- Wg-ancr - mailman.kantarainitiative.org

Fwd: [projectvrm] Identity in India - Payments
by Salvatore D'Agostino 12 Mar '24

12 Mar '24

Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: Adrian Gropper <agropper(a)healthurl.com> Sent: Tuesday, March 12, 2024 3:40:38 AM To: ProjectVRM list <projectvrm(a)eon.law.harvard.edu>; technical-discuss(a)lists.openwallet.foundation <technical-discuss(a)lists.openwallet.foundation> Subject: [projectvrm] Identity in India - Payments This is my second post now based on three weeks of travel in India. The first was mostly about identity in the sense of (state) security. This one is about commerce and is cross-posted to OWF and VRM. As a foreigner, paying for things in India before and during the trip has been a constant problem. In two cases, it was impossible because the largest cell service provider, AirTel, and a government-run hotel network, MTDC, are both “cashless” but could not accept any US credit card in practice. The preferred payment processor in India is the UPI standard but that requires both a gov-run biometric Aadhaar identity as well as an Indian bank account. As far as I can tell, neither is accessible to a foreigner. This is how identity comes into payments. I don’t know the details of UPI but I saw it in action when a native friend purchased something from a typical small vendor. The overwhelming majority of vendors ranging from AirTel to pushcart vendors display a QR code that a customer can scan with their UPI app. The salesperson then uses their smartphone app to scan a QR code on the customer’s smartphone. The transaction is confirmed in seconds and the purchase complete. The identity questions are: - Why bother with the card displaying the QR code instead of just having the salesperson display a QR code from their phone? and, - Why can’t I use my BTC and ETH wallet and skip UPI in a clearly decentralized transaction? As best I can tell, the issue is more likely taxation and fraud rather than KYC. (I suspect money laundering is a separate issue when large transfers can be done via tumblers already.) In the Open Wallet and VRM context, Web3 and central bank digital currency seem clearer to me now. What’s needed is a way to prevent the vendor from evading taxes and the salesperson from pocketing the digital cash. It’s not obvious to me how either VCs or DIDs fit into this picture. Adrian

1 0

ANCR-Assurance Program Discussion
by MarkL 06 Mar '24

06 Mar '24

Hi All, In the ANCR WG meeting we discussed making this a regular call to work on the ANCR Assurance Program & Committee. Expect some spider-diagrams in the near future. We look at how a Kantara ANCR Assurance Program could enable the certification of Registrars, running controller credential and receipt notary services. The aim is to have something presented prior to the April 12 Meeting in Manchester on Age Assurance, where we will be presenting the consent receipt - Transparency Performance Scheme and the 0PN-Digital Privacy Program for the Age Assurance industry. If you are interested, the next call on this topic will be in two weeks, Best, Mark

2 2

21970 - use case TPS for Gen AI
by MarkL 06 Mar '24

06 Mar '24

Hello, I submitted this, with what little time I could scrape, I think is more representative of latest, simplified consent record and receipt semantic and its application from an ANCR perspective., There is a specific format that they are requested - with various use case formats to be provided,. *also attached, If anyone wants t work on this with us, next week, at the same time we can work on it. (In the off week) Mark

1 2

Reminder off Week Call today - Notary Authentication Assurance
by MarkL 07 Feb '24

07 Feb '24

Hi ANCR, Reminder we are having an off week call today and discussing: 1. generic cyber-notary authentication scheme, 2. Notary Assurance Levels 3. A too small to fail service implementation for the cyber-notary Best, - Mark

1 1

COMMENTS FOR 0- ISO/IEC - Age Assurance Standard WD 27566-1 and Benchmarking 27566-2
by MarkL 30 Jan '24

30 Jan '24

Hi ANCR, Just to let you know that we looking to progress comments for Age Assurance Benchmarking27566-2 from ANCR, which would coincide with My Comments from SCC/Canada on 27566-1. (Both attached) The standard inputs should be retrievable via the BOT-Liaison WG, if you want to take a closer look, In addition, 0PN Digital Transparency Lab will be looking to host a WHiSSPRR - Fireside on Age Assurance on February 23rd or March 1st, depending on availability, inviting Tony Allen the lead for 27566 (BSI) + equivalent in Brazil, up against some Canadian regulation on Age Assurance Bill 210, with DIACC Joni and Sharon from PACC also being invited, Stay tuned for more information, Best, Mark

1 0

Fwd: CALL FOR SUBMISSIONS: International Conference on AI and the Digital Economy, CADE 2024
by MarkL 30 Jan '24

