March 2021 - Dg-mdl - mailman.kantarainitiative.org

PImDL Group call on right now
by Colin Wallis Kantara 31 Mar '21

31 Mar '21

John has asked me to circulate the link to the call right now, as the draft report is making good progress and some of it ready for review beyond the editing team.. GoToMeeting link https://global.gotomeeting.com/join/777094317 <https://www.google.com/url?q=https://global.gotomeeting.com/join/777094317&…> Thanks! Colin Executive Director

1 0

Google unveils secure element alliance for biometric passport and mDL development
by Marc L. Aronson 29 Mar '21

29 Mar '21

https://www.biometricupdate.com/202103/google-unveils-secure-element-allian… Google unveils secure element alliance for biometric passport and mDL development Mar 26, 2021 | Alessandro Mascellino<https://www.biometricupdate.com/author/alessandromascellino> In 2018, Google<https://www.biometricupdate.com/?posttype=all&s=google> first started using the Titan M Chip, also known as Secure Element (SE), on its Pixel 3 phones, and now the tech giant is planning to leverage the mature technology to enable digital identity development. The SE operates separately from the processor and has until now been utilized for storing passwords and providing tamper-resistant key storage for Android Apps using StrongBox. StrongBox is a key storage for Android devices, operating in the SE, that paved the way for new features, including digital identity tools. Now, Google is unveiling new plans for its SE chips, saying it intends to use them to bring biometric passports and identity cards to Android smartphones. To that end, the company founded the Android Ready SE Alliance<https://developers.google.com/android/security/android-ready-se>, a coalition of smartphone vendors and manufacturers with the common goal of accelerating the development of this technology. >From a technical standpoint, the Alliance's efforts will focus on the creation of a large collection of open source and ready-to-use Applets for SE chips. These will include digital identity credentials like mobile driver's licenses (mDLs), national IDs and biometric passports, according to a blog post<https://security.googleblog.com/2021/03/announcing-android-ready-se-allianc…> on the initiative. Together with the Alliance's establishment, Google has also recently launched the General Availability (GA) version of StrongBox for SE this week. The applet is qualified and ready for use by the company's OEM partners, including Giesecke+Devrient<https://www.biometricupdate.com/companies/gieseckedevrient>, Kigen, NXP<https://www.biometricupdate.com/companies/nxp-semiconductors>, STMicroelectronics<https://www.biometricupdate.com/tag/stmicroelectronics>, and Thales<https://www.biometricupdate.com/companies/thales-digital-identity-and-secur…>. Thales has invested in the development of smartphone-based digital identity credentials, and is expected to launch mDLs in Florida<https://www.biometricupdate.com/202010/mobile-drivers-licenses-from-thales-…> this year. Moving forward, Google also sees this project evolving to allow smartphones to hold digital IDs and replace car keys, but implementations could possibly go further. Writing in the blog post, Google specified that the new features are not limited to phones and tablets, but will also be compatible with WearOS, Android Auto Embedded, and Android TV devices. "We already have several Android OEMs adopting Android Ready SE for their devices," the blog post reads. "We look forward to working with our OEM partners to bring these next-generation features for our users." Marc L. Aronson President & CEO Pennsylvania Association of Notaries 800-944-8790 x113 This message (including any attachments) is confidential and may be privileged. If you have received it by mistake please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. Please note that e-mails are susceptible to change. The Pennsylvania Association of Notaries (PAN) shall not be liable for the improper or incomplete transmission of the information contained in this communication nor for any delay in its receipt or damage to your system. PAN does not guarantee that the integrity of this communication has been maintained nor that this communication is free of viruses, interceptions or interference.

1 0

pimdl structure
by Tom Jones 24 Mar '21

24 Mar '21

it seems to me that there are several types of use of the mdl that have different characteristics and so different privacy "rules". 1. Completely ephemeral - check id - no data saved. No real issues. 2. Legally require an audit check - any data that is stored cannot be unstored later, for example age checks to get alcohol. 3. Continuing - say with a pharmacy and controlled substances. The user permits their info to be stored and so has the right to deactivate the record to prevent reuse. Probably cannot insist on destruction of audit data ever. The current idea of consent being withdrawn doesn't meet any of these well and needs brought into line with reality. Be the change you want to see in the world ..tom

1 0

FW: [Participate: Weds Mar 17, 12 Eastern] 30min WG/DG Update - New in 2021!
by elizabeth＠kantarainitiative.org 15 Mar '21

