Versions Compared

Old Version 4

changes.mady.by.user Colin Wallis

Saved on

compared with

New Version 5

changes.mady.by.user Colin Wallis

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Hello everyone

...

It's great to see Kantara's 'NIST 800-63-3 Class of Approval' receive so much fresh interest. I think that this is in part due to US Federal agencies finally having the cycles to include it in procurement requests, together with the cumulative effect of its reference in the April announcement from HHS that TEFCA v2.0 was open for public comment, and ONC's announcement of the opening of competitive bids for the Recognized Coordinating Entity (RCE).  But interest goes beyond the current Classes of Approval as organizations see new and revised standards emerging from organizations such as ISO on electronic driving licences which require an assurance scheme assurance and support operations that are offered by Kantara, to extract the full potential from mDL programs. It's not just a US phenomenon where in April we received SOIs from a global telco, 2 global IT companies and 2 smaller market leading innovation companies. Kantara has received government and corporate interest in its Assurance program from Europe and Asia during April also.    

I was traveling again in the early part of April, this time to Tel Aviv, where together with Leadership Council Chair Andrew Hughes and other Kantara members sprinkled amongst national bodies, we attended the ISO SC27 meetings , and - specifically Working Group 5 Identity Management and Privacy where it was formally proposed to include an example from Kantara's Consent Receipt v1.1 into Annex B of ISO 29184 Online privacy notices and consent. Not only did we come away with this great result, but also as rapporteurs of a new Study Period to look into the feasibility of a standard for consent receipts and records. Drafting a v2.0 of the consent receipt has understandably taken on a new sense of urgency and I'm pleased to report that a volunteer working for a large consulting company has agreed to lead the v2.0 project.  In other ISO news Kantara's IDVP Use Case contributions were well received and consituted the vast majority of the report. It's hard to overestimate the significance of this, given the that the report lays the foundation for the future posture of the identity standards coming from ISO. You can be involved too, just as long as you are a Kantara member in good standing (a requirement from ISO), in order to gain access to and contribute to the draft standards from ISO SC27 Working Group 5.  

Meanwhile, the UMA working group was presenting to the OAuth working group at the IETF 104 meeting in Prague to support its contribution of the UMA 2.0 specifications for formal standardization. Many thanks to ForgeRock's Eve Maler for preparing the deck, together with co-presenter Maciej Machulak, Pedro Silva in the room in Prague, Gluu's Mike Schwartz, Hindle Consulting's Andi Hindle, Cigdem Sengul, George Fletcher, and other UMAnitarians who pitched in to improve the slides in the weeks leading up. You can find the presentation materials on the Work Group wiki. 

It did not end there however, with your intrepid Exec Director doing a dash across the globe to catch the Future Trust Go eIDAS workshop in which Kantara Europe is a partner, followed by fellow NGI_Trust partner Fraunhofer's Open Identity Summit in Garmisch-Partenkircken near Munich. This is my first time attending and I was super impressed with the speaker line-up. If you want to know what's coming down the pipe from research institutes and universities as they present their papers before they hit prime time at main conferences, this is 'must-see'. We came away with a fresh basket of actions arising from Kantara's heightened reputation in Europe resulting in organizations wanting to work more closely with us to apply our services and operations in that continent. Just as well Program Manger Ruth agreed to become a Director also! Thank you! Contact us if you meet the criteria so you can join the group.   

It has been hot, hot hot for Mittetulundusühing Kantara Initiative Europe as well. The first call for proposals in its NGI_Trust project closed April 30th and received a whopping 109 responses!  And following my meetings in Garmisch-Partenkircken last month, I'm pleased to announce Kantara is an associate partner of the Future Trust consortium to promote the implementation of and integration with eIDAS across the world. near Munich. You can read more about it here. 

With all this activity, it may come as little surprise that Kantara is hiring! During April we took on an additional contractor Armin, to support Oliver in managing our increasing basket of IT and web assets. This is the first 'new hire' in 5 years, but will certainly not be the last.  I am in the final stages of securing our first 'Kantara ambassador' to develop Kantara's ethos and membership in the Washington DC, one of several geographically strategically placed ambassadors you may see in the coming years.  More details will be forthcoming soon.  

To finish this month's Director's Corner I want to give a special shout-out to the Marketing team at our Boston-area based association service management company Virtual who has done a stellar job with the 10th Anniversary promotion, first seen on the Keeping up with the Kantarians' monthly email blast towards the end of April (and if you are not receiving these and want to, just Contact us). See the Infographic and celebration video here, straight off the homepage of the website. 

On the community side of the house:

  • the Consent & Information Sharing WG is working towards the revision of its Consent Receipt real world use case demo and its respective Consent Receipt Generator;the UMA WG is in advanced preparations to present UMA v2.0 to the 104th IETF meeting in Prague in April to ready it for a standards track contribution;gathering contributions for the first draft of Consent Receipt v2.0, collaborating with members on the Consent Receipt Generator and developing the demo with its requisite privacy dashboard; It is also gathering contributions on the DIACC's (the Digital ID and Identity Council of Canada) document out related to Notice and Consent https://diacc.ca/2019/04/03/notice-consent-overview-conformance-discussion-drafts/ as a component of the Pan-Canadian Trust Framework to set a baseline of public and private sector interoperability of identity services and solutions.  If you want to contribute you must join the CIS working group (no charge)
  • the UMA WG is preparing its presentations for UMA v2.0 at the forthcoming IIW, EIC and Identiverse conferences as well as the 105th IETF meeting in Canada later in the year to helpfully confirm it on the standards track - we learn about more new implementations every month!.
  • the Identity Assurance Work Group is working hard on preparing comments on the Pan Canadian Trust Framework whose overview is out for public review;
  • the ID Proofing and Verification Discussion Group is assembling a strong set of use cases into a report to ISO SC27 Working Group 5 later in March in time for the Study Period's findings in Tel Aviv in April; and
  • Kantara's liaison with Working Group 5 is seeing increased activity as the international standards drafts covering identity and privacy reach a more developed and mature stage in their development.  

...

  • about to release a refreshed Overview and Glossary for the Identity Assurance Framework (IAF) and is monitoring the new NIST standards FIPS 140 and FIPS 201 for any impact or implications for the Kantara IAF. 

Events: There are heaps coming up. Please review events calendar and register (most events that Kantara participates in offer a significant discount)

Kantara's European Plenary is a must-attend if you are in Europe and curtain-raises the  Kantara workshop at the European Identity Conference in Munich in May the following day, where the agenda is all set - see it here (remember the chunky ticket discount if you use the code shown on Kantara's events page!) - and even before that ConnectID in DC Monday April 30 through Wednesday May 2nd which is FREE OF CHARGE for attendees. 

IIW in Mountain View is on at the same time and many Kantarians will be attending as usual.  June has a slew of events starting with Identity North in Toronto, then Identity Week UK, EEMA UK, Think Digital Identity UK, Whitehall Media IDM UK, and in the last week Identiverse in Washington DC. If you are attending the EIC in Munich in May, please make sure you arrive a day early and register here for the Kantara Members Plenary on Monday May 13th. community discounts and planning our participation at Conferences and Events too. Of course our participation is your participation. 

...

Program, Work Group and Discussion Group Updates:

  • You can always keep up with the latest news from the Work and Discussion Groups directly on the Leadership Council's Blog. See the list of public groups here.

...