Kantara Initiative Health Identity Assurance WG Teleconference
DRAFT Meeting Minutes 2013 August 29 |
Date and Time
Date: Thursday, 29 August 2013
Time: 10:00 PT | 12:00 CT | 13:00 ET
Dial in: TurboBridge Conferencing
Health Identity Assurance Working Group Home Page
HIAWG Wiki Home
Agenda
- Administration:
- Roll Call
- Agenda Confirmation
- Organization updates - Director's Corner
- Upcoming Events page: http://kantarainitiative.org/confluence/x/pYDWAw
- Report out from latest LC meeting
- Action Item Review
- Leadership election results
- Discussion
- Call for HIAWG Charter Refresh
- WG Charter update & suggestions to start the discussion - Refreshed HIAWG Charter
- First Deliverable proposed: "Analysis of the feasibility of using a single comprehensive or several overlapping Accreditation Schemes for certification of Identity Proofing & Verification and Credential Management Service Providers."
- AOB
- Adjourn
Attendees
Participant Roster
As of July 23, 2013, quorum is 6 out of 10 voting participants. |
Voting
- Pete Palmer (C)
- Andrew Hughes (VC)
- Barry Hieb
- Terry Gold
- Laurie Tull
- Minze Chien
Non-Voting
- Rich Furr
- Linda Goettler
- David Kibbe
- Adrian Gropper
- Rick Moore
- Bill Braithwaite
Staff
Administration
Organization updates - Director's Corner
- Recent press release announcing MOU with Direct Trust and ENHAC
- HIAWG will be central in developing this collaboration
- Have signed a Liaison MOU with IDESG - to share operational experience
- ForgeRock has become a Trustee-level member - there is now a vacancy as LC Liaison rep on the Board of Trustees
- UMA1-Interoperability event is proceeding at MIT in October; Kantara is a media sponsor
- Workshop scheduled prior to SmartCard Alliance October - assembling panellists now
- Attending UserCentricID Live and IDESG
- Securing space for workshop prior to RSA Europe - topic is Security-Privacy alignment or non-alignment
- FCCX has been awarded to SecureKey (a Kantara member) - Kantara working closely with FCCX team
- IDP/CSP seeking to connect to FCCX will need certification by a Trust Framework Provider (that's us!)
- Upcoming Events page: http://kantarainitiative.org/confluence/x/pYDWAw
- Report out from latest LC meeting
- WGs are working on their charter refresh exercises
- Working to align WGs to support and align Kantara's value statement & mission
- Deadline for refresh is September 25
- Kantara Plenary meeting planned for November 10-11 in Vancouver - asking WGs for attendance plans
- IAWG is planning a DC area meeting to talk with NIST/FICAM/FCCX in the fall
- Pete Palmer was elected as Chair and Andrew Hughes elected as Vice Chair on August 9, 2013.
Discussion
Call for HIAWG Charter Review
Kantara Portland retreat in August 2013 created plans to sharpen focus for Kantara WGs. Review and update of existing WG charters was requested, due September 25 for review by LC.
The text of the request:
During the recent Kantara Leadership Retreat, we focused on the question of why Kantara exists (seehttp://kantarainitiative.org/pipermail/lc/2013-August/002348.html for a high level summary out of that retreat). The idea is that with a clear "why", we can make sure the actions we take truly support the goals of the Kantara Initiative. The current working DRAFT of Kantara's "why" statement is:
DRAFT: Kantara exists to define rules of engagement for operators of online services, enabling high-value, privacy-preserving identity and access.
In order to incorporate this concept in to the Innovation side of Kantara, the work groups, we are initiating a Work Group recharter effort. This will help make sure that the Work Groups are on track with solid deliverables and timelines that support the goal of the organization. Work Groups can expect to receive more organizational support in terms of marketing to increase group participation and the creation of industry-driving Kantara Recommendations. For Work Groups that do not recharter, their status will change to that of a Discussion Group, which is considered a much more informal effort. (Please see the Kantara Operating Procedures for a more detailed definition of Work Group and Discussion Group: http://kantarainitiative.org/confluence/x/owVAAg .)
