[DG-IDoT] FW: RSA U.S. Call for Speakers Now Open! Submit Today!

Terry Gold tgold at idanalyst.com
Tue Jul 2 08:12:34 CDT 2013

Hi Jeff-


I think you are spot-on. We can continue to define technical frameworks (and
we will ;-) but the big storm brewing is:


a)      The convenience and pervasiveness of connected services

b)      Collection and monetization of data (can debate and categorize what
is PII or not and how it is still usable, etc)

c)       Identity ownership and control s: evolution, impact, possibilities

d)      Challenges and impact on business models, and individuals as this
battle looms.


>From my perspective, there are four levels to this dilemma that should be
reviewed/clarified for the audience:


1.       Legacy models like the credit bureaus. They have long collecting
everything, are bureaucratic, and monetize data in many ways. Facebook's
monetization model isn't new just the way they collect it.

2.       Opt-in relationships: Such as Facebook. We may be opted-in when we
sign up (don't agree with that by the way) but we do consciously sign up for
the relationship and is intended to share on some level (unlike my mortgage
account or my vehicle records or services).

3.       Leakage: The usage of a service that does not disclose that it is
collecting data, or irresponsibly leaks your data to another service (lots
of mobile apps are quite "chatty" in this way). Basically, any that are
"free" apps, are doing this so (and not disclosing) it's a BIG problem.

4.       Government Surveillance: PRISM, etc. For me, the debate on this is
two-fold, not only the legality but the controlled usage of any collected
data. Obvious, but just to point out. 


I am interested in collaborating and/or participating in the panel as well,
up to you. 






Terry Gold

iDanalyst LLC, Founder

Identity, Security & Privacy

t: 213-341-0433

m: 949-310-5911


tgold at IDanalyst.com

www.IDanalyst.com <http://www.idanalyst.com/>  

Twitter: @IDanalyst




From: dg-idot-bounces at kantarainitiative.org
[mailto:dg-idot-bounces at kantarainitiative.org] On Behalf Of j stollman
Sent: Tuesday, July 02, 2013 5:50 AM
To: Ingo.Friese at telekom.de
Cc: Joni Brennan; dg-idot at kantarainitiative.org
Subject: Re: [DG-IDoT] FW: RSA U.S. Call for Speakers Now Open! Submit




My personal bias would be to have a panel discussion on the implications of
IoT on privacy.  (We can submit more than one proposal and hold more than
one panel.)


And I think some of the questions that we have already begun discussing
(e.g., who controls the data for a ca?, will "things" have their own
personal cloud or be part of a person's cloud?) that could provide fodder
for a captivating discussion.  .  (We can submit more than one proposal and
hold more than one panel.)


I have already begun drafting a proposal for a panel for which I am
interested in other panelists.  I have attached a draft.  If you are
interested in participating, let me know.






On Tue, Jul 2, 2013 at 7:03 AM, <Ingo.Friese at telekom.de> wrote:

Hi all,


We'd like to propose a KI panel discussion at RSA 2014 around IDoT. This
would be a great opportunity for our group to promote/discuss/get feedback
for our work.

Joni was as friendly as to bring up this chance. She will help us to finish
a one-pager for a proposed session. 

I will start with a rough version putting in



(Identity of Things - Access Management as usual or do we need something

We have learned a lot about identity management for subjects in the past. We
have well known approaches like RBAC or ABAC developed web protocols and
mechanisms like OpenID, OAuth, UMA. But is this sufficient for the internet
of things? What's missing? What is so challenging about?  Etc.) (just a very
first draft and still rather an example).thinking about other authentication
methods than username/password, more than one owner/user of a thing, new
mapping approaches etc.


As we are a group from different industries I'd like to ask you for other
topics around  Big Data, Privacy, Security etc..in conjunction with IDoT.
Ideas are highly welcome!

I will aggregate/integrate them to a nice paper

IT would be great if you come up with few bullet points to support us. And
If I get it right we also looking for panelists (correct me if I'm wrong


Thank you in advance!





