Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Updates to September 18 2013
Info

This page is a 'clean' copy of IAWG charter refresh draft (fall 2013) - with comments, supplied for easier review. Copy was made 2:00pm PT PDT September 1118, 2013.

 

 

Note

This is a live-edit version of the IAWG charter including comments from the , incorporating discussions from:

  • August 29 2013 IAWG call
- it is not ratified
  • September 5 IAWG
  • september 12 IAWG
  • email from Ken Dagg (Sep 18)

NOTE: in place of 'track changes', new text is underlined and retired text is strikethrough

 

(1) WG NAME: 

Identity Assurance Work Group (IAWG)

(2) PURPOSE: 

The purpose of the Kantara Initiative Identity Assurance Work Group (IAWG) of the Kantara Initiative is to:

  • be the focal point for Kantara Initiative Identity Assurance Framework (IAF) management and evolution; 
  • understanding understand the business and technical requirements of the global the global federated online identity services marketplace;informing and influencing
  • the global inform and influence the global federated online identity services marketplace;
  • the deliberative body for determining applicability determine applicability and equivalence of the Kantara Initiative assurance program to Identity Assurance Framework and related programs to trade association, regional, national or international Trust Framework schemes; the analysis team which validates
  • analyze and validate IAF profiles that accommodate other Trust Framework schemes; and,
  • the analysis team which determines equivalence of other Trust Framework schemes to the the Kantara Initiative IAF.

...

  • recommend acceptance, recognition or approval of the items listed previously to the Leadership Council or Board of Trustees as appropriate.

The IAF encompasses the framework, processes, criteria and program assurance specifications and tools by which identity federation service providers and their assessors are measured. The IAF defines the operational parameters and rules of the Kantara Initiative Identity Assurance Assessment and Approval Program.

...

  • Maintaining the currency and relevance of the IAF in response to regulatory and market requirements and pressures ;Maintaining in order to:
    • maintain the viability of Kantara Approvals and Accreditations to enable inter-party trusted transactions
    ;<<Myisha to add text about knitting together multiple TF Schemes>>
    • ;
    • define a measurable set of criteria against which policies, processes and systems may be built;
    • define standardized assessment policy and processes for auditors;
    • increase consumer confidence in the federated identity and credential marketplace;
  • Being an active forum for discussion about the IAF policies, processes and programs to increase understanding and uptake of the Kantara Trust Mark;

"The Kantara Initiative Identity Assurance Working Group exists to establish and maintain the methods and mechanisms by which participants in the global federated identity and credential marketplace trust each other for transactions."

(3) SCOPE: 

The scope of IAWG is to:

  • Manage, maintain and review the IAF document set;
  • Define assurance frameworks and policy instruments for identity assurance at a global scale;
    • Analyse non-Kantara Trust Framework schemes to determine comparability between those schemes and Kantara IAF;
    • Develop model architectures and patterns for identity and credential federations and participants;
  • Support the Kantara Initiative to foster adoption of the Kantara IAF;
    • Formulate pragmatic guidelines, recommended practices, proposed deployment models and methodologies for organizations to adopt solutions and approaches to online services that leverage identity assurance;
  • Support the Kantara Initiative to foster adoption of the Kantara IAF; and,
  • Engage Kantara for expert input and guidance on topics covered by the IAF.

The following areas are not part of the scope of IAWG:

  • Definition of technical standards, whether for identity assurance or authentication assurance – the focus of IAWG will remain technology agnostic to the extent possible, and strategy/policy oriented.
  • Evaluation of technology or products to comply with particular identity assurance specifications – whether this is authentication technology, identity verification services, credentialing technologies, and the like.
  • Management or direct oversight of certification and assessment programs designed to facilitate compliance with the IAWG output.

...

As per the scope defined in section (3) above, IAWG will not be producing technical specifications..

(5)OTHER  OTHER DRAFT RECOMMENDATIONS:  

  • The proposed Draft Recommendations of the IAWG are listed and described in the working group wiki space, Roadmap section. The proposed Draft Recommendations list is reviewed no less than semi-annually by the IAWG.

(6) LEADERSHIP: 

...

The IAWG will have the following roles:

  • An IAWG Chair  – A single individual will hold this role. Its responsibilities are: provide overall coordination, administrative oversight, public representation and decision-making ability over certain topics. This position will be elected by the members of the group in accordance with the Kantara Initiative Operating Procedures and ByLaws. The initial election for all leadership positions should be called approximately 2 weeks after the Leadership Council approves the charter so that membership quorum is gathered. 
  • IAWG Vice Chair  – There should be a minimum of two. The Vice Chair will lead specific areas within the work group as scoped by the Chair. The Vice Chair will be responsible for successful completion of work and deliverables within the specific scope of the area of focus. The initial requirement is a Vice Chair of Technology (to ensure quality review and feedback to the IAF from a technical implement-ability perspective and facilitate appropriate liaisons with outside technical groups) and a Vice Chair of Policy (to ensure quality review and feedback to the IAF and facilitate appropriate liaisons with outside policy groups).
  • IAWG Task Leader  – There could be as many of these leaders as deemed appropriate by the group in order to complete specific tasks. These roles will be held by volunteer group members, appointed by either the Chair or Vice Chair under which the particular task falls. The Task Leader is responsible for successful completion of work and deliverables assigned. The Task Leader's terms of reference and duration will be established on appointment and will be driven by the focus of the task.

(7) AUDIENCE: 

  • Credential Service Providers
  • Federation Operators
  • Relying Parties
  • Policy Makers
  • Assessors
  • International standards development organizations focused on identity management
  • Industry consortia and communities of interest focused on either a specific identity management technology or an industry segment building recommendations for identity management best practice

...

The IAWG is chartered to be an ongoing Work Group in the Kantara Initiative to maintain the Recommendations it produces over time. Its . The charter will be reviewed and, if deemed necessary, revised on an annual basis. Its charter may be amended from time to time, with changes approved by the Leadership Council.

(9) IPR POLICY: 

Kantara IPR Policy - Option LibertyInitiative IPR Option: Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non-discriminatory (RAND)

(10) RELATED WORK AND LIAISONS: 

...

(11) CONTRIBUTIONS (optional): 

  • Identity Assurance Framework Set (version 1.1 created by Liberty IAEG in 2008)
  • Identity Assurance Framework - Read Me (created by Liberty IAEG in 2008)

(12) PROPOSERS:

...