MINUTES OASIS IDCloud TC Meeting 14 November 2011

["Gershon Janssen" <gershon@qroot.com>]

----------------------------------------
DRAFT MINUTES
OASIS IDCloud TC Meeting
14 November 2011, 02:00pm to 03:00pm ET
----------------------------------------

Scribe: Gershon Janssen

1. Roll Call and Agenda Review

Name              Status
----              ------
Anil Saldhana     Member
Colin Wallis      Member
David Turner      Member
Gershon Janssen   Member
Dominique Nguyen  Member
Matthew Rutkowski Member
Thomas Hardjono   Member
Roger Bass        Member

Observers:
Jonas Hogberg     Observer

9 people joined the meeting.

This meeting quorates, 7/14 voting member are present.

Member status status changes:

Lost voting rights:
Brian Marshall

Gained voting rights:
Colin Wallis

Now: 14 voting members in TC.


2. Approval of Minutes
Oct 17th Meeting: http://www.oasis-open.org/apps/org/workgroup/id-cloud/email/archives/201111/msg00003.html
Oct 31st Meeting: http://www.oasis-open.org/apps/org/workgroup/id-cloud/email/archives/201111/msg00004.html

Thomas moves to approve the 17 and 31/Oct minutes. Dominique seconds. No discussion; motion carries.


3. Use Case Document
- Any updates are welcome asap for Matt to include.


4. Gap Analysis Discussion

- Colin submitted a template from ITU-T as an example for the Gap Analyses document
http://lists.oasis-open.org/archives/id-cloud/201111/msg00001.html

Matt: 
- ITU-T example document looks good as a basis for a template.

- Next steps: come up with a Gap Analysis template, as we did for the Use Case document
- Roger Bass came up with a gap analysis template: http://wiki.oasis-open.org/id-cloud/GapAnalysis; template on wiki is
somewhat primitive

Anil on approach for GAP analysis document:
- Let's start with table from Roger and develop it further
- Use case numbers should be included for reference.
- Use case text in gap analysis? Probably not.
- request to editors Gershon / Dominique to develop the gap analysis document further from here

Matt:
- From a link perspective: title, notations and assumptions put forward by the editor of the use case should be reused
- First pass at use cases, one should look at notations and assumptions, and look at referenced standards

Gershon: 
- First draft probably by the end of next week

Roger: 
- Likes to be posted on progress

Dominique: 
- Table seems very usefull; maybe add additional columns during the process

Anil: 
- provides an overview of the current GAP analysis work
- discussion on auditing; all the use cases should be included
- current conclusion: many standards, but not applicable to cloud environments
- Red Hat use case has also been discussed
- Also discussion on Intercloud, but conclusion not articulated.
- enumerated list of applicable standards have been discussed and posted to the list
- email threats on gap analysis discussions already exists
- no gap analysis for all use cases, but for a few that were discussed

Matt: 
- Many standards and auditing frameworks, but not geared towards cloud; some supporting RESTfull APIs / not platform
specific

Matt:
- Roger/Matt discussion Intercloud use case -- trust relationship established -- who maintains trust relationships or is
certifying authority for those?

Thomas: 
- Who is the implementor of the trust provider?

David Turner: 
- OIX (http://openidentityexchange.org/)is developing specific frameworks. e.g.,
http://openidentityexchange.org/trust-frameworks/us-icam
- here is work underway at the ITU-T SG 17 to develop a model for trust frameworks - I don't think there are any public
docs I can point to but the work is building upon the white paper at
http://download.microsoft.com/download/D/8/E/D8E4FB66-563F-42C3-A08A-DAD15C50BD81/Open%20Identity%20Trust%20Framework%20
%20Model_WP.pdf


5. Other Business

Anil:
- Away for December holidays -- should be able to chair the meetings though.


6. Adjourn

Meeting adjourned.