Re: [WG-UMA] NCCoE Seeks Collaborators for Access Control, PIV, and Mobile Device Security Projects

Thanks very much, Bill! I’ll take you up on that offer — let’s figure out a timeframe, and I’ll advertise the time to the group in case anyone else would like to join us. Eve

On 17 Aug 2015, at 11:36 AM, Fisher, Bill wrote:

Joni/Adrian/Eve, As the lead for the NCCoE ABAC effort I’ve been following the UMA effort for sometime now. Congrats to the whole UMA team on the progress you have made getting to 1.0.

If any one is interested, I’d welcome an offline conversation about ways in which UMA could be included in the NCCoE ABAC capabilities demonstration or any other applicable NCCoE efforts.

Thanks! -Bill

-- Bill Fisher Security Engineer National Cybersecurity Center of Excellence 240-314-6838 William.Fisher@nist.gov

From: mailto:wg-uma-bounces@kantarainitiative.org> on behalf of Eve Maler mailto:eve@xmlgrrl.com> Date: Friday, August 14, 2015 at 5:37 PM To: Joni Brennan mailto:joni@kantarainitiative.org> Cc: "wg-uma@kantarainitiative.org mailto:wg-uma@kantarainitiative.org WG" mailto:WG-UMA@kantarainitiative.org> Subject: Re: [WG-UMA] Fwd: NCCoE Seeks Collaborators for Access Control, PIV, and Mobile Device Security Projects

Interesting how the paper uses it essentially as a lowercase description of the use case for individual control over attribute release. Indeed, the phrase (and goal!) seem to be entering the lexicon...

...

On 14 Aug 2015, at 2:33 PM, Joni Brennan mailto:joni@kantarainitiative.org> wrote:

Way to go!!

On Friday, August 14, 2015, Adrian Gropper mailto:agropper@healthurl.com> wrote:

...

The ABAC one-pager mentions UMA by name.

https://nccoe.nist.gov/sites/default/files/ABAC.pdf https://nccoe.nist.gov/sites/default/files/ABAC.pdf

We're in the big leagues!

Happy weekend,

Adrian

---------- Forwarded message ---------- From: National Cybersecurity Center of Excellence javascript:_e(%7B%7D,'cvml','nccoe@service.govdelivery.com');> Date: Friday, August 14, 2015 Subject: NCCoE Seeks Collaborators for Access Control, PIV, and Mobile Device Security Projects To: info@healthurl.com javascript:_e(%7B%7D,'cvml','info@healthurl.com');

Today's Federal Register contains notices inviting technology vendors to collaborate with the National Cybersecurity Center of Excellence on three new projects to provide mobile device security, attribute based access control, and derived personal identity verification (PIV) credentials for mobile devices. Commercially available and open source products will be the modules in end-to-end example solutions to these challenges. All collaborators will enter into a Cooperative Research and Development Agreement (CRADA; see an example http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&100&&&https://nccoe.nist.gov/library/nccoe-consortium-crada-example) with NIST in order to participate in a consortium for each build team. The projects will result in NIST Cybersecurity Practice Guides that show organizations how they can adopt these or similar capabilities. Companies with product characteristics that meet the desired characteristics in the Federal Register notices can submit letters of interest indicating that they'd like to work on one or more of these projects. Each Federal Register notice contains instructions for how to submit a letter of interest. Project pages and Federal Register notices can be found at: Mobile Device Security Building Block http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&101&&&https://nccoe.nist.gov/projects/building_blocks/mobile_device_security - https://federalregister.gov/a/2015-20040 http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&102&&&https://federalregister.gov/a/2015-20040 Attribute Based Access Control Building Block http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&103&&&https://nccoe.nist.gov/projects/building_blocks/attribute_based_access_control - https://federalregister.gov/a/2015-20041 http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&104&&&https://federalregister.gov/a/2015-20041 Derived Personal Identity Verification Building Block http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&105&&&https://nccoe.nist.gov/projects/building_blocks/piv_credentials - https://federalregister.gov/a/2015-20039 http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&106&&&https://federalregister.gov/a/2015-20039 To learn more, read the NIST press release http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&107&&&http://www.nist.gov/itl/nccoe_model_systems_controlling_access_it_assets.cfm.

SUBSCRIBER SERVICES: Manage Preferences http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&108&&&https://public.govdelivery.com/accounts/USNIST/subscriber/edit?preferences=true#tab1 | Unsubscribe http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&109&&&https://public.govdelivery.com/accounts/USNIST/subscriber/edit?preferences=true#tab1 | Help http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&110&&&https://subscriberhelp.govdelivery.com/ If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&111&&&https://subscriberhelp.govdelivery.com/. Technical questions? Contact inquiries@nist.gov <>. (301) 975-NIST (6478). This service is provided to you at no charge by National Institute of Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, MD 20899 · 301-975-6478 http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTUwODE0LjQ4MTIyNzAxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE1MDgxNC40ODEyMjcwMSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3NTMxNDk0JmVtYWlsaWQ9aW5mb0BoZWFsdGh1cmwuY29tJnVzZXJpZD1pbmZvQGhlYWx0aHVybC5jb20mZmw9JmV4dHJhPU11bHRpdmFyaWF0ZUlkPSYmJg==&&&112&&&http://www.govdelivery.com/portals/powered-by

--

Adrian Gropper MD

RESTORE Health Privacy! HELP us fight for the right to control personal health data. DONATE: http://patientprivacyrights.org/donate-2/ http://patientprivacyrights.org/donate-2/

-- Best Regards,

Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org http://kantarainitiative.org/

Connecting Identity for a more trustworthy Internet - Overview http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351

_______________________________________________ WG-UMA mailing list WG-UMA@kantarainitiative.org mailto:WG-UMA@kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-uma http://kantarainitiative.org/mailman/listinfo/wg-uma

Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl@gmail.com mailto:xmlgrrl@gmail.com

Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl@gmail.com