[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Minutes for June 25th call
Minutes for the meeting of the Electronic Identity Credential Trust Elevation Methods (Trust Elevation) Technical Committee June 25, 2015. 1. Call to Order and Welcome. 2. Roll Call Attending (please notify me if you attended the meeting but are not on the list below) Abbie Barbir, Bank of America - y Andrew Hughes - y Anil Saldhana, Red Hat Bob Sunday Brendan Peter, CA Carl Mattocks, Bofa Cathy Tilton, Daon Charline Duccans, DHS Duane DeCouteau Calvin Colin Wallis, New Zealand Government - y Dale Rickards, Verizon Business David Brossard, Axiomatics Dazza Greenwood Debbie Bucci, NIH Deborah Steckroth, RouteOne LLC Detlef Huehnlein, Federal Office for Information Diana Proud-Madruga - y Diego Matute, Centrify Don Thibeau, Open Identity Exchange Doron Cohen, SafeNet Doron Grinstein, BiTKOO Gershon Janssen - y Ilene Bridges Ivonne Thomas, Hasso Plattner Institute Jaap Kuipers, Amsterdam James Clark – Oasis Jeff Broburg, CA Jeff Shultz , NIST Jim Macabe (Kaiser) John Bradley John "Mike" Davis, Veteran's Affairs John Tolbert - y John Walsh, Sypris Electronics Jonas Hogberg Julian Hamersley, Adv Micro Devices Kevin Mangold, NIST Lucy Lynch ISOC Marcus Streets, Thales e-Security Marty Schleiff, The Boeing Company Mary Ruddy, Identity Commons - y Massimiliano Masi, Tiani "Spirit" GmbH Mike Harrop Mohammad Jafari, ESC - Orlando Adams Peter Alterman, SAFE-BioPharma Peter Jones - Rainer Hoerbe - Rebecca Nielsen, Booz Allen Hamilton Rich Furr Rick Grow Ronald Perez, Advanced Micro Devices Scott Fitch Lockeed Martin Shaheen Abdul Jabbar, JPMorgan Chase Bank, N.A. - y Shahrokh Shahidzadeh (Intel Corp) Suzanne Gonzales-Webb, VA - y Tony Rutkowski Tony Nadlin Thomas Hardjono, M.I.T. William Barnhill, Booz Allen Hamilton Adrianne James, VA Patrick, Axiomatics Steve Olshansky We achieved quorum. 2. Agenda review and approval We used the following chat room for the call: http://webconf.soaphub.org/conf/room/trust-el The agenda was approved. 3. Approval of the Minutes Andrew made a motion to approve of the minutes of the previous meeting. Diana seconded the approval. There were no objections. The minutes were approved. 4. Editors Update Andrew reported that he had restructured the documents and we are now ready to assign people to working on different sections. He reviewed the new structure and asked for feedback. Section 2.1, the goals, hasn’t changed, Section 2.2, defines trust system Section 3, core model Section 3.3, brief discussion of why a state model is useful, and what it needs to be (synopsis from version 3) Section 3.4, discussion of architecture and models, abstracted from NIST, ABAC, OAuth and UMA, Trust elevation can be viewed as authorization Section 4, architecture and design considerations (looking for feedback) Section 4.2, is mostly to be written Section 4.4, policy repositories Section 5, implementation considerations, mostly to be written, should touch on FIDO Section 5.1, rolls and responsibilities Section 5.2, authentication methods Section 5.3, device capabilities, device capabilities can changes, FIDO discussion is especially relevant here ….. Section 5.9, orchestration, something needs to orchestrate all of the parts Section 6, sequence examples, unchanged Section 7, various assertions, unchanged … Appendix B, will probably reduce Appendix C, needs more depth Appendix D, design considerations example Appendix E, needs input from other protocol groups, what needs to change, etc. Colin commented that it is pretty extensive. We may want to add privacy and security considerations. Andrew can see privacy considerations, but not security [out of scope]. Andrew 5.1 thru 5.5 the headings are new. Some of the text needs to be moved and the sections reordered. Andrew asked how does this structure feel and when can I have the text? Abbie and others are still digesting. Abbie asked what is next. Andrew replied a general read thru and comments on structure and anything missing. Also content, for those who are willing to take a section and write a paragraph or two Abbie said let me ask for volunteers. Shaheen asked if Andrew had included the conclusions from the face-to-face meeting. Andrew responded that it is getting there. Shaheen commented that we came up with a couple of models and diagrams. Andrew replied that belongs in the appendix. That is where most of that material would be, in design considerations. A lot of the stuff we talked about in the F2F is the missing parts, like policy design, and implementation considerations. Shaheen said those conversations would definitely influence the metadata and xml format. Andrew replied that the greatest part of the metadata would come from the policy discussion and interaction between components. i.e., 4.2. Once these have been determined, it will be clearer what the metadata need to be. Colin asked are there vendors who want to implement this. It would be helpful to have that kind of review. Andrew replied that some of them are in the tent. If people have contacts in product companies, it would be great to have their input. Andrew continued, so we will let folks digest it. Then he will send an email asking for volunteers. He will also reach out to Eve and Mike S. Abbie said to keep asking for input on the TC list. Abbie will be presenting TC work in a July meeting. So he needs the TC to approve the material he presents. So if anyone has a major objection to what we have done so far, let him know. [silence] 6. Adjourn Mary moved to adjourn the meeting. Abbie seconded the motion. >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> anonymous morphed into abbie-1 abbie-1: (877) 658-8148 , (214) 556-4103; PC 58 5 07 44 9 77 #. Andrew Hughes: Also for screen sharing only: https://join.me/connectwithandrew anonymous morphed into Shaheen anonymous morphed into Suzanne Gonzales-Webb |
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]