- WG-RIUP - mailman.kantarainitiative.org

Fwd: NEW BLOG | Progress - NIST’s Digital Identity Guidelines
by Tom Jones 12 Dec '23

12 Dec '23

It looks like 63-4 is headed for another public response period. Note that they have switched to the issuer-holder-verifier format. Most of the responses from Kantara have been from the IA folk who are focused on the audit POV. Perhaps we needs something from the developer POV? ..tom ---------- Forwarded message --------- From: NIST Cybersecurity and Privacy Program < csrc.nist(a)service.govdelivery.com> Date: Tue, Dec 12, 2023 at 7:09 AM Subject: NEW BLOG | Progress - NIST’s Digital Identity Guidelines To: <thomasclinganjones(a)gmail.com> [image: NIST] View As Web Page <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDAsInVy…> [image: Header] Cybersecurity Insights a NIST Blog A Note on Progress…NIST’s Digital Identity Guidelines. In August 2023 the Digital Identity Guidelines team hosted a two-day workshop to provide a public update on the status of revision 4. As part of that session, we committed to providing further information on the status of each volume going forward. In fulfillment of this commitment, we wanted to offer a quick update on where we stand. Our goal remains to have the next version of each volume out by the Spring of 2024. With our gratitude for the robust and substantive engagement we received during the comment period, at this time we would like to announce that all four volumes of Special Publication 800-63-4 will have a second public comment period, which will last at least 45 days. - *NIST SP 800-63 Base Volume* <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDEsInVy…>. We are making substantive changes to the volume including updating the digital identity model to account for “Issuer, Holder, Verifier” frameworks of digital identity, new content... Read More <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDIsInVy…> Connect with us [image: facebook] <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDMsInVy…>[image: twitter] <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDQsInVy…>[image: youtube] <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDUsInVy…>[image: linkedin] <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDYsInVy…>[image: flickr] <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDcsInVy…> Received this email from a friend? Subscribe here <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDgsInVy…> . [image: ITL NIST] <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDksInVy…> Subscriber services: Manage Preferences <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTAsInVy…> | Unsubscribe <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTEsInVy…> | Help <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTIsInVy…> ------------------------------ If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTMsInVy…> . Technical questions? Contact inquiries(a)nist.gov. (301) 975-NIST (6478). This service is provided to you at no charge by National Institute of Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, MD 20899 · 301-975-6478 [image: GovDelivery logo] <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTQsInVy…>

1 0

draft 7 of digital identifier inclusion
by Tom Jones 11 Dec '23

11 Dec '23

https://docs.google.com/document/d/1CGX_q8SeTcWGUnKou6311QZC3Yw7r1wW/edit?u… anyone with this link can make suggestions. ..tom

1 0

which federal agency should create Identifier standards?
by Tom Jones 08 Dec '23

08 Dec '23

'TSA Is Not the Right Agency to Lead' REAL ID Implementation, Security Experts Say Security and identity management experts urged Congress to direct the National Institute of Standards and Technology to play a bigger role in developing standards for digital identity management ahead of a looming 2025 deadline for domestic air travellers to comply with security requirements outlined in the REAL ID Act. "While DHS does not create standards, DHS - or even better, the White House or Congress - should request that NIST lead a timeboxed, one-year effort to create the standards and guidance needed to accelerate the deployment of secure, privacy-protecting mDL apps that Americans can use to protect and assert their identity online," Grant testified. Jay Stanley, a senior policy analyst with the American Civil Liberties Union's Speech, Privacy, and Technology Project, warned that the TSA has proposed to adopt the ISO standards, which he said were "created behind closed doors by a secretive committee" and are "inadequate and incomplete when it comes to the protection of our privacy." Sounds like Jeremy Grant is involved somehow. ..tom

2 1

Re: [WG-PEMC] which federal agency should create Identifier standards?
by Tom Jones 08 Dec '23

08 Dec '23

Whether mDL covers the underserved population is a state by state decision. Washington State is doing a fairly good job of getting IDs to underserved. thx ..Tom (mobile) On Fri, Dec 8, 2023, 12:33 PM Salvatore D'Agostino <sal(a)idmachines.com> wrote: > Jeremy gave testimony, read it, not bad, did not include underserved, > since mdl does not cover anyone > ------------------------------ > *From:* Tom Jones <thomasclinganjones(a)gmail.com> > *Sent:* Friday, December 8, 2023 2:58 PM > *To:* wg-riup <wg-riup(a)kantarainitiative.org>; pemc kantara < > Wg-pemc(a)kantarainitiative.org> > *Subject:* [WG-PEMC] which federal agency should create Identifier > standards? > > 'TSA Is Not the Right Agency to Lead' REAL ID Implementation, Security > Experts Say > > Security and identity management experts urged Congress to direct the > National Institute of Standards and Technology to play a bigger role in > developing standards for digital identity management ahead of a looming > 2025 deadline for domestic air travellers to comply with security > requirements outlined in the REAL ID Act. > > "While DHS does not create standards, DHS - or even better, the White > House or Congress - should request that NIST lead a timeboxed, one-year > effort to create the standards and guidance needed to accelerate the > deployment of secure, privacy-protecting mDL apps that Americans can use to > protect and assert their identity online," Grant testified. > > Jay Stanley, a senior policy analyst with the American Civil Liberties > Union's Speech, Privacy, and Technology Project, warned that the TSA has > proposed to adopt the ISO standards, which he said were "created behind > closed doors by a secretive committee" and are "inadequate and incomplete > when it comes to the protection of our privacy." > > Sounds like Jeremy Grant is involved somehow. ..tom >