The link to your current charter can be found on your space in the Kantara wiki. The LC would like to have the updated charters in by September 25. The LC will discuss and review the charters over the month of October. |
Updated working version of the value statement:
"Kantara exists to develop and/or operate rules for operators of online services, enabling verification of the trust layer providing high-value, privacy-preserving identity and access."
Discussion
- The 'why' statement was developed out of the Kantara Strategic Summit last month
- Look for deliverables around where HIAWG can add value in the market
- e.g. the DirectTrust MOU - mapping SAC and DTAAP; recommendations for updates on both sides; are there more Healthcare items needed
- Joni looking for a Tiger Team to form to work on the MOU engagement
- What audiences should be looking to HIAWG for material?
- IdPs find that they have to "get certified" under many different schemes
- How does an IDP conform to each scheme - it costs a significant amount of money and time
- Would it be possible to map between Direct Trust CP (includes Healthcare requirements) and Federally certified CP & have the IDP gain additional verification of the uncovered bits?
- Would like to minimize the amount of overlapping and redundant assessment/certification?
- Direct Trust agrees
- This is the perfect time for this
- Having good conversations with Federal agencies currently
- Identity Verifiers will also consume information from IAWG
- Should reach out to candidate Identity Verifiers and request their participation
- UMA WG
- They are working on the Authorization end of the spectrum
- UMA is looking at Consent topics now - should be a good synergy there
- Terry Gold's organization is doing a wide and deep research project on Payers and Providers in Healthcare.
- Looking to Kantara's work
- Looking for collaborative discussions to seek information for the research
- Medical Identity Fraud Alliance: new group just formed - should reach out to see if there is commonality
- BlueCross/BlueShield, AARP are members plus others
- Patient Privacy Rights - there doesn't seem to be funding for the Consumer Protection & Privacy aspects in this space (IDESG Excepted)
- This is a challenge to secure funds in general for this topic
- Ensure that group is not overloaded
- Also make sure the demand is articulated well so that the opportunity exists for people to make time available
- ACTION: A. Hughes Will seek ideas via Listserv for Charter material
Deliverable discussion
First Deliverable proposed: "Analysis of the feasibility of using a single comprehensive or several overlapping Accreditation Schemes for certification of Identity Proofing & Verification and Credential Management Service Providers."
- Can the different schemes be mapped? Harmonized?
- Are all the schemes needed?
- Will get pushback from Industry if Healthcare Assurance Industry tells organizations that they must get multiple, similar certifications
- Most IDPV processes are not based on effectiveness evidence - some evidence that the mechanisms (e.g. birth cert, picture ID) used to identify people are actually working as intended, with indications of failure rates
- Kantara has a NASPO liaison - HIAWG should leverage this
- If HIAWG does not have the required expertise, we should seek out and engage them
- Lead Editor: Pete Palmer nominates Terry Gold - need to discuss scope and effort level first
- Contributors: Pete Palmer, Rich Furr (provisional), Bill Braithwaite, David Kibbe
- Call for potential content for the study
- Consumers: Kantara Board of Trustees; Kantara Assurance Review Board; Verizon;
- Potentials: end-user stakeholder
- Approach: Identify parties that should be impacted and get them to actively provide guidance -> Deliverable steering group
- Timeline: sooner rather than later (Stage2 begins next year)
- Drivers: Meaningful Use schedule
- The Vendors serving providers - all complain that the cost of identity verification methods cost too much
- Physician Groups and Hospital Groups should be interested
- Meaningful use is mandatory as of next year
- The Providers are not really concerned about identity verification today
- it is really a Payer problem and concern
- if they spend $$ how much improvement and cost effectiveness will they get
- This is a consistent theme
- ACTION: Pete Palmer to discuss lead role with Terry Gold - Lead will convene working meetings as needed.
AOB
Action Items
| Item # | Description | Assigned to | Est. Completion | Status |
|---|
| 2013-08-29-001 | Solicit additional content for HIAWG charter | A. Hughes | 5 September 2013 | New |
| 2013-08-29-002 | Determine Lead Editor for Feasibility Study deliverables | P. Palmer | 5 September 2013 | New |
Attachments
Next Meeting
Date: Thursday, 12 September 2013
Time: 10:00 PT | 12:00 CT | 13:00 ET
Dial in: TurboBridge Conferencing