January 2024 - Wg-ancr - mailman.kantarainitiative.org

Fwd: [KI-LC] Fwd: Feedback
by Salvatore D'Agostino 17 Jan '24

17 Jan '24

IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 https://IDmachines.com ________________________________ From: Kay Chopard via LC <lc(a)kantarainitiative.org> Sent: Wednesday, January 17, 2024 11:07:04 AM To: Kantara Board of Directors <directors(a)kantarainitiative.org>; Kantara Leadership Council <LC(a)kantarainitiative.org> Cc: staff(a)kantarainitiative.org list <staff(a)kantarainitiative.org> Subject: [KI-LC] Fwd: Feedback Hello everyone, I hope you are well. A second Request for Information has been posted regarding the CSP Special Item Number (SIN) that GSA is planning to create and post. They have asked for comments. Please share this with others. Also, please take the time, if you can, or someone in your organization is able, to respond to the request for feedback. Please let me know if you have any questions. We have hopes that this will be a very big plus for Kantara once it is published. Thank you for your assistance. Kind regards, Kay Kay Chopard | Executive Director [https://docs.google.com/uc?export=download&id=1f_FyEBepOKYcAfkyIsaSFzguA7Tg…] Twitter: @KantaraNews LinkedIn: @KantaraInitiative ---------- Forwarded message --------- From: India Donald - QT3BC <india.donald(a)gsa.gov<mailto:india.donald@gsa.gov>> Date: Wed, Jan 17, 2024 at 7:54 AM Subject: Feedback To: Kay Chopard <kay(a)kantarainitiative.org<mailto:kay@kantarainitiative.org>>, Lynzie Adams <lynzie(a)kantarainitiative.org<mailto:lynzie@kantarainitiative.org>> Hello, A second Request for Information (RFI) has been posted for the Credential Service Provider (CSP) Special Item Number (SIN). https://feedback.gsa.gov/jfe/form/SV_3BHE1iQQLHsgtCe Please pass on. Thanks India

1 0

EU - US Mapping
by Salvatore D'Agostino 17 Jan '24

17 Jan '24

https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden… EU-US TTC WG-1 Digital Identity Mapping Exercise Report<https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…> Save the Dates! www.nist.gov

1 0

Fw: Request for Comment & IPR Review: PCTF Authentication Final Recommendation V1.1 / Demande de commentaires et d’examen des droits de propriété intellectuelle : Recommandation finale pour la composante « Authentification » V1.1 du CCP
by Salvatore D'Agostino 16 Jan '24

