Kantara Summit at EIC – April 17, 2012

• Mapping The Identity Ecosystem: A multi-national perspective – Christine Runnegar, Senior Policy Advisor, ISOC - slides
• Trust Frameworks: Tools to build the Identity Ecosystem – It takes a village! – Joni Brennan, Executive Director, Kantara Initiative - slides
• eGov SAML 2: Verifying Interoperability in eGovernment Scenarios – Colin Wallis, Authentication Standards Manager, DIA New Zealand Government - slides
  • Managing Profiles – David Simonsen, WAYF - slides
• Federation Interoperability, SAML2INT, Listing Service – John Bradley, Identity Domain Expert - slides
• OpenID Connect Deployment Verification Tool Demo – Roland Hedberg, Umeå University, Sweden, GEANT3, Terena - slides
• Edentity presenting “Experience of Federating Personal Data with User-Managed Access – Kevin Cox - link to preso
• UMA Interop – Mario Hoffmann, Fraunhofer AISEC - slides

Kantara Workshop, Garching, Munich – hosted by Fraunhofer AISEC – April 13-14, 2012

• Fraunhofer AISEC – introduction and overview - slides
• Demo 1: Mikael Ates, Entr’ouvert – Authentic 2 - slides
• Demo 2: Mikael Ates, Entr’ouvert – roleID Project; European Collaborative Project - slides
• Demo 3: Mario Hoffmann, Fraunhofer AISEC – Location Aware Recommendation Service - demo slides
• Demo 4: David Simonsen, WAYF – Calculating the Economic Benefit of ID Federation – demo recording
• Kantara: Building a Healthy ID Ecosystem - slides
• UMA Interop – Mario Hoffmanm, Fraunhofer AISEC - demo video

• Registration open for Kantara Initiative Meeting April 13-14, 2012 at Fraunhofer SIT offices, Garching, near Munich, Germany
• Spotlight on Lucy Lynch
• Congratulations on re-election and new leadership for Kantara Initiative’s Leadership Council
• Announcing re-election and new leadership for Kantara Initiative’s eGovernment Work Group
• Announcing re-election for Kantara Initiative’s Federation Interoperability Work Group
• UMA Webinar: Dec 14, 2011 – you can review the slides and the webinar recording
• UMA WG are holding an UMA tweet chat, focusing on technical details (spec, implementation, interop, deployment), on Wednesday, February 8, 2012, at 9-10am PT
• Kantara Initiative grants Accreditation to Deloitte & Touche LLP, and, eValid8, and Approves Verizons Universal Identity Service at LoA3

Industry events – Kantara members receive a discount at the following events, contact Dervla O’Reilly for the discount codes dervla[at]kantarainitiative[dot]org:
- The Smart Card Alliance 2012 Payments Summit - Feb 8-10, in Salt Lake City, Utah, USA
- HIMSS HIE Symposium 2012 – Feb. 20, 2012, Las Vegas, Nevada, USA
- Kantara Face-to-Face Meeting - April 13-14 - kindly facilitated by Fraunhofer SIT at their meeting facility, Garching, near Munich, Germany
- Kantara Summit at EIC Conference (detailed agenda to follow) – April 17, Munich Germany

Kantara Initiative Membership Details
- Membership Details & Membership Levels
- Membership Forms:  Membership Agreement & Membership Information Form

“What is UMA and why do we need it?”

In a nutshell, User-Managed Access (UMA) is…

UMA is needed by…

• Individuals, to give them a “personal data concierge” that handles requests for access to their online data, content, and services
• Websites, to enable them to offer sophisticated data-sharing features to their users without having to implement those features natively
• Online identity providers, to offer their users the ability to set access policies from a single place even if those users engage with dozens or hundreds of sites and apps on a regular basis

This webinar will…

• Discuss real-life use cases for UMA
• Demonstrate UMA implementations
• Review UMA’s architecture and its relationship to the OAuth and OpenID Connect specifications

Register now!
UMA WG details

User-Managed Access (UMA) lets web application creators easily craft systems that give control of data back to the people. Any web-based data ecosystem can leverage UMA, including eHealth and eGov portals, social networking sites, photo sharing portals, and personal data stores. It offers individuals centralized security, privacy, and control for sharing data with friends and family, business associates, and organizations. And it allows apps to offer sophisticated privacy and sharing options without a lot of software development. One UMA implementation, the SMART system from Newcastle University, leverages Facebook friends for sharing; others could use the new Google+ Circles system, which allows sharing within circles of contacts.

