October 2024 - Wg-pemc - mailman.kantarainitiative.org

Rushed EU eID Wallet risks privacy and security - European Digital Rights (EDRi)
by John Wunderlich 16 Oct '24

16 Oct '24

Another FYI: https://edri.org/our-work/rushed-eu-eid-wallet-risks-privacy-and-security-c… Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Fwd: mDL use cases.
by Tom Jones 16 Oct '24

16 Oct '24

I would like to call out the team that is focused on Inclusive Identifiers - Entidad, also a contributor to Kantara. *Most Compelling and Most Socially Impactful* Team Entidad Use Case – Integrating mDL for nonprofits to reach and enroll underserved community members into social benefits programs. Peace ..tom jones ---------- Forwarded message --------- From: Marc L. Aronson <maronson(a)notary.org> Date: Wed, Oct 16, 2024 at 6:20 AM Subject: mDL use cases. To: John Wunderlich <john(a)wunderlich.ca>, Tom Jones < thomasclinganjones(a)gmail.com> *CA DMV Recognizes Companies for Outstanding mDL Use Cases at First Community Hackathon* *October 10, 2024* *Sacramento* – The California Department of Motor Vehicles (DMV) today announced recognition awardees of its first community hackathon focused on expanding the use of the California mobile driver’s license (mDL). Held at the Computer History Museum in Mountain View on October 1, 2024, this event brought together over 50 participants representing leading private sector businesses and innovators. Teams presented a range of use cases designed to enhance secure, privacy-focused digital identity solutions using the California mDL. The hackathon highlighted the versatility and potential of mDLs in various industries, from financial services to retail, and showcased proposals addressing privacy and security, user experience, and social impact. “We were impressed by the innovative solutions presented by the teams. Their efforts underscore the mDL’s potential to empower Californians to verify their identity in a safe and privacy-conscious way,” said DMV Director Steve Gordon. “These use cases demonstrate how mDL technology can impact both private and public sectors to the benefit of their customers.” The following teams were recognized at the event for their outstanding contributions: - *Most Compelling and Most Socially Impactful* Team Entidad Use Case – Integrating mDL for nonprofits to reach and enroll underserved community members into social benefits programs. - *Most Promising* Team Cisco VC Verifiers Use Case – Using mDL as a root digital identity to enable password less authentication. - *Best Privacy and Security Design* Team Block Use Case – Leveraging mDL for point-of-sale age verification of age-restricted products sold by Square merchants. - *Most Scalable* Team US Bank Use Case – Implementing mDL for in-person identity verification at bank branches, specifically for high-risk transactions. - *Best User Experience* Team UltraPass Use Case – mDL, combined with encrypted biometric authentication, to streamline account creation for new users and helps businesses prevent users from creating duplicate accounts. - *Best Presentation* Team MATTR (MATTR, Samsung, Treez, Nuvei) Use Case – mDL for identity and age verification in cannabis dispensary and delivery services. - *Best Independent Submission * Team UFI Use Case – Integrating mDL into existing Identity and Access Management (IAM) systems. The hackathon, co-hosted by the OpenID Foundation, demonstrated the increasing acceptance of mDL technology and its potential to provide Californians with a convenient, secure, and privacy-protecting identity verification option and businesses an effective way to reduce fraud and improve operational efficiency. The DMV plans to continue exploring mDL’s potential through future events, including a second hackathon scheduled for November 1 in Sacramento, which will focus on public sector applications. Local, state, federal and international government entities will participate in this event. The DMV’s mDL pilot, available through the California DMV Wallet app, continues to evolve with more than 780,000 Californians already participating. For more information on how to enroll, visit dmv.ca.gov/mdl. https://www.dmv.ca.gov/portal/ca-dmv-wallet. We'd love to hear about your experience with us here <https://notaryne.ws/feedback>! *Marc L. Aronson * President & CEO *Pennsylvania Association of Notaries* p: 800-944-8790 x113 | f: 800-707-7075 maronson(a)notary.org | www.notary.org <https://www.notary.org?utm_medium=email&utm_source=direct&utm_campaign=empl…> One Gateway Center, Suite 401 420 Fort Duquesne Blvd., Pittsburgh, PA 15222-1498 <https://www.linkedin.com/company/pennsylvania-association-of-notaries> <https://www.facebook.com/PaAssocNotaries> <https://www.instagram.com/paassocnotaries/> <https://www.tiktok.com/@panotaries> <https://www.youtube.com/user/PaAssocNotaries> This message (including any attachments) is confidential and may be privileged. If you have received it by mistake, please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. Please note that e-mails are susceptible to change. The Pennsylvania Association of Notaries (PAN) shall not be liable for the improper or incomplete transmission of the information contained in this communication nor for any delay in its receipt or damage to your system. PAN does not guarantee that the integrity of this communication has been maintained nor that this communication is free of viruses, interceptions or interference.

