November 2024 - WG-RIUP - mailman.kantarainitiative.org

ISO AI workshops
by Salvatore D'Agostino 28 Nov '24

28 Nov '24

https://jtc1info.org/technology/subcommittees/ai/workshops/ Get Outlook for iOS<https://aka.ms/o0ukef>

1 0

there is a problem with oversharing on VC/VP transactions
by Tom Jones 27 Nov '24

27 Nov '24

https://github.com/openid/OpenID4VP/issues/333 I have been having a issue with the ethics of the current EU wallet - feedback appreciated https://github.com/openid/OpenID4VP/issues/333 Peace ..tom jones

1 0

Invitation: RIUP WG @ Tue Nov 19, 2024 1pm - 2pm (EST) (wg-riup@kantarainitiative.org)
by Noreen Whysel 19 Nov '24

19 Nov '24

RIUP WG Tuesday Nov 19, 2024 ⋅ 1pm – 2pm Eastern Time - New York Meeting link: https://us06web.zoom.us/j/87499194761?pwd=cmhDTHBXV2VTbFBMZzllMlZVbnFoZz09 Good evening to all! 1) We will take a stab at doing a near final review of the PCQ document with comments from Tom, Justin and Jorge. Link to the Inclusive Purpose Consent Query (PCQ) document: https://docs.google.com/document/d/1n7HobJ6QTsNld5rn1uuIiNw0A__L44ug/edit 2) Tom shared this link regarding our sister WG-PEMC] Biometric Update points to PEMC report comment period! ICYMI: https://www.biometricupdate.com/202411/kantara-wants-comment-on-privacy-rec… 3) Ranking discussion: Mobility vs Dexterity Smartphone vs Tablet/iPad Solo vs Caregiver ----( Zoom )---- https://us06web.zoom.us/j/87499194761?pwd=cmhDTHBXV2VTbFBMZzllMlZVbnFoZz09 ---===--- Organizer Noreen Whysel nwhysel(a)gmail.com Guests Noreen Whysel - organizer Salvatore D'Agostino armin(a)kantarainitiative.org ichhatwa(a)gmail.com thomasclinganjones(a)gmail.com kay(a)kantarainitiative.org kragh65(a)gmail.com wg-riup(a)kantarainitiative.org Kantara Staff View all guest info https://calendar.google.com/calendar/event?action=VIEW&eid=XzhjcjNlZ2kyNjhy… Reply for wg-riup(a)kantarainitiative.org and view more details https://calendar.google.com/calendar/event?action=VIEW&eid=XzhjcjNlZ2kyNjhy… Your attendance is optional. ~~//~~ Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this email because you are an attendee on the event. To stop receiving future updates for this event, decline this event. Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more https://support.google.com/calendar/answer/37135#forwarding

1 1

Canceled event: RIUP WG @ Tue Nov 19, 2024 1pm - 2pm (EST) (wg-riup@kantarainitiative.org)
by Noreen Whysel 19 Nov '24

19 Nov '24

This event has been canceled. RIUP WG Tuesday Nov 19, 2024 ⋅ 1pm – 2pm Eastern Time - New York Meeting link: https://us06web.zoom.us/j/87499194761?pwd=cmhDTHBXV2VTbFBMZzllMlZVbnFoZz09 Good evening to all! 1) We will take a stab at doing a near final review of the PCQ document with comments from Tom, Justin and Jorge. Link to the Inclusive Purpose Consent Query (PCQ) document: https://docs.google.com/document/d/1n7HobJ6QTsNld5rn1uuIiNw0A__L44ug/edit 2) Tom shared this link regarding our sister WG-PEMC] Biometric Update points to PEMC report comment period! ICYMI: https://www.biometricupdate.com/202411/kantara-wants-comment-on-privacy-rec… 3) Ranking discussion: Mobility vs Dexterity Smartphone vs Tablet/iPad Solo vs Caregiver ----( Zoom )---- https://us06web.zoom.us/j/87499194761?pwd=cmhDTHBXV2VTbFBMZzllMlZVbnFoZz09 ---===--- Organizer Noreen Whysel nwhysel(a)gmail.com ~~//~~ Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this email because you are an attendee on the event. To stop receiving future updates for this event, decline this event. Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more https://support.google.com/calendar/answer/37135#forwarding

1 0

RIUP WG meeting tomorrow Nov 19, 2024, 1 PM ET Here is a direct link to WG meeting (I'm hopeful this link works)
by jim kragh 18 Nov '24