2 2

UN SDG 16.9 Identity
by Noreen Whysel 05 Dec '23

05 Dec '23

https://sdgs.un.org/goals/goal16#targets_and_indicatorsSDG 16.9 2023 Progress report: “insufficient data” https://unstats.un.org/sdgs/report/2023/progress-chart/Progress-Chart-2023.… Noreen Noreen

1 0

UN SDG 16.9 Identity
by noreen whysel 05 Dec '23

05 Dec '23

https://sdgs.un.org/goals/goal16#targets_and_indicatorsSDG 16.9 [image5.jpeg] 2023 Progress report: “insufficient data” [image1.jpeg] https://unstats.un.org/sdgs/report/2023/progress-chart/Progress-Chart-2023.… Noreen

1 0

Important: final doc review phase; your eyes and input are needed! RIUP WG meeting in 3 day; Dec 5 at 1 PM ET
by jim kragh 04 Dec '23

04 Dec '23

Please take time to review the linked *RIUP's 1st/3rd Tuesday Meeting Link:* https://us06web.zoom.us/j/87499194761?pwd=cmhDTHBXV2VTbFBMZzllMlZVbnFoZz09 Meeting ID: 874 9919 4761 *Passcode: 837815* All encompassing document: * No one in underserved populations left behind! * Dial by your location +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma) +1 301 715 8592 US (Washington DC) +1 312 626 6799 US (Chicago) Meeting ID: 874 9919 4761 Passcode: 837815 *Editor:* *Tom Jones* *Link to: Digital Identifier Inclusion* w*orking group draft document draft 6 November 26, 2023* https://docs.google.com/document/d/12Dwknikb3pk1QNYSXm9QbNkC8n6d4ZYM/edit We will also announce candidates and welcome other nonominoes for the RIUP chairs for 2024. More info coming in a reminder email, but for now please proof read the document. Have a nice evening and week-end, Jim

1 1

Today’s meeting
by Justin Byrd 28 Nov '23

28 Nov '23

Meeting link isn't working for me. -J Get Outlook for iOS<https://aka.ms/o0ukef> --- Justin Byrd (He, Him) PARTNER / PROJECT-LEAD E: justin(a)machi-systems.com<mailto:justin@machi-systems.com> P: 570-820-2060 M: Book a call with me!<https://meetings.machi-systems.com/justin> Machi-Systems, LLC. Scranton Life Building 538 Biden St, Suite 528 Scranton, PA 18503 machi-systems.com<https://machi-systems.com/> | [signatureImage] -------------------------------------------------------------------- Scope Agreement: We will consider this issue resolved when we are able to answer your query, or we will inform you if the issue will be out of scope. This message (including any attachments) may contain CONFIDENTIAL information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.

2 1

The swiss are embracing accessibility
by Tom Jones 26 Nov '23

26 Nov '23

https://www.swissinfo.ch/eng/politics/swiss-digital-id-scheme-could-begin-i… The app should also be accessible to people with disabilities without restriction. It's a start. thx ..Tom (mobile)

1 0

The Canadian Trust framework is not inclusive
by Tom Jones 23 Nov '23

23 Nov '23

The following is one example of standards that are not inclusive that need input of the sort we are trying to produce in Kantara. It subjects human holders of digital wallets to Trust Criteria that may well have the result of preventing human beings from accessing their rights and privileges. This is why I would like to see an early report on Inclusivity. "Digital Identity Ecosystems and their associated Trust Registries use a Trust Framework (such as the PCTF) to define how Issuers, Verifiers, Holders, and Digital Wallets should or must operate to be considered trustworthy." https://diacc.ca/trust-framework-components/pctf-trust-registries/ I requested a change and got the following responses: The Trust Framework defines the “how”, which may or may not include an entry in a Trust Registry. Holders belong on that list because they can be in a position to compromise the trustworthiness of an ecosystem. Additionally, a person may be the holder of credentials, a business may be a holder of credentials, an IoT thing may hold credentials, and the wallet may hold (be the holder) of credentials for a person or a business. In this context, a Holder is more than just a person. It's a person's decision whether they want to use a digital credential or not. Much like a person can choose to pay for an item with cash or use their biometrics on their smartphone to tap payment. A person's rights or privileges are not determined by this nor is it being insinuated nor is it being enforced on citizens. At the end of the day, it's the individual's decision and choice, which Canadians have and will continue to do so, how they want to interact with the digital ecosystem. Something that is not so evident in the countries you mentioned. [Russia and China] As we can see from the following example of a first nations grandfather seeking to set up a bank account for his daughter; underserved populations are AT RISK from thinking like the above. This is a good example of why technologists should not be permitted to define standards that impact normal people. They just have no clue! A Heiltsuk man, granddaughter handcuffed outside Vancouver bank settle human rights case against police. Vancouver: CBC. Retrieved from https://www.cbc.ca/news/canada/british-columbia/maxwell-johnson-granddaught… ..tom

1 0