15 Mar '21

Greetings, First, apologies in advance for cross posting. If you are participating in more than one Group, you will receive this more than once! You are invited to join the first 30 minutes of the monthly Leadership Council call (typically the 3rd Wednesday for the month) to hear from WG/DG representatives on the current status of their work. We greatly look forward to your attendance, questions and comments. The meeting link is here: <https://www.google.com/url?q=https://global.gotomeeting.com/join/112012805& sa=D&source=calendar&ust=1613499348900000&usg=AOvVaw2GmED_8avxmfdX7QvULQ9B> https://global.gotomeeting.com/join/112012805 Full call-in details are shown at the end of this email. 'Important: Please note that the US has moved 1 hour ahead (Daylight Saving/Summertime). This meeting is pegged to US Eastern time so please check your local timezone to ensure you do not miss it. The first 30 minutes are open to all. This initiative is in response to your feedback last year asking for greater cross-working group sharing, for greater co-ordination and synergy. You are more than welcome to stay on to observe the proceedings of the LC call that follows straight after if you wish. Topic: The Virginia Digital Identity Law - Overview of its legal and business strategic implications. Speaker: Tim Reiniger Tim is a highly active member volunteer and supporter of Kantara and has spoken and represented Kantara at several conferences (back in the day when they were a physical thing!). He participates mainly in the UMA WG and the IAWG. Check out his LinkedIn profile: https://www.linkedin.com/in/timothy-reiniger-92a07620/ The following is the LC Agenda <https://kantarainitiative.org/confluence/display/LC/2021-03-17+Agenda+and+M eeting+Notes+Draft> for after the presentation. . Roll Call . IPR announcement . Agenda Approval . Minutes Approval . Executive Director Update . Work/Discussion Group Updates . Work Group Administration: . Board of Directors Liaisons Update: Andrew Hughes, Ken Dagg . Upcoming Conferences: Identiverse, EIC 2021, Identity Week series, Connect:ID, Identity North Series, others . AOB .............................. Full call-in details: <https://www.google.com/url?q=https://global.gotomeeting.com/join/112012805& sa=D&source=calendar&ust=1613499348900000&usg=AOvVaw2GmED_8avxmfdX7QvULQ9B> https://global.gotomeeting.com/join/112012805You can also dial in using your phone. United States: +1 (646) 749-3129 Access Code: 112-012-805 More phone numbers Australia: +61 2 9087 3604 Austria: +43 7 2081 5427 Belgium: +32 28 93 7018 Canada: +1 (647) 497-9350 Denmark: +45 32 72 03 82 Finland: +358 923 17 0568 France: +33 170 950 594 Germany: +49 692 5736 7317 Ireland: +353 15 360 728 Italy: +39 0 247 92 13 01 Netherlands: +31 207 941 377 New Zealand: +64 9 280 6302 Norway: +47 21 93 37 51 Spain: +34 932 75 2004 Sweden: +46 853 527 827 Switzerland: +41 225 4599 78 United Kingdom: +44 20 3713 5028 Kind regards, The Kantara Staff Team <https://kantarainitiative.org/> Receive Kantara News <https://signup.e2ma.net/signup/1889513/1769625/> & Updates Kantara Initiative <https://kantarainitiative.org/about/10th-anniversary/> , Kantara <https://edufoundation.kantarainitiative.org/> Educational Foundation & Kantara Europe <https://kantarainitiative.eu/>

1 0

mDL. It all started in Iowa
by Marc L. Aronson 14 Mar '21

14 Mar '21

https://www.johnsoncitypress.com/idemia-mobile-id-for-iowa-dot-passes-uls-m… Marc A. Marc L. Aronson President & CEO Pennsylvania Association of Notaries p: 800-944-8790 x113 | f: 800-707-7075 maronson(a)notary.org | www.notary.org One Gateway Center, Suite 401 420 Fort Duquesne Blvd., Pittsburgh, PA 15222 [https://www.notary.org/images/email/linkedin.png]<https://www.linkedin.com/company/pennsylvania-association-of-notaries> [https://www.notary.org/images/email/facebook.png] <https://www.facebook.com/PaAssocNotaries> [https://www.notary.org/images/email/twitter.png] <https://twitter.com/PaAssocNotaries> [https://www.notary.org/images/email/instagram.png] <https://www.instagram.com/paassocnotaries/> [https://www.notary.org/images/email/youtube.png] <https://www.notary.org/youtube> [https://www.notary.org/images/email/rss.png] <https://feeds.feedburner.com/pan_news> This message (including any attachments) is confidential and may be privileged. If you have received it by mistake please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. Please note that e-mails are susceptible to change. The Pennsylvania Association of Notaries (PAN) shall not be liable for the improper or incomplete transmission of the information contained in this communication nor for any delay in its receipt or damage to your system. PAN does not guarantee that the integrity of this communication has been maintained nor that this communication is free of viruses, interceptions or interference.

2 2

Frankenstein IDs
by John Wunderlich 12 Mar '21

12 Mar '21

Highlighting the need for user centric privacy and identity protection of identity: https://www.experian.com/blogs/news/2021/01/11/experian-launches-2021-futur… Sincerely, John Wunderlich BA, MBA, CISA, CIPP/C, CIPM, FIP LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

[kantara] John Wunderlich shared "2021-03-10 Meeting notes (Draft)" with you
by John Wunderlich (Confluence) 10 Mar '21

10 Mar '21

1 0

Discussion Group today
by John Wunderlich 10 Mar '21

10 Mar '21

Today’s agenda will be to walk through the current draft report: https://docs.google.com/document/d/1CaOxuzip7PPVxt_slGbDmyjaKOtoxOLKkg9g9yT… Sincerely, John Wunderlich BA, MBA, CISA, CIPP/C, CIPM, FIP LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Here is another non-DL use for 18013-5
by Tom Jones 09 Mar '21

09 Mar '21

I suspect that the non-DL applications will eventually be larger than the DL use cases. https://www.scytales.com/post/digital-certificate-of-vaccination-green-pass… Be the change you want to see in the world ..tom

4 5

YATE
by John Wunderlich 04 Mar '21

04 Mar '21

Yet another test email. Please disregard Sincerely, John Wunderlich BA, MBA, CISA, CIPP/C, CIPM, FIP LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0