18 Nov '24

Meeting link: https://us06web.zoom.us/j/87499194761?pwd=cmhDTHBXV2VTbFBMZzllMlZVbnFoZz09 Good evening to all! *1) We will take a stab at doing a near final review of the PCQ document with comments from Tom, Justin and Jorge.* *Link to the Inclusive Purpose Consent Query (PCQ) document:* https://docs.google.com/document/d/1n7HobJ6QTsNld5rn1uuIiNw0A__L44ug/edit 2) *Tom shared this link* regarding our sister WG-PEMC] Biometric Update points to PEMC report comment period! ICYMI: https://www.biometricupdate.com/202411/kantara-wants-comment-on-privacy-rec… *3) Ranking discussion: *Mobility vs Dexterity Smartphone vs Tablet/iPad Solo vs Caregiver Have a restful evening, JIm

1 0

Fwd: [WG-PEMC] Biometric Update points to PEMC report comment period!
by Tom Jones 14 Nov '24

14 Nov '24

adding to RIUP since the DII is listed as well. Peace ..tom jones ---------- Forwarded message --------- From: Andrew Hughes <andrewhughes3000(a)gmail.com> Date: Wed, Nov 13, 2024 at 8:46 AM Subject: [WG-PEMC] Biometric Update points to PEMC report comment period! To: pemc kantara <wg-pemc(a)kantarainitiative.org> Cc: Karyn Bright <karyn(a)kantarainitiative.org> ICYMI: https://www.biometricupdate.com/202411/kantara-wants-comment-on-privacy-rec… *Andrew Hughes *CISM mobile/signal +1 250.888.9474 AndrewHughes3000(a)gmail.com *https://www.linkedin.com/in/andrew-hughes-682058a <https://www.linkedin.com/in/andrew-hughes-682058a>* _______________________________________________ A Community Group mailing list of KantaraInitiative.org Wg-pemc mailing list -- wg-pemc(a)kantarainitiative.org To unsubscribe send an email to staff(a)kantarainitiative.org List archives -- https://mailman.kantarainitiative.org/hyperkitty/list/wg-pemc@kantarainitia… ______ Group wiki -- https://kantara.atlassian.net/wiki/spaces/Wg-pemc

2 1

IPCQ compliance with PEMC requirements
by Tom Jones 06 Nov '24

06 Nov '24

The PEMC requirements are out for review of all of Kantata https://kantara.atlassian.net/wiki/spaces/GI/pages/683507722/PICPR20241010 I created a list of the requirements that seem germain - on first review it seems that the IPCQ is in compliance with the PEMC. I would like others to take a look to see if there is agreement. Attached are my notes on the relevant parts IMHO. (John - i did run into one requirement that was not clear - if there are other comments perhaps we can open this one as well.) 265 Establish the Context for User Consent 266 Verifiers shall establish valid consent at or before the Holder presents any information from a Mobile Credential (tj – not sure what this means) Peace ..tom jones

