Meeting Minutes Bokkers
Table of Contents | ||
---|---|---|
|
...
Meeting 20170320
- Andrew Hughes
- George Dobbs
- Janelle Allen
- Stu Lincoln
- Kaliya Young
- Thorsten Niebuhr
We worked on the doc (https://docs.google.com/document/d/1HNLZginMaRtFdraQTpVkdJ6z8Aj86cM_87TE6T53KrI/edit#heading=h.rt9d9cnrprd7)
- Discussed the 'dart' (cake, pie) model and the status of the rings (information/technology/policy)
- There is currently no real usage in the work for the rings, but we will keep them for now
- Naming the elements: layer/Section/Slices
- 'Identities' as an example for a intro text
- Same to do for
- 'Authentication' -> Former user (Deleted) agreed to work on this
- 'Authorization' -> Former user (Deleted) as well
- 'Management' -> Former user (Deleted)
- We discussed if the current model is to 'Enterprise IAM' focused, and if it lacks the more modern views (sovreign Identity, Consumer, Patients...)
- We might need to add 'some layer', but hope (and most are somewhat positive on this) that the model will allow this to be included/ covered
- Once again discussions where the border/ difference between the taxonomy and the details of the BoK are
- The taxonomy should allow us to sort the 'specific' into the 'general'.
- Not using terms from (ISO xyz or standard abc) on the taxonomy naming/ explanation for a given section is a feature of it. Eg the Section 'Identities' describes a general idea of 'identity', the BoK content then should mention/ link the different explanations (eg ISO Standard abc, Philosophy, ....)
- Discussion if we should prepare a session / be part of the workshops held at EIC 2017 (Munich) (->https://www.kuppingercole.com/events/eic2017/workshops)
- Thorsten will send out that as a question to the group
(while writing this, Colin has already contacted me on this. good timing....)
- Thorsten will send out that as a question to the group
- Next meeting /editing session
Thursday, March 23, 2017; 7:00pm to 8:00pm Eastern Daylight Time
Meeting 20170206
- Andrew H.
- Thorsten N.
- Megan C.
- Stu L.
- Cathrine S.
We worked on the googledoc and made significant progress. minor changes on the taxonomy again
- Stu L. to work on 'High Level Concepts' Section
- Stu L. to continue on 'Management'
- Thorsten N. to continue Matrix representation
- Thorsten N. to work on 'Identities'
- Cathrine to add HC specfics to 'Additional BoK Items', starting a 'vertical industry section specific' area
- ALL: contribute to the doc to make sure we have some 'ready to be discussed / open for comments' status by 2017-02-13 EOB, send short notice to Andrew when a section is completed
- Andrew H. to QA the doc on 2017-02-03 and generate a link to it allowing open comments
- Andrew added another model to have a cake and eat it.
- Resorted/ Changed (standards together with protocols)
- Concepts
- Regulations
- Best Practices
- Standards and Protocols
2017-02-13 will be no call, next one is 2017-02-20
Meeting 20170130
- Andrew H.
- Thorsten N.
Andrew created and started googledoc and send out link (the doc is anonymous editable, thats why the link is not mentioned here)
Agreement on taxonomy
Identities
Standards and Concepts
Regulations
Best-Practice
Protocols
Management
Standards and Concepts
Regulations
Best-Practice
Protocols
Authentication
Standards and Concepts
Regulations
Best-Practice
Protocols
Authorization
Standards and Concepts
Regulations
Best-Practice
Protocols
Meeting 20170123
- Thorsten Niebuhr
- Andrew Hughes
- Megan Cannon
- Colin Wallis
- George Dobbs
Topics
- Andrew send out his view on 'Authentication' via Mail just before the meeting
- great list
- Trust elevation missing
- Thorsten to share an 'alternative' Modell / View (Andrews Authentication stuff not in yet)
- IDPRo-Alternative-View.pdf
- An alternative view might help, but we should concentrate on working on what we have now.
- slices concept is hard to explain using the alternative
- Table is just a 'quick and dirty' draft
- Discussing techniques for increasing stakeholder engagement
- https://pages.nist.gov/800-63-3/ as a valuable doc, worth reading for the group
Meeting 20170109
- Andrew Hughes
- Megan Cannon
Andrew played around with running ISO 29146 and ISO 24760-3 through a word cloud generator (to avoid sitting down and just drafting the domains list!)
Meeting 20161219
- Andrew Hughes
- Thorsten Niebuhr
- George Dobbs
- Stu Lincoln
- Identities
- digital|social|online|philosophical identities, entities: Describe identities and its many facets, PII,...
- Gathering/ Providing
- how these informations are collected and aggregated
- claims, attributes, relations, self-provided, stolen,....
