Re: [WG-Consumer-Identity] WG-Consumer-Identity Digest, Vol 9, Issue 1
Mari J. Frank
Mari J. Frank, Esq.
Attorney, Mediator
Certified Information Privacy Professional
28202 Cabot Road, Suite 300
Laguna Niguel, Ca. 92677
Phone :949-364-1511
Fax: 949-363-7561
www.identitytheft.org
www.MariFrank.com
www.kuci.org/privacypiracy
E-mail con...@identitytheft.org
Ma...@MariFrank.com
To order Mari's books:
Call Porpoise Press 800-725-0807
This e-mail may be privileged and/or confidential, and the sender does not
waive any related rights and obligations. Any distribution, use or copying
of this e-mail or the information it contains by other than an intended
recipient is unauthorized. If you received this e-mail in error, please
advise me (by return e-mail or by phone at 949-364-1511) immediately. Thank
you.
"Experience should teach us to be most on our guard to protect liberty when
the government's purposes are beneficent . . . the greatest dangers to
liberty lurk in insidious encroachment by men of zeal, well meaning but
without understanding."
Justice Louis Brandeis, Olmstead vs. United States, United States supreme
Court, 1928
-----Original Message-----
From: wg-consumer-id...@kantarainitiative.org
[mailto:wg-consumer-id...@kantarainitiative.org] On Behalf Of
wg-consumer-id...@kantarainitiative.org
Sent: Thursday, March 11, 2010 8:49 AM
To: wg-consume...@kantarainitiative.org
Subject: WG-Consumer-Identity Digest, Vol 9, Issue 1
Send WG-Consumer-Identity mailing list submissions to
wg-consume...@kantarainitiative.org
To subscribe or unsubscribe via the World Wide Web, visit
http://kantarainitiative.org/mailman/listinfo/wg-consumer-identity
or, via email, send a message with subject or body 'help' to
wg-consumer-id...@kantarainitiative.org
You can reach the person managing the list at
wg-consumer-i...@kantarainitiative.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of WG-Consumer-Identity digest..."
Today's Topics:
1. Next Consumer Identity WG Call: Tuesday March 16 (Bob Pinheiro)
2. New meeting: Next Consumer Identity WG Call.
(mark.x...@oracle.com)
----------------------------------------------------------------------
Message: 1
Date: Wed, 10 Mar 2010 18:02:04 -0500
From: Bob Pinheiro <consu...@bobpinheiro.com>
Subject: [WG-Consumer-Identity] Next Consumer Identity WG Call:
Tuesday March 16
To: wg-consume...@kantarainitiative.org
Message-ID: <4B9824EC...@bobpinheiro.com>
Content-Type: text/plain; charset="iso-8859-1"
*Tuesday, March 16, 2010
**9AM PDT / 10 AM MDT / 11 AM CDT / 12 Noon EDT / 4 PM UK / 1600 UTC*
*Skype: ++9900827044630912
US/Canada Dial-In: +1-201-793-9022 | Room Code: 4630912
UK +44 (0) 8454018081*
On our two February calls (2/2 and 2/9), we discussed the US
government's Open Identity initiative
<http://www.idmanagement.gov/drilldown.cfm?action=openID_openGOV>, also
known as the Identity Credential and Access Management (ICAM)
initiative, in which the government wants to use OpenID and Information
Cards issued by non-government Identity Providers to citizens for access
to government websites. These initial government apps are low
assurance, LOA-1 apps, meaning that no identity proofing is required for
issuance of credentials, and authentication can be accomplished via
username and password.
However, the real challenge is high assurance digital identities for
consumers. There are many issues that would come into play on the path
to widespread adoption of high assurance digital identities by
consumers. In my discussions with some of the ICAM folks it was
suggested that a useful output of this WG would be a better
understanding of what those might be, together with some recommendations
that might help facilitate high assurance consumer identity. That's a
tall order, but it's consistent with the purpose of the Consumer
Identity WG as stated in the Charter
<http://kantarainitiative.org/confluence/display/WGCI/Charter>.
A key enabler of wide adoption and use of digital identities by
consumers is the deployment of trust frameworks that enable Service
Providers/Relying Parties to trust and accept digital credentials issued
by Identity Providers. Recently the Kantara Identity Assurance
Framework
<http://kantarainitiative.org/confluence/download/attachments/41025670/Kanta
ra+IAF-1400-Service+Assessment+Criteria.pdf?version=1&modificationDate=12646
19703000>
was provisionally accepted by ICAM to support the needs for trust
between IdPs and government SPs/RPs, as was the trust framework put
forth by the recently formed Open Identity Exchange
<http://openidentityexchange.org/>. One of the things that's needed is
a better understanding of how these trust frameworks may need to change
in order to support high assurance consumer applications involving a
variety of non-government SPs/RPs.
