- WG-RIUP - mailman.kantarainitiative.org

NIST comments and Testimony to Standing Committee on Industry and Technology
by Salvatore D'Agostino 04 Nov '23

04 Nov '23

HI LC, We submitted the attached comments to NIST on their Cybersecurity framework 2.0. Also Sharon Polski (workgroup member and contributor to our proposed Recommendation) gave testimony in the Canadian Parliament on Bill C- 27, (An Act to enact the Consumer Privacy Protection Act, the Personal Information and Data Protection Tribunal Act and the Artificial Intelligence and Data Act) including specifically on the role receipts can play to address what was inaccurately referred to as Consent Fatigue as well as other gaps/issues. Well done Sharon! https://parlvu.parl.gc.ca/Harmony/en/PowerBrowser/PowerBrowserV2?fk=12381376 am presenting the Transparency Performance Scheme and Indicators, Controller Credentials and AuthC at an IEEE Cybersecurity for Next Generation Connectivity Systems in Washington on 15 Nov. https://engagestandards.ieee.org/Protecting-our-Future-Workshop-2023.html Have a great weekend. Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com Please note our new address. Email, phones, other contacts remain the same. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

current draft of DII
by Tom Jones 31 Oct '23

31 Oct '23

based on the meeting of 2023-10-31. Reminder - next meeting is next week. Please prepare comments for that meeting. ..tom

1 0

ACLU and others on the mDL
by Tom Jones 23 Oct '23

23 Oct '23

The following from the report should be considered in our work I believe. https://epic.org/documents/comments-of-epic-aclu-cdt-and-eff-to-the-tsa-on-… The current standards govern how an mDL should transmit information from the phone to the verifying party (e.g. the TSA agent in the airport), and they govern how an mDL reader should verify the validity of the license.11 But the standards do not govern provisioning (how states install an mDL on a phone). They do not provide sufficient protections for data storage on the phone, sufficient guidance for mobile wallet design or user experience, or accountable constraints that would limit invasive or unwarranted requests from abusive mDL verifiers. Standards for the issuing authority to load mDLs onto a phone are in development as the ISO/IEC 23220 series.12 Standards for digital wallet privacy, security, and consent management are even less developed. thx ..Tom (mobile)

3 2

adgenda for Tuesday meeting
by Tom Jones 21 Oct '23

21 Oct '23

My suggestion is to focus on getting as long a list of scenarios where digital inclusion might be compromised. Attached is my attempt to add more detail. I have also started a section on the harms that digital identities might inflict on users. More to come. Please bring your own list of use cases where inclusion must be considered. ..tom

1 0

FW: Register Now! NIST Personal Identity Verification Webinar
by Salvatore D'Agostino 19 Oct '23

