- WG-IDAssurance - mailman.kantarainitiative.org

Formalising 'Comparable Alternative' criteria
by Richard G. WILSHER (＠Zygma Inc.) 15 Feb '24

15 Feb '24

As actioned at today's IAWG meeting, I attach the criteria which I used for a recent assessment (since Approved by the ARB). At the time I did not assign '63A#' tags since they were assessor-introduced criteria, but I have proposed use of 63A#0700 and #0710 in the attached doc, and of course the 'Assessor-introduced criterion' annotation should be removed prior to ublication and become 'Kantara-specific'. Proposed new criteria are in red with blue background - for context a couple of existing (albeit Kantara-specific in one instance) are also included. Happy to receive feedback next week. Richard G. WILSHER CEO & Founder, Zygma Inc. www.Zygma.biz +1 714 797 9942

1 0

Join Us in 1 Hour - IAWG Call - 2024-02-15
by Amanda Gay 15 Feb '24

15 Feb '24

Dear IAWG Members: Please join us today in one hour for our next IAWG meeting. The proposed agenda and Zoom details are below. *Date and Time* - *Date: Thursday, 2024-02-15* - *Time: 9:00 PT | 12:00 ET (**time zone calculator* <https://www.timeanddate.com/worldclock/converter.html>*)* - Please join the meeting from your computer, tablet or smartphone: https://zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 - Meeting ID: 931 6796 5850 - Passcode: 884696 - You can also dial in using your phone. Find your local number: https://zoom.us/u/aeg9vt8LSr <https://www.google.com/url?q=https%3A%2F%2Fzoom.us%2Fu%2FabUx61ivsc&sa=D&us…> - Need to add IAWG meetings to your calendar? Do so here! <https://kantara.atlassian.net/wiki/spaces/IAWG/overview> DRAFT Agenda 02.15.2024 1. Administration: - Roll call, determination of quorum. - Minutes approval - 2023-02-01 Minutes DRAFT <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/353861717/2024-02-01+D…> - 2023-02-08 Minutes DRAFT <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/355762336/2024-02-08+M…> - Kantara Updates - Assurance Updates 2. IAWG Actions/Reminders/Updates: - Address of Record Position: - Presented to ARB Monday, Feb 12 - Group reminder: February 22, EU-US TTC WG-1 <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…> (Working Group 1) Webinar: Unpacking the Digital Identity Mapping Results (registration details coming soon - please check back). 3. Discussion: - EU-US TTC WG-1 <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…> Digital Identity Mapping Exercise Report; feedback due 11:59PM ET, February 29, 2024 - Richard Wilsher - Interpretation of criteria <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/353632257/2024+Meeting…> - Review Yehoshua’s draft of criteria (first point regarding multi-factor authentication) - Continue discussion on second criteria question (superior evidence) 4. Any Other Business -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

2 1

Invitation & Agenda for IAWG Call 2023-02-15
by Amanda Gay 13 Feb '24

13 Feb '24

Dear IAWG Members: Please join us Thursday, February 15, at 12PM ET for our next IAWG meeting. The proposed agenda and Zoom details are below. *Date and Time* - *Date: Thursday, 2024-02-15* - *Time: 9:00 PT | 12:00 ET (**time zone calculator* <https://www.timeanddate.com/worldclock/converter.html>*)* - Please join the meeting from your computer, tablet or smartphone: https://zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 - Meeting ID: 931 6796 5850 - Passcode: 884696 - You can also dial in using your phone. Find your local number: https://zoom.us/u/aeg9vt8LSr <https://www.google.com/url?q=https%3A%2F%2Fzoom.us%2Fu%2FabUx61ivsc&sa=D&us…> - Need to add IAWG meetings to your calendar? Do so here! <https://kantara.atlassian.net/wiki/spaces/IAWG/overview> DRAFT Agenda 02.15.2024 1. Administration: - Roll call, determination of quorum. - Minutes approval - 2023-02-01 Minutes DRAFT <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/353861717/2024-02-01+D…> - 2023-02-08 Minutes DRAFT <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/355762336/2024-02-08+M…> - Kantara Updates - Assurance Updates 2. IAWG Actions/Reminders/Updates: - Address of Record Position: - Presented to ARB Monday, Feb 12 - Group reminder: February 22, EU-US TTC WG-1 <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…> (Working Group 1) Webinar: Unpacking the Digital Identity Mapping Results (registration details coming soon - please check back). 3. Discussion: - EU-US TTC WG-1 <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…> Digital Identity Mapping Exercise Report; feedback due 11:59PM ET, February 29, 2024 - Richard Wilsher - Interpretation of criteria <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/353632257/2024+Meeting…> - Review Yehoshua’s draft of criteria (first point regarding multi-factor authentication) - Continue discussion on second criteria question (superior evidence) 4. Any Other Business -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0

