Minutes: Nat'l K-12 Federated IAM Task Force Call of 15-Jan-2014
Attending
Steve Olshansky, Internet Society (Chair)
Keith Krueger, CoSN
Violeta Curlic, DC Government
Mike Danahy, Educational Service Unit 2, Fremont, Nebraska
Karen Billings, SIIA
Emily Eisbruch, Internet2, scribe
***************
Wiki:https://spaces.at.internet2.edu/display/K12FedIAMTF/Home
***************
DISCUSSION
Data Protection FAQ
Over the past few months this working group has started creating a Data Protection FAQ.https://spaces.at.internet2.edu/display/K12FedIAMTF/Data+Protection+FAQs
This FAQ could be helpful in the preparation of RPFs or RFI's.
Karen stated that within the SIIA community, student data privacy, and especially storage of student assessment data, are big issues.
SIIA gets questions about best practices. In general, companies that have been in business for some time are following best practices. But in the cases of younger companies and new start-ups, it is not certain that best practices are being followed in all cases.
If a company is acquired, what happens to agreements about data privacy?
It was noted that security versus privacy is a good distinction, though sometimes they are two sides of the same coin.
CoSN Toolkit Being Developed
Keith stated that COSN is working on a major privacy of student data initiative in connection with the Berkman Institute for Internet and Society at Harvard. This effort involves developing a toolkit around privacy in the cloud environment. The toolkit will be targeted towards school district decision makers. Identity Management will be part of what is covered.
Not sure how this FAQ work fits in, however it could inform the COSN toolkit. There is some concern about having more than one effort with COSN's name saying what organizations should do in this area.
It was emphasized that this working group wants to support COSN's efforts and activities. We could relocate this FAQ to a different wiki space to create more distance from CoSN if that would be desirable.
Keith: if the FAQ focuses on more technical aspects and on data security aspects, this could be helpful. Keith hopes to connect SteveO with the people coordinating the CoSN effort. Might be useful to have another set of eyes to review the draft toolkit.
Update on the Quilt InCommon Pilots
There will be a Quilt InCommon Federation Workshop Feb. 6-7 in La Jolla.https://www.thequilt.net/index.php/events/316-2014-quilt-winter-meeting-incommon
It's a follow on to the 2013 Workshop. http://www.thequilt.net/index.php/events/246-2013-quilt-incommon
At the 2014 workshop, there will be report-outs from the 8 pilot efforts, which are listed on this page under the heading of "Initial Pilots"https://spaces.at.internet2.edu/display/InCQuiltFed/Home
Mike stated that the Nebraska pilot is going well.https://spaces.at.internet2.edu/display/InCQuiltFed/Nebraska+Educational+Service+Units+Coordinating+Council+%28ESUCC%29
Nebraska has contracted with the InCommon Affiliate Gluu for assistance. Over ten people from Nebraska attended InCommon Shibboleth Installation Workshop, Oct. 21-22, in Omaha. There were at least seven K12 people there. They got a deeper understanding of IdM and single sign on. This Shibboleth workshop was very helpful.
The NE team has found that the CETA website has useful resources. The NE team is working on a case study.
Next Call: Wed., February 19, 2014 at 3pm ET