I've become convinced that the only way that this WG will be able to
accomplish any of this is to: (a) put together a workplan/proposal that
describes in sufficient detail what problem we are trying to solve, and
what kinds of output we are hoping to produce, and (b) use this
workplan/proposal to obtain funding from any sources interested in the
problem and willing to provide funds to support the effort. In
particular, I envision that, as a self-employed independent and WG
Chair, some of this funding would go to support my efforts to organize
this work and help carry it out. Additionally, although other Subject
Matter Experts might be available from Kantara member organizations and
Trustee companies, we would likely need funds to obtain additional
resources to support the effort. This could include things such as:
market research reports or other research reports, surveys, and
consulting with outside experts as needed.
The role that I envision for the WG is primarily to act as a sounding
board and review panel as the work goes forward. That is, I'd expect WG
members to help review and comment on drafts of documentation that
others produce. Despite the fact that the work of Kantara WGs is
supposed to be carried out by "volunteers", I just don't foresee that
the kind of effort I'm proposing here can realistically be accomplished
by volunteers.
So that's my plan, and I'd like to get your input. Do you think this is
viable, desirable, useful, or what? Do you have any other thoughts or
suggestions for a work program that can get funding and that can address
the goals of high assurance consumer identity?
I've scheduled our next call for Tuesday, March 16, to discuss this.
See details at the beginning of this message. As always, if you can't
attend the call, I'd appreciate any other comments you may have. You
can post to the list, or email me directly. To get started defining a
proposal for funding such a work program, I've put together some initial
ideas here
<http://kantarainitiative.org/confluence/download/attachments/14909458/CIWG+
Issues+for+Proposal.pdf>.
This needs to be organized into a coherent proposal. So please look
this over, and we'll discuss further on the call.
By the way, as you may know, all Kantara WG Participants (individuals
who have agreed to the WG IPR) are classified as either "Voting" or
"Non-Voting". Because this WG has not had regular meetings, the current
roster of Participants
<http://kantarainitiative.org/confluence/display/WGCI/Participant+Roster> is
a bit outdated. So I'm going to update this roster as follows: If you
want to remain a Voting participant, or if you are currently Non-Voting
and want to be reclassified as Voting, you need to do one of two things:
(a) attend the next call on March 16, or (b) respond with comments or
otherwise let me know that you want to be a Voting participant.
Otherwise, I will classify you as Non-Voting.
That's it. Hope to talk to you on Tuesday.
Bob
---------------------------
Bob Pinheiro
Chair, Consumer Identity WG
908-654-1939
consu...@bobpinheiro.com
www.bobpinheiro.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://kantarainitiative.org/pipermail/wg-consumer-identity/attachments/2010
0310/9271dcef/attachment-0001.html
------------------------------
Message: 2
Date: Thu, 11 Mar 2010 08:26:07 -0800 (PST)
From: mark.x...@oracle.com
Subject: [WG-Consumer-Identity] New meeting: Next Consumer Identity WG
Call.
To: wg-consume...@kantarainitiative.org
Message-ID: <3e20ce80-ce4f-477a-ab01-26ebf220f8e2@default>
Content-Type: text/plain; charset="utf-8"
Title: [WG-Consumer-Identity] Next Consumer Identity WG Call
Organizer: Mark Dixon
Start time: Tue, Mar 16, 2010 9:00 AM MST
End time: Tue, Mar 16, 2010 10:00 AM MST
Participants: Mark Dixon; Bob Pinheiro;
wg-consume...@kantarainitiative.org
Description: ?
?
Oracle Email Signature Logo
Mark Dixon | Master Principal Sales Consultant
Security Pillar | Western Region
Oracle North America Technology Organization
2646 East El Moro Avenue | Mesa, AZ 85204
+1 480-213-5852 | HYPERLINK
"mailto:mark.x...@oracle.com"mark.x...@oracle.com
blog: HYPERLINK "http://discoveringidentity.com/"discoveringidentity.com
?
From: wg-consumer-id...@kantarainitiative.org
[mailto:wg-consumer-id...@kantarainitiative.org] On Behalf Of Bob
Pinheiro
Sent: Wednesday, March 10, 2010 4:02 PM
To: wg-consume...@kantarainitiative.org
Subject: [WG-Consumer-Identity] Next Consumer Identity WG Call: Tuesday
March 16
?
Tuesday, March 16, 2010
9AM PDT / 10 AM MDT / 11 AM CDT / 12 Noon EDT / 4 PM UK / 1600 UTC
Skype: ++9900827044630912
US/Canada Dial-In: +1-201-793-9022 | Room Code: 4630912
UK? +44 (0) 8454018081
On our two February calls (2/2 and 2/9), we discussed the US government's
HYPERLINK
"http://www.idmanagement.gov/drilldown.cfm?action=openID_openGOV"Open
Identity initiative, also known as the Identity Credential and Access
Management (ICAM) initiative, in which the government wants to use OpenID
and Information Cards issued by non-government Identity Providers to
citizens for access to government websites.? These initial government apps
are low assurance, LOA-1 apps, meaning that no identity proofing is required
for issuance of credentials, and authentication can be accomplished via
username and password.