1 0

RIUP WG meeting tomorrow November 5, 1 PM ET
by jim kragh 05 Nov '24

05 Nov '24

*Setting the stage:* Tom sent a link out about an hour an hour ago thanking Bev for sharing a document https://edtechmagazine.com/higher/article/2024/11/what-self-sovereign-ident… and responded: - I read it to say that it puts privacy in the hands of the subject of the credential. As things stand today this is flat wrong and I think we need to understand why. Thanks Tom for sending your recent message to the WG. That was the focus of my message (below) last week. There are two items in play for our meeting tomorrow regarding the PCQ document: the 'consent-recept' that Tom and Sal have advanced in prior meetings (security, privacy, access control, audit trail) and so noted as one of the 23 findings in the *Internet of Things Advisory Board's report*. ( https://www.nist.gov/itl/applied-cybersecurity/nist-cybersecurity-iot-progr…) The 2nd item, which Justin has also shared some thoughts on, is a secondary communication back-up structure/node when the internet goes down. Have a nice evening and please review the updated content that Tom shared,....comments can be made directly to the doc https://docs.google.com/document/d/1n7HobJ6QTsNld5rn1uuIiNw0A__L44ug/edit?u… Jim *https://us06web.zoom.us/j/87605872193?pwd=HQI7AJKhLvpgtUxKyOYANVUKzsZW3U.1 <https://us06web.zoom.us/j/87605872193?pwd=HQI7AJKhLvpgtUxKyOYANVUKzsZW3U.1>* *Meeting ID: 876 0587 2193Passcode: 157149 * One tap mobile +13052241968,,87605872193#,,,,*157149# US +13092053325,,87605872193#,,,,*157149# US Dial by your location • +1 305 224 1968 US • +1 309 205 3325 US • +1 312 626 6799 US (Chicago) • +1 646 558 8656 US (New York) • +1 646 931 3860 US • +1 301 715 8592 US (Washington DC) • +1 669 444 9171 US • +1 689 278 1000 US (Last week's message)! At the last meeting Tom J. led the discussion on reviewing the draft *Inclusive Purpose Consent Query* (PCQ) document. Nearing the end of that call a question was raised, what happens when the internet is taken down by a hurricane, or tornado? What might be a fallback network, or infrastructure, FEMA or FirstNet, or is there some other possible solution? The forgoing became real for me during the recent hurricane that visited Florida and North Caroline. Florida was bad but NC was devastating. My dear friends, who live nearby, have family and friends there, as did I, but they suffered the loss and had injuries. Within two days, my friends stocked up their RV and headed to NC and were shocked at the destruction. Several days later, they sent me the message (below) that raised the communication challenge that Tom raised two months ago and again earlier this month. [Here is the message I received from NC: "Private retired military personnel from Florida are desperately trying to find private helicopters to rescue victims. In other words the government is not only helping but are trying to prevent others from doing so (no way to communicate). For those interested, this link is a video by SEAL Shawn Ryan about several rescue teams in NC mountains now: https://youtu.be/KgPYPEnmYnc?si=0bxMPDvxydsxaP-s Please find attached an updated PCQ draft, (*Inclusive Purpose Consent Query*, *Version 7*, KI-RUIP-WG draft-Date 2024-10-15) which is updated for your review and input for our November 5th meeting. Yes, please vote, and please review the document so you are ready to contribute to the WG discussion. Have a good week and thank you.

2 2

self sovereign ID - is it really?
by Tom Jones 04 Nov '24

04 Nov '24

Thanks for sharing this Bev - I read it to say that it puts privacy in the hands of the subject of the credential. As things stand today this is flat wrong and I think we need to understand why. As Sal has been telling us - we need transparency when asked to share our data. The current spec for that: OID4VP completely fails to provide the user with the information that they need in order to make an informed decision to consent to sharing data. It also fails to work at all in the case where in-person presentation is made and cannot be used in the disaster case mentioned by Justin and Jim. It also fails to allow for delegation and inclusion. Perhaps this will be changed before standardization, but the push to get something done fast argues against that. The linked doc is designed to fix these problems - please come tomorrow prepared to discuss. Comments can be made directly to the doc. https://docs.google.com/document/d/1n7HobJ6QTsNld5rn1uuIiNw0A__L44ug/edit?u… ================== Sharing FYI: Security What Is Self-Sovereign Identity, and Could It Impact Higher Education Cybersecurity? Advocates of SSI say the nascent philosophy would put personal data back in the hands of the people. But how realistic is that, and how far away is an actual solution? https://edtechmagazine.com/higher/article/2024/11/what-self-sovereign-ident… Peace ..tom jones

1 0

No RIUP WG meeting tomorrow; we meet on 1st and 3rdTuesday’s. Please prep and read the attached for Nov. 5th; reminders to follow:
by jim kragh 04 Nov '24

04 Nov '24

Good Evening to all! At the last meeting Tom J. led the discussion on reviewing the draft *Inclusive Purpose Consent Query* (PCQ) document. Nearing the end of that call a question was raised, what happens when the internet is taken down by a hurricane, or tornado? What might be a fallback network, or infrastructure, FEMA or FirstNet, or is there some other possible solution? The forgoing became real for me during the recent hurricane that visited Florida and North Caroline. Florida was bad but NC was devastating. My dear friends, who live nearby, have family and friends there, as did I, but they suffered the loss and had injuries. Within two days, my friends stocked up their RV and headed to NC and were shocked at the destruction. Several days later, they sent me the message (below) that raised the communication challenge that Tom raised two months ago and again earlier this month. [Here is the message I received from NC: "Private retired military personnel from Florida are desperately trying to find private helicopters to rescue victims. In other words the government is not only helping but are trying to prevent others from doing so (no way to communicate). For those interested, this link is a video by SEAL Shawn Ryan about several rescue teams in NC mountains now: https://youtu.be/KgPYPEnmYnc?si=0bxMPDvxydsxaP-s Please find attached an updated PCQ draft, (*Inclusive Purpose Consent Query*, *Version 7*, KI-RUIP-WG draft-Date 2024-10-15) which is updated for your review and input for our November 5th meeting. Yes, please vote, and please review the document so you are ready to contribute to the WG discussion. Have a good week and thank you. Be well, JIm

3 2