Join Us in 1 Hour - IAWG Call - 2024-02-08
by Amanda Gay 08 Feb '24

08 Feb '24

Dear IAWG Members: Please join us today in an hour for our next IAWG meeting. The proposed agenda and Zoom details are below. *Date and Time* - *Date: Thursday, 2024-02-018* - *Time: 9:00 PT | 12:00 ET (**time zone calculator* <https://www.timeanddate.com/worldclock/converter.html>*)* - Please join the meeting from your computer, tablet or smartphone: https://zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 - Meeting ID: 931 6796 5850 - Passcode: 884696 - You can also dial in using your phone. Find your local number: https://zoom.us/u/aeg9vt8LSr <https://www.google.com/url?q=https%3A%2F%2Fzoom.us%2Fu%2FabUx61ivsc&sa=D&us…> - Need to add IAWG meetings to your calendar? Do so here! <https://kantara.atlassian.net/wiki/spaces/IAWG/overview> Agenda 02.08.2024 1. Administration: - Roll call, determination of quorum. - Minutes approval - 2023-02-01 Minutes DRAFT <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/353861717/2024-02-01+D…> - Kantara Updates - Assurance Updates *2. Actions:* - Address of Record Position (attached): - Obtain approval before sending to ARB - EU-US TTC WG-1 <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…> Digital Identity Mapping Exercise Report; feedback due 11:59PM ET, February 29, 2024 - Gather comments/feedback before final consolidation of comments on 2.15.2024 prior to deadline *3. Discussion:* - Richard Wilsher - Interpretation of criteria <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/353632257/2024+Meeting…> *4. AOB* - Group reminder: February 22, EU-US TTC WG-1 <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…> (Working Group 1) Webinar: Unpacking the Digital Identity Mapping Results (registration details coming soon - please check back). Reach out with any questions! Best, -A -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0

Address of Record - Final Discussion and Motion to Approve 2024.02.08
by Amanda Gay 07 Feb '24

07 Feb '24

Good afternoon all: Per IAWG's February 1st meeting, I'm circulating the Address of Record position as it stands now in preparation for seeking a motion to approve as IAWG's position on the topic in this week's call. Please reach out with any questions or concerns. Best, -A -- Amanda Gay | Administrative Coordinator Twitter: @KantaraNews LinkedIn: @KantaraInitiative

3 2

Invitation & Agenda for IAWG Call 2023-02-08
by Amanda Gay 06 Feb '24

06 Feb '24

Dear IAWG Members: Please join us Thursday, February 8th, at 12PM ET for our next IAWG meeting. The proposed agenda and Zoom details are below. *Date and Time* - *Date: Thursday, 2024-02-018* - *Time: 9:00 PT | 12:00 ET (**time zone calculator* <https://www.timeanddate.com/worldclock/converter.html>*)* - Please join the meeting from your computer, tablet or smartphone: https://zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 - Meeting ID: 931 6796 5850 - Passcode: 884696 - You can also dial in using your phone. Find your local number: https://zoom.us/u/aeg9vt8LSr <https://www.google.com/url?q=https%3A%2F%2Fzoom.us%2Fu%2FabUx61ivsc&sa=D&us…> - Need to add IAWG meetings to your calendar? Do so here! <https://kantara.atlassian.net/wiki/spaces/IAWG/overview> Agenda 02.08.2024 1. Administration: - Roll call, determination of quorum. - Minutes approval - 2023-02-01 Minutes DRAFT <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/353861717/2024-02-01+D…> - Kantara Updates - Assurance Updates *2. Actions:* - Address of Record Position (revised version forwarded when ready): - Obtain approval before sending to ARB - EU-US TTC WG-1 <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…> Digital Identity Mapping Exercise Report; feedback due 11:59PM ET, February 29, 2024 - Gather comments/feedback before final consolidation of comments on 2.15.2024 prior to deadline *3. Discussion:* - Richard Wilsher - Interpretation of criteria <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/353632257/2024+Meeting…> *4. AOB* - Group reminder: February 22, EU-US TTC WG-1 <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…> (Working Group 1) Webinar: Unpacking the Digital Identity Mapping Results (registration details coming soon - please check back). Reach out with any questions! Best, -A -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0

