Kantara orientation april 2020
•Télécharger en tant que PPTX, PDF•
0 j'aime•67 vues
Kantara Initiative: 'develop, nurture, operate - that's what we do'
Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (20)
Similaire à Kantara orientation april 2020
Similaire à Kantara orientation april 2020 (20)
Plus de kantarainitiative
Plus de kantarainitiative (17)
Dernier
Dernier (20)
Kantara orientation april 2020
- 1. The Rhythm of Kantara Colin Wallis, Executive Director colin@kantarainitiative.org colin@kantarainitiative.eu +44 7490 266 778 Ethics & Conformance Trust Marked
- 2. The global consortium improving trustworthy use of identity and personal data through innovation, standardization and good practice © Copyright 2020 Kantara Initiative, Inc
- 3. Kantara on a Page International non-profit US founded 2009. Estonia non-profit founded 2017 (licensee). Educational Foundation non-profit US founded 2018. IDESG assets transitioned 2018. ‘Commons’ ethics & societal purpose. No/Low barriers to participation. Passionate about giving people agency over identity & personal data. Consent Receipt and User Managed Access specs Mission: the global consortium improving trustworthy use of identity and personal data through innovation, standardization and good practice Business model: Revenue from Membership, Sponsorship, R&D and Trust Framework Operations program management invested in specification development & publishing platform, and contributions to ISO OECD Internet Technical Advisory Committee & UNCITRAL The only industry consortium to have both identity and personal data scoped within its mission. Global thought-leaders; Organizations & Individuals & Government Kantara translates to “wooden bridge” in Kiswahili, a hybrid language between Arabic and Bantu, depicted in Kantara’s ‘bridge’ logo. Our Liaisons (examples) Our Leadership Leadership Council © Copyright 2020 Kantara Initiative, Inc
- 4. • US Postal Service • MIT Trust: Data Consortium • Government of Canada Treasury Board Secretariat • One.Thing.Less © Copyright 2020 Kantara Initiative, Inc Kantara’s International Membership & 50 Individual contributors & x10 non-member participants
- 5. ‘Thought Leader’ Organizations & Individuals Join Kantara Strong Societal Purpose & Ethos for positive corporate image Low barriers to participation bring unseen fresh ideas and partnering opportunities Collaborate with peers transparently and equitably in an open consensus-based environment Develop and publish artefacts on the platform Create & Sponsor best practice ‘of but not by’ an organisation Seek or leverage conformance, approval and grant of trust mark for solutions for brand differentiation Contribute to ISO & other global policy & standards organisations side-stepping national policy & standards bodies Podium time on Kantara panels & workshops at conferences © Copyright 2020 Kantara Initiative, Inc
- 6. Kantara’s Organization Structure Board of Directors Programs Trust Operations Kantara Identity Privacy Incubator (KIPI) Leadership Council Federated Identity Resilient Ecosystem (FIRE) WG Identity Assurance WG Health ID Assurance WG eGovernment WG Federation Interoperability WG User-Managed Access WG Executive Director Assurance Review Board ISO, OECD etc Liaisons Group © Copyright 2020 Kantara Initiative, Inc
- 7. ‘The Rhythm of Kantara’ ‘Nurture, Develop, Operate – that’s what we do’ Nurture emerging technical communities through our discussion & working groups and our incubators – present and past examples: Identity and Privacy R&D (KIPI) program, incubator for ID Pro. Develop and standardize community practices with specifications companies can understand, trust and implement. Operate conformity assessment programs to enable companies to meet their adherence goals to standardized practices needed to support their business. © Copyright 2020 Kantara Initiative, Inc
- 8. Award-Winning, Trend-Setting, Compliance-Assisting Innovations Kantara Trust Framework - the world’s one and only 3rd party accredited assessment, approval & grant of trust mark to product & solution service providers for NIST SP 800-63-3. IDESG’s IDEF scheme added Aug 2018. Kantara User Managed Access - the world's first open specification for delegated authorization, extending OAuth 2.0. Strong interest from GDPR, PSD2, Open Banking and other sectors. European Identity Conference award winner 2014. Currently awaiting IETF publication as an international standard. Kantara Consent Receipt - the world’s first digital receipt specification for personal data containing the conditions upon which the consent is given – giving agency over personal data to individuals. Content included in ISO/IEC 29184 Online privacy notices and consent and ISO/IEC TS 27560 Consent record information structure. © Copyright 2020 Kantara Initiative, Inc
- 9. Kantara’s Trust Framework approved CSPs, accredited assessors & registered applicants
- 10. Example Deployments of Kantara’s Specifications The Consent Receipt Specification define the requirements for a record of authority by a PII Principal to a PII Controller for processing of the Principal’s PII. The UMA specification gives individuals a unified control point for authorising who & what can access their digital assets at their desired grain. Gluu Customer Commons/Kantara Intent Casting UX and Human Readable terms more.. © Copyright 2020 Kantara Initiative, Inc more..