1 0

DMV Recognizes Companies for Outstanding mDL Use Cases at First Community Hackathon - California DMV
by John Wunderlich 16 Oct '24

16 Oct '24

This was shared with my by a member of the workgroup: https://www.dmv.ca.gov/portal/news-and-media/news-releases/dmv-recognizes-c… Have a better-than-expected day, John Wunderlich @PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Reminder: No PEMC call today
by John Wunderlich 16 Oct '24

16 Oct '24

The draft recommendations are out for comment. Please share with your stakeholders that might want to comment. You can see the Disposition of Comments here: Disposition of Comments: PICPR20241010 - Privacy Enhancing Mobile Credentials (PEMC) - Kantara Initiative Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Privacy Framework 1.1 + Data Governance and Management Profile Workshop Summary Report Available Now!
by John Wunderlich 16 Oct '24

16 Oct '24

FYI https://content.govdelivery.com/accounts/USNIST/bulletins/3bc3a65 -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Reminder: No PEMC Call today
by John Wunderlich 16 Oct '24

16 Oct '24

The Draft Recommendations are out for comment. Please circulate to your stakeholders for feedback. Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Purpose and Consent Query message output from today's meeting.
by Tom Jones 16 Oct '24

16 Oct '24

https://docs.google.com/document/d/1n7HobJ6QTsNld5rn1uuIiNw0A__L44ug/edit?u… I addressed all comments and added a diagram with accompanying text. A few were not taken mostly for stylistic reasons. Please see if the attached line fairly represents all the comments received. I did need to make editorial adjustments. Comments may be made directly on the attached document. Peace ..tom jones

1 0

consent query will be addressed tomorrow
by Tom Jones 14 Oct '24

14 Oct '24

I know that PEMC is taking time off for review of the recommendation, but there will be a presentation on wallets used with the CA hackathon and the purpose/query language from a verifier to a user that should fit within the scope of interest here as well. Meeting is at 10am PT. Here is the current draft: https://docs.google.com/document/d/1n7HobJ6QTsNld5rn1uuIiNw0A__L44ug/edit?u… here is the Kantara calendars https://kantarainitiative.org/calendars/ Peace ..tom jones

1 0

Re: ISO / IEC - 29100:Updated now available publicly
by Salvatore D'Agostino 13 Oct '24

13 Oct '24

Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: Mark Lizar <mark(a)transparencylab.ca> Sent: Sunday, October 13, 2024 1:18:42 PM To: wg-ancr(a)kantarainitiative.org <wg-ancr(a)kantarainitiative.org> Subject: [WG-ANCR] ISO / IEC - 29100:Updated now available publicly <https://standards.iso.org/ittf/PubliclyAvailableStandards> standards.iso.org<https://standards.iso.org/ittf/PubliclyAvailableStandards> [X]<https://standards.iso.org/ittf/PubliclyAvailableStandards> Mark Lizar Executive Director @ the Global Privacy Rights Company

1 0

Fwd: NOTICE FOR PUBLIC COMMENTS AND IPR REVIEW: PEMC Recommendations for Privacy Enhancing Mobile Credentials v1
by Tom Jones 10 Oct '24

