Attendees
Voting participants: Mark King; Mark Hapner; Martin Smith; Ken Dagg; Richard Wilsher; Tom Jones
Non-voting participants: Manvendra Kumar; Sarah Chu; James Jung
Staff: Ruth Puente
Quorum: As of 2019-12-19, quorum is 3 of 5. There was quorum
Agenda
Administration:
a.Roll Call
b.Agenda Confirmation
c. Action Item Review: action item list
d. Minutes approval 2020-07-16 DRAFT Minutes
e. Staff reports and updates - Director's Corner and Keeping up with the Kantarians
f. LC reports and updates
g. Call for Tweet-worthy items to feed (@KantaraNews)
2. Discussion
a. Kantara comments on how SP 800-63-3 could be revised for NIST’s consideration in developing Revision 4
b. Review and approve 63B_SAC at AAL3 and 63C_SAC at FAL3 criteria
c. Review and approve the revised Glossary & Overview
d. DIACC Request for Comment and IPR Review: PCTF Assessment & Infrastructure Draft Recommendations
3. AoB
Minutes Approval
2020-07-16 Minutes were approved by motion. Moved: Mark Hapner Seconded: Martin Smith. Unanimous Approval.
LC Update
- eGov WG, after performing lot of good work for Kantara has decided to self-shutdown given that it’s not active for a while and finding it hard to get members to attend; that vote has recently passed LC.
- Mark Hapner reminded about the eIDAS Public Consultation. It was agreed that IAWG will be generating comments on it. Ken added that as the deadline for comments is October, the plan is to start the review at the end of August. Furthermore, it was requested to promote this review work on Kantara channels.
- Tom shared a couple of standards that are being worked on at the OpenID and also in FIRE WG. The FIRE WG specification may result in the need for something like criteria for mobile apps at some point along distant future.
Review and approve 63B_SAC at AAL3 and 63C_SAC at FAL3 criteria
- Drafts reviewed during the meeting: KIAF-1440 SP 800-63B Service Assessment Criteria v3.1.0.xlsx and KIAF-1450 SP 800-63C Service Assessment Criteria v0.17.0.xlsx
- Richard explained that it was adopted the multiple parties practice from the FAL2 to work into the IAL and AAL SACs, in doing so we have pulled out those criteria which relates specifically to federal agencies or might also apply to RPs, in order to take the AAL criteria to their fullest implementation responding to absolutely normative criteria.
- He has updated all the tags because it's a substantial change. There is a new contiguous set, and the old ones will be here at least for a year or so while we transition to the new ones.
- Changes are in red text; there have been a few changes which have affected level 2 because we've been more inclusive this time with federal agencies.
- I would guess it'll probably 30 to 40 new discrete criteria of AAL3.
- It was decided to defer the approval to the next week.
Kantara comments on how SP 800-63-3 could be revised for NIST’s consideration in developing Revision 4
- Ken walked the group through the comments and suggestions that have been received to date: Comments on 800-63c TomB-2.docx
DIACC Request for Comment and IPR Review: PCTF Assessment & Infrastructure Draft Recommendations
- Ken commented that the Digital Identification and Authentication Council of Canada (DIACC) have just released another two components of the Pan Canadian Trust Framework (PCTF) for review. The PCTF Assessment component establishes the certification scheme that verifies that a process, service, or product conforms with PCTF criteria. The PCTF Infrastructure (Technology and Operations) component identifies the policies, plans, technology and technology operations required to implement the principles of the PCTF Profiles in the context of a Digital Identity Ecosystem. It also identifies the criteria that will be used assess that a service’s technology and operations meet those requirements. At the 2020-07-30 meeting, Ken will ask IAWG if we wish to develop comments to submit to DIACC. Link to DIACC request for comments: https://diacc.ca/2020/07/20/assessment-infrastructure-technology-operations-draft-recommendations/
Review and approve the revised Glossary & Overview