ANSI / NASPO – ID-V Standards Workgroup Update
Session Topic:ANSI / NASPO IDV Standards Workgroup
Convener:John Biccum
Notes-taker(s):Salvatore D'Agostino
Tags for the session - technology discussed/ideas considered
Discussion notes, key understandings, outstanding questions, observations, and, if appropriate to this discussion: action items, next steps:
ANSI is ISO template
John is doing trust framework and Anna is doing privacy
Some people just there for sand in the gears
Chunking out the work, started with 20 people on call with open agenda, progress from there
Referring to them as Trust Frameworks
Quantification – quality of the identity proofing that is taking place
www.naspo.info
http://www.naspo.info/pages/idpvprojects.html
The existing risk management methodologies assume you know who the relying part is
Say what we are doing, let someone else check it.
Also complementing this is the ABA task force trying to establish a legal framework.
Federation is more than identity.
Look to certificate practice statements
Someone will create model legislation
Kantara IAWG is taking a look from an ISO 27000 perspective
Domain specific frameworks might evolve
E.g. AAMVA is domain specific expertise
NAPHSIS
Carbon based life form and linkage between that entity and a person sitting in front of you
Differentiation of roles
Virginia law for remote notarization
Limits on digital signatures
Timeline and maturity of the work, April 15th working draft
Kantara interested in having input
ISO driver license is about format not source of data