Explanation of Digital Trust Frameworks in 20 minutes or less

1. Trust Frameworks
Explained
(in 20 minutes or less)
Andrew Hughes
AndrewHughes3000@gmail.com
KantaraInitiative.org

2. About the Kantara Initiative
2

3. What is Kantara?
 Non-profit founded in 2009.
 Comprises 60+ Leading Organizations, hundreds of Participants,
Enterprise & Governments.
 Connects the best of business, Government, Research & Education.
 Develops Innovations and Programs developing trustworthy on-line
experiences.

4. Do you recognize our members?

5. Kantara’s Values
 Trust
Operating Accreditation, Approval & Certification programs
 Privacy
Developing privacy respecting solutions.
 Security
Developing high security solutions and practices
 Community
Bridging technology and policy requirements

6. WHAT IS A DIGITAL TRUST
FRAMEWORK?
Explaining Digital Trust Frameworks in 20 minutes or less

7. Fun and Exciting!

8. What is a Digital Identity Trust Framework?
“Digital Identity”
• Identity: A reference or designation used to
distinguish a unique and particular individual,
organization or device.
• Trusted Digital Identity: ‘a trusted
electronic representation of who I am.’
“Framework”
• Digital Identity Trust Frameworks define
the ‘rules of the road’ for interactions
between organizations when handling
identity, authentication and authorization.
Often, these Frameworks form the basis of
agreements and contracts.

9. Free provincial flags for Canada Day!

10. Resident?
Alice

11. Apply & Authorize information
release
Ask Alice
to Get Proof
Tell Telco to
Give Proof
A=5 years

12. Alice gets a free flag!

13. Why does this work?
 Festival and a group of Telcos both comply with a Digital Trust
Framework
• UMA protocol is used to make it possible for Alice to authorize
electronic information release from one org to another

14. Did it work before?
 Kinda
 Previously, Festival had to contract with every Telco
and configure themselves differently for each one
 Festival had to keep track of new Telcos
 Festival had to adapt to meet each Telco’s technical
requirement
 Festival had to agree to different terms & lawyer fees
were rising

15. A reason for a framework?
To make negotiating agreements easier

16. How?
Framework
Contracts and Agreements
Standards
Regulations
Laws
Framework
Profile

17. Contracts
 The program negotiates contracts with every
information source
 Policies, business processes, standards, operating
practices, formats
OR
 The program requires conformance to Trust
Framework Profile
 Negotiation burden lowered

18. Some Details

19. Digital Trust Framework Elements
Roles & Responsibilities

20. Digital Trust Framework Elements
Business functions & Expected Processes

21. Digital Trust Framework Elements
Processes & Criteria
(proof of ‘sameness’ and ‘equivalency’)

22. Digital Trust Framework Elements
Library of Profiles

23. Tools and Rules
 Technical protocols
 Software / servers
 Cryptography
 Communication
protocols
 Standards
 Policies for proof of
identity; ‘Levels’ of
certainty
 Privacy policy
 Operations practices
 Designated authorities

24. The Future Possibilities
 Model contract clauses
 Automation for contracts
 Addition of new roles, responsibilities, business
functions
 Build a library of framework profiles

25. Now what?
Join us in innovating and verifying trusted identity solutions for the world
 Kantara Initiative members include global experts from industry and
government in the fields:
 Identity assurance
 Privacy
 Security
 Policy
 Information systems assessment
 Join. Innovate. Trust. Visit.:
KantaraInitiative.org

26. Join. Innovate. Trust.
General Inquiries: support@kantarainitiative.org
AndrewHughes3000@gmail.com
John@Wunderlich.ca