Updated IAWG Charter for 2024
by Andrew Hughes 01 Feb '24

01 Feb '24

The IAWG has approved our updated charter on 2024-01-18 You can find the document here: https://kantara.atlassian.net/wiki/spaces/IAWG/pages/1278189/IAWG+Charter *Andrew Hughes *CISM mobile/signal +1 250.888.9474 AndrewHughes3000(a)gmail.com *https://www.linkedin.com/in/andrew-hughes-682058a <https://www.linkedin.com/in/andrew-hughes-682058a>*

1 0

Join Us in 1 Hour - IAWG Call - 2024-02-01
by Amanda Gay 01 Feb '24

01 Feb '24

Dear IAWG Members: Please join us in an hour today, February 1st, for our next IAWG meeting. The proposed agenda and Zoom details are below. *Date and Time* - *Date: Thursday, 2024-02-01* - *Time: 9:00 PT | 12:00 ET (**time zone calculator* <https://www.timeanddate.com/worldclock/converter.html>*)* - Please join the meeting from your computer, tablet or smartphone: https://zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 - Meeting ID: 931 6796 5850 - Passcode: 884696 - You can also dial in using your phone. Find your local number: https://zoom.us/u/aeg9vt8LSr <https://www.google.com/url?q=https%3A%2F%2Fzoom.us%2Fu%2FabUx61ivsc&sa=D&us…> - Need to add IAWG meetings to your calendar? Do so here! <https://kantara.atlassian.net/wiki/spaces/IAWG/overview> Agenda 02.01.2024 1. Administration: - Roll call, determination of quorum. - Minutes approval - 2023-01-18 DRAFT Minutes <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/345309549/2024-01-18+M…> - Kantara Updates - Assurance Updates 2. Discussion: - EU-US TTC WG-1 Digital Identity Mapping Exercise Report <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…>; feedback due 11:59PM ET, February 29, 2024 3. Any Other Business - 2024 Charter <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/1278189/IAWG+Charter> available on the Wiki - Address of Record Position: Wiki Link <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/333414402/Address+of+R…> - Confirm next steps -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0

Address (or anything else) of record
by mhaeaking＠freeuk.com 01 Feb '24

01 Feb '24

Timeliness has long been a consideration (gas gill within last 3 months, change from quarterly returns of wedding certificates, etc.) but it looks as if there should be a field indicating how current information from an authoritative source is asserted to be. Sorry if this is old news to many, but I've only just seen quite how useless some of the authoritative sources are. See the Key Performance indicators in https://www.gov.uk/government/publications/hm-land-registry-annual-report-a… At the end of March 2023, it took 350 working [sic] days for 95% of all known changes lodged by a conveyancer to be reflected in the register,... [So reasonable doubt whether something is in after 18 months.]

1 0

Invitation & Agenda for IAWG Call 2023-02-01
by Amanda Gay 30 Jan '24

30 Jan '24

Dear IAWG Members: Please join us Thursday, February 1st, at 12PM ET for our next IAWG meeting. The proposed agenda and Zoom details are below. *Date and Time* - *Date: Thursday, 2024-02-01* - *Time: 9:00 PT | 12:00 ET (**time zone calculator* <https://www.timeanddate.com/worldclock/converter.html>*)* - Please join the meeting from your computer, tablet or smartphone: https://zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 - Meeting ID: 931 6796 5850 - Passcode: 884696 - You can also dial in using your phone. Find your local number: https://zoom.us/u/aeg9vt8LSr <https://www.google.com/url?q=https%3A%2F%2Fzoom.us%2Fu%2FabUx61ivsc&sa=D&us…> - Need to add IAWG meetings to your calendar? Do so here! <https://kantara.atlassian.net/wiki/spaces/IAWG/overview> Agenda 02.01.2024 1. Administration: - Roll call, determination of quorum. - Minutes approval - 2023-01-18 DRAFT Minutes <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/345309549/2024-01-18+M…> - Kantara Updates - Assurance Updates 2. Discussion: - EU-US TTC WG-1 Digital Identity Mapping Exercise Report <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…>; feedback due 11:59PM ET, February 29, 2024 3. Any Other Business - 2024 Charter <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/1278189/IAWG+Charter> available on the Wiki - Address of Record Position: Wiki Link <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/333414402/Address+of+R…> - Confirm next steps Please reach out with any questions! Best, -Amanda -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0

No IAWG today, 1.25.2024
by Amanda Gay 25 Jan '24

25 Jan '24

Hi all: Just a reminder that we will not meet today. Please respond to Yehoshua's email to provide comments on either the Address of Record position or the upcoming EU-US mapping feedback. Reach out with any questions! Best, -Amanda -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0

Canceled event with note: Identity Assurance Work Group Call @ Thu Jan 25, 2024 12pm - 1pm (EST) (wg-idassurance@kantarainitiative.org)
by Kantara Initiative 24 Jan '24

