Attendees:
Voting Participants: Mark King, Mark Hapner, Richard Wilsher, Ken Dagg, Martin Smith
Non-voting participants: Tim Reiniger, James Jung, Pete Palmer
Guests: Rene McIver (SecureKey)
Staff: Colin Wallis, Ruth Puente
Quorum: 3 out of 5. There was quorum.
Agenda
Administration:
Roll Call
Agenda Confirmation
Minutes Approval 2021-03-11 DRAFT+Minutes
2. Discussion
a. Review NISTIR 8344 (Ontology for Authentication) available at https://nvlpubs.nist.gov/nistpubs/ir/2021/NIST.IR.8344-draft.pdf (Deadline to comment: April 9, 2021)
b. NIST open discussion issues in light of SP 800-63 rev.4: https://github.com/usnistgov/800-63-4/issues (Deadline to comment: May 15, 2021)
c. Kantara 63B_SAC subset vs NIST source text (clarification request).
3. Any Other Business
Minutes Approval
2021-03-11 Minutes were approved by motion. Moved: Mark King Seconded: Mark Hapner. Unanimous approval.
Review NISTIR 8344 (Ontology for Authentication)
- Doc: https://nvlpubs.nist.gov/nistpubs/ir/2021/NIST.IR.8344-draft.pdf
- Deadline to comment: April 9, 2021
Overall comments:
- Martin found the breakdown confusing. He added that the words "entity" and "object" are not clearly defined and they're not in a glossary. He said he was hoping to see a more fundamental discussion of what are we trying to accomplish with authentication because is often overestimated. He thinks it would be useful to drill down into that.
- Mark King: It's useful to have a coherent position because the definition of authentication varies from person to person and country to country.
Line by line comments:
- Mark K: Line 1157 "However, there appear to be two solutions: anything or “two-factor” authentication". What "anything" means?, he believes a word is missing.
- Mark K: Lines 624-626 "Two major forms of digital signatures are DSA and PKI. However, Merkle signatures schemes are often used for blockchain protection against change".