496151899838 (Fax) E-Mail: frank.mildner(a)telekom.de<mailto:frank.mildner@telekom.de> www.telekom.com<http://www.telekom.com/> Erleben, was verbindet. Die gesetzlichen Pflichtangaben finden Sie unter: www.telekom.com/pflichtangaben<http://www.telekom.com/pflichtangaben> Grosse Veränderungen fangen klein an – Ressourcen schonen und nicht jede E-Mail drucken. Von: Brittany Haddad [mailto:hello@dyn.com] Gesendet: Donnerstag, 5. November 2015 15:36 An: Mildner, Frank Betreff: Gartner Report: Why DNS is mission-critical [cid:image001.jpg@01D11890.EE7EA710]<http://info.dyn.com/K005TAS10uB34n70205A0W0> INTERNET PERFORMANCE. DELIVERED. [cid:image002.jpg@01D11890.EE7EA710]<http://info.dyn.com/y5BA052A070uWS40To00140> If External DNS Fails, So Does Your Digital Business We've got some hot new information to share on DNS. Read the Gartner Report<http://info.dyn.com/y5BA052A070uWS40To00140> to find out why DNS is mission-critical to all organizations that connect to the Internet. Discover the challenges businesses face maintaining visibility and availability of key resources and the advantages of an externally sourced, managed, and focused DNS as a service on cost, resilience, reliability, and performance. Already have DNS? Watch the video<http://info.dyn.com/AB1p0TAS40A752500u0500W> on our brand new product, Internet Intelligence<http://info.dyn.com/AB1p0TAS40A752500u0500W> and get ready to see the Internet like never before! Manage DNS More Reliably<http://info.dyn.com/y5BA052A070uWS40To00140> [cid:~WRD000.jpg] Dyn Global HQ 150 Dow Street - Tower Two Manchester, NH 03101 unsubscribe from this list<http://pages.dyn.com/UnsubscribePage.html?mkt_unsubscribe=1&mkt_tok=3RkMMJW…> [cid:image003.jpg@01D11890.EE7EA710]<http://info.dyn.com/s06B1u500SAq0A05T24070W> [cid:image003.jpg@01D11890.EE7EA710] <http://info.dyn.com/JS4uA5075W0ArB0072001T0> [cid:image003.jpg@01D11890.EE7EA710] <http://info.dyn.com/V0Ss1007B50W400AuT528A0> [cid:image003.jpg@01D11890.EE7EA710] <http://info.dyn.com/wS0WAT7Au000025t105490B>

1 0