Monthly Archives: April 2019

Advance a Digital Identity Shared Curriculum

Share your thoughts with us by completing our survey

We encourage you to share this with anyone within your network who might find value in participating in this survey

The time to advance a shared curriculum framework for digital identity is now and you can help make a difference. A better digital identity future must be realized through strategic community collaboration that connects stakeholder knowledge.

In alignment with DIACC’s Digital Identity Ecosystem Principles and Strategic Goals, we are building a community engagement forum to establish a consensus of goals and actions to achieve a standardized curriculum framework for digital identity.

Your participation in our survey will help inform the development and launch of a shared curriculum framework project. DIACC will compile the survey results, summarize responses, and share the findings with the public.

Who should take the survey?

This project requires multidisciplinary input of academic and identity experts from fields including information security, privacy, law, health, sociology, economics, and more. All interested parties are invited to participate.

Where appropriate, the curriculum will be standardized for application across countries, cultures, markets, universities and other institutions, while maintaining its flexibility for customization consistent with the local community and educational practices. Curriculum standards enable measurement that serve a variety of stakeholder needs, including instructors, future employers, consumers, regulators and others.

Getting Society Ready for the Digitization of Identity

The practices and concepts around real-world identity have been foundational to human society throughout history, but have always operated invisibly as part of other social, cultural, economic, political, legal, and other systems.

Digital identity issues loom large in discussions of privacy, security, and liability challenges, which seem to resist tractable solutions. Identity issues are pervasive and apply to verifying the identities of people, organizations, and things that humans interact with. The attributes of the identities of these various entities affect the interactions of humans in myriad ways and have thus earned the attention of various academic departments.

Yesterday’s identity solutions resulted from an institutional view of identity in which each organization structured its client relationships in a way that suited specific needs. This resulted in fragmented identity experiences for individuals and created organizational expectations and habits that shaped economic business and political citizenry models. Most notably the user experience and privacy control needs of the individual were often overlooked.

Academia is uniquely suited to bring coherence to “identity”

Academic institutions are uniquely positioned to innovate new solution pathways and offer ideal multidisciplinary settings in which to develop identity curriculum. DIACC can help to coordinate the activities among academic institutions across jurisdictions and disciplines, and identify timely and relevant identity issues and topics for consideration for inclusion in shared curriculum resources.

A well matured digital identity curriculum should encompass most of the disciplines on campus. For now, DIACC’s curriculum aspirations are more modest: to help identify core elements of an identity curriculum that can prepare students for the professional and personal navigation of digital interaction spaces – where we all already direct most of our waking attention.  

Why does DIACC care?

In order to achieve our vision, today’s students must be ready to enter the workforce with the Identity Management knowledge needed to solve challenges and leverage opportunities.  Working with our liaisons, DIACC proposes a program to design, develop and deploy a curriculum framework and a set of instructional resources for “digital identity” that is broadly shared.

On behalf of the DIACC community, thank you.

Profiles in Identity Leadership: Allan Foster

In our recent ‘Profiles in Leadership’ video, Joni Brennan had a conversation with Allan Foster, who is a DIACC Director and VP of Global Partner Success at ForgeRock. The two discussed identity innovation, open banking and Canada’s collaborative approach.

ForgeRock, a digital identity management platform, is headquartered in San Francisco, CA, but is active across the globe.

Allan highlighted the importance of the Canadian community. “We are very involved in the DIACC for the reason that we see Canada as a major leader within the space…Canada is the looking glass for the entire planet.”

He pointed out that Canada’s relatively small size (about 35 million identities across the country) make it a manageable size with which to “do a project and succeed, however, it’s also complex enough to be interesting.” Multiple governments (federal and municipal) add additional complexities.

“If we tried to do this in the U.S., we would spend the next 20 years trying to get a committee together,” he said. “If we get it right in Canada, that model can then scale up around the world.”  

The Government of Canada recently ran a consultation for open banking to better understand the issues around it and how Canada would develop its strategy. As ForgeRock was a key contributor to DIACC’s response to the open banking consultation, Allan was asked why he sees identity and open banking as being so interlocked, or relevant to one another.