16 Jan '24

fyi ________________________________ From: review(a)diacc.ca <review(a)diacc.ca> Sent: Tuesday, January 16, 2024 9:16 AM To: Salvatore D'Agostino <sal(a)idmachines.com> Subject: Request for Comment & IPR Review: PCTF Authentication Final Recommendation V1.1 / Demande de commentaires et d’examen des droits de propriété intellectuelle : Recommandation finale pour la composante « Authentification » V1.1 du CCP Français à suivre Notice of Intent: DIACC is collaborating to develop and publish the Authentication component of the Pan-Canadian Trust Framework (PCTF) to set a baseline of public and private sector interoperability of identity services and solutions. During this public review period, DIACC is looking for community feedback to ensure that the conformance criteria is clear and auditable. To learn more about the Pan-Canadian vision and benefits-for-all value proposition please review the Pan-Canadian Trust Framework Overview<https://diacc-dot-yamm-track.appspot.com/28zd0TGbiQXtMGiyCf0-eBSKmMAaDA7Pap…>. Document Status: These review documents have been developed by members of the DIACC’s Trust Framework Expert Committee<https://diacc-dot-yamm-track.appspot.com/2JVjj0zymk3OgdDAlfKJ2df4-8B1J0E6aq…> (TFEC) who operate under the DIACC controlling policies and consist of representatives from both the private and public sectors. These documents have been approved by the TFEC as Draft Recommendations V1.0. Summary: The PCTF Authentication Component defines: 1. A set of processes that enable access to digital systems. 2. A set of Conformance Criteria for each process that, when a process is shown to be compliant, enable the process to be trusted. Invitation: • All interested parties are invited to comment. Period: • Opens: January 16, 2024 at 23:59 PT | Closes: February 15, 2024 at 23:59 PT When reviewing the components Conformance Criteria, please consider the following and note that responses to this question are non-binding and serve to improve the PCTF. 1. Would you consider the Conformance Criteria as auditable or not? That is, could you objectively evaluate if an organization was compliant with that criteria and what evidence would be used to justify that? Review Documents: Authentication • Conformance Profile Final Recommendation V1.1<https://diacc-dot-yamm-track.appspot.com/2M8Z3V12SLp8MUG3QHMqeh-FebLTFCXSh2…> • Component Overview Final Recommendation V1.1<https://diacc-dot-yamm-track.appspot.com/2_UrwuzjJv36fkGGUpRMBqldzknvg447mi…> • DIACC Comment Submission Spreadsheet<https://diacc-dot-yamm-track.appspot.com/2zzrG69USxQDWkhLFlf-SlkUz3mc27Q4ZJ…> Intellectual Property Rights: Comments must be received within the 30-day comment period noted above. All comments are subject to the DIACC contributor agreement<https://diacc-dot-yamm-track.appspot.com/2wUO4oqQbPYiwiD7TeT3zluSDz2BPmB3wZ…>; by submitting a comment you agree to be bound by the terms and conditions therein. DIACC Members are also subject to the Intellectual Property Rights Policy<https://diacc-dot-yamm-track.appspot.com/2sXAQWdjzzJN-O9kkyv4ht3zlG_JuCX9zg…>. Any notice of an intent not to license under either the Contributor Agreement and/or the Intellectual Property Rights Policy with respect to the review documents or any comments must be made at the Contributor’s and/or Member’s earliest opportunity, and in any event, within the 30-day comment period. IPR claims may be sent to review(a)diacc.ca<mailto:review@diacc.ca>. Please include “IPR Claim” as the subject. Process: • All comments are subject to the DIACC contributor agreement.