19 Oct '23

Just received this. From: NIST Cybersecurity and Privacy Program <csrc.nist(a)service.govdelivery.com> Sent: Thursday, October 19, 2023 2:30 PM To: Salvatore D'Agostino <sal(a)idmachines.com> Subject: Register Now! NIST Personal Identity Verification Webinar Register Now! <https://content.govdelivery.com/attachments/fancy_images/USNIST/2019/04/248 7463/2805250/nist_crop.png> <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDAsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vY29udGVudC5nb3ZkZWxpdmVyeS5jb20vYWNj b3VudHMvVVNOSVNUL2J1bGxldGlucy8zNzY0MmExIiwiYnVsbGV0aW5faWQiOiIyMDIzMTAxOS44 NDMyNTUzMSJ9.iGdqCjUnqBleb6eOa76GppVQURGiYY0jmUhu-w4HLIg/s/15856856/br/22862 0664378-l> View As Web Page <https://content.govdelivery.com/attachments/fancy_images/USNIST/2019/09/280 0392/cyber-header_original.png> NIST Cybersecurity and Privacy Program Register for our NIST Webinar! Learn about Revisions to Two of our Identity Special Publications Event Date: November 8, 2023 Time: 1:00 PM-2:30 PM ET Description: The National Institute of Standards and Technology (NIST) will be hosting a webinar to introduce two recently published Public Draft Special Publications (SPs): The 3-part <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDEsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vY3NyYy5uaXN0Lmdvdi9wdWJzL3NwLzgwMC83 My9wdDEvNS9pcGQiLCJidWxsZXRpbl9pZCI6IjIwMjMxMDE5Ljg0MzI1NTMxIn0.seMJhhNw-U2c --Vv9Sz2tE2BOO-9LRMBHes-MrOuKRQ/s/15856856/br/228620664378-l> Drafts of SP 800-73 Revision 5, Interfaces for Personal Identity Verification (PIV) and <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDIsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vY3NyYy5uaXN0Lmdvdi9wdWJzL3NwLzgwMC83 OC81L2lwZCIsImJ1bGxldGluX2lkIjoiMjAyMzEwMTkuODQzMjU1MzEifQ.SUXxWpKf0ol1P7YrP v2vA8r3mschS0E1dPXaRnyCskY/s/15856856/br/228620664378-l> Draft SP 800-78 Revision 5, Cryptographic Algorithms and Key Sizes for Personal Identity Verification. These publications are complements to FIPS 201-3, which defines the requirements and characteristics of government-wide interoperable identity credentials used by federal employees and contractors. The workshop will discuss the necessary changes made to the PIV card, its credentials, and cryptographic capability to align with FIPS 201-3. Full Agenda: 1:00 PM-1:05 PM - Introduction and Welcome 1:05 PM-1:15 PM - Introduction to the PIV Standard 1:15 PM-1:45 PM - Changes to Draft SP 800-73 Revision 5 1:45 PM-2:15 PM - Changes to Draft SP 800-78 Revision 5 2:15 PM-2:30 PM - Key Dates/Next Steps/Closing Visit the event page to register and learn more about the workshop. If you have any questions, please reach out to our team at <mailto:piv_comments@nist.gov> piv_comments(a)nist.gov. <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDMsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vd3d3Lm5jY29lLm5pc3QuZ292L2dldC1pbnZv bHZlZC9hdHRlbmQtZXZlbnRzL3BlcnNvbmFsLWlkZW50aXR5LXZlcmlmaWNhdGlvbi13ZWJpbmFy IiwiYnVsbGV0aW5faWQiOiIyMDIzMTAxOS44NDMyNTUzMSJ9._nMm1VHJrw9Uhpqc62B_thJQagt qnBQ-JE8pRAVfzec/s/15856856/br/228620664378-l> Register Now NIST Cybersecurity and Privacy Program Questions/Comments about this notice: <mailto:piv_comments@nist.gov> piv_comments(a)nist.gov NCCoE Website questions: <mailto:nccoe@nist.gov> nccoe(a)nist.gov Connect with us <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDQsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vd3d3LmZhY2Vib29rLmNvbS9OSVNUIiwiYnVs bGV0aW5faWQiOiIyMDIzMTAxOS44NDMyNTUzMSJ9.qaJ4eZw_SnEKtyv-qr55XroaE-Hqvb3hP7V 5DVDnOGU/s/15856856/br/228620664378-l> <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDUsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vdHdpdHRlci5jb20vTklTVCIsImJ1bGxldGlu