24 Jan '24

This event has been canceled with a note: "IAWG canceled for January 25, 2024. " Identity Assurance Work Group Call Thursday Jan 25, 2024 ⋅ 12pm – 1pm Eastern Time - New York Location Zoom https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 https://www.google.com/maps/search/Zoom+https:%2F%2Fus06web.zoom.us%2Fj%2F9… Meetings at 12 pm Eastern TimeTime zone converter: www.thetimenow.com/time-zone-converter.phpTopic: IAWGTime: This is a recurring meeting.Join Zoom Meetinghttps://zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09Meeting ID: 931 6796 5850Passcode: 884696One tap mobile+13126266799,,93167965850#,,,,*884696# US (Chicago)+16465588656,,93167965850#,,,,*884696# US (New York)Dial by your location +1 312 626 6799 US (Chicago) +1 646 558 8656 US (New York) +1 301 715 8592 US (Washington DC) +1 346 248 7799 US (Houston) +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma)Meeting ID: 931 6796 5850Passcode: 884696Find your local number: https://zoom.us/u/aeg9vt8LSr ~~//~~ Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this email because you are an attendee on the event. To stop receiving future updates for this event, decline this event. Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more https://support.google.com/calendar/answer/37135#forwarding

1 0

Address of record position & EU-US mapping feedback
by Yehoshua Silberstein 23 Jan '24

23 Jan '24

Good morning everyone! For those who have not had a chance to review, please see the attached document with our address of record position and provide any feedback via email before our next call on February 8. I also want to remind everyone to share their thoughts and feedback on the EU-US Trade and Technology Council Digital Identity Mapping Exercise Report <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…> via email before the next call as the deadline to provide comments is February 29. Any and all feedback is welcome. Best, Yehoshua -- Yehoshua Silberstein | Associate Counsel, Core Product yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof <https://www.proof.com/blog/our-vision> brand 🎉 We hope you love our new look and feel as much as we do! -- *NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.*

3 3

Join Us in 1 Hour - IAWG Call - 2024-01-18
by Amanda Gay 18 Jan '24

18 Jan '24

Dear IAWG Members: Please join us in an hour for our first IAWG meeting of 2024. The proposed agenda and Zoom detail are below. *Date and Time* - *Date: Thursday, 2024-01-18* - *Time: 9:00 PT | 12 noon ET (**time zone calculator* <https://www.timeanddate.com/worldclock/converter.html>*)* - Please join the meeting from your computer, tablet or smartphone: https://zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 - Meeting ID: 931 6796 5850 - Passcode: 884696 - You can also dial in using your phone. Find your local number: https://zoom.us/u/aeg9vt8LSr <https://www.google.com/url?q=https%3A%2F%2Fzoom.us%2Fu%2FabUx61ivsc&sa=D&us…> - Need to add IAWG meetings to your calendar? Do so here! <https://kantara.atlassian.net/wiki/spaces/IAWG/overview> Agenda 1.18.2024 1. Administration: - Roll call, determination of quorum. - Minutes approval - 2023-12-14 Minutes DRAFT <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/333545474/2023-12-18+M…> - 2023-11-30 Minutes DRAFT <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/300351535/2023-11-30+D…> - Kantara Updates - Assurance Updates 2. Discussion: - 2024 Leadership Election - Chair and Vice Chair Nominations - Address of Record Position: Wiki Link <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/333414402/Address+of+R…> - Final review for comments and changes: 2024 Charter Review Process <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/290914314/2024+Charter…> - Staff to send e-ballot after meeting - EU-US TTC WG-1 Digital Identity Mapping Exercise Report <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…>; feedback due 11:59PM ET, February 29, 2024 3. Any Other Business - Interpretation of criteria (2 topics) - Richard Wilsher Best, -A -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0

Updated draft charter for 2024
by Andrew Hughes 18 Jan '24

18 Jan '24

Hi folks - I have tried to incorporate all the input into this draft. (Track changes is on - I'm just not showing the changes - you can toggle that as you wish) Let's talk about it on this week's call and if it's ready to go we can circulate for eballot. thanks andrew. *Andrew Hughes *CISM mobile/signal +1 250.888.9474 AndrewHughes3000(a)gmail.com *https://www.linkedin.com/in/andrew-hughes-682058a <https://www.linkedin.com/in/andrew-hughes-682058a>*