<https://diacc-dot-yamm-track.appspot.com/2xPVELHmtVpGVq7KPHbf-yykBn453MTDA1…> • Submit comments using the provided DIACC Comment Submission Spreadsheet<https://diacc-dot-yamm-track.appspot.com/2BCNYzUMyQo19ji6dHLiHF5mhKNKM8hQpb…>. • Reference the draft and corresponding line number for each comment submitted. • Email completed DIACC Comment Submission Spreadsheet to review(a)diacc.ca<mailto:review@diacc.ca>. • Questions may be sent to review(a)diacc.ca<mailto:review@diacc.ca>. Value to Canadians: The purpose of the PCTF Authentication Component is to assure the on-going integrity of login and authentication processes by certifying, through a process of assessment, that they comply with standardized Conformance Criteria. The Conformance Criteria for this component may be used to provide assurances: • That Trusted Processes result in the representation of a unique Subject at a Level of Assurance that it is the same Subject with each successful login to an Authentication Service Provider. • Concerning the predictability and continuity in the login processes that they offer or on which they depend. All participants will benefit from: • Login and authentication processes that are repeatable and consistent (whether they offer these processes, depend on them, or both). • Assurance that identified Users can engage in authorized interactions with remote systems. Relying Parties benefit from: • The ability to build on the assurance that Authentication Trusted Processes uniquely identify, at an acceptable level of risk, a Subject in their application or program space. Context: The purpose of this review is to ensure transparency in the development and diversity of a truly Pan-Canadian, and international, input. In alignment with our Principles for an Identity Ecosystem<https://diacc-dot-yamm-track.appspot.com/2ksQhMCqNZdn6rnZ9QzKU29MFfDmfnXdTS…>, processes to respect and enhance privacy are being prioritized through every step of the PCTF development process. DIACC expects to modify and improve these Draft Recommendations based upon public comments. Comments made during the review will be considered for incorporation into the next iteration and DIACC will prepare a Disposition of Comments to provide transparency with regard to how each comment was handled. Demande de commentaires et d’examen des droits de propriété intellectuelle : Recommandation finale pour la composante « Authentification » V1.1 du CCP Déclaration d’intention : Le CCIAN collabore pour développer et publier la composante « Authentification » du Cadre de confiance pancanadien (CCP) afin d’établir une base d’interopérabilité des services et solutions d’identité dans les secteurs public et privé. Pendant cette période d’examen public, le CCIAN cherche à obtenir la rétroaction de la communauté afin de s’assurer que les critères de conformité sont clairs et vérifiables. Pour en savoir plus sur la vision pancanadienne et la proposition de valeur présentant des avantages pour tous, veuillez passer en revue l’aperçu du Cadre de confiance pancanadien<https://diacc-dot-yamm-track.appspot.com/27MmefMLXId_ALqTYKoxYoZzoCqfqY2v25…>. État des documents : Ces documents à examiner ont été développés par les membres du Comité d’experts du Cadre de confiance<https://diacc-dot-yamm-track.appspot.com/2N0Yr90YBrPviuqPy36nxrqZtVh_lGxCwm…> (TFEC) du CCIAN, qui sont régis par les politiques qui contrôlent le CCIAN et comprennent des représentants des secteurs privé et public. Ces documents ont été approuvés par le TFEC en tant que recommandations préliminaires V1.0. Résumé La composante « Authentification » du CCP définit : 1. Un ensemble de processus donnant accès à des systèmes numériques. 2. Un ensemble de critères de conformité pour chaque processus qui, lorsqu’un processus s’avère conforme, permettent de faire confiance au processus. Invitation • Toutes les parties intéressées sont invitées à faire des commentaires. Période • Début : 16 janvier 2024 à 23 h 59 HP | Fin : 15 février 2024 à 23 h 59 HP En examinant les critères de conformité de la composante, veuillez tenir compte de la question qui suit et noter que les réponses ne sont pas contraignantes et visent à améliorer le CCP. 1. Considéreriez-vous que les critères de conformité sont vérifiables ou non? Autrement dit, pourriez-vous évaluer objectivement si une organisation était conforme à ces critères et quelles preuves seraient utilisées pour justifier cela? Documents à examiner : Authentification • Recommandation finale pour le profil de conformité V1.1<https://diacc-dot-yamm-track.appspot.com/2ctYL1VKYGuy6_IFd-oB8J6Q7hC9ZzyO7D…> • Recommandation finale pour