X2lkIjoiMjAyMzEwMTkuODQzMjU1MzEifQ.ankJWpMpZIcGzigZC360Vx7Oq-QZ83TTJKmyv2eHN tk/s/15856856/br/228620664378-l> <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDYsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vd3d3LnlvdXR1YmUuY29tL05JU1QiLCJidWxs ZXRpbl9pZCI6IjIwMjMxMDE5Ljg0MzI1NTMxIn0.nDNbFKcS6tcIzUNkesJUykjc6vX7bJq4yMY2 FSe3dys/s/15856856/br/228620664378-l> <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDcsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9jb21wYW55L25p c3QiLCJidWxsZXRpbl9pZCI6IjIwMjMxMDE5Ljg0MzI1NTMxIn0.rE5a_oupVR1rFt--KtDuUtqP pMCRn8vU5MtxnoVsVnY/s/15856856/br/228620664378-l> <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDgsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vd3d3Lmluc3RhZ3JhbS5jb20vbmlzdC8iLCJi dWxsZXRpbl9pZCI6IjIwMjMxMDE5Ljg0MzI1NTMxIn0.jYA7j9lArNiOjucwTovtAzLCs091I4eT YZoYeRjJZYU/s/15856856/br/228620664378-l> Received this email from a friend? <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMDksInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vcHVibGljLmdvdmRlbGl2ZXJ5LmNvbS9hY2Nv dW50cy9VU05JU1Qvc3Vic2NyaWJlci9uZXc_dG9waWNfaWQ9VVNOSVNUXzEiLCJidWxsZXRpbl9p ZCI6IjIwMjMxMDE5Ljg0MzI1NTMxIn0.DDxB_yWmqHL8BemJUuc9p7Prs3p8-I3wXTqDMc0CUq4/ s/15856856/br/228620664378-l> Subscribe here. <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTAsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vd3d3Lm5pc3QuZ292L2l0bCIsImJ1bGxldGlu X2lkIjoiMjAyMzEwMTkuODQzMjU1MzEifQ.8EaTVnyEWPKfBR5gBfqoSIouIMxubKpOGsse6sr5P Iw/s/15856856/br/228620664378-l> Subscriber services: <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTEsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vcHVibGljLmdvdmRlbGl2ZXJ5LmNvbS9hY2Nv dW50cy9VU05JU1Qvc3Vic2NyaWJlci9lZGl0P3ByZWZlcmVuY2VzPXRydWUjdGFiMSIsImJ1bGxl dGluX2lkIjoiMjAyMzEwMTkuODQzMjU1MzEifQ.I96vs7GTxOcGZK11UTrj535SrnJNZm-F8uRj1 xmAwYk/s/15856856/br/228620664378-l> Manage Preferences | <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTIsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vcHVibGljLmdvdmRlbGl2ZXJ5LmNvbS9hY2Nv dW50cy9VU05JU1Qvc3Vic2NyaWJlci9lZGl0P3ByZWZlcmVuY2VzPXRydWUjdGFiMSIsImJ1bGxl dGluX2lkIjoiMjAyMzEwMTkuODQzMjU1MzEifQ.S0MWx6TLC2NjpNDAW6jRfTjnM7ZxsC5W7H81e xyP5_U/s/15856856/br/228620664378-l> Unsubscribe | <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTMsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vc3Vic2NyaWJlcmhlbHAuZ292ZGVsaXZlcnku Y29tLyIsImJ1bGxldGluX2lkIjoiMjAyMzEwMTkuODQzMjU1MzEifQ.i0lA5WdBqz7ec4eNkP-VR fFZuI8iV-mo3cDomH11yCM/s/15856856/br/228620664378-l> Help _____ If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTQsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vc3Vic2NyaWJlcmhlbHAuZ292ZGVsaXZlcnku Y29tLyIsImJ1bGxldGluX2lkIjoiMjAyMzEwMTkuODQzMjU1MzEifQ.zaakIPw4S07-6Nkab9_CP zXLivQbPqGcOqOqCwS_sdo/s/15856856/br/228620664378-l> . Technical questions? Contact inquiries(a)nist.gov <mailto:inquiries@nist.gov> . (301) 975-NIST (6478). This service is provided to you at no charge by National Institute of Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 . Gaithersburg, MD 20899 . 301-975-6478 <https://lnks.gd/l/eyJhbGciOiJIUzI1NiJ9.eyJidWxsZXRpbl9saW5rX2lkIjoxMTUsInVy aSI6ImJwMjpjbGljayIsInVybCI6Imh0dHBzOi8vc3Vic2NyaWJlcmhlbHAuZ3JhbmljdXMuY29t LyIsImJ1bGxldGluX2lkIjoiMjAyMzEwMTkuODQzMjU1MzEifQ.jgG9eFCvmWRqMFlaK1YLCgCSP _imR-4XIT2ZsBugI_Y/s/15856856/br/228620664378-l> <https://links.govdelivery.com/track?enid=ZWFzPTEmYnVsbGV0aW5yZWNpcGllbnRpZD 0yMjg2MjA2NjQzNzgtbCZzdWJzY3JpYmVyaWQ9MTU4NTY4NTYmbXNpZD0mYXVpZD0mbWFpbGluZ2 lkPTIwMjMxMDE5Ljg0MzI1NTMxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDIzMTAxOS44NDMyNT UzMSZkYXRhYmFzZWlkPTEwMDEmdHlwZT1vcGVuJnNlcmlhbD0xNjg2MjIwNCZlbWFpbGlkPXNhbE BpZG1hY2hpbmVzLmNvbSZ1c2VyaWQ9c2FsQGlkbWFjaGluZXMuY29tJnRhcmdldGlkPSZmbD0mbX ZpZD0mZXh0cmE9JiYm>

