Dear Kantara Initiative Members and Community,
This is a formal notification that the Identity Assurance Work Group (IAWG)
has approved the following document as IAWG-Approved Draft
Recommendations and their distribution for public comment and IPR Review:
*Document:* KIAF-1430 63A_SAC
*Version: * 4.1.1
*Document Date:* 2023-08-31
*Download Document*
<https://kantarainitiative.org/download/kiaf-1430-sp-800-63a-sac-soca-v-4-1-…>
These documents have entered a 45-day public comment and IPR review period
<https://kantara.atlassian.net/wiki/spaces/GI/pages/1081563/Public+Comment+a…>
in
preparation for an all-member ballot to consider their approval as Kantara
Initiative Recommendations.
*Public Review and IPR Review Period Opens*: 2023-09-05; 14:00 UTC
*Review Period Closes:* 2023-10-19; 14:00 UTC
*Overview of Document:*
This Specification sets forth KI's Service Assessment Criteria for
assessments against the requirements of NIST's SP 800-63A at IAL2 & IAL3,
to be generally referred-to as the '63A_SAC'. These criteria are reviewed
annually for any required re-expression, revision, etc. Since their
publication Kantara has granted a number of Approvals based on these
criteria and anticipates growing interest in these Approvals in the short
to medium term.
The IAWG reviewed the current version of the 63A_SAC and proposed revisions
after gathering feedback from the Assurance Review Board (ARB), Kantara
Accredited Assessors, and CSPs over the past year. The IAWG has approved
this draft revision and Kantara is now releasing these criteria for a
45-day Public Review.
Accordingly, the approved XLS document (KIAF-1430 63A_SAC v4.1.1) is linked
above. You need only review those criteria which are, in part or whole, in
red text. There is an overview of the updates on the ‘download document’
page.
Kantara invites your review of this document and asks that you submit any
comments and proposed revisions on or before 2023-10-19. As this deadline
will be strictly adhered to, late submissions will not be taken into
account.
*We will especially appreciate and respond to comments which offer some
kind of solution (e.g. revised wording) in addition to a statement
describing the problem which is being addressed.*
This is an open invitation to comment. Kantara Initiative solicits feedback
from potential users, developers and other interested parties, whether
Kantara Initiative members or not, for the sake of improving the
interoperability and quality of its technical work.
*To Comment on the Recommendation:*
To comment please use the form located at:
https://kantarainitiative.org/comment/
------------------------------
*Intellectual Property Rights Notice:*
Note that any submissions are deemed to be contributed under the IPR Option
of the WG: Patent & Copyright: Reciprocal Royalty Free with Opt-Out to
Reasonable And Non-discriminatory (RAND).
Intellectual Property Rights Notice: In accordance with the Kantara
Initiative IPR Policy
<https://kantarainitiative.org/wp-content/uploads/2014/08/KantaraInitiativeI…>Appendix
B Article 5 and the Kantara Initiative Operating Procedures
<https://kantara.atlassian.net/wiki/spaces/GI/pages/1081775> Section 7.5,
you have a period of 45 days to review the criteria for any Necessary
Claims that may be implicated by the criteria.
While there is no requirement to review your patent portfolio for Necessary
Claims, please be advised that unless you provide a licensing objection in
accordance with the Kantara Initiative IPR Policy Article 5 or a notice of
withdrawal in accordance with Kantara Initiative IPR Policy Article 6 on or
before 2023-10-19 you will have committed to the licensing provisions as
set forth by the Patent & Copyright: Reciprocal Royalty Free with Opt-Out
to Reasonable And Non-Discriminatory (RAND) IPR Policy with respect to any
Necessary Claims implicated by the final approved criteria.
Having signed the Group Participation Agreement (GPA) all members of the
IAWG should be familiar with these documents, which may create obligations
regarding the disclosure and availability of a member’s patent, copyright,
trademark and license rights that read on an approved Kantara Initiative
Recommendation.
Kantara Initiative invites any persons who know of any part of this Group
output that would infringe on third party intellectual property rights to
disclose such infringement claims so that these claims may be provided to
the Group members for resolution.
To submit an Intellectual Property Rights infringement claim, email
staff(a)kantarainitiative.org with the subject "IAWG IPR CLAIM".
------------------------------
Please contact the Kantara Initiative staff at staff(a)kantarainitiative.org with
any questions regarding this notice.
We thank you for your time and interest.
Lynzie Adams
Assurance Program Manager