...
2.Discussion:
a. UK DCMS May Update Certification Questions & UK Trust Framework Certification Scheme
cb. RFI re mDL
Staff reports and updates
...
- The group agreed with the responses.
- Ruth will submit them to UK DCMS on May 21st.
Assessment of RPs
- In light of the discussion of UK DCMS certification questions and documents, a question on the RP assessment was raised.
- Richard said that "RP" in the context of proofing and credential management rely party that is relying on the assertion, and certification and PII that goes with it. There is no requirement under Europe is an entity that relies upon an affirmative authentication of a claim of identity. "User" is what Kantara calls subject of that credential. The RP will receive an authentication and some collection of PII.
- Mark K. stressed that there is no requirement under Europe for RPs to be certified under the scheme.
- Richard remarked that 63A stipulates that the collection of PII is allowed only for the identity proofing purposes.
- It was agreed that it's complex to assess and certify RPs.
RFI re mDL
- Ken said that IAWG plans to comment on question 15 "Obstacles to acceptance".
- Colin commented that Kantara has released a request of technical editor to work on the Kantara combined response to the RFI. He added that the WGs that are interested in providing inputs are FIRE, IAWG and mDL DG.
AoB
- Martin shared a NIST/NCCOE release and call for comments until June 21st. Link to document: https://www.nccoe.nist.gov/sites/default/files/library/project-descriptions/data-classification-project-description-draft.pdf