However, the real challenge is high assurance digital identities for
consumers.? There are many issues that would come into play on the path to
widespread adoption of high assurance digital identities by consumers.? In
my discussions with some of the ICAM folks it was suggested that a useful
output of this WG would be a better understanding of what those might be,
together with some recommendations that might help facilitate high assurance
consumer identity.? That's a tall order, but it's consistent with the
purpose of the Consumer Identity WG as stated in the HYPERLINK
"http://kantarainitiative.org/confluence/display/WGCI/Charter"Charter.
A key enabler of wide adoption and use of digital identities by consumers is
the deployment of trust frameworks that enable Service Providers/Relying
Parties to trust and accept digital credentials issued by Identity
Providers.? Recently the Kantara HYPERLINK
"http://kantarainitiative.org/confluence/download/attachments/41025670/Kanta
ra+IAF-1400-Service+Assessment+Criteria.pdf?version=1&modificationDate=12646
19703000"Identity Assurance Framework was provisionally accepted by ICAM to
support the needs for trust between IdPs and government SPs/RPs, as was the
trust framework put forth by the recently formed HYPERLINK
"http://openidentityexchange.org/"Open Identity Exchange.? One of the things
that's needed is a better understanding of how these trust frameworks may
need to change in order to support high assurance consumer applications
involving a variety of non-government SPs/RPs.
I've become convinced that the only way that this WG will be able to
accomplish any of this is to: (a) put together a workplan/proposal that
describes in sufficient detail what problem we are trying to solve, and what
kinds of output we are hoping to produce, and (b) use this workplan/proposal
to obtain funding from any sources interested in the problem and willing to
provide funds to support the effort. ? In particular, I envision that, as a
self-employed independent and WG Chair, some of this funding would go to
support my efforts to organize this work and help carry it out.?
Additionally, although other Subject Matter Experts might be available from
Kantara member organizations and Trustee companies, we would likely need
funds to obtain additional resources to support the effort.? This could
include things such as: market research reports or other research reports,
surveys, and consulting with outside experts as needed.
The role that I envision for the WG is primarily to act as a sounding board
and review panel as the work goes forward.? That is, I'd expect WG members
to help review and comment on drafts of documentation that others produce.?
Despite the fact that the work of Kantara WGs is supposed to be carried out
by "volunteers", I just don't foresee that the kind of effort I'm proposing
here can realistically be accomplished by volunteers.
So that's my plan, and I'd like to get your input.? Do you think this is
viable, desirable, useful, or what?? Do you have any other thoughts or
suggestions for a work program that can get funding and that can address the
goals of high assurance consumer identity?
I've scheduled our next call for Tuesday, March 16, to discuss this.? See
details at the beginning of this message.? As always, if you can't attend
the call, I'd appreciate any other comments you may have.? You can post to
the list, or email me directly.? To get started defining a proposal for
funding such a work program, I've put together some initial ideas HYPERLINK
"http://kantarainitiative.org/confluence/download/attachments/14909458/CIWG+
Issues+for+Proposal.pdf"here.? This needs to be organized into a coherent
proposal.? So please look this over, and we'll discuss further on the
call.??
By the way, as you may know, all Kantara WG Participants (individuals who
have agreed to the WG IPR) are classified as either "Voting" or
"Non-Voting".? Because this WG has not had regular meetings, the current
HYPERLINK
"http://kantarainitiative.org/confluence/display/WGCI/Participant+Roster"ros
ter of Participants is a bit outdated.? So I'm going to update this roster
as follows:? If you want to remain a Voting participant, or if you are
currently Non-Voting and want to be reclassified as Voting, you need to do
one of two things: (a) attend the next call on March 16, or (b) respond with
comments or otherwise let me know that you want to be a Voting participant.?
Otherwise, I will classify you as Non-Voting.?
That's it.? Hope to talk to you on Tuesday.
?Bob
---------------------------
Bob Pinheiro
Chair, Consumer Identity WG
908-654-1939
HYPERLINK "mailto:consu...@bobpinheiro.com"consu...@bobpinheiro.com
HYPERLINK "http://www.bobpinheiro.com"http://www.bobpinheiro.com
Action(s):
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://kantarainitiative.org/pipermail/wg-consumer-identity/attachments/2010
0311/7cb1aa2d/attachment.html
------------------------------
_______________________________________________
WG-Consumer-Identity mailing list
WG-Consume...@kantarainitiative.org
http://kantarainitiative.org/mailman/listinfo/wg-consumer-identity
End of WG-Consumer-Identity Digest, Vol 9, Issue 1
**************************************************
_______________________________________________
WG-Consumer-Identity mailing list
WG-Consume...@kantarainitiative.org
http://kantarainitiative.org/mailman/listinfo/wg-consumer-identity