...

Kantara Initiative Identity Assurance

...

...

Ad Hoc Teleconference

Date and Time

• Date: Thursday, 2015-09-24
• Time: 12:00 PST | 15:00 EST
  
• United States Toll +1 (805) 309-2350
• Alternate Toll +1 (714) 551-9842
  Skype: +99051000000481
  
  • Conference ID: 613-2898
• International Dial-In Numbers

...

...

Attendees

Link to IAWG Roster

As of 2015-01-22, quorum is 6 of 11

•  Paul Caskey
•  Lee Aber

• Scott Shorter, Electrosoft
•  Paul Caskey, InCommon
•  Lee Aber, ID.me

Kantara Staff

• Joni Brennan
• Ruth Puente

This call is to gather some verbal discussion, CSPs are all planning to provide input.

Scott's plan is to convert Chi's comments to a matrix now that we've come to consensus on what the proposed requirements mean.

We discussed the possibility of discussing new approaches to identity proofing and other credential related processes at the IAWG.  How to find  Need to recommend that the rules include room for innovation.

Scott will write up the suggestion that OMB M-04-04 be revisited, with reference to the bullet about revising systemsperiodically reassessing systems. Possibility to pull in IETF VOT approach.

Paul had Caskey has reviewed the emails on the IAWG thread - he's here to learn more about the impact on InCommon.  Need for remote identity proofing for distance education. DOE wants the requirement that the same person who took a test who is the same person who enrolled who is the same person who got the degree.

Question of what Joni suggests we need to identify are barriers to implementing the verification process - no open data source for verifying identity documents.

...

Scott suggests we document the different ways address can be used to mitigate risk.  Joni agrees we should highlight this.

Geolocation verification Additional use of address of record can be geolocation verification of applicant's identity, or verification of their jurisdiction as an e-citizen, or for knowledge of their location to send notifications and credentials.

Joni suggests talking with Bjorn from Europoint.  There's a Swedish government data source for CSPs to use.

...

Scott will reach out to learn more about driver's license regulation and the laws in Canada. .

We discussed the technical capabilities for driver's licence agencies to access passport verification services, and compared this with passport scanners of two kinds. One kind reads the name to look up a reservation, whereas the kind used when crossing the US border includes photo capture of the user of the kiosk.

Lee mentioned the Driver's Privacy Protection Act (http://www.accessreports.com/statutes/DPPA1.htm) which limits what information departments of motor vehicles can share.  Neither passport nor driver's license verification is possible at this time.

http://www.accessreports.com/statutes/DPPA1.htm