Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: updates to September 18 2013
Note

This is a live-edit version of the IAWG charter including comments from the , incorporating discussions from:

  • August 29 2013 IAWG call
- it is not ratified
  • September 5 IAWG
  • september 12 IAWG
  • email from Ken Dagg (Sep 18)

NOTE: in place of 'track changes', new text is underlined and retired text is strikethrough


The 'clean copy' as of September 11, 2013 is at: CLEAN COPY IAWG charter refresh draft (11Sep 2013)

...

(2) PURPOSE: Please provide a clear statement of purpose and justification why the proposed WG is necessary.

The purpose of the Kantara Initiative Identity Assurance Work Group (IAWG) of the Kantara Initiative is to:

  • be the focal point for Kantara Initiative Identity Assurance Framework (IAF) management and evolution; 
  • understanding understand the business and technical requirements of the global federated online identity services marketplace;
  • informing inform and influencing influence the global federated online identity services marketplace;
  • the deliberative body for determining applicability determine applicability and equivalence of the Kantara Initiative assurance program to Identity Assurance Framework and related programs to trade association, regional, national or international Trust Framework schemes; the analysis team which validates
  • analyze and validate IAF profiles that accommodate other Trust Framework schemes; and,
  • the analysis team which determines equivalence of other Trust Framework schemes to the the Kantara Initiative IAFrecommend acceptance, recognition or approval of the items listed previously to the Leadership Council or Board of Trustees as appropriate.


Info

K. Dagg to ensure the following definitions are the same as in the Kantara Glossary document

...

The framework and processes will be defined in a way that scales, enables business processes and benefits individual users of services provided at specific identity LOA. The final deliverables will be a suite of harmonized, best-of-breed industry standards for the assessment of identity services, and support for inter-party trust and inter-federation, as well as policies, operating rules, guidelines and recommended practices to foster adoption of identity assurance-based solutions.

The IAWG creates value by:

  • Maintaining the currency and relevance of the IAF in response to regulatory and market requirements and pressures ;Maintaining in order to:
    • maintain the viability of Kantara Approvals and Accreditations to enable inter-party trusted transactions;
    • define a measurable set of criteria against which policies, processes and systems may be built;
    • define standardized assessment policy and processes for auditors;
    • increase consumer confidence in the federated identity and credential marketplace;

  • Being an active forum for discussion about the IAF policies, processes and programs to increase understanding and uptake of the Kantara Trust Mark;

  • <<Myisha to add text about knitting together multiple TF Schemes>>

"The Kantara Initiative Identity Assurance Working Group exists to establish and maintain the methods and mechanisms by which participants in the global federated identity and credential marketplace trust each other for transactions."

(3) SCOPE: Explain the scope and definition of the planned work.

The IAWG's goal is to provide public and private sector organizations with well-defined means of relying on identity credentials and assertions issued by a variety of identity service providers for both authentication and authorization, in order to advance trusted identity federation and thereby facilitate broad user acceptance. In line with this goal, here is IAWG’s scope:

The scope of IAWG is to:

  • Manage, maintain and review the IAF document set;
  • Define assurance frameworks and policy instruments for identity assurance at a global scale;
    • Analyse non-Kantara Trust Framework schemes to determine comparability between those schemes and Kantara IAF;
    • Develop model architectures and patterns for identity and credential federations and participants;
  • Support the Kantara Initiative to foster adoption of the Kantara IAF;
    • Formulate pragmatic guidelines, recommended practices, proposed deployment models and methodologies for organizations to adopt solutions and approaches to online services that leverage identity assurance;
  • Support the Kantara Initiative to foster adoption of the Kantara IAF; and,
  • Engage Kantara for expert input and guidance on topics covered by the IAF.
  • Define standards and frameworks for identity assurance policy for both the public and private sectors at a global scale
  • Promote wider use of identity credentials at various LOA.
  • Analyze technology, policies, standards, and solutions relating to identity federation and identity assurance.
  • Identify opportunities where adoption of the IAF could save time and resources in implementing identity federations
  • Seek harmonization and standardization – avoid "re-inventing the wheel" or needlessly duplicating effort by identifying best practices across multiple industry sectors in this globally diverse working group and investing in productive liaison relationships across industries and geographies.