l’aperçu de la composante V1.1<https://diacc-dot-yamm-track.appspot.com/2sXJn5gCX1gdfN1siuDcak3ymelufC6wAj…> • Formulaire pour soumettre les commentaires au CCIAN<https://diacc-dot-yamm-track.appspot.com/2Gy7LT9i7f3j200ngGQpekpUhfVCmvFfwc…> Droits de propriété intellectuelle Les commentaires doivent être reçus pendant la période de 30 jours indiquée ci-dessus. Tous les commentaires sont assujettis à l’entente de contributeur du CCIAN<https://diacc-dot-yamm-track.appspot.com/2Lw9MP8jccVK9cCLDyCEqLHOwQa1X9yjVh…>; en soumettant un commentaire, vous acceptez d’être lié par les conditions qu’elle renferme. Les membres du CCIAN sont également assujettis à la politique sur les droits de propriété intellectuelle<https://diacc-dot-yamm-track.appspot.com/2HwME7dSShmy58bj59XfaupLZJkKjicW0I…>. Tout avis d’intention de ne pas octroyer une licence en vertu de l’entente de contributeur et/ou de la politique sur les droits de propriété intellectuelle relativement aux documents à examiner ou à des commentaires doit être donné dès que le contributeur et/ou le membre en ont la possibilité, et en toute circonstance, pendant la période de commentaires de 30 jours. Les revendications au titre des droits de propriété intellectuelle peuvent être adressées à review(a)diacc.ca<mailto:review@diacc.ca>. Veuillez indiquer « Revendication en matière de propriété intellectuelle » dans l’objet. Processus • Tous les commentaires sont assujettis à l’entente de contributeur du CCIAN.<https://diacc-dot-yamm-track.appspot.com/2kl7ImnTN3w4K_6XsCd3-TGi_hl2w0prNp…> • Veuillez utiliser le formulaire prévu à cet effet pour soumettre vos commentaires au CCIAN<https://diacc-dot-yamm-track.appspot.com/2z-tuDYuVY1IjHZdJ6rStPmg0BczQ0CZ3i…>. • Assurez-vous d’indiquer le numéro de version et de ligne correspondant à chaque commentaire soumis. • Le formulaire de soumission de commentaires au CCIAN doit être envoyé par courriel, dûment rempli, à review(a)diacc.ca<mailto:review@diacc.ca>. • Questions : review(a)diacc.ca<mailto:review@diacc.ca>. Valeur pour les Canadiens La composante « Authentification » du CCP vise à assurer l’intégrité continue des processus de connexion et d’authentification en certifiant, au moyen d’un processus d’évaluation, qu’ils sont conformes aux critères de conformité uniformisés. Les critères de conformité pour cette composante peuvent être utilisés pour fournir des assurances : • Comme quoi les processus de confiance donnent la représentation d’un sujet unique à un niveau assurant qu’il s’agit du même sujet à chaque connexion réussie auprès d’un fournisseur de services d’authentification. • En ce qui concerne la prévisibilité et la continuité des processus de connexion qu’ils offrent ou dont ils dépendent. Tous les participants bénéficieront de : • Processus de connexion et d’authentification qui sont répétitifs et uniformes (qu’ils offrent ces processus, dépendent d’eux ou les deux). • L’assurance que les utilisateurs identifiés peuvent prendre part à des interactions autorisées avec des systèmes à distance. Les parties dépendantes bénéficieront de : • La capacité de tirer parti de l’assurance comme quoi les processus de confiance de l’authentification identifient d’une manière unique, à un niveau de risque acceptable, un sujet dans la sphère de leur application ou programme. Contexte Cet examen a pour but d’assurer la transparence de l’élaboration et de la diversité d’un apport véritablement pancanadien et international. Conformément à nos principes pour un écosystème de l’identité<https://diacc-dot-yamm-track.appspot.com/2UMztnwll9w8ucFCqy6LOFfMh82fYc8j7u…>, la priorité est accordée aux processus visant à respecter et à renforcer la vie privée à chaque étape du processus de développement du Cadre de confiance pancanadien. Le CCIAN s’attend à modifier et à améliorer ces recommandations finales en fonction des commentaires du public. Les commentaires faits pendant l’examen seront pris en compte pour être intégrés dans la prochaine itération et le CCIAN préparera un document expliquant d’une façon transparente comment chaque commentaire a été traité.

