ANSI / NASPO – ID-V Standards Workgroup Update

Session Topic:ANSI / NASPO IDV Standards Workgroup

Convener:John Biccum

Notes-taker(s):Salvatore D'Agostino

Tags for the session - technology discussed/ideas considered

Discussion notes, key understandings, outstanding questions, observations, and, if appropriate to this discussion: action items, next steps:

ANSI is ISO template

John is doing trust framework and Anna is doing privacy

Some people just there for sand in the gears

Chunking out the work, started with 20 people on call with open agenda, progress from there

Referring to them as Trust Frameworks

Quantification – quality of the identity proofing that is taking place

www.naspo.info

http://www.naspo.info/pages/idpvprojects.html

The existing risk management methodologies assume you know who the relying part is

Say what we are doing, let someone else check it.

Also complementing this is the ABA task force trying to establish a legal framework.

Federation is more than identity.

Look to certificate practice statements

Someone will create model legislation

Kantara IAWG is taking a look from an ISO 27000 perspective

Domain specific frameworks might evolve

E.g. AAMVA is domain specific expertise

NAPHSIS

Carbon based life form and linkage between that entity and a person sitting in front of you

Differentiation of roles

Virginia law for remote notarization

Limits on digital signatures

Timeline and maturity of the work, April 15th working draft

Kantara interested in having input

ISO driver license is about format not source of data