“What we’re now seeing is with the digital age, banks are needing to change the way they interact with their customers,” Allan said. He pointed to multiple, often competing entities (“frenemies”) within a sector. One group of banks may offer saving accounts to a certain group of customers, while another one offers credit cards to that same group of customers.

“If we get it right in Canada, that model can then scale up around the world.”

– Allan Foster

“Open banking traditionally is there because customers are feeling locked into silos. As those silos begin to open up, and the forward-thinking banks see an opportunity, the underlying thing that has to be rock-solid is identity.”

DIACC’s uniqueness as well as both public and private sector involvement drew Allan to the community. “We have all of these different stakeholders coming in with the realization that their problem is not unique, their problem is shared by everyone else in the country.  The benefit is for the country to come up with a solution that works for everybody, rather than the more mercenary approach of a technology that works for a company and everyone else gets left in the dust.”

Request for Review and Comment: Notice and Consent Component Overview V0.04 & Conformance Profile V0.07 Discussion Drafts

Le français suit

STATUS: This review is now closed. Thank you for your participation!

Notice of Intent: DIACC is collaborating to develop and publish a Notice and Consent industry standard as a Component of the Pan-Canadian Trust Framework to set a baseline of public and private sector interoperability of identity services and solutions.

Veuillez trouver la traduction française ci-dessous…

Summary:

The Notice and Consent Component defines a set of processes used to formulate a statement about the collection, use and disclosure of personal information, and to obtain a consent decision on that statement from a person authorized to do so. The Notice and Consent processes ensure that notice statements are accurately formulated according to defined requirements, that the person making the consent decision has the authority to do so, and that the management of that consent decision is possible.

The objective of the Notice and Consent Component is to ensure the ongoing integrity of the notice and consent processes by applying standardized conformance criteria for assessment and certification. A certified process is a trusted process that can be relied on by other participants of the Pan-Canadian Trust Framework.

The Notice and Consent Component builds on the forthcoming Privacy baseline that is in development and scheduled for Discussion Draft release in the coming months.

Invitation:

  • All interested parties are invited to comment including identity issuers, identity consumers, developers, and potential users.
  • The Discussion Drafts have been developed by the DIACC Trust Framework Expert Committee (TFEC) that operates under the DIACC controlling policies.

Documents:

Period:

Opens: April 3, 2019 at 23:59 PST | Closes: May 3, 2019 at 23:59 PST

Process:

  • All comments are subject to the DIACC contributor agreement.
  • Submit comments using the provided DIACC Comment Submission Spreadsheet.
  • Reference the draft and corresponding line number for each comment submitted.
  • Email completed DIACC Comment Submission Spreadsheet to review@diacc.ca
  • Questions may be sent to review@diacc.ca

Value to Canadians:

The Notice and Consent Component will provide value to all Canadians, businesses, and governments by setting a baseline of business, legal, and technical interoperability. The DIACC’s mandate is to collaboratively develop and deliver resources to help Canadian’s to digitally transact with security, privacy and convenience. The Pan-Canadian Trust Framework is one such resource. The Pan-Canadian Trust Framework represents a collection of industry standards, best practices, and other resources that help to establish interoperability of an ecosystem of identity services and solutions. The DIACC is a not-for-profit coalition of members from the public and private sector who are making a significant and sustained investment in accelerating Canada’s Identity Ecosystem.

Context:

The purpose of the Discussion Draft review is to ensure transparency in the development and diversity of a truly Pan-Canadian, and international, input. In alignment with our Principles for an Identity Ecosystem, processes to respect and enhance privacy are being prioritized through every step of the PCTF development process.

DIACC expects to modify and improve these Discussion Drafts based upon public comments. Comments made during the review will be considered for incorporation to the next drafts and DIACC will prepare a disposition of comments to provide transparency with regard to how each comment was handled. These drafts will be translated into French when they become more stable.