2 1

Fw: Call for Comments - EU-U.S. TTC WG1 Digital Identity Mapping Exercise Report Now Open for Feedback and Webinar Save the Date
by Salvatore D'Agostino 06 Jan '24

06 Jan '24

Thanks Mark. ________________________________ From: Mark Lizar <mark(a)openconsent.com> Sent: Saturday, January 6, 2024 8:26 AM To: Salvatore D'Agostino <sal(a)idmachines.com> Subject: Fwd: Call for Comments - EU-U.S. TTC WG1 Digital Identity Mapping Exercise Report Now Open for Feedback and Webinar Save the Date FYI Begin forwarded message: From: The Trade and Technology Dialogue <info(a)tradeandtechdialogue.com> Subject: Call for Comments - EU-U.S. TTC WG1 Digital Identity Mapping Exercise Report Now Open for Feedback and Webinar Save the Date Date: 5 January 2024 at 10:16:03 GMT-5 To: info(a)0pn.org [cid:200811b2-999b-45bf-b807-42d4028fdd6c@namprd14.prod.outlook.com] Call for Comments / Save the Date TRADE AND TECHNOLOGY COUNCIL (TTC) EU-U.S. TTC WG1 Digital Identity Mapping Exercise Report now open for feedback and webinar Save the Date Dear Mark, Following a successful round of government-to-government technical exchanges earlier this calendar year, in March 2023, the European Commission and the U.S. Government, operating under the auspices of the US-EU Trade and Technology Council (TTC), publicly committed to undertake a transatlantic mapping exercise with the objective of finding commonalities between the EU and U.S. approaches to digital identity. Released on December 22, the jointly authored EU-US TTC Digital Identity Mapping Exercise Report<https://futurium.ec.europa.eu/en/EU-US-TTC/news/eu-us-ttc-digital-identity-…>, provides the preliminary results of an initial mapping centered on the definitions, assurance levels, and references to international standards included across Revision 3 of the NIST Digital Identity Guidelines (Special Publication 800-63, Revision 3<https://pages.nist.gov/800-63-3/sp800-63-3.html>) and European Regulation (EU) No 910/2014<https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2014.257.…> on electronic identification and trust services for electronic transactions in the internal market. The next phase of this project will include collecting feedback and selecting potential use cases for transatlantic cooperation that highlight the need for and value of enabling the cross-border use of digital identities. The European Commission and the U.S. are actively seeking comments from communities with subject matter expertise in digital identity, privacy, human-centered design, and cybersecurity; organisations that have designed or implemented digital identity systems within the EU, the U.S., or in cross-border contexts; and others with equities related to the topic of digital identity. Call for Comments Feedback on the report, as well as use cases and areas of potential U.S.-EU cooperation on digital identity, is requested 5:59 AM CET on March 1, 2024 / 11:59 PM EST on February 29, 2024 and can be submitted via CNECT-H4(a)ec.europa.eu<mailto:CNECT-H4@ec.europa.eu> or dig-comments(a)nist.gov<mailto:dig-comments@nist.gov>. Save the Date EU-U.S. TTC Webinar: Unpacking the Digital Identity Mapping Results Date: Thursday, February 22, 2024 Location: Virtual Join the European Commission and NIST for a webinar to: - Hear an overview of the U.S. and EU's efforts to map their digital identity frameworks. - Provide feedback to NIST and the EC on the preliminary results of the mapping exercise. - Weigh in on use cases where future US-EU collaboration could accelerate progress on cross-border interoperability. Further information will follow in due course. We appreciate your feedback, participation, and interest in our efforts. To learn more about our publications, news, and get the latest updates, please visit Futurium<https://futurium.ec.europa.eu/en/EU-US-TTC>. ________________________________________________________________ Queries & Support  If you have any queries ahead of the event, please contact the event manager on the details below.  Andrea Evans  TTD Events & Outreach Manager info(a)tradeandtechdialogue.com<mailto:info@tradeandtechdialogue.com>  The TTD supports the EU-U.S. Trade and Technology Council with stakeholder activities and analysis. TTD activities are published on Futurium<https://futurium.ec.europa.eu/en/EU-US-TTC/pages/eu-us-trade-and-technology…>. Here, you can also find more information on all TTC Working Groups and make your voice heard by providing written input. For email updates with news, event invitations and research reports from the TTD, subscribe to the TTD Newsletter<https://ec.europa.eu/newsroom/ttd/user-subscriptions/2926/create>. [cid:563057ac-979d-4b5c-a63c-ccffe20c0304@namprd14.prod.outlook.com] C/o Forum Europe - EU Office: Square de Meeûs, 37 - 4th floor, 1000 Brussels, Belgium This email is confidential. If you are not the intended recipient do not copy or disclose its content and contact the sender immediately. This email message has been checked for the presence of known computer viruses, and has been found to be clean. The recipient should also check this email and any attachments for viruses. Forum Europe accepts no liability for any damage caused by any virus transmitted by this email.

