November 2020 - Dg-mdl - mailman.kantarainitiative.org

Use Case Template
by John Wunderlich 11 Nov '20

11 Nov '20

I've created a Use Case Template in Google Docs, in the interest of providing some consistency to readers of the Report. Here is the link to view the Doc: https://docs.google.com/document/d/1zkgNcjkDE9YegK7tWjiEWUPuy0xUCnEtLIEnK5y… John Wunderlich, BA, MBA @PrivacyCDN <https://twitter.com/PrivacyCDN> "The sad truth is that most evil is done by people who never make up their minds to be good or evil.” ― Hannah Arendt <https://www.goodreads.com/author/show/12806.Hannah_Arendt>, The Life of the Mind <https://www.goodreads.com/work/quotes/122534> -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

how does Kantara fit into mdl initiative overall
by Tom Jones 11 Nov '20

11 Nov '20

Just my $.02 The following is from the iso spec 18013-5 Part 5: Mobile driving licence (mDL) application 1 Scope The purpose of this document is to standardize interface specifications for the implementation of a driving licence in association with a mobile device (mDL). This document standardizes the interface between the mDL and mDL Reader, and the interface between the mDL Reader and the issuing authority infrastructure. The standard also allow parties other than the issuing authority (e.g. other issuing authorities, or mDL Verifiers in other countries) to: a) use a machine to obtain the mDL data, b) tie the mDL to the mDL Holder, c) authenticate the origin of the mDL data, and d) verify the integrity of the mDL data. *The following items are out of scope for this document: * *a) how user consent to share data is obtained* *b) requirements on storage of mDL data and mdL private keys* So the two things ISO 18015 doesn't do are what i think Kantara should do: a) how user consent to share data is obtained (and how consent receipts are provided) b) requirements on storage of mDL data and mdL private keys besides what we have set out to do for US Healthcare ONC: 1> create assurance criteria for mobile apps 2> provide an api to report on the state of assurance compliance of apps and/or developers. 3> (I think we included this, not sure) evaluate the test labs that provide the contents for item 2 So what about MDL - in particular what criteria must the mobile app have to protect user private data? IMHO - The MDL app must be certified in the same way that an app should be certified that would be used to protect our private health information. I like what was in the slide deck sent out earlier. At least for the US and Canada we, the people, need some assurance that the app that holds our DL will honor our right to consent to release data from the mdl to only those sites that we trust to receive the data. App certification is the way to that and Kantara is the group to set the criteria for that. The only thing I disliked about the slide deck was that it focused solely on drivers. In VA, for example, the DMV is required to provide identifier services for all of VA public health and welfare concerns as well. So this is not just a driver's license, this is a state/province ID for state services. Of course as the state/province may legislate. This is the way that we can really assure that user privacy is honored. Peace ..tom

1 0

See page 8 of the attached for a comment on mDL
by Marc L. Aronson 09 Nov '20

09 Nov '20

Marc Aronson Marc L. Aronson President & CEO Pennsylvania Association of Notaries p: 800-944-8790 x113 | f: 800-707-7075 maronson(a)notary.org | www.notary.org One Gateway Center, Suite 401 420 Fort Duquesne Blvd., Pittsburgh, PA 15222 [https://www.notary.org/images/email/linkedin.png]<https://www.linkedin.com/company/pennsylvania-association-of-notaries> [https://www.notary.org/images/email/facebook.png] <https://www.facebook.com/PaAssocNotaries> [https://www.notary.org/images/email/twitter.png] <https://twitter.com/PaAssocNotaries> [https://www.notary.org/images/email/instagram.png] <https://www.instagram.com/paassocnotaries/> [https://www.notary.org/images/email/youtube.png] <https://www.notary.org/youtube> [https://www.notary.org/images/email/rss.png] <https://feeds.feedburner.com/pan_news> This message (including any attachments) is confidential and may be privileged. If you have received it by mistake please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. Please note that e-mails are susceptible to change. The Pennsylvania Association of Notaries (PAN) shall not be liable for the improper or incomplete transmission of the information contained in this communication nor for any delay in its receipt or damage to your system. PAN does not guarantee that the integrity of this communication has been maintained nor that this communication is free of viruses, interceptions or interference.