1 0

Invitation & Agenda for IAWG Call 2024-01-18
by Amanda Gay 17 Jan '24

17 Jan '24

Dear IAWG Members: Please join us at *12pm *US Eastern Time Thursday, January 18, for our first IAWG meeting of 2024. The proposed agenda and Zoom detail are below. *Date and Time* - *Date: Thursday, 2024-01-18* - *Time: 9:00 PT | 12 noon ET (**time zone calculator* <https://www.timeanddate.com/worldclock/converter.html>*)* - Please join the meeting from your computer, tablet or smartphone: https://zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 - Meeting ID: 931 6796 5850 - Passcode: 884696 - You can also dial in using your phone. Find your local number: https://zoom.us/u/aeg9vt8LSr <https://www.google.com/url?q=https%3A%2F%2Fzoom.us%2Fu%2FabUx61ivsc&sa=D&us…> - Need to add IAWG meetings to your calendar? Do so here! <https://kantara.atlassian.net/wiki/spaces/IAWG/overview> Agenda 1.18.2024 1. Administration: - Roll call, determination of quorum. - Voting: - Non-Voting: - Staff: - Guests: - Minutes approval - 2023-12-14 Minutes DRAFT <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/333545474/2023-12-18+M…> - 2023-11-30 Minutes DRAFT <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/300351535/2023-11-30+D…> - Kantara Updates - Assurance Updates 2. Discussion: - 2024 Leadership Election - Chair and Vice Chair Nominations - Address of Record Position: Wiki Link <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/333414402/Address+of+R…> - Final review for comments and changes: 2024 Charter Review Process <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/290914314/2024+Charter…> - Staff to send e-ballot after meeting - EU-US TTC WG-1 Digital Identity Mapping Exercise Report <https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden…>; feedback due 11:59PM ET, February 29, 2024 3. Any Other Business Best, -A -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

3 3

EU-US mapping - NIST webinar plus comment period
by Andrew Hughes 17 Jan '24

17 Jan '24

Heads up: https://www.nist.gov/identity-access-management/eu-us-ttc-wg-1-digital-iden… >>>> IAWG should prepare comments and submit on this document Following a successful round of government-to-government technical exchanges earlier this calendar year, in March 2023, the European Commission and the US Government, operating under the auspices of the US-EU Trade and Technology Council (TTC) WG-1, publicly committed to undertake a transatlantic mapping exercise with the objective of finding commonalities between the EU and US approaches to digital identity. Released today, the jointly authored EU-US TTC WG-1 *Digital Identity Mapping Exercise Report * <https://www.nist.gov/document/eu-us-ttc-wg1>provides the preliminary results of an initial mapping centered on the definitions, assurance levels, and references to international standards included across Revision 3 of the NIST Digital Identity Guidelines (Special Publication 800-63, Revision 3 <https://pages.nist.gov/800-63-3/sp800-63-3.html>) and European Regulation (EU) No 910/2014 <https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2014.257.…> on electronic identification and trust services for electronic transactions in the internal market. *Call for Feedback* The next phase of this project will include collecting feedback and selecting potential use cases for transatlantic cooperation that highlight the need for and value of enabling the cross-border use of digital identities. The EC and the US are actively seeking comments from communities with subject matter expertise in digital identity, privacy, human-centered design, and cybersecurity; organizations that have designed or implemented digital identity systems within the EU, the US, or in cross-border contexts; and others with equities related to the topic of digital identity. Andrew Hughes CISM m +1 250.888.9474 AndrewHughes3000(a)gmail.com https://www.linkedin.com/in/andrew-hughes-682058a

1 0

IAWG Chair and Vice Chair: Self-Nomination Period Now Open
by Amanda Gay 14 Jan '24

14 Jan '24

Good morning IAWG members: The self-nomination period for 2024 IAWG leadership (Chair and Vice Chair Positions) is now open. People may self-nominate or nominate another individual by emailing the IAWG list with their intention. The selection of Chair/Vice will happen at next week's IAWG meeting (January 18). Please reach out with any questions or concerns! Best, -Amanda -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

3 2

Canceled event with note: Identity Assurance Work Group Call @ Thu Jan 11, 2024 12pm - 1pm (EST) (wg-idassurance@kantarainitiative.org)
by Kantara Initiative 11 Jan '24

