1 / 10

Identity Assurance Expert Group (IAEG)

Identity Assurance Expert Group (IAEG). Goal: to foster adoption of identity assurance services, and uniformity and interoperability amongst identity service providers by promulgating o verarching values Public SIG exists alongside to solicit and encourage broad public participation.

jessamine-hobbs
Télécharger la présentation

Identity Assurance Expert Group (IAEG)

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Identity Assurance Expert Group (IAEG) • Goal: to foster adoption of identity assurance services, and uniformity and interoperability amongst identity service providers by promulgating overarching values • Public SIG exists alongside to solicit and encourage broad public participation

  2. IAEG Key Activity: Identity Assurance Framework • GUIDANCE (vs. policy) on what Federation members should consider and have policies for • 1.0 focused on IdPs/CSPs; Future phases to consider RPs & Federation Operators • Enable Federations to map their policies, practices and technologies to each other and ensure comparable trust levels • HARMONIZED, BEST-OF-BREEDindustry identity assurance approaches • Re-use contributions from other sources (EAP, US E-Auth Federation, T-Scheme, TSCP, others) • Build upon accepted industry standards • NEUTRAL, COMPREHENSIVE &GLOBAL • Cover all aspects of identity assurance: risk classification and assurance levels, service assessment criteria for organizations, credential management & identity proofing; business rules and certification models

  3. Liberty IAF: The Picture Liberty Alliance Identity Assurance Framework Federation 1 Federation 2 Federation 3 Federation 4

  4. Upcoming Activities • IAF in draft review • (http://www.projectliberty.org/liberty/content/download/3736/24651/file/liberty-identity-assurance-framework-v1.0.pdf) • Public webcasts: • March 5, 8 am PT,Credential Management Service Assessment Criteria • March 12, 8 am PT, Identity Proofing Service Assessment Criteria • March 26, 8 am PT, Certification/Accreditation Business Rules • Public input welcome: https://maa.projectliberty.org/id/idf-feedback.html • Panel Session, RSA Conference, SF, April 9, 9:10 am • Pre-Conference workshop, TowerGroup Conference, Boston, May 28 • Panel Session, Gartner Identity and Access Summit, London, June 23-25 • Panel Session, Burton Catalyst Conference, San Diego, June 23-25 • Others, TBD

  5. Backup

  6. Why was Liberty Alliance Formed? • Foster the ubiquitous, interoperable, privacy-respecting, identity layer (holistic identity management): • Liberty represents all constituencies toward this objective • (vendors, enterprise, government, consumers, universities, SME’s, etc.)‏ • Must be an open, collaborative system vs. single vendor strategy • Identity is important & complex. We must come together OR: • industry will become more fractured • governments will intervene • Develop privacy-compliant practices to exchange identity information • Develop standards-based model to … • Interoperate in heterogeneous environments • Avoid proprietary vendor lock-in • Provide flexible foundation for future growth • Scale to the WWW • Deliver consumer & enterprise confidence that security, privacy and data integrity will be maintained

  7. More than Technology Technology Standards and Guidelines Business and Privacy Guidelines Assurance An Ecosystem of Interoperable Products & Services An Ecosystem of Interoperable Products & Services Identity Assurance Framework & Assessors

  8. The Liberty Process - Market Centric • By … • Listening to the Market • Collaborating with other relevant groups • Documenting the requirements • Developing specifications and frameworks to meet the needs • Certify the products & assessors • Continuous evolution and improvement

  9. Identity Assurance Roadmap • Phase One of Certification Program for CSPs/IDPs, ratified in Identity Assurance Framework v1.0 FINAL (Q2 2008)‏ • Launch Accreditation Program to enable the Certification model and spur the market (Q2 2008)‏ • Scope and define Phases 2 and 3 for Federation Operators and Relying Parties (begins Q3 2008)‏

  10. Getting Involved with Identity Assurance • Liberty Alliance Identity Assurance Expert Group (formal membership in Liberty Alliance is required)‏ http://www.projectliberty.org/liberty/membership/become_a_member • Identity Assurance Special Interest Group (formal membership in Liberty Alliance is not required)‏ http://wiki.projectliberty.org/index.php/IASIG • Identity Assurance Framework for Review and Comment http://www.projectliberty.org/liberty/content/download/3736/24651/file/liberty-identity-assurance-framework-v1.0.pdf

More Related