1 0

An mDL article for your review
by Marc L. Aronson 09 Nov '20

09 Nov '20

https://security.googleblog.com/2020/10/privacy-preserving-features-in-mobi… Marc Aronson Marc L. Aronson President & CEO Pennsylvania Association of Notaries p: 800-944-8790 x113 | f: 800-707-7075 maronson(a)notary.org | www.notary.org One Gateway Center, Suite 401 420 Fort Duquesne Blvd., Pittsburgh, PA 15222 [https://www.notary.org/images/email/linkedin.png]<https://www.linkedin.com/company/pennsylvania-association-of-notaries> [https://www.notary.org/images/email/facebook.png] <https://www.facebook.com/PaAssocNotaries> [https://www.notary.org/images/email/twitter.png] <https://twitter.com/PaAssocNotaries> [https://www.notary.org/images/email/instagram.png] <https://www.instagram.com/paassocnotaries/> [https://www.notary.org/images/email/youtube.png] <https://www.notary.org/youtube> [https://www.notary.org/images/email/rss.png] <https://feeds.feedburner.com/pan_news> This message (including any attachments) is confidential and may be privileged. If you have received it by mistake please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. Please note that e-mails are susceptible to change. The Pennsylvania Association of Notaries (PAN) shall not be liable for the improper or incomplete transmission of the information contained in this communication nor for any delay in its receipt or damage to your system. PAN does not guarantee that the integrity of this communication has been maintained nor that this communication is free of viruses, interceptions or interference.

1 0

Reminder: PImLD DG - Call for Nominations
by bella＠kantarainitiative.org 06 Nov '20

06 Nov '20

Dear PImDL Discussion Group Participants, This email is serving as a reminder that the nomination period for the PmDL Discussion Group (DG) is open. The Officer positions applicable are: * Chair * Vice-Chair(s) * Secretary (Optional) If you would like to be a candidate for Chair, Vice-Chair (up to 2) or Secretary, please submit your nomination (or agree to be nominated by someone else) via email to staff(a)kantarainitiative.org <mailto:staff@kantarainitiative.org> with the following information no later than this Thursday, November 5th, 2020 @ 5pm Eastern Time. * Name: * Officer Role being sought: * Organization (if applicable): * Candidate Statement (optional up to approx. 500 words): Best regards, The Kantara Staff Kantara Initiative, Inc. <https://kantarainitiative.org/> Receive Kantara News <https://signup.e2ma.net/signup/1889513/1769625/> & Updates Kantara Initiative <https://kantarainitiative.org/about/10th-anniversary/> , Kantara <https://edufoundation.kantarainitiative.org/> Educational Foundation & Kantara Europe <https://kantarainitiative.eu/> From: bella(a)kantarainitiative.org <bella(a)kantarainitiative.org> Sent: Friday, October 30, 2020 9:53 AM To: dg-mdl(a)kantarainitiative.org Subject: PImLD DG - Call for Nominations Dear PImDL Discussion Group Participants, I hope this email finds you well. This email is serving as an official notification that the nomination period for the PmDL Discussion Group (DG) is now open. According to the Operating Procedures, Section 5.1.2, a Discussion Group shall have one or more Chairs elected from the DG Participants. The DG may designate one Chair as the DG Chair with the other Chairs as DG Vice-Chairs. At least one DG Chair shall be a Kantara Initiative member in good standing. <https://kantarainitiative.org/members/> A DG Secretary position is optional. The Officer positions applicable are: * Chair * Vice-Chair(s) * Secretary (Optional) If you would like to be a candidate for Chair, Vice-Chair (up to 2) or Secretary, please submit your nomination (or agree to be nominated by someone else) via email to staff(a)kantarainitiative.org <mailto:staff@kantarainitiative.org> with the following information no later than 5pm Eastern Time on November 5th, 2020. * Name: * Officer Role being sought: * Organization (if applicable): * Candidate Statement (optional up to approx. 500 words): Process: This election process reflects Article 4.1.3 WG Elections in the Operating Procedures v3.0 <https://kantarainitiative.org/confluence/display/GI/All+Policies?preview=/3 7750179/104600198/KI%20Operating%20Procedures%20Version%203.0.pdf> . If there is more than one nominee for each role, Staff will open an electronic ballot of candidates for DG Participants in accordance with Section 6.3 Electronic Ballots of the Operating Procedures v3.0 <https://kantarainitiative.org/confluence/display/GI/All+Policies?preview=/3 7750179/104600198/KI%20Operating%20Procedures%20Version%203.0.pdf> for those roles as soon as possible after the closing date and open for 7 days, but in any case, opening no later than November 6, 2020. For the avoidance of doubt, DG participants are those that have completed the Group Participation Agreement and appear on the DG's Participant Roster. <https://kantarainitiative.org/confluence/display/mdl/Participant+Roster> Any uncontested positions as of the close of the nomination period will automatically be considered as appointed, and announced by email after the close of the election period and also by acclamation at the next calendared meeting. The new slate of officers will officially assume their duties as of November 16th Kind regards, The Kantara Staff Kantara Initiative, Inc. <https://kantarainitiative.org/> Receive Kantara News <https://signup.e2ma.net/signup/1889513/1769625/> & Updates Kantara Initiative <https://kantarainitiative.org/about/10th-anniversary/> , Kantara <https://edufoundation.kantarainitiative.org/> Educational Foundation & Kantara Europe <https://kantarainitiative.eu/>