11 Jan '24

This event has been canceled with a note: "Good morning: Today's (Jan 11) IAWG call is canceled. Please make sure to submit your nominations for Chair/Vice Chair via the listserv (per an earlier email) and we look forward to next week's call! Reach out with any questions. Best, -Amanda" Identity Assurance Work Group Call Thursday Jan 11, 2024 ⋅ 12pm – 1pm Eastern Time - New York Location Zoom https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 https://www.google.com/maps/search/Zoom+https:%2F%2Fus06web.zoom.us%2Fj%2F9… Meetings at 12 pm Eastern TimeTime zone converter: www.thetimenow.com/time-zone-converter.phpTopic: IAWGTime: This is a recurring meeting.Join Zoom Meetinghttps://zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09Meeting ID: 931 6796 5850Passcode: 884696One tap mobile+13126266799,,93167965850#,,,,*884696# US (Chicago)+16465588656,,93167965850#,,,,*884696# US (New York)Dial by your location +1 312 626 6799 US (Chicago) +1 646 558 8656 US (New York) +1 301 715 8592 US (Washington DC) +1 346 248 7799 US (Houston) +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma)Meeting ID: 931 6796 5850Passcode: 884696Find your local number: https://zoom.us/u/aeg9vt8LSr ~~//~~ Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this email because you are an attendee on the event. To stop receiving future updates for this event, decline this event. Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more https://support.google.com/calendar/answer/37135#forwarding

1 0

Address of record IAWG position document
by Andrew Hughes 10 Jan '24

10 Jan '24

Happy new year! (Sending on behalf of Yehoshua) Yehoshua has prepared the attached document about Address of Record as discussed in 2023. Please review, provide feedback and be prepared to discuss at next week's IAWG call. andrew. *Andrew Hughes *CISM mobile/signal +1 250.888.9474 AndrewHughes3000(a)gmail.com *https://www.linkedin.com/in/andrew-hughes-682058a <https://www.linkedin.com/in/andrew-hughes-682058a>*

1 0

No IAWG Meeting on January 11th
by Amanda Gay 09 Jan '24

09 Jan '24

Hi all: Happy New Year! Thursday's call is canceled. Please continue to review the charter and make notes/edits/comments here <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/290914314/2024+Charter…> in preparation for next week's meeting (Jan 18) Many thanks, -Amanda -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0

Musings on the environment/quagmire where the NIST-EU mapping is located
by mhaeaking＠freeuk.com 04 Jan '24