- ethics
- Verification
- verified and non-verified data and its use
- Trust Levels
- Uniqueness in a population
- Information Recording (other wording: DataStorage, RecordCreation, .....)
- Security
- Protection
- Privacy
- Retention
- Lifetime
Meeting 20161212
- Thorsten Niebuhr
- Andrew Hughes
...
- Megan Cannon
Agenda/ Topics discussed
- Short discussion about past weeks and last week overall DG Meeting
- Next Step discussion
- Task (TN) Create Mailthread on the TopLayers and their Sublayers
TopLevel from the DartBoard
Top | Sub | Example | Validation |
---|---|---|---|
Identification | Proof/ Verify | ||
Register | |||
De-Register | |||
Data Portability | |||
Management | Enrollment | ||
Dis-Enrollment | |||
Privacy | |||
Federation | |||
Authorization | |||
Authentication | |||
...
- Proof/Verification
- Register
- De-Register
- Data Portability (Transfer)
...
- Enrollment
- Dis-Enrollment
- Privacy
- Federation
...
- ...
- ...
- ...
- ...
...
...
Meeting 20161205
- Cathrine Schulten
- Thorsten Niebuhr
- Colin Wallis
- Ravi ?
- Megan Canon
Agenda/Topics Discussed
- Further discussion on the Dart Board Model (https://kantarainitiative.org/confluence/download/attachments/85492303/BoK%20Diagram.pdf?api=v2)
- Refinement discussed for the 'upper layer' (https://kantarainitiative.org/confluence/download/attachments/85492303/DOC-20161205-174219.jpg?api=v2)
- Actions agreed on
- Check Status on 'Collections of alerady available glossaries and standards around IAM/IAG/IDM)
- Thorsten: Send out/ Start Mailthread on further refinements
- continue with planned meeting schedule (calendars)
...
- Thorsten Niebuhr
- Cathrine Schulten
- Shannon Taylor
- Scott Shorter
- Stuart Lincoln
- Colin Wallis
- Tim
- George Dobbs
Agenda/ Topics discussed
- TopLevel Approaches discussed
- Practice
- Access Management
- Identity Governance
- Customer IAM
- Enterprise IAM
- Federated IDM
- Domains
- Mixed
- Project Management
- Laws and Regulations
- Standards
- Ethics
- Operation
- Technology
- History
- Identity Lifecycles
- Entity Relations
- Identity Usage Processes (AuthN and AuthZ)
- Dartboard
- Sketch from Andrew https://idprofessionals.slack.com/files/andrewhughes3000/F3741B9CG/img_5339.jpg
- NOTE: The 'BoK Diagram' - a PDF version of the sketch is attached here
- Provides several layers and slices which allows to 'see' a topic from different viewpoints
- Rings of Identity 'types' (Public/Anonymous, Citizen, Customer, Employee(Workforce?),Privileged )
- Slices on Identity 'actions' (identification, credential management, authentication, authorization) Information Managemment
- -> Note: would onboarding/offboarding a valid slide here?
- layers of Governance, strategy, implementation, operation, technology
- other valuable links and input
- Practice
...
- Colin Wallis
- Andrew Hughes
- Stu Lincoln
- Megan Cannon
- Scott Shorter
- Thorsten Niebuhr
- George Dobbs
Agenda/Topics discussed
- New Group Schedule
- Every Monday, 9:00 AM UTC
- Collaboration Tool
- we agree on starting (continue) with eMail for now, but are open to move to slack later on
- On 'Glossary'...
- most are still uneasy with the term
- starting with this might not be the best idea...
- we should not start to create our own, new glossary, just to add it to the many already available
- Glossary is more a bottom up method, taxonomy would be more top-down
- Workpackage: Create a wiki to allow the DG to collect already available relevant glossaries
- On 'purpose'...
- might require a broader discussion which does not fit into a 1hr- meeting. So we decided to open a mailthread on this
(comment from the author while typing: we should timebomb this discussion, maybe max 2 weeks ?)
- might require a broader discussion which does not fit into a 1hr- meeting. So we decided to open a mailthread on this
- High-level Taxonomies
- we discussed Andrew's BoardShot as one example for a High/Top Level Taxonomie, but is that that one we should follow? Are there other top elements that would be better?
- We will check out /test other structures to start with (see workpackages)
- Workitems
Colin Wallis: ask Kaliya if she could provide a version (the latest?) of the IdentityManagement Landscape
Andrew Hughes: Create a wiki (start) page for collecting relevant glossary ressources
Thorsten: Start eMail Thread on 'purpose'
TopLevel Taxonomy sketches
Roles: ?
Domains: Stu
Practices: Thorsten
Any: Any (this is not a firewall rule)
Megan: Get hold/provide the list of JobRoles from the survey
Megan: Set up a Goto Meeting (jit.si was a nice try)
...