1 1

You should have received your Google Doc link
by John Wunderlich 05 Nov '20

05 Nov '20

Hi; If you have not received a link to the PIMDL Draft Report (either as a commenter or as an editor) OR if you would prefer to use a different email as your authentication, please let me know. John Wunderlich, BA, MBA @PrivacyCDN <https://twitter.com/PrivacyCDN> "The sad truth is that most evil is done by people who never make up their minds to be good or evil.” ― Hannah Arendt <https://www.goodreads.com/author/show/12806.Hannah_Arendt>, The Life of the Mind <https://www.goodreads.com/work/quotes/122534> -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

[kantara] John Wunderlich shared "2020-11-04 Meeting notes" with you
by John Wunderlich (Confluence) 04 Nov '20

04 Nov '20

1 0

Google Doc for viewing
by John Wunderlich 04 Nov '20

04 Nov '20

Here is the link to the Google Doc of the draft report (my strawman version). This link should be a view only link: https://docs.google.com/document/d/1CaOxuzip7PPVxt_slGbDmyjaKOtoxOLKkg9g9yT… Commenting and Editing links will be created after today’s meeting. John Wunderlich, BA, MBA @PrivacyCDN<https://twitter.com/PrivacyCDN> [cidimage001.png(a)01D4B498.D55604C0] Privacy Tools: Kantara Initiative<https://kantarainitiative.org/>: Consent Receipt Specification<https://kantarainitiative.org/confluence/display/infosharing/Consent+Receip…> JLINC Labs<https://www.jlinclabs.com/>: Data Provenance Solutions<https://www.jlinclabs.com/solutions/> Encrypted email: PrivacyCDN(a)protonmail.com<mailto:PrivacyCDN@protonmail.com> -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Canada’s Border Entry Mandates Go Digital — Vax Before Travel
by John Wunderlich 04 Nov '20

04 Nov '20

https://www.vaxbeforetravel.com/canadas-border-entry-mandates-go-digital Thanks, JW -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Drafting Subcommittee
by John Wunderlich 03 Nov '20

03 Nov '20

Folks; In preparation for tomorrow’s DG call, I would like to ask you to consider participating in the drafting committee. Currently, unless I have missed something, we have two members; myself and Tom Jones (thank you Tom). I’m of the view that we need 4 to 6 people to participate to get both a representative sample from the views in the DG and to share the load of drafting and editing. If you: * Can free up 2 hours (or more) a week – including a weekly drafting call * Have domain expertise you think should be represented in the report * Can work effectively in a consensus-based group then you are a great candidate for this group, and I’d love to hear from you, either by email or on the call tomorrow. Whether or not you participate in the drafting, you will have the ability to view and suggest on the draft Google Doc, the link for which should go out later this week. John Wunderlich, BA, MBA @PrivacyCDN<https://twitter.com/PrivacyCDN> [cidimage001.png(a)01D4B498.D55604C0] Privacy Tools: Kantara Initiative<https://kantarainitiative.org/>: Consent Receipt Specification<https://kantarainitiative.org/confluence/display/infosharing/Consent+Receip…> JLINC Labs<https://www.jlinclabs.com/>: Data Provenance Solutions<https://www.jlinclabs.com/solutions/> Encrypted email: PrivacyCDN(a)protonmail.com<mailto:PrivacyCDN@protonmail.com> -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0