04 Jan '24

My draft thoughts on the chasm between NIST and the EU that seems to be being papered over. Punches would need to be pulled before publication, and in some cases the relevance spelled out for those not close to the subject. It doesn't look anything like a draft for Kantara, and is light on certification, but grateful to colleagues for comments. Please reply-all only if you intend to. DRAFT EU-US TTC Digital Identity Mapping Exercise Report TTC WG1: Technology Standards – Digital Identity Subgroup The comparison is like comparing the navy and the fishing fleet: much common terminology even if only vague distinctions between large medium and small vessels, the same water and icebergs, but a fundamentally different dynamic. Sometimes, as with harbour buoys, the two sides of the Atlantic can differ and the differences need to be known and catered for, but in other cases the seemingly simple fields such as Gender M/F turn out to not work if the field is blank or X for ‘not saying’, let alone anything nuanced or changing over time like clownfish. These disinterested comments come from England, where interoperability with both partners is vital. They include highlighting some of the background issues complication the development or use of common standards in this arena. The European Commission’s own analysis determined that “eIDAS1.0” Regulation had not worked as intended, and the scope of eIDAS2.0 is much broader (including ledgers and wallets, possibly able to hold money) as well as specifically demanding some nation-level components and not just interoperability if they exist. (This was a result of the limitation of the legal basis of action by the European Commission akin to US state’s rights but mostly in reverse. ) It pays less attention to common law concerns and requires a national infrastructure of population registers that most EU Member States already have but that nobody is expecting to see in the US (Canada, UK, NZ nor Australia) and which would, in any case, necessarily take a considerable time to produce. There is explicit provision for “mutual” recognition of the systems of other nations, whereas the appropriate entities might well be the individual US States, (Canadian Provinces or UK devolved governments). This ‘mutual’ expectation causes problems not only for simultaneous starting of any bilateral, but also in cases where one side would already accept the other’s adequacy, e.g. an EU signature would be legally acceptable in the US with no special provision needed, so there is nothing to ‘find equivalent’. It is also worth noting what by European standards is the large number of committee votes against the proposed Regulation, not just abstentions, which must indicate significant unresolved issues. Most of the questions raised will need to be addressed in the devil of the detail of the implementing acts, and it would be premature to comment on those beyond encouraging continuing engagement. The exception is “How should we design and architect…” which presumes it is the role of “we” and might result in the modern equivalent of X.500 e-mail: a camel designed by committee that nobody used voluntarily. The different contexts are important to understand and the implications for public and private use need to be thought through. Lessons should be learnt from the UK’s online-only status checks for (non-Irish) EU residents: they make proof of right to rent a serious barrier as private landlords (who are forced to check) prefer paperwork, but, conversely, it gives a significant advantage to immigrants finding employment online, where the nationals must use paperwork (which they may not have). The issue of ‘pseudonyms’ needs to be clarified, not least to enable interoperability between those places where everyone has a unique official number, an official name with a single registered address at any one time, and the places with a typical English-speaking laissez-faire environment. Even within Europe there is discrepancy in whether the concern is about alternate names, variants, nicknames, abbreviations, previous names, professional names, or about identifiers that have no association outside a context (such as customer number 56223, local policeman 999, or the person currently standing at some very precise location). The US Federal Government may still be holding out against role-based identifiers (such as ‘Navigating Officer of USS Chesapeake’) because policy relating to attributes such as clearances has not been updated. The 2007 OECD paper on Personhood noted philosophical differences (comparing Hegel and Locke) and there is a significant difference between the mindsets of US rampant individualism yet being focussed on authorization and the EU socialist yet ‘self-sovereign’ aspirations. The gory detail of character sets and transliterations will need to be addressed for interoperability to work without opening up an opportunity for fraud or an impediment to anyone with out an ASCII name. (The German government has done a thorough analysis and specification but it may only be available in German. Consistent automated handling of characters -öøłŵæőÞßçéñ and many others is challenging, not least with field length limits.) Many of the everyday inconveniences blamed on GDPR, particularly the abuse as an excuse for inaction, are not based on what is (still) in the Regulation but rather on an incomplete understanding. Concepts such as a (remote) signature service are not widely known about, let alone seen as relevant. Innovative uses cannot be excluded, although the implications for risk and liability are hard to foresee (or limit). There is a common US misperception that GDPR applies to EU citizens, whereas citizenship appears nowhere in the text; the scope is people in Europe, and that’s not the equivalent of ‘US persons’. The eIDAS 2.0 preamble is clear that trust services are “normally provided for remuneration”, i.e. someone is making money out of something for somebody. This will require an associated payment infrastructure (a separate issue from whether the wallet contains cash). Yet, presumably as voters have no enthusiasm to pay for something that they didn’t before, there is also the demand for free ‘non-professional use’ (not yet defined). Tangible benefits are hard to demonstrate online. Even in England, Qualified electronic signatures are often asserted to have mystical legal powers (such as reversal of burden of proof) which are not found in the law as enacted. The distinction between e-signatures and e-seals doesn’t align with Japanese usage, UK company seals or Scottish partnerships, so care will be needed to ensure any distinctions are considered, especially where digital signatures are use for both. Permission to enter a building can expire, but if something in law is required to be signed then it is either signed or it is not, and it makes no sense to have a signature timing out. ‘Levels’ have not been resolved, with the new eIDAS preamble indicating muddier waters ahead. The UK was the source of the original OMB levels, the analysis under STORK of the problems with inconsistencies, the pressure for definitions based on what was achieved, and, in GPG43/RSDOPS, an attempted functional distinction. The lesson was that whereas multiple ‘levels’ made sense for separate aspects of security, when it came to evidence no division such as civil (balance of probability)/criminal (beyond reasonable doubt) could usefully be made for individual items. Having defined-security levels balances the costs of needing to round up with the benefit of common provision, but the issue that integrity and confidentiality levels work in opposite directions makes them hard to define and use. (Copying from high to low is OK in one case and problematic in the other.) The only well-defined definitions for levels were log micromorts, but this is not something that politicians are comfortable using. Although rarely noticed, eIDAS 1.0 put an upper bound of ‘high’ on what can be required by EU public sector services, otherwise a ‘barrier to trade’ is created. But now we find “In order to ensure that the data using a qualified electronic registered delivery service is delivered to the correct addressee, qualified electronic registered delivery services should ensure WITH FULL CERTAINTY the identification of the addressee while A HIGH LEVEL OF CONFIDENCE would suffice as regard to the identification of the sender”. What this means in assurance vocabulary is far from obvious. Outside command economies, relying parties (whether second-party verifiers or third party analysers of evidence) are treated in very different ways, and this looks to be setting an obstacle course. • The US (and Australian) line seems that these need to abide by (and shown to abide by) some specified rules. This (for the US) may be justified by lack of a GDPR and so a need for sector-specific approach to handling personal data. • The EU envisages registration of relying parties, which looks like a barrier to external trade. • The UK framework has accepted that is pointless and counterproductive to limit reliance, not least because it is the requirements of (or laid upon) the relying party that is the whole point of the edifice. (You need to check I’m over/under some age and might not be able to do it without my assistance, but I have no inherent desire to claim/assert the attribute. It’s for your compliance or due diligence, for which I’m not rushing to pay.) Attributes such as nationality or citizenship rarely have the clear and useful distinction made in Mexico (where you have to be an adult to be a citizen), but these really only have one authoritative source for each value, and the relevant state may be unable or unwilling to participate. A Belgian ID card that states that someone is a Canadian is not necessarily useful for asserting Canadian citizenship, but may be evidence that they are not claiming to be Belgian. How could one get an authoritative assertion of being not Chinese (in a country which accepts dual citizenship)? EU annex item 7. Educational qualifications, titles and licenses; [These may be in a previous name; the awarding body may not exist, or may have merged with another] would need to way to handle authoritative sources for the information for qualifications gained long ago, although in some cases professional organisations might suffice without expecting something from the awarding body. That would be separate from item 8: Professional qualifications, titles and licenses; [These too may be in a previous or alternate name] There are many leading universities that do not provide digital certificates for current graduates, let alone those who graduated before computers were in widespread use. There are many pragmatic unilateral trust relationships that will not translate easily into the digital world, e.g. the Philippine requirement for visas for visiting Chinese passport holders unless they already hold a visa from the US, UK, Australia, or Schengen (and probably others). Philippine immigration is a legitimate relying party, using paper visas in this way without getting formal approval from any of the bigger players, nor informing them of any cases. The implications of being reliant on markets to deliver should be noted. The UK and NATO have been able to declare that compliance with NIST standards is sufficient for some applications, but they should never make them mandatory if the US has sole control of what is tested for compliance. US Presidential directives ensure that there is a (large) guaranteed market for compliant products or services. Advice on the pragmatic aspects of certification can be gleaned from interested parties such as Kantara, but note that open source is envisioned by “Member States should disclose the source code of the user application software components of European Digital Identity Wallets”. After more than a decade and despite widespread internet use for purchases, the continuing reluctance of the majority of Belgians or Germans to use the available electronic ID even for national applications is a warning that cross-border use is for a small minority, and the emotive universality is arguably overplayed. To see ourselves as others see us! It would from many a blunder free us, And foolish notion Citizens of countries rarely experience the horrors of the cross-border processes that bewilder foreigners. E.g. The US use of passports from the cheapest supplier, border guards using equipment approved by Canada, a wall to block the tired, poor and huddled masses, export control that covers information that never leaves the US. The perceptions (even without malicious misinformation) can be more important than the reality, and the damage e.g. to tourism should be studied. The UK may be even weirder, and is not a party to this interaction, but may be a source of warnings as it has overlaps with both camps. E.g. in GB, recent voterID requirements have discouraged, inconvenienced or disenfranchised voters without solving a problem that didn’t exist, and diverted attention from areas where ID infrastructure would be useful. Mark