...

  • Definition of technical standards, whether for identity assurance or authentication assurance – the focus of IAWG will remain technology agnostic to the extent possible, and strategy/policy oriented.
  • Evaluation of technology or products to comply with particular identity assurance specifications – whether this is authentication technology, identity verification services, credentialing technologies, and the like.
  • Management or direct oversight of certification and assessment programs designed to facilitate compliance with the IAWG output.

...

As per the scope defined in section (3) above, IAWG will not be producing technical specifications..

(5) OTHER DRAFT RECOMMENDATIONS: Other Draft Recommendations and projected completion dates for submission for All Member Ballot.

  • The proposed Draft Recommendations of the IAWG are listed and described in the working group wiki space, Roadmap section. The proposed Draft Recommendations list is reviewed no less than semi-annually by the IAWG.
  • A set of strategic recommendations to the Kantara Initiative Board of Trustees regarding the development and operation of an Identity Assurance Certification program to advance the adoption of the IAF that would serve to foster inter-federation deployments on a global scale. (Summer, 2009).
  • The Identity Assurance Framework (IAF) – which is a compendium of documents including guidelines, procedural and technical trust criteria for identity service providers, relying parties and federations, and assessment methodologies for determining conformance to trust criteria. The IAF will be based on broad input from both public and private industry stakeholders with relevant experience.

...

(6) LEADERSHIP: Proposed WG Chair and Editor(s) (if any) subject to confirmation by a vote of the WG Participants.

...

The

...

The IAWG will have the following roles:

  • An IAWG Chair – A single individual will hold this role. Its responsibilities are: provide overall coordination, administrative oversight, public representation and decision-making ability over certain topics. This position will be elected by the members of the group in accordance with the Kantara Initiative Operating Procedures and ByLaws. The initial election for all leadership positions should be called approximately 2 weeks after the Leadership Council approves the charter so that membership quorum is gathered. 
  • IAWG Vice ChairThere should be a minimum of two. The Vice Chair will lead specific areas within the work group as scoped by the Chair. The Vice Chair will be responsible for successful completion of work and deliverables within the specific scope of the area of focus. The initial requirement is a Vice Chair of Technology (to ensure quality review and feedback to the IAF from a technical implement-ability perspective and facilitate appropriate liaisons with outside technical groups) and a Vice Chair of Policy (to ensure quality review and feedback to the IAF and facilitate appropriate liaisons with outside policy groups).
  • IAWG Task Leader – There could be as many of these leaders as deemed appropriate by the group in order to complete specific tasks. These roles will be held by volunteer group members, appointed by either the Chair or Vice Chair under which the particular task falls. The Task Leader is responsible for successful completion of work and deliverables assigned. Examples: specific documents within the IAF set, such as the Relying Party guidelines or attribute level identity assurance. The Task Leader's terms of reference and duration will be established on appointment and will be driven by the focus of the task.

...

The IAWG is chartered to be an ongoing Work Group in the Kantara Initiative to maintain the Recommendations it produces over time. Its . The charter will be reviewed and, if deemed necessary, revised on an annual basis. Its charter may be amended from time to time, with changes approved by the Leadership Council.

(9) IPR POLICY: The Organization approved Intellectual Property Rights Policy under which the WG will operate.

Kantara IPR Policy - Option Liberty

Kantara Initiative IPR Option: Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non-discriminatory (RAND)

(10) RELATED WORK AND LIAISONS: Related work being done in other WGs or other organizations and any proposed liaison with those other WGs or organizations.

...

(11) CONTRIBUTIONS (optional): A list of contributions that the proposers anticipate will be made to the WG.

  • Identity Assurance Framework Set (version 1.1 created by Liberty IAEG in 2008)
  • Identity Assurance Framework - Read Me (created by Liberty IAEG in 2008)

(12) PROPOSERS: Names, email addresses, and any constituent affiliations of at least the minimum set of proposers required to support forming the WG.

  • Myisha Frazier-Mcelveen, CitiGroup
  • Rich Furr, SAFE Bio-Pharma
  • Nigel Tedeschi, British Telecom
  • Frank Villavicencio, NetStar-1