1 0

RIUP Use Cases
by Salvatore D'Agostino 04 Jan '24

04 Jan '24

Here is the use case from the RIUP work group for a farm worker in a Foreign Country I mentioned on our last WG call wrt other WG activity https://docs.google.com/document/d/1-amM1fVtVKEILrXFbLBnVZ9S_BfpZW3s/edit?p…

1 0

Fw: Whiteboarding session tomorrow, January 3, 10am Pacific time
by Salvatore D'Agostino 03 Jan '24

03 Jan '24

FYI. ________________________________ From: stds-7012-wg(a)listserv.ieee.org <stds-7012-wg(a)listserv.ieee.org> on behalf of Scott Mace <smacehlm(a)gmail.com> Sent: Tuesday, January 2, 2024 2:17 PM To: IEEE 7012 WG list <stds-7012-wg(a)listserv.ieee.org> Subject: Whiteboarding session tomorrow, January 3, 10am Pacific time As mentioned in the December draft minutes (attached), we have scheduled an extra 60-minute working group meeting tomorrow, January 3, at from 10am to 11am Pacific time, prior to the regular meeting next week, Quoting from the draft minutes: "Iain is preparing descriptions of contract types he wants to suggest for the standard. Last week, he met with the editor of the Data Privacy Vocabulary, and suggests a whiteboarding session between now and the next meeting could sketch out these contract types and agreements, in a Creative Commons-type mode, all of which are machine readable. They would be like 'intentcasts' with built-in agreements, specifying the data to be offered by people to service providers." This meeting will take place tomorrow morning, January 3, 2024, at 10am Pacific time. Due to its nature, we are using the WebEx platform, which includes screen sharing and a whiteboarding feature, to conduct the meeting. Feel free to join us tomorrow at 10am Pacific! Scott Mace, IEEE WG P7012 secretary Scott Mace invites you to join this Webex meeting. Meeting number (access code): 357 518 643 Meeting password: 9JGxfbp4p72 Join meeting<https://ieeesa.webex.com/ieeesa/j.php?MTID=m2cabf96f5d0caa8bdc2bb98c1ae55e20> Tap to join from a mobile device (attendees only) +1-646-992-2010,,357518643##<tel:%2B1-646-992-2010,,*01*357518643%23%23*01*> United States Toll (New York City) +1-213-306-3065,,357518643##<tel:%2B1-213-306-3065,,*01*357518643%23%23*01*> United States Toll (Los Angeles) Join by phone +1-646-992-2010 United States Toll (New York City) +1-213-306-3065 United States Toll (Los Angeles) Global call-in numbers<https://ieeesa.webex.com/ieeesa/globalcallin.php?MTID=m1f0f063a3dc7baba5b23…> Join from a video system or application Dial 357518643(a)ieeesa.webex.com You can also dial 173.243.2.68 and enter your meeting number. Join using Microsoft Lync or Microsoft Skype for Business Dial 357518643.ieeesa(a)lync.webex.com -- Scott Mace | Freelance Writer, Technology & Healthcare P.O. Box 5337, Carmel-by-the-Sea, CA 93921 510-473-5077 | Email smacehlm(a)gmail.com<mailto:smacehlm@gmail.com> http://maceonhealthcare.blogspot.com<http://maceonhealthcare.blogspot.com/> ________________________________ To unsubscribe from the STDS-7012-WG list, click the following link: https://listserv.ieee.org/cgi-bin/wa?SUBED1=STDS-7012-WG&A=1

1 0