Don Wright Director of Standards Lexmark International don@lexmark.com P2600 Hardcopy Device and System Security June 2008 Working Group Meeting Don Wright Director of Standards Lexmark International don@lexmark.com 12/31/2018

Opening Agenda Items Self Introductions Approval of the Agenda 12/31/2018

Agenda Items Monday/Tuesday, June 23-24 Welcome & Introductions Update and Approve Agenda Review and approve May Minutes IEEE Patent Policy Review 2008 Meeting Schedule Update on TCG (Volkoff) Update on INCITS CS1 Working Group (Thrasher) Update of CC Vendor's Forum (Sukert) Review of Action Items from May Meeting PP Evaluation ad hoc status (Nevo) Update on JBMIA June meeting Update on IPA's perspective NIAP versus BSI versus others for PPs Evaluation schedule outline 12/31/2018

Agenda Items Monday/Tuesday, June 23-24 New Approach PPs (Smithson) Decision on PP+packages approach Explanation of New Structure document Decision on Functionality/Packages to include No SMI Mediation document No Offline Salvage document Protection Profiles Review and Comments PP-A (36c proto) PP-B (36c proto) PP-C (36c proto) PP-D (36c proto) Comments Issues raised on e-mail None 12/31/2018

Agenda Items Monday/Tuesday, June 23-24 Guide to P2600 PPs ad hoc status (Sukert) PP Guide Outline Production Printing Profile (Sukert) Draft (36c proto) Detailed Schedule Development Other items Posting and Comment deadlines for the August Meeting Next meeting details 12/31/2018

Minutes from May Meeting Minutes were published shortly after the meeting. They are available at: http://grouper.ieee.org/groups/2600/minutes/P2600-minutes-May2008.pdf Any additions, deletions or corrections to the April minutes? 12/31/2018

Instructions for the WG Chair The IEEE-SA strongly recommends that at each WG meeting the chair or a designee: Show slides #1 through #4 of this presentation Advise the WG attendees that: The IEEE’s patent policy is consistent with the ANSI patent policy and is described in Clause 6 of the IEEE-SA Standards Board Bylaws; Early identification of patent claims which may be essential for the use of standards under development is strongly encouraged; There may be Essential Patent Claims of which the IEEE is not aware. Additionally, neither the IEEE, the WG, nor the WG chair can ