110 likes | 326 Views
Kantara Initiative Privacy Framework Overview and Value Proposition. 13 May 2011. Scope of Privacy and Public Policy WG Activity in Kantara . Digital Identity Trust Frameworks Assurance Privacy Trust Get Involved. Kantara Initiative builds bridges. Kantara Initiative:
E N D
Kantara Initiative Privacy Framework Overview and Value Proposition 13 May 2011
Scope of Privacy and Public Policy WG Activity in Kantara • Digital Identity Trust Frameworks • Assurance • Privacy • Trust • Get Involved Kantara Initiative builds bridges...
Kantara Initiative: Assurance and Interoperability Program Work Groups KANTARA INITIATIVE PROGRAMS WORK & DISCUSSION GROUP ACRONYMS: NON-CERTIFICATION CERTIFICATION • (BCTFDG) Business Cases for Trusted Federation • (eGOV) eGovernment • (EUMDG) European Use Case and Market • (FIWG) Federation Interoperability • (IOP) Interoperability INTEROPERABILITY ASSURANCE HARMONIZATION InterOp Review Board (IRB) • Certification • Demos Assurance Review Board (ARB) • Certification • Accreditation User-Centric, Jurisdiction and Vertical Based • (HIAWG) Heath Identity Assurance • (IAWG) Identity Assurance • (Info Sharing WG) Information Sharing • (P3WG) Privacy and Public Policy Consumer ID BCTF DG HIA WG eGOV IA WG Japan • (Consumer ID) Consumer Identity • (JapanWG) Japan • (Telco ID) Telecommunication Identification • (ULX) User Login Experience • (UMA) User Managed Access EUM DG InfoShare Telco ID FI WG P3 WG ULX IOP UMA
Kantara – An anchor for Privacy Capability • Kantara’s IAF demonstrates experience in developing components of a trust framework. • Kantara considers Privacy a core requirement and an opportunity when designing identity interoperability. • P3WG is a dedicated work group that liaises with existing privacy standards efforts and other Kantara WGs. • P3WG sponsors the Privacy Framework subgroup (P3-PFSG) which is developing privacy assurance with a profile approach to a complete trust framework.
Plug-in Components • The Privacy Framework will enhance credential and attribute management with profiles usable across federations and jurisdictions. • Authentication, authorization and access control need to be considered separately for each deployment of a federated identity system. • The Privacy Framework is focused on providing a structure for the application of privacy principles in order to generate a baseline for assessment/audit capability in federated identity management.
Privacy Baseline impact on IAF certification: (as applied to) US ICAM TRUST FRAMEWORK PROVIDER REQ’S BIO-PHARMACEUTICALFEDERATION CORE CSP REQUIREMENTS FINANCIAL SERVICES NETWORK CORE REQUIREMENT SET HIGHER EDUCATIONFEDERATION CORE REQUIREMENT SET Identity Assurance Framework SAC for AL(n) – {n:1-4} IAF ADOPTION IAF PROFILES
Privacy Framework-SG development and operations: • Phase 1: develop privacy principles into assessment criteria for privacy certification of IAF or industry profiles in federated identity assurance deployments • Phase 2: develop a set of recommendations for broader privacy framework certification based on merging privacy standards and an audit of PKI practices • Phase 3: continued support and development of a Kantara Trust/Privacy Framework
Privacy Framework Roadmap • Reference Discovery Document - Complete • Privacy Principles Analysis – June 2011 • Privacy Framework Wireframe – Aug 2011 • Draft released for comment – Nov 2011 • Privacy Framework v1.0 integrated into Kantara Trust Framework - Q1 2012
What We Ask? • Volunteer time and effort to the P3WG to help complete the work. • Identity service organizations adopt the IAF and eventual Privacy Framework as their standard for Identity Assurance • Financial sponsorship (through membership and/or directed contributions) be made to support the development of a Privacy Framework and Certification Program
Get Involved: Join our Community Website: http://kantarainitiative.org Community Mail List: http://kantarainitiative.org/listinfo/community Identity Assurance Accreditation and Certification Program: http://kantarainitiative.org/confluence/display/Identity+Assurance+Certification Membership Documents: http://kantarainitiative.org/wordpress/membership/
More Information: Accepting applications now! Visit our Assurance Certification Centerhttp://kantarainitiative.org/confluence/x/EYCYAQ Connect with Executive DirectorJoni@ieee-isto.org