2021-08-26 DRAFT Minutes

Attendees:

Voting Participants: Ken Dagg, Martin Smith, Mark Hapner, Mark King, Richard Wilsher

Non-voting participants: Chris Lee, Jimmy Jung, Tim Reiniger, Marc Aronson , Roger Quint

Staff: Kay Chopard, Lynzie Adams

Agenda:

Administration:
1. Roll Call and quorum determination
2. Agenda Confirmation
3. Minute approval (DRAFT minutes of 2021-08-19)
4. Staff reports and updates
5. LC reports and updates
6. Call for Tweet-worthy items to feed (@KantaraNews)
Discussion
1. Finalize proposed criterion language regarding "comparable alternative controls."
2. Finalize proposed text regarding use of "presentation attack detection" (PAD.)
3. Confirmation of other non-substantive changes to criteria to be included in the package to be submitted.
Any Other Business and Next Meeting Date

Meeting notes:

Administrative items:

Ken Dagg having emailed he would be slightly delayed, IAWG Vice-Chair Martin Smith called the meeting to order at about 1:07PM (US Eastern), and called the roll. It was noted that the meeting was quorate.

Minutes approval: Mark King moved approval of the draft Minutes of the IAWG meeting of Aug 19 . Mark H seconded. The minutes as distributed were approved unanimously.

Staff reports and updates: ED Kay Chopard–today talked with UK contact, who said they had a good relationship with former Kantara ED Colin , but that "Kantara is a mystery organization." It seems we need to get them a clear picture of the scope of Kantara's activities. UK contact said they welcome participation in their stakeholders groups, but don't want to overburden with keeping up with multiple stakeholder sub-groups. Kay assured her Kantara had resources and interest to participate wherever we could be relevant. They are planning to have a certification process, and Kay recommends we respond to the current call for comment to stay engaged. She said they encourage responses from identity-focused organizations to balance against lots of comments they are receiving from individuals opposed to any government involvement in identity. Ken D. asked if our contact had indicated any knowledge of past Kantara comment contributions. Kay said no, but that maybe they did not count input received from Colin as having come from Kantara as an organization.

Mark K. I will send some questions on the latest UK draft, not as a proposed Kantara response but just to point out issues we should be aware of.

Richard W. Will be in UK soon. Should I try to meet with them? Kay C.: I don't think we need an in-person meeting, but we do need to make sure they realize Colin is not the only expert in Kantara. They may also have the idea that Colin and Ruth Puentes were representing Kantara Europe. Ken D.: I am willing to give this one more try, We had been on pause because of lack of positive impact of past comments submitted. Maybe a new face (i.e., Kay) will also help trigger them to take a fresh look at Kantara. For background: our policy has been to respond to requests for input if the requesting government is a Kantara member, or might become one. We had judged that UK joining Kantara was not likely. In the past, OIX was on their board and that may have discouraged greater Kantara access. Bottom line: we will try to provide some comments on the current UK draft.

Kay C.: the response deadline is September 13. That may also be one reason our UK contact suggested keeping comments brief.

Jimmy J.: I am concerned about their lack of familiarity with Kantara. I know we have briefing materials; should we try to present that to the UK program's board? Kay C.: I will be presenting at next month's European Identity Conference (EIC) drawing from our standard Kantara overview briefing materials.

Chair Dagg then invited the new Kantara Assurance PM, Lynzie Adams, to introduce herself. Lynzie A: I started this week, and look forward to getting more involved with IAWG and Kantara generally very soon. I worked with Kay C. previously when I was living in the Washington DC area, supporting the National District Attorneys Association. Since moving to South Carolina I am pursuing a Masters in Public Administration, which I expect will be very useful in my new role at Kantara.

LC reports and updates: Ken D.– not much to report.

Ken D. reminded WG participants that Kantara staff is ready to help them publicize their newsworthy activities via the @KantaraNews Twitter handle. Requests can be sent to Ken D or Kay C.

Discussion:

Ken D. asked Richard W. to lead the group through the various revisions to the criteria for 800-63-3 certification to be submitted for Kantara review and publication.

Richard had combined all proposed changes ("comparable alternatives", PAD-related, and errata) on a master spreadsheet which he displayed on-screen to the WG. He then led the group through the proposed changes to the current criteria, which were displayed in red.

There were no notable changes in the COSAC.

In the OPSAC, there was one minor item with respect to which group agreed with Richard's characterization as a "non-material" change (i.e., not requiring full public review for Kantara approval.)

63A --

#80 – ok

#177 (CACs) – OK

#460, 480 – if KBV . . .

#630-50 – PAD changes – KD: calls for comment. This text approved. Agree these are material.

relevance of "material" : might send only material via full review and just pub all. Will be first digit on version # is incremented. 63A , B will go to 5.0.

Explanatory note at end of 63A: NO NEW MATERIAL

63B –

#350 – cross-ref not material

#790 – clarity, not material

#1505 - 20. material

RW: 63C – no changes.

JJ: re clarity of applicability of PAD. ARB thinks not clear. RW says clean and ARB oversteps.

RQ: when and if PAD required, how will that read out. MS: NIST will have to create text first.

JJ: unclear if any bio collection is done, then PAD. Or not.

Mark King to Everyone

Are Kay and Lynzie taking over the collaboration with NGI_Trust in Horizon 2020 programme (EU plus UK), where both Colin and Ruth are/were mentors/board members?

from Chat

1:34 PM

Kay Chopard to Everyone

Colinn and Ruth have told me that they were doing that as part of their work with Kantara Europe. I did not have the understanding from them that it was something Lynzie and I would be permitted to take over.

2:03: KD – Mark H; JJ second. Approved unanimously. as recorded.

RW: will submit the final to KD MS and LA.

Finalize proposed criterion language regarding "comparable alternative controls (CACs)."

Finalize proposed text regarding use of "presentation attack detection" (PAD.)

Confirmation of other non-substantive changes to criteria to be included in the package to be submitted.

.

Other Business:

Next meeting next week for UK stuff.

Ken thanked participants for their work and adjourned the meeting at about 2:05PM US Eastern.