Minutes for the face-to-face meeting of the Electronic Identity Credential Trust Elevation Methods (Trust Elevation) Technical Committee
August 23, 2012
1. Call to Order and Welcome.
2. Roll Call
Attending (please notify me if you attended the meeting but are not on the list below)
Abbie Barbir, Bank of America – y |
Anil Saldhana, Red Hat Bob Sunday |
Brendan Peter, CA Technologies - y |
Carl Mattocks, Bofa |
Cathy Tilton, Daon - y Charline Duccans, DHS |
Duane DeCouteau |
Colin Wallis, New Zealand Government |
Dale Rickards, Verizon Business - y |
David Brossard, Axiomatics |
Dazza Greenwood |
Debbie Bucci, NIH |
Deborah Steckroth, RouteOne LLC |
Detlef Huehnlein, Federal Office for Information |
Don Thibeau, Open Identity Exchange |
Doron Cohen, SafeNet |
Doron Grinstein, BiTKOO Gershon Janssen - y |
Ivonne Thomas, Hasso Plattner Institute |
Jaap Kuipers, Amsterdam |
Jeff Broburg, CA |
John Bradley |
John "Mike" Davis, Veteran's Affairs - y |
John Walsh, Sypris Electronics |
Jonas Hogberg |
Julian Hamersley, Adv Micro Devices |
Kevin Mangold, NIST - y Lucy Lynch ISOC |
Marcus Streets, Thales e-Security |
Marty Schleiff, The Boeing Company |
Mary Ruddy, Identity Commons – y |
Massimiliano Masi, Tiani "Spirit" GmbH |
Nick Pope, Thales e-Security |
Peter Alterman, NIST - y Rainer Hoerbe |
Rebecca Nielsen, Booz Allen Hamilton |
Rich Furr, SAFE-BioPharma Assn |
Ronald Perez, Advanced Micro Devices |
Scott Fitch Lockeed Martin |
Shaheen Abdul Jabbar, JPMorgan Chase Bank, N.A. |
Shahrokh Shahidzadeh (Intel Corp) |
Suzanne Gonzales-Webb, VA Tony Rutkowski Tony Nadlin Thomas Hardjono, M.I.T. |
William Barnhill, Booz Allen Hamilton |
|
75 percent of the voting members were present at the meeting. We did have quorum.
2. Agenda review and approval
We used the following chat room for the call: http://webconf.soaphub.org/conf/room/trust-el chat room text is included at the end of the minutes.
Abbie asked for additions.
There being no additions, the agenda is approved.
3. Approve Minutes
Abbie asked if he had TC approval to approve the minutes from the last meeting.
Cathy moved to approve the minutes.
Mike seconded the motion to approve the minutes of August 9. There were no objections. The minutes were approved.
Abbie asked for a discussion of the vote to have a face-to-face meeting on October 9th, the day before the OASIS cloud conference on Oct 10-11.
Mary reported that the vote was 10 in favor and one against.
Abbie asked who can’t come.
Cathy reported she will be in the UK.
Mary said that she had spoken to Brendan about posting the location
Brendan replied that is fine. He will send all the details and access procedures.
Abbie stated so we have a host and a date.
Gershon asked for the times.
Abbie said that the event would be from 8:30 AM to 5:00 PM. The official start is 9:00.
Brendan said the door will be open at 7:30 AM.
Abbie asked where is your new office?
Brendan replied it is 607 14th street, between F and G. he will send details so you know exactly where to go.
4. Editors update on Second Deliverable (Analysis phase)
Abbie said the hope is we have enough material between now and then to jumpstart the 3rd deliverable.
Mary reported that we have developed an analysis format, used it to perform two sample analyses and iterated on the analysis.
Abbie said the approach is that now that people are back from vacation that they can sign-up to do analyses on additional methods.
Abbie we can have Peter and Abbie report on the next call.
Abbie asked for an action item to post these to the website.
*** Mary took an action item to post templates and samples today.
Abbie asked Peter if he could give a sneak preview of the doc you started.
Peter replied that he took all the elements of the methodology and put them in a spreadsheet and put the method in column 2 and just went down the cells, and assessed the methodology and against the risk element and put in his assessment on that. He got some corrections and additions and handed that in.
Abbie said he had a table, and analysis of can it be used on its own or in combination with what. A description of what it included and how it is used. Those threats are specifically on one side. This approach makes sense. Later we can put the methods into a bigger matrix and combine them and this can be used as input to the third deliverable
Peter replied that is essentially it Abbie. We are evaluating the method against a baseline. The baseline is the risk factors we culled from 800-63 and x1254.
Abbie asked if there was any discussion or modification. He would like the group to be opinioned on it. And in the next meeting get an opinion on if this a way to go. He asked which one Shahrokh did.
Mary replied he did a general context analysis.
Abbie said for the output, he would like to have assignments of the methods and who will do what.
Abbie asked for a volunteer to do biometric.
Abbie asked for a volunteer to do KBA?
Cathy volunteered for biometric
Abbie asked Mary to note this, can do you in next mtg?
Cathy replied she will see. I have a lot on my plate
Peter said let me toss in a cookie there. It only took me 2-3 hours. Do the best you can in the time you have.
Abbie said do as much as you can quickly.
Cathy asked if we will provide the base table.
Abbie said Mary will post.
Abbie said the next meeting, Abbie and Cathy will present. Peter, you will come after us.
Brendan volunteered to do soft (virtual) token.
Cathy is doing biometrics.
Abbie is doing UN and password.
Dale is doing KBA
Abbie asked Brendan if he could do cookies as part of his effort.
Brendan replied yes.
Abbie asked if Dale could also take SIM
Dale said she didn’t know it.
Abbie asked if she could ask someone from wireless.
Dale said that that is difficult.
Peter suggested pinging Paul D.
Abbie asked Mary to take an action item to task him with this.
** Action item for Abbie to ask Paul D about finding a SIM expert to do a SIM analysis.
Abbie said he would do behavior.
Abbie assigned hard token to Shahrokh’
Abbie said we have a stake in the ground. He asked Mary put schedule up with names. We have three meetings in Sep before the F2F. Maybe we do Mary and Peter in the next, and maybe Dale and Brendan on Sep 20, and Shahrokh and someone on the 4th.
Cathy said she would do 4th October.
Abbie said the editors can meet in between. He asked Mary to post the spreadsheet. Biometric has at least 10 issues. He also asked that the analysis format and initial analyses be posted.
Abbie concluded that this is good progress and asked if there were any other items.
There were none.
>>>>>>>>>>>>>>>>>>
6. Attendance Update
We achieved quorum.
9. Adjournment
Mary asked for a motion to adjourn.
Peter moved to adjourn.
Brendan seconded the motion.
The meeting was adjourned.
>>>>>>>>>>>>>>>>>>>>
abbie: CHAT ROOM
http://webconf.soaphub.org/conf/room/trust-el
1. roll call
2. agenda approval
3. approve minutes
4. editor discussion on Second Deliverable (Analysis phase)
5. conclude
anonymous morphed into Brendan Peter