Demande de révision et de commentaire: Aperçu du volet avis et consentement V0.04 et profil de conformité de l’avis et du consentement V0.07 Guide d’examen des ébauches de discussion

Déclaration d’intention: Le DIACC collabore à l’élaboration et à la publication d’une norme de l’industrie en matière d’avis et de consentement faisant partie du cadre de confiance pancanadien (PCC) afin d’établir une base pour l’interopérabilité des services et solutions liés à l’identité entre les secteurs public et privé.

Résumé:

Le volet avis et consentement définit un ensemble de processus servant à faire une déclaration sur la collecte, l’utilisation et la divulgation des renseignements personnels, et à obtenir en retour le consentement d’une personne autorisée à le donner. Les processus d’avis et de consentement visent à faire en sorte que les déclarations soient formulées d’une façon exacte conformément à des exigences spécifiques, la personne qui donne le consentement soit autorisée à le faire et ce soit possible de gérer ce consentement.

Le volet avis et consentement a pour but d’assurer l’intégrité continue des processus d’avis et de consentement en appliquant des critères de conformité uniformisés pour l’évaluation et la certification. Un processus certifié est un processus de confiance auquel les autres participants du cadre de confiance pancanadien peuvent se fier.

Le volet avis et consentement s’appuie sur le respect de la vie privée, l’assise qui est en cours d’élaboration et dont l’ébauche de discussion sera diffusée dans les mois à venir.

Pour en savoir davantage sur la vision pancanadienne et les avantages pour tous, nous vous conseillons de lire le document Aperçu du cadre de confiance pancanadien | Pan-Canadian Trust Framework Overview.

Invitation:

  • Toutes les parties intéressées – émetteurs d’identité, consommateurs d’identité, développeurs et utilisateurs potentiels – sont invitées à faire des commentaires.
  • Les ébauches de discussion ont été préparées par le Comité d’experts du cadre de confiance du DIACC (TFEC), qui est assujetti aux politiques de contrôle du DIACC.

Documents:

Période:

  • Début: 3 avril 2019 à 23 h 59 HP | Fin: 3 mai 2019 à 23 h 59 HP

Processus:

  • Tous les commentaires sont régis par l’entente de contributeur du DIACC.
  • Les commentaires doivent être transmis à l’aide du fichier Excel fourni par le DIACC.
  • Veuillez indiquer pour chaque commentaire soumis l’ébauche et le numéro de ligne correspondant.
  • Le fichier Excel pour soumettre des commentaires au DIACC doit être envoyé par courriel à review@diacc.ca.
  • Pour toute question, veuillez écrire à review@diacc.ca.

Intérêt pour les Canadiens:

Le volet avis et consentement va présenter un intérêt pour l’ensemble des Canadiens, entreprises et gouvernements en établissant une base d’interopérabilité commerciale, juridique et technique. Le DIACC a pour mandat de collaborer au développement et à la prestation de ressources afin d’aider les Canadiens à effectuer des transactions numériques d’une façon sécuritaire et pratique qui respecte leur vie privée. Le cadre de confiance pancanadien, qui est une de ces ressources, regroupe un ensemble de normes, de pratiques exemplaires et autres ressources de l’industrie qui permettent d’établir l’interopérabilité d’un écosystème de services et de solutions en matière d’identité. Le DIACC est une coalition sans but lucratif de membres des secteurs public et privé qui investissent beaucoup et d’une façon soutenue pour accélérer la mise sur pied de l’écosystème de l’identité du Canada.

Contexte:

L’examen de l’ébauche de discussion vise à assurer la transparence du développement et la diversité d’un apport véritablement pancanadien et international. Conformément à nos principes pour un écosystème de l’identité, la priorité est donnée aux processus visant à assurer et à améliorer le respect de la vie privée à chaque étape du processus de développement du cadre de confiance pancanadien. Le DIACC s’attend à modifier et à améliorer ces ébauches de discussion en fonction des commentaires que lui fournira le public. Les commentaires reçus pendant l’examen pourraient être intégrés dans les prochaines ébauches et le DIACC va les regrouper afin de montrer d’une façon transparente comment chacun a été traité. Ces ébauches seront traduites en français une fois qu’elles seront plus stables.