Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Hello everyone

...

It's great to see Kantara's 'NIST 800-63-3 Class of Approval' receive so much fresh interest. I think that this is in part due to US Federal agencies finally having the cycles to include it in procurement requests, together with the cumulative effect of its reference in the April announcement from HHS that TEFCA v2.0 was open for public comment, and ONC's announcement of the opening of competitive bids for the Recognized Coordinating Entity (RCE).  But interest goes beyond the current Classes of Approval as organizations see new and revised standards emerging from organizations such as ISO on electronic driving licences which require assurance and support operations that are offered by Kantara, to extract the full potential from mDL programs. It's not just a US phenomenon where in April we received SOIs from a global telco, 2 global IT companies and 2 smaller market leading innovation companies. Kantara has received government and corporate interest in its Assurance program from Europe and Asia during April also.    

I was traveling again in the early part of April, this time to Tel Aviv, where together with Leadership Council Chair Andrew Hughes and other Kantara members sprinkled amongst national bodies, we attended the ISO SC27 meetings - specifically Working Group 5 Identity Management and Privacy where it was formally proposed to include an example from Kantara's Consent Receipt v1.1 into Annex B of ISO 29184 Online privacy notices and consent. Not only did we come away with this great result, but also as rapporteurs of a new Study Period to look into the feasibility of a standard for consent receipts and records. Drafting a v2.0 of the consent receipt has understandably taken on a new sense of urgency and I'm pleased to report that a volunteer working for a large consulting company has agreed to lead the v2.0 project.  In other ISO news Kantara's IDVP Use Case contributions were well received and consituted the vast majority of the report. It's hard to overestimate the significance of this, given the that the report lays the foundation for the future posture of the identity standards coming from ISO. You can be involved too, just as long as you are a Kantara member in good standing (a requirement from ISO), in order to gain access to and contribute to the draft standards from ISO SC27 Working Group 5. Contact us if you meet the criteria so you can join the group.   

...

  • the Consent & Information Sharing WG is gathering contributions for the first draft of Consent Receipt v2.0, collaborating with members on the Consent Receipt Generator and developing the demo with its requisite privacy dashboard; It is also gathering contributions on the DIACC's (the Digital ID and Identity Council of Canada) document out related to Notice and Consent https://diacc.ca/2019/04/03/notice-consent-overview-conformance-discussion-drafts/ as a component of the Pan-Canadian Trust Framework to set a baseline of public and private sector interoperability of identity services and solutions.  If you want to contribute you must join the CIS working group (no charge)
  • the UMA WG is preparing its presentations for UMA v2.0 at the forthcoming IIW, EIC and Identiverse conferences as well as the 105th IETF meeting in Canada later in the year to helpfully confirm it on the standards track - we learn about more new implementations every month!.
  • the Identity Assurance Work Group is about to release a refreshed Overview and Glossary for the Identity Assurance Framework (IAF) and is monitoring the new NIST standards FIPS 140 and FIPS 201 for any impact or implications for the Kantara IAF. 

...

Program, Work Group and Discussion Group Updates:

  • You can always keep up with the latest news from the Work and Discussion Groups directly on the Leadership Council's Blog. See the list of public groups here.

...