10 Oct '24

Note that it got messed up cause we did not add line numbers and kantara did I sent this for the benefit of PEMC followers that are not on Kantara mailing lists. thx ..Tom (mobile) ---------- Forwarded message --------- From: Kantara Initiative <general(a)kantarainitiative.org> Date: Thu, Oct 10, 2024, 11:56 AM Subject: NOTICE FOR PUBLIC COMMENTS AND IPR REVIEW: PEMC Recommendations for Privacy Enhancing Mobile Credentials v1 To: Thomas Jones <thomasclinganjones(a)gmail.com> Unsubscribe <https://kantarainitiative.org/membership/?civiwp=CiviCRM&q=civicrm%2Fmailin…> View in your browser <https://kantarainitiative.org/membership/?civiwp=CiviCRM&q=civicrm%2Fmailin…> <https://kantarainitiative.org/membership/?civiwp=CiviCRM&q=civicrm/mailing/…> Dear Kantara Initiative Members and Community: This is a formal notification that the PEMC Work Group (WG) has approved *Recommendations for Privacy Enhancing Mobile Credentials* as a *Group Approved* *Draft Recommendation* for public comment and Intellectual Property Rights (IPR) Review. Please follow the link below to review the document: - PEMC Group Approved Draft Recommendation v1 10.10.2024 <https://kantarainitiative.org/membership/?civiwp=CiviCRM&q=civicrm/mailing/…> In accordance with Kantara Initiative Operating Procedures, this email initiates a review and comment period of 45 days on this document. *COMMENT AND IPR REVIEW:* *(NOTE: 45 calendar days)* - Opens: Today, Thursday, 10 October 2024, 15:00 Eastern Time - Closes: Saturday, 23 November 2024, 15:00 Eastern Time To comment on the PEMC Group Approved Draft Recommendation, use one of the following options for participation: 1. Use the comment form: https://kantarainitiative.org/comment/ <https://kantarainitiative.org/membership/?civiwp=CiviCRM&q=civicrm/mailing/…> 2. Send your comment via email to staff(a)kantarainitiative.org <https://kantarainitiative.org/membership/?civiwp=CiviCRM&q=civicrm/mailing/…> with the subject “PEMC WG COMMENT SUBMISSION". *Intellectual Property Rights Notice: *Under the Kantara Initiative IPR Policy <https://kantarainitiative.org/membership/?civiwp=CiviCRM&q=civicrm/mailing/…> Appendix B Article 5 and the Kantara Initiative Operating Procedures <https://kantarainitiative.org/membership/?civiwp=CiviCRM&q=civicrm/mailing/…>Section 7.5, you have a period of 45 days to review the criteria for any Necessary Claims that may be implicated by the criteria. Note that any submissions are deemed to be contributed under the IPR Option of PEMC: Non-Assertion Covenant <https://kantarainitiative.org/membership/?civiwp=CiviCRM&q=civicrm/mailing/…> . While there is no requirement to review your patent portfolio for Necessary Claims, please be advised that unless you provide a licensing objection in accordance with the Kantara Initiative IPR Policy Article 5 or a notice of withdrawal in accordance with Kantara Initiative IPR Policy Article 6 on or before 23 November 2024 you will have committed to the licensing provisions as set forth by the Non-Assertion Covenant IPR Policy with respect to any Necessary Claims implicated by the final approved recommendation. Having signed the Group Participation Agreement (GPA) all members of PEMC should be familiar with these documents, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark, and license rights that read on an approved Kantara Initiative Recommendation. Kantara Initiative invites any persons who know of any part of this Group output that would infringe on third-party intellectual property rights to disclose such infringement claims so that these claims may be provided to the Group members for resolution. If you wish to submit an IPR claim please do the following: 1. IPR Claims may be sent to staff(a)kantarainitiative.org <https://kantarainitiative.org/membership/?civiwp=CiviCRM&q=civicrm/mailing/…> with the subject “PEMC WG IPR CLAIM” Please contact staff(a)kantarainitiative.org <https://kantarainitiative.org/membership/?civiwp=CiviCRM&q=civicrm/mailing/…> with any questions or concerns!

1 0