1 0

Cancelled IAWG meetings - January
by Amanda Gay 02 Jan '24

02 Jan '24

Hi all: Just a reminder that IAWG will NOT meet on the following days: January 4 Meetings will resume on January 11. ***Group ACTION (November 30, 2023):* IAWG members are to review the charter (2024 Charter Review Process <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/290914314/2024+Charter…> ) and provide comments to clean and clarify language. Guidelines: - Refer to the numbering in the PDF, but make comments in the Word doc. - If something is confusing, please comment. - Don’t assume things are there for a purpose. - Note any omissions for later inclusion. Reach out with any questions or concerns and happy new year! Best, -Amanda -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0

Cancelled IAWG meetings December/January
by Amanda Gay 26 Dec '23

26 Dec '23

Hi all: Just a reminder that IAWG will NOT meet on the following days: December 28 January 4 Meetings will resume on January 11. ***Group ACTION (November 30, 2023):* IAWG members are to review the charter (2024 Charter Review Process <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/290914314/2024+Charter…> ) and provide comments to clean and clarify language. Guidelines: - Refer to the numbering in the PDF, but make comments in the Word doc. - If something is confusing, please comment. - Don’t assume things are there for a purpose. - Note any omissions for later inclusion. Reach out with any questions or concerns and happy holidays! Best, -Amanda -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0

Cancelled IAWG meetings December/January
by Amanda Gay 19 Dec '23

19 Dec '23

Hi all: Just a reminder that IAWG will NOT meet on the following days: December 21 December 28 January 4 Meetings will resume on January 11. ***Group ACTION (November 30, 2023):* IAWG members are to review the charter (2024 Charter Review Process <https://kantara.atlassian.net/wiki/spaces/IAWG/pages/290914314/2024+Charter…> ) and provide comments to clean and clarify language. Guidelines: - Refer to the numbering in the PDF, but make comments in the Word doc. - If something is confusing, please comment. - Don’t assume things are there for a purpose. - Note any omissions for later inclusion. Reach out with any questions or concerns and happy holidays! Best, -Amanda -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0