1 0

update DII doc for comment
by Tom Jones 17 Oct '23

17 Oct '23

updated at meeting of 2023-10-17 ..tom

1 0

RIUP WG meeting tomorrow, Oct 17, 1 PM EDT, 23,
by jim kragh 17 Oct '23

17 Oct '23

Please review the updated version and be prepared to share your comments, questions and recommendations. *RIUP's 1st/3rd Tuesday Meeting Link:* https://us06web.zoom.us/j/87499194761?pwd=cmhDTHBXV2VTbFBMZzllMlZVbnFoZz09 Meeting ID: 874 9919 4761 Passcode: 837815 Dial by your location +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma) +1 301 715 8592 US (Washington DC) +1 312 626 6799 US (Chicago) Meeting ID: 874 9919 4761 Passcode: 837815 Project theme: *An All Empowering dID Ecosystem; No One Left Behind * Attached is the updated document Tom sent out last week; please review the updated version and be prepared to contribute. It is time to start thinking about elections and reviewing our charter; have asked Noreen for some assistance. MAY ALL HAVE A RESTFUL EVENING, Jim

2 1

Digital Identifier Inclusion document.
by Tom Jones 11 Oct '23

11 Oct '23

This document was revised at the last meeting of RIUP which was lightly attended and augmented with flows generated in the ANCR wg. Since we will not meet this week, can i ask for a review and individual input prior to the meeting next week? thanks ..tom

2 1

here is a list of persona / use cases
by Tom Jones 09 Oct '23

09 Oct '23

I was pretty impressed. One thing I missed is that "I am the legal age to buy some controlled substance". or another "I am able to access a controlled-access venue". Does anyone else notice anything missing? Let's discuss it on Tuesday. https://www.id-day.org/2023campaign?ref=blog.identity.foundation ..tom

2 1

RIUP WG meeting tomorrow, Oct 3, 2023; 1 PM EDT, please join the WG discussion; NOTE: a new meeting LINK
by jim kragh 02 Oct '23

02 Oct '23

*RIUP's 1st/3rd Tuesday Meeting Link:* https://us06web.zoom.us/j/87499194761?pwd=cmhDTHBXV2VTbFBMZzllMlZVbnFoZz09 Meeting ID: 874 9919 4761 Passcode: 837815 Dial by your location +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma) +1 301 715 8592 US (Washington DC) +1 312 626 6799 US (Chicago) Meeting ID: 874 9919 4761 Passcode: 837815 Project theme: *An All Empowering dID Ecosystem; No One Left Behind * *Tom J. *sent out a link this afternoon ref: a Kantara working draft document entitled:* Digital Identifier Inclusion *dated 2023-09-29 link address: https://mail.google.com/mail/u/0?ui=2&ik=5ec2d9d465&attid=0.1&permmsgid=msg… Items to discuss: Annual Charter review and election of WG chairs along with a PPT (1or 2 frames for annual meeting and trade shoes. May all have a restful evening, Jim

1 0