30 Jan '24

FYI - Begin forwarded message: From: Angelika Kerlin <akerlin(a)turing.ac.uk> Subject: CALL FOR SUBMISSIONS: International Conference on AI and the Digital Economy, CADE 2024 Date: 30 January 2024 at 09:22:42 GMT-5 To: Trustworthy Digital Identity Interest Group <digitalidentityIG(a)turing.ac.uk> Dear all, This year marks a significant milestone for the International Conference on AI and the Digital Economy (CADE), as they celebrate their 10th anniversary. Over the past decade, CADE has been a great place for researchers, especially those in the early stages of their careers, to share their work, discuss ideas, and make professional connections. This year's programme will again take place in Venice, Italy, in a blended format, allowing participants to attend physically or virtually on 24-26 June 2024. We are getting in touch to let you know that this year’s call for submissions is now open with a deadline of the 3rd of March 2024. The themes cover AI in Health, AI in Finance, Digital Public Infrastructure, Smart Mobility, and Sustainability. You can submit an extended abstract (2 pages) or a full paper (6 pages). The conference proceedings will be published on IET and IEEE Xplore. More information can be found in the attachment, as well as on their website<https://warwick.ac.uk/fac/sci/wmg/news-and-events/events/wmgevents/cade2024/>. Your participation would be very welcome. Please feel free to circulate to others within your network, who may also be interested. With best wishes, Angelika Publications from the previous conferences can be accessed via the following links: CADE 2021<https://ieeexplore.ieee.org/xpl/conhome/9650934/proceeding> / CADE 2022<https://ieeexplore.ieee.org/xpl/conhome/9945911/proceeding> / CADE 2023<https://ieeexplore.ieee.org/xpl/conhome/10324414/proceeding> _____________________________ Angelika Kerlin Research Project Manager Finance & Economics Programme akerlin(a)turing.ac.uk<mailto:akerlin@turing.ac.uk> +44 203 8623 374 _____________________________ The Alan Turing Institute turing.ac.uk<http://www.turing.ac.uk/> Registered Charity 1162533 || Company Registration 09512457 || VAT no 270 0609 32 The Alan Turing Institute is a limited liability company, registered in England with registered number 09512457. Our registered office is at British Library, 96 Euston Road, London, England, NW1 2DB. We are also a charity registered in England with charity number 1162533. This email and any attachments are confidential and may be legally privileged. If you have received it in error, you are on notice of its status. If you have received this message in error, please send it back to us, and immediately and permanently delete it. Do not use, copy or disclose the information contained in this message or in any attachment. DISCLAIMER: Although The Alan Turing Institute has taken reasonable precautions to ensure no viruses are present in this email, The Alan Turing Institute cannot accept responsibility for any loss or damage sustained as a result of computer viruses and the recipient must ensure that the email (and attachments) are virus free. While we take care to protect our systems from virus attacks and other harmful events, we give no warranty that this message (including attachments) is free of any virus or other harmful matter, and we accept no responsibility for any loss or damage resulting from the recipient receiving, opening or using it. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or be incomplete. If you think someone may have interfered with this email, please contact the Alan Turing Institute by telephone only and speak to the person dealing with your matter or the Accounts Department. Fraudsters are increasingly targeting organisations and their affiliates, often requesting funds to be transferred to a different bank account. The Alan Turing’s bank details are contained within our terms of engagement. If you receive a suspicious or unexpected email from us, or purporting to have been sent on our behalf, particularly containing different bank details, please do not reply to the email, click on any links, open any attachments, nor comply with any instructions contained within it, but contact our Accounts department by telephone. Our Transparency Notice found here - https://www.turing.ac.uk/transparency-notice sets out how and why we collect, store, use and share your personal data and it explains your rights and how to raise concerns with us. You're receiving this message because you're a member of the Trustworthy Digital Identity Interest Group group from The Alan Turing Institute. To take part in this conversation, reply all to this message. View group files<https://outlook.office365.com/owa/digitalidentityIG@turing.ac.uk/groupsubsc…> | Leave group<https://outlook.office365.com/owa/digitalidentityIG@turing.ac.uk/groupsubsc…> | Learn more about Microsoft 365 Groups<https://aka.ms/o365g>

1 0

Re: Jan 24 AdHoc Call - ANCR Use Case Call for 27091: Security & Privacy in AI
by MarkL 24 Jan '24