- 11. The Kantara Educational Foundation, Inc – the home for IDESG’s assts and new grant fund projects
- 14. Looking back at Kantara’s first 10 years
- 16. Nurture. Develop. Operate. – that’s what we do! Twitter: @KantaraColin @KantaraNews Join us at https://kantarainitiative.org/membership/ Newsletter sign-up: website header and footer Ethics & Conformance Trust Marked
Notes de l'éditeur
- Mission statement – the only industry org to have privacy and identity in scope, the only larger org to maintain a ‘commons’ community with low/no barriers to participation, yet still thrive financially.
- Kantara is comprised of 3 separate entities to address 3 different legislative tax areas: industry consortium community development, charity public good grant funding, and Europe. Kantara differentiates from other consortia variously, not least in its steadfast hold to the principles of openness, fairness and balance, to allow individual & small business contributions, international reach, and combined security-privacy scope. Kantara uniquely scopes-in personal data privacy with digital identity, which while critical, Kantara views as a particular instance of personal data enrollment and data exchange. Kantara’s business model relies on Board & corporate membership & sponsorship to sustain the low/no cost community development & publishing, while monetizing the Trust Framework and the R&D grant funding facilitation. ForgeRock currently holds the Presidency – a mix of large & medium sized personal data focused orgs. Kantara’s incubation of ID Pro, the digital identity professionals association, exemplifies its mission and altruistic ethos. Kantara absorbed the assets of the public-private US identity ecosystem organisation, the IDentity Ecosystem Steering Group (IDESG) The geographic location & scope of the Liaisons nicely complement Kantara’s international scope via membership, trust framework operations and R&D programs. Liaisons shown here: https://kantarainitiative.org/about/liaisons/ ISO, ITU-T and ITAC are exceptions since the nature of these liaisons is expert contribution to standards and policy development. https://kantarainitiative.org/about/liaisons/
- Kantara attracts international membership, with each of these lines of corporate logos representing at least 4 different countries. >50% of Kantara’s members are non US. The appearance of international Research and Education federations amongst Kantara’s members is because they consider it the only ‘safe haven’ for their engagement. Some organizations previously indicated a preference for their logo not to be displayed. See the full membership list here: https://kantarainitiative.org/members/ Kantara community working groups allow non member participants to contribute. X10 is an approximation given that the number constantly changes, ranging from 100 and an email list of 1350.
- Organizations wishing to contribute to and influence International standards organizations can use Kantara’s Liaisons as a direct channel or a supporting parallel channel to access these consortia. Organizations wishing to pursue their Corporate Social Responsibility objectives can do so through Kantara.
- The current org chart showing the bi-cameral structure, with the Leadership Council largely autonomous in its oversight of the community working & discussion groups.
- Kantara’s ‘rhythm’ is typically a recurring cadence of 3 activities in a circular cycle; new ideas socialized and nurtured, some of those developed further into artefacts, and some of those operated as monetized programs. Examples are the Trust Framework Operations and Assurance program and the Kantara Identity & Privacy Incubator (KIPI) program. External initiatives and projects can and do arrive at any stage in the cycle, to add to Kantara’s self-generated efforts. The Leadership Council operates largely autonomously of the Board to oversee and operate the community Groups. The Leadership Council (currently Chaired by Canadian Andrew Hughes) comprises the Officers of each Working Group that primarily focusses on the development and delivery of artefacts from the Working and Discussion Groups.
- The UMA specification is an open specification for federated delegation and authorization, designed as an extension to the open standard OAuth 2.0, developed in Kantara’s open-consensus based environment to give a user a unified control point for authorizing who can access their online personal data. The Consent Receipt is an open specification developed in Kantara’s open consensus-based environment and led by Canadian and UK experts. Enjoying rapid adoption since incorporation into ISO 29184. Kantara has been an authorized Trust Framework Operator to the US Federal Government’s GSA FICAM Trust Framework Solutions (TFS) program since 2010, where it assesses and approves Identity and Credential Service Providers that deliver authenticated identities to US agency citizen facing digital services. It has used its own scheme profiled from the US government’s mandated NIST SP 800-63-2, and more recently 63-3 guidelines. The transition of IDESG’s assets to Kantara in 2018, adds IDESG’s IDEF self attestation scheme to Kantara’s own existing 3rd party schemes with a UK created scheme being readied. Kantara is receiving increased enquiries from both private and public sectors to operate their schemes on their behalf (i.e. their requirements, their assessment rules, their Trust Marks strap-lined with Kantara to reflect the collaboration) outsourced to Kantara to operate and govern, because of Kantara’s enviable reputation in this artform.
- Examples of deployers of Kantara’s specifications
- Kantara Europe’s relationships with other fora in Europe.
- Kantara has evolved towards an approach based on 3’s. So it is not surprising that its slogan is comprised of 3 action verbs; Nurture – Develop – Operate. Kantara Members have a wealth of experience: Identity Assurance, Privacy, Policy and Information Systems Assessment. We’re here to help your community ensure Federated Identity, Access and Personal Data systems are verified for trust, privacy and best practice.