OIX Working Group Meeting

Location:

Google, Inc.
Palomar Tech Talk
1500 Plymouth Ave., Building 1500, 2nd floor
Mountain View, CA 94043

Date/Time:  Monday, December 12, 2011 from 1:00 PM to 5:00 PM (PT)

Click here to Register

Agenda

Introduction to Attribute Exchange business concept and service architecture

  • Brief review current problem space (usernames/passwords, privacy, data use uncertainty, assurance expense, risk and liability)
  • Possible solutions - (new solutions and solutions updating existing authorities)
    • Improved anonymyization
    • Updated notice and consent (updating FIPPs),
    • Improved data minimization approaches (updating FIPPs)
    • Expanding user access on distributed platforms (updating FIPPs)
    • [Other updated-FIPPs-based solutions]
    • Assurance beyond NIST 800-63

Pathways to Working Group participation

  • Working Group participation
    • Benefits of participation
    • Responsibilities of participation
  • Access to Working Group Materials via OIX Knowledge Center (public access to project)
    • Benefits
    • Responsibilities
    • Review Work Plan for Attribute Exchange Working Group

Review 5 steps of rule making

  • Clarify open forum in WG for:
    • "Agenda setting," (broad attribute-related services focus)
    • "Problem Identification" (helping to design pilots and other "experiments" to test system proposals)
    • "Evaluation" (need for stakeholder critique to fully evaluate and evolve ideas of pilots into scalable systems)
  • Scope of Working Group discussions
    • Broad "attribute use" focus (emphasize "use" of attributes consistent with ALL stakeholder rights and interests)
    • "Unpack" existing identity system function and values to identify new markets and user control opportunities
    • Broad focus on provision of new attribute based services to relying parties and data subjects in systems
    • Focus on identification of metrics that correlate to new value propositions.
  • Use of OIX tools for analysis in Working Group
    • OIX Checklist - To identify stage of WG discussion
    • OIX Verbs Taxonomy and Data Flow Survey Tool - To identify and analyze facts of subject attribute data transfers
    • OIX Knowledge Center - To analyze compliance responsibilities, liabilities, risks and legal solutions for data use challenges
    • OIX Advisory Board - Expert consultation available to help address issues raised in any OIX working group
    • Details of participation responsibilities
  • WG Sub groups needed
    • Pilot Budgets and funding sources
    • Pilot Success Factors
    • WG default rules for IPR and governance -
  • Brief review of commitment under default rules
    • Copyright
    • Patent
    • Trademark
    • "no-data sharing in WG" rule
    • "no confidentiality" rule

OIX Attribute Exchange Working Group

  • Is fundamentally advisory, provides guidance on issue identification in technical, operational and legal interoperability for draft term sheets for attribute exchange trust frameworks.
  • Is open to OIX member companies / individuals and is the public discussion forum for these issues. The WG may invite guests, domain experts, etc. to assist its deliberation.
  • May require additional IPR commitments and other governance provisions beyond those in Section 6 of OIX bylaws (essentially advising participants not to bring or have an expectation of IP protection)

Proposed: Dave Coxe of ID/Dataweb and Verizon's Peter Graham will be co-chairs of the working group with Don Thibeau of OIX as an ex officio member.