Assurance Monthly Call – July 18, 2012
Nick Roy, University of Iowa
Keith Brautigam, Iowa
Scott Bradner, Harvard
Karen Harrington, Virginia Tech
Jon Miner, Wisconsin
Ron Thielen, Chicago
Oleg Chaikovsky, Aegis Identity
Marlena Erdos, Harvard
Mary Dunker, Virginia Tech
Jim Green, Michigan State
Ben Oshrin, Internet2
Dean Woodbeck, Internet2 (scribe) Jim Green, Michigan State
Ann West, InCommon/Internet2
David Bantz, Alaska
Mark Jones, UT Houston Health Sciences Center
Jim Green, Michigan State
John Krienke, InCommon/Internet2
Bill Weems, UT Houston Health Sciences Center
Mark Rank, UW Milwaukee
John Goodman, UW Milwaukee
Chris Spadanuda, UW Milwaukee.
Action Items
- Add your remote proofing use cases to the wiki: https://spaces.at.internet2.edu/x/PYPYAQ
- Nick will communicate the comments about the proposed remote proofing scenarios (video and notary) to the Big Ten auditors
- Ann will be asked to do the same to the InCommon TACInCommon
- Mary will distribute a draft of a mapping between the IAP and the EDUCAUSE Information Security Guide and ask for comments
Remote Proofing
CIC - Jim Green gave an update on the CIC Documentation work. Documenation will be similar across the instiuttions and if they work together, could share each other's documents and save some work. Putting documents in the Assurance Wiki - Documentation Examples. For every factor in IAP, examples of managemenr assertions and exampls of documents that support those management asertions. Work in progress. If you're interested in joining, let Jim know. jfgreen@msu.edu.
1.2 revision - would like to see the current
in-Person versus Remote Vetting
Mark Jones explained that notary is not remote vetting.
Proofing someone remotely or just remote proofing with the person remote but we're doing it. Doesn't seem to be remote proofing. Person is not at the same place as the verifier. Not a delegated in-person proofing.
1) would trust notary comply?
2) method of true remote proofing?
MIchael's is identity proofing and not suing the mechanism for remote proofing ala 800-63. Driver's license information checking.
Delegated access to remote proofing.
Outcomes
- Matrix of use cases vs techniques
- notary? UT or Nick?
Discussion of remote proofing use cases on the wiki: https://spaces.at.internet2.edu/x/PYPYAQ
Trusted agent
Notaries -
Remote folks in rural areas.
What are the In person use cases? There will be 3 buckets. Drivers license information and verying.
AI - Jim Green to ask if anyone is doing identity proofing by verying drivers license?
Doing criminl back ground checks? External entity could cover that.
Goal - Clarify as remote proofing.
Which methods work for what use cases.
Several seem to be missing:
...