- Wg-pemc - mailman.kantarainitiative.org

Re: Virtual Seminar on Consent tomorrow 8 AM Eastern
by Salvatore D'Agostino 21 Aug '24

21 Aug '24

Here is the login information, it was ok'd to be forwarded to interested parties. * Date and Time: 22 August 2024; 14.00 - 15.00 (CEST) * Link: https://weizenbaum-institut-de-wi.zoom-x.de/j/61829228111?pwd=SqRpMHLIODlsI… * Password: GenAI24 Info: This meeting uses the Zoom Account of the Weizenbaum Institute. Please refer to https://www.weizenbaum-institut.de/en/privacy-notice/privacy-notice-zoom/ for information regarding your privacy. ________________________________ From: Salvatore D'Agostino Sent: Wednesday, August 21, 2024 2:41 PM To: wg-ancr(a)kantarainitiative.org <wg-ancr(a)kantarainitiative.org> Subject: Virtual Seminar on Consent tomorrow 8 AM Easter Events 2024 & Upcoming – Plamadiso (weizenbaum-institut.de)<https://plamadiso.weizenbaum-institut.de/events/> Shayne Longpre Consent in Crisis: The Rapid Decline of the AI Data Commons

1 0

NIST Releases Second Public Draft of Digital Identity Guidelines for Final Review | NIST
by John Wunderlich 21 Aug '24

21 Aug '24

I assume most in the work group will know this, but just in case: https://www.nist.gov/news-events/news/2024/08/nist-releases-second-public-d… Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Implementation Challenges in Privacy-Preserving Federated Learning | NIST
by John Wunderlich 20 Aug '24

20 Aug '24

FYI: https://www.nist.gov/blogs/cybersecurity-insights/implementation-challenges… Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Reminder: PEMC Tomorrow 14:00 Eastern
by John Wunderlich 20 Aug '24

20 Aug '24

We will continue discussion and review of draft report, leading to a work group vote. Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

the wallet landscape is getting confusing
by Tom Jones 16 Aug '24

16 Aug '24

I think the PEMC requirements doc needs to ship - NOW. California IDs coming soon in Apple Wallet and Google Wallet | Governor of California <https://www.gov.ca.gov/2024/08/15/california-ids-coming-soon-in-apple-walle…> ..tom

1 0

Reminder - Review PEMC draft report
by John Wunderlich 14 Aug '24

14 Aug '24

We will be reviewing the draft report today, preparing for a group vote in the next month or so. -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

2 1

Candidate report ready for discussion and revision
by John Wunderlich 05 Aug '24

05 Aug '24

Hello; Please see the notes for Wednesday’s meeting. You can download a copy of the candidate report (and the comments spreadsheet) from the shared files and links pages on Confluence. Please email me directly if you have any issues accessing the candidate report. Looking forward to Wednesday. Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

NIST Resources
by Salvatore D'Agostino 29 Jul '24

29 Jul '24

https://www.digitalbenefitshub.org/about Interesting that this is being represented as public benefit. Very much in line with ANCR transparency performance specification as public resource for digital transparency/trust IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 https://IDmachines.com

1 0

This week’s PEMC call is cancelled
by John Wunderlich 29 Jul '24

29 Jul '24

Hello; Working on draft for consideration, for circulation next week. Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

AI user agent wallets
by Tom Jones 24 Jul '24

24 Jul '24

At the request of today's meeting I create this addendum and would like feedback from the team on it prior to use. ..tom Effect of AI on User Agent Wallets Most user agents, like browsers and wallets, are already offering users assistance is setting preferences and saving passwords or pass keys. As AIs grow in capabilities on the user mobile devices, they will be more involved in user convenience, privacy and safety. This section focuses on the means to ensure that privacy enhancing choices are made for the benefit of the user. Both the existing practice with the Driver’s license card as well as the early example of mobile verification apps enable the verifier to acquire more of the user’s data than is needed for the purposes of the transaction. In order for the user, or the user’s agent to make informed decisions about the data needed the purpose and the verifiable identifier of the organization requesting the data must be supplied. This will allow a real-time evaluation of the request against the typical request for such a transaction beyond what the user would normally understand. Similarly, dark patterns from verifiers could be detected and the user warned. As new dark patterns are discovered in attacks against user privacy and security, these can be presented to any AI agent to improve the user’s experience. Here we focus on a request made to an unknown user by the verifier as well as the issuer since they also verify the user before issuing any credential to them. The Verifier may make any number of different requests in their query to the user’s agent that will help the agent make good decision for the user. Some of those requests will be to understand what wallet is used and the level of protection provided by the wallet, including proof of presence and proof of continued liveness of the certificate holder or the holder’s delegated representative. In these circumstances the agent is not permitted to act for the holder but must honor the request of the verifier. Where the agent does act on behalf of the holder, it is important for the wallet or other agent code to be identified to the verifier. Any agent instance identification can itself be personally identifiable information about the user and must be treated as such by the verifier. The information on Purpose and the Identity of the Verifier is critical to the user or the user’s agent when acting on their behalf. It is to be expected that strong trust ecosystems for these as well as other data supplied by the verification are in place. The adoption of AI agents, wallets and other mobile applications depends on such a trust relationship. One other use case where an AI user agent could help is where the user wishes to select a credential to provide to the verifier before the verifier sends any information to the user. This type of transaction is high risk as the user can only rely on the physical context and has no other control over who actually acquires the presented credentials. The AI agent can try to understand the context by any means available and help to guide the user into a safe choice.

1 0