From: jonibrennan at gmail.com [mailto:jonibrennan at gmail.com] On Behalf Of Joni
Sent: Montag, 1. Juli 2013 20:42
To: Friese, Ingo
Subject: Re: U.S. Call for Speakers Now Open! Submit Today!


Could you start a rough draft for proposed session? IdOT can help but you'll
need some staff and quick volunteers b/c the opp closes July 25. That comes


If you can give a one page heather and I can help. I suggest proposing a
panel as the mode for session. We can help you fill the panel when time


Do you think its possible as a start? 


I hope you get the opp AND selected!!

On Monday, July 1, 2013, wrote:



I'd love to. Great opportunity to introduce / discuss / get feedback for




From: lc-bounces at kantarainitiative.org
[mailto:lc-bounces at kantarainitiative.org] On Behalf Of Joni Brennan
Sent: Donnerstag, 27. Juni 2013 18:55
To: Nat Sakimura
Cc: Kantara Leadership Council Kantara; trustees at kantarainitiative.org;
irb at kantarainitiative.org; arb
Subject: Re: [KI-LC] [BoT] Fwd: U.S. Call for Speakers Now Open! Submit


In the same track of thought Nat, and in addition to Colin's well placed
usual suspect assurance discussion, I think the Kantara IDoT might make some
early proposal around Privacy, Big-Data and Identity of Things.  Ingo would
you be interested?  

Joni Brennan
Kantara Initiative | Executive Director
voice:+1 732-226-4223 <tel:%2B1%20732-226-4223> 
email: joni @ kantarainitiative.org

Building Trusted Identity Ecosystems - It takes a village! 
Slides: http://bit.ly/ki-june-2013


On Thu, Jun 27, 2013 at 9:21 AM, Nat Sakimura <sakimura at gmail.com> wrote:

I am wondering if RSA is security only event. 


When you talk about Big Data etc., you cannot dodge the privacy questions. 

That might be another interesting topic. 


2013/6/27 Colin Wallis <colin_wallis at hotmail.com>

I'm thinking there might be a play at the higher LOA approval level here.. a
kind of Kantara Assurance. BBFA, MACCSA joint play.
The slight problem is that *that* thinking might be slightly premature
(thinking of the July MACCSA meeting) ..
But I'm thinking that the RSA audience would find it interesting and offers
presenting organizations a way to showcase an opportunity for the audience
organizations to play in what is probably a new space for most of them...
(says he choosing his words carefully..:-)) 


From: joni at ieee-isto.org
Date: Wed, 26 Jun 2013 11:34:19 -0700
To: trustees at kantarainitiative.org; LC at kantarainitiative.org;
arb at kantarainitiative.org; irb at kantarainitiative.org
Subject: [KI-LC] Fwd: U.S. Call for Speakers Now Open! Submit Today!


Dear All,
Which Kantara stakeholders seek to work toward Kantara proposals for RSA SFO
2014?  Which WGs / DGs will seek to submit their own proposals? 

The call opens now and closes July 25. 

Best Regards,

tent=logo-header&utm_campaign=CFSEmail1> R Conference 

Stay Connected

LinkedIn <http://www.linkedin.com/company/rsa-conference> 
Twitter  <https://twitter.com/RSAconference> 
YouTube  <http://www.youtube.com/rsaconference> 
Facebook  <https://www.facebook.com/rsaconference> 

Asia Pacific

Joni Brennan
Kantara Initiative | Executive Director
voice:+1 732-226-4223 <tel:%2B1%20732-226-4223> 
email: joni @ kantarainitiative.org

Building Trusted Identity Ecosystems - It takes a village! 
Slides: http://bit.ly/ki-june-2013

DG-IDoT mailing list
DG-IDoT at kantarainitiative.org


Jeff Stollman
stollman.j at gmail.com
1 202.683.8699


Truth never triumphs - its opponents just die out.

Science advances one funeral at a time.

                                    Max Planck

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kantarainitiative.org/pipermail/dg-idot/attachments/20130702/6c89eee9/attachment-0001.html>

More information about the DG-IDoT mailing list