24 Jan '24

Hi Sharon, Thanks for point that out, I didn’;r make it clear, this review is for a review of the use cases out there, so that use experts can provide security and privacy use cases. So you are spot on.with your response. - Mark On 22 Jan 2024, at 13:44, ccbw(a)duck.com wrote: Thanks for including the use cases. I’ve reviewed a few and am concerned that some — which speak to tracking individuals and their preferences — do not list any "threats & vulnerabilities” much less any privacy risks to the individual. Without fulsome consideration and disclosure of the privacy and human rights risks that individuals will face from the AIs, the status quo is further endorsed and entrenched. My 2c. Sharon Polsky DPO BIS MAPP • President — Privacy and Access Council of Canada<http://pacc-ccap.ca/> • Vice-Chair, Digital Governance Council Technical Committee <https://dgc-cgn.org/standards/> for Privacy & Access Control Standards<https://dgc-cgn.org/standards/> • Vice-Chair, Digital Governance Council Technical Committee<https://dgc-cgn.org/standards/> for Canadian Information Privacy Protection Framework<https://dgc-cgn.org/standards/> • PbD — Privacy By Design Ambassador<http://web.archive.org/web/20121012080217/http:/privacybydesign.ca/ambassad…> On Jan 22, 2024, at 6:07 AM, MarkL <mark_at_0pn.org_ccbw(a)duck.com> wrote: Hi All, As mentioned on the last call, this coming Wed we will have a call working on submitting use case via the Kantara ISO liaison to expert ad-hoc committee, for security and privacy in AI. In the Hi All, As mentioned on the last call, this coming Wed we will have a call working on submitting use case via the Kantara ISO liaison to expert ad-hoc committee, for security and privacy in AI. In the last ISO-Ad-Hoc for 27091 (held last week) there was a review of 132 and 187 AI use cases were reviewed for relevance to security and privacy, (See attached summary) WG5 experts have invited us to provide our ANCR privacy and security AI use case and it’s an opportunity to apply ANCR work. This brings up a number of items if we were to participate via ANCR, 1, administrative liaison 2. Use case development Attached is a use case info and template/pdf. Best, Mark <ISO-IEC JTC 1-SC 27-WG 5_27091 meeting 240117 Contribution existing use cases.pdf><ISO-IEC JTC 1-SC 27-WG 5_27091 meeting 240117 Contribution study methodology.pdf>_______________________________________________ A Community Group mailing list of KantaraInitiative.org Wg-ancr mailing list -- wg-ancr(a)kantarainitiative.org To unsubscribe send an email to staff(a)kantarainitiative.org List archives -- https://mailman.kantarainitiative.org/hyperkitty/list/wg-ancr@kantarainitia… ______ Group wiki -- https://kantara.atlassian.net/wiki/spaces/Wg-ancr

2 2

FYI - BiT Supplement
by MarkL 23 Jan '24

23 Jan '24

HI All, Paul has submitted a concrete list of what data is considered ultra-sensitive and Blinding Identity Taxonomy is a practice to mitigate clear text use of identifiers in this attached draft supplement. FYI The supplement is currently in the review phase with the Kantara Leadership Council and will be openly discussed in their next meeting on Feb 20 Best, Mark

1 0

ISO Liaison
by Salvatore D'Agostino 23 Jan '24

23 Jan '24

Hi WG, I wanted to remind folks that in order to access ISO drafts you need to go through this page. https://kantara.atlassian.net/wiki/spaces/lsc/overview?homepageId=4456453 Thanks, Sal

1 0

Re: Jan 24 AdHoc Call - ANCR Use Case Call for 27091: Security & Privacy in AI
by ccbw＠duck.com 22 Jan '24

22 Jan '24

Thanks for including the use cases. I’ve reviewed a few and am concerned that some — which speak to tracking individuals and their preferences — do not list any "threats & vulnerabilities” much less any privacy risks to the individual. Without fulsome consideration and disclosure of the privacy and human rights risks that individuals will face from the AIs, the status quo is further endorsed and entrenched. My 2c. Sharon Polsky DPO BIS MAPP • President — Privacy and Access Council of Canada <http://pacc-ccap.ca/> • Vice-Chair, Digital Governance Council Technical Committee <https://dgc-cgn.org/standards/> for Privacy & Access Control Standards <https://dgc-cgn.org/standards/> • Vice-Chair, Digital Governance Council Technical Committee <https://dgc-cgn.org/standards/> for Canadian Information Privacy Protection Framework <https://dgc-cgn.org/standards/> • PbD — Privacy By Design Ambassador <http://web.archive.org/web/20121012080217/http:/privacybydesign.ca/ambassad…> On Jan 22, 2024, at 6:07 AM, MarkL <mark_at_0pn.org_ccbw(a)duck.com> wrote: DuckDuckGo did not detect any trackers. More <https://duckduckgo.com/-AfbRryfaswqENWPS6jOkjZauDmjumUSaympnaaOznAEt2SBlID5…> Report Spam <https://duckduckgo.com/-AfbRryfaswqENWPS6jOkjZauDmjumUSaympnaaOznAEt2SBlID5…> Hi All, As mentioned on the last call, this coming Wed we will have a call working on submitting use case via the Kantara ISO liaison to expert ad-hoc committee, for security and privacy in AI. In the last ISO-Ad-Hoc for 27091 (held last week) there was a review of 132 and 187 AI use cases were reviewed for relevance to security and privacy, (See attached summary) WG5 experts have invited us to provide our ANCR privacy and security AI use case and it’s an opportunity to apply ANCR work. This brings up a number of items if we were to participate via ANCR, 1, administrative liaison 2. Use case development Attached is a use case info and template/pdf. Best, Mark <ISO-IEC JTC 1-SC 27-WG 5_27091 meeting 240117 Contribution existing use cases.pdf><ISO-IEC JTC 1-SC 27-WG 5_27091 meeting 240117 Contribution study methodology.pdf>_______________________________________________ A Community Group mailing list of KantaraInitiative.org Wg-ancr mailing list -- wg-ancr(a)kantarainitiative.org To unsubscribe send an email to staff(a)kantarainitiative.org List archives -- https://mailman.kantarainitiative.org/hyperkitty/list/wg-ancr@kantarainitia… ______ Group wiki -- https://kantara.atlassian.net/wiki/spaces/Wg-ancr

1 0