The audio and video recording of the UMA webinar from July 13 is available at http://kantarainitiative.org/confluence/display/uma/Home or http://bit.ly/UMAWebinar110713

“Like” UMA on Facebook at http://www.facebook.com/UserManagedAccess.

Follow the group on Twitter at http://www.twitter.com/umawg and hashtag #UMAWG.

Kantara Initiative has announced the release of a Draft Recommendation for the User-Managed Access (UMA) protocol. UMA heralds a new era of user-centric access control for web-based applications such as social networking sites, content-sharing portals, and personal clouds.

PISCATAWAY, NJ, USA – July 7, 2011 – As we spend more time online, our data becomes more prolific and widely dispersed across sites. Data privacy and security have become onerous issues. Kantara Initiative’s User-Managed Access Work Group (UMA WG) has published a Draft Recommendation for a user-managed data access protocol and contributed it to the Internet Engineering Task Force (IETF) standards body to solve these problems.

UMA lets web application creators easily craft systems that give control of data back to the people. Any web-based data ecosystem can leverage UMA, including eHealth and eGov portals, social networking sites, photo sharing portals, and personal data stores. It offers individuals centralized security, privacy, and control for sharing data with friends and family, business associates, and organizations. And it allows apps to offer sophisticated privacy and sharing options without a lot of software development. One UMA implementation, the SMART system from Newcastle University, leverages Facebook friends for sharing; others could use the new Google+ Circles system, which allows sharing within circles of contacts.

Aad van Moorsel, Director of the Newcastle University Centre for Cybercrime and Computer Security, says: “The UK government will increasingly offer Internet-based services. The data shared in such services can be sensitive since it may include employment history, exam results or health information. UMA provides the technology to share such data safely, putting the citizen in control. We strongly believe UMA will be a cornerstone for future eGov services, and are working to publish our SMART software as an Open Source UMA implementation.”

Mario Hoffmann, Head of Secure Services & Quality Testing of Fraunhofer AISEC, remarks: “User empowerment serves as a key enabler for trustworthy and trusted service usage on the Internet. UMA supports developers through a security -and privacy-by-design approach. The user-centric concept of UMA is the basis for managing access policies to personal, data, claims, and attributes in a unified, balanced and comfortable way.”

Drummond Reed, Founder and Chairman of Connect.Me, comments: “This milestone for UMA could not come at a better time – interest in user-managed data sharing is exploding. Social networks have made people more comfortable with online sharing, and now UMA brings us a standard way for users to share data across many different sites and services without losing control of that information. Connect.Me looks forward to bringing the power of UMA to our users.”

Iain Henderson, Co-Founder of the Mydex Community Interest Company, says: “The publication of the draft specs for UMA is a great step forward in enabling the individual to better realise the value of their personal information. The Mydex team sees this release as of direct relevance to a number of existing initiatives in both public and private sectors, and we look forward to deploying it later in 2011.”

The WG will demonstrate UMA’s benefits in a public webinar on Wednesday, July 13, at 9am Pacific time. All are welcome to attend.

Register and find out more at http://tinyurl.com/umawg.

“Like” UMA on Facebook at http://www.facebook.com/UserManagedAccess.

Follow the group on Twitter at http://www.twitter.com/umawg and hashtag #UMAWG.

About Kantara Initiative
http://kantarainitiative.org/

About the UMA WG
http://tinyurl.com/umawg

###

Media Contact
Dervla O’Reilly
+1-415-731-4487
dervla[at]kantarainitiative[dot]org

Catch the round up of recent updates from Kantara Initiative:

• Authorization Standards Workshop at Burton Catalyst San Diego, July 27, 12:30-2:30pm
• Merger of Kantara’s IdP Selection WG into ULX WG
• Kantara Initiative Meeting, Oct. 19-21, Paris, France hosted by Orange-FT
• Kantara Initiative announces the formation of the Federation Interoperability Work Group (FIWG)
• Kantara Initiative Announces Identity Assurance Framework 2.0
• Announcing Yasuhisa Sakamoto & Toshihiro Suzuki as Kantara Initiative’s Japan WG co-chairs
• Kantara Initiative Engages Drummond Group to Manage Global Interoperability Program
• Comparing OAuth and UMA – by Eve Maler
• Kantara speakers featured at Burton Catalyst Prague, June 21-24, 2010
• Kantara Initiative Webcast via BrightTALK: Identity Assurance Frameworks within Federated IAM Systems, May 6 - listen and view the audio of this Webcast
• Catch up on recent activities at industry events: UMA at EIC 2010, IIW X round-up
• What exactly is “open” in Open Identity?
• Industry events – contact Dervla O’Reilly regarding discounted conference rates: pii2010, August 17-19, Seattle, Hacker Halted October 9-15 Miami, WHIT 6.0 Nov. 8-10 Washington D.C., Gartner Identity & Access Management Summit November 15-16 San Diego

Catch the round up of recent updates from Kantara Initiative:

• Featuring Paul Trevithick, co-founder and co-chair of the Universal Login Experience (ULX) WG
• Announcing leadership of Kantara Initiative Work Groups: Consumer Identity WG, P3WG, Healthcare Identity Assurance WG, IdP Selection WG, Telecommunications Identity WG
• Public workshop: Making the world safe for user-managed access at EIC, May 4, Munich
• Kantara Initiative’s RSA Security Pre-Conference Workshop, March 1 2010
• A round up of work from DG/WGs at the recent Kantara Initiative Conference in Oregon: Concordia, eGov, IdP Selection, ID-WSF Evo, TelCo ID, UMA
• Identity Assurance, an everyday life issue – articles from the IA WG Chair
• Concordia DG Authz and LOA Surveys
• Executive Director Search: Job Description
• Identity Matters: eGovernment
• Kantara Initiative’s UMA WG webinar: UMA explained – listen and watch the recording
• Identity Matters: User Managed Access
• Announcing Government of Canada Consultation on Cyber Authentication
• Identity Assurance WG testimony to Health IT Committee and NHIN
• Industry events – contact Dervla O’Reilly regarding discounted conference rates: Gartner Security & Risk Management Summit June 21-23 Maryland, Hacker Halted October 9-15 Miami, WHIT 6.0 Nov. 8-10 Washington D.C., Gartner Identity & Access Management Summit November 15-16 San Diego

You can listen to and watch the recording the UMA explained webinar presented by Eve Maler and Paul Bryan from Kantara Initiative’s UMA WG. To benefit from the increasing number of services accessible over the Web, we’re forced to “hand over the data” — data that’s sensitive, valuable, and personal — and we end up paying a price in both privacy and convenience. The new User-Managed Access web protocol promises to help web users share their data more selectively using a central digital footprint dashboard, while helping websites get access to fresher and better-quality data when they need it.  This session reviews UMA benefits, progress to date, and next steps.

In this episode of the Identity Matters Podcast, Eve Maler presents an overview of the User Managed Access (UMA) Work Group. Eve, the UMA WG chair, starts off with background of the group working within the Kantara Initiative and defines the problem space. She then provides an overview of the process the group is taking as well as where they are in their roadmap toward delivering a specification to the IETF.

From the UMA charter: The purpose of the UMA work at Kantara is to develop a set of draft specifications that enable an individual to control the authorization of data sharing and service access made between online services on the individual’s behalf, and to facilitate the development of interoperable implementations of these specifications by others.

Podcast: Download MP3 | Episode Length: 0:27:41 | Filesize: 18.5 MB

NOTE: This podcast was produced in collaboration with the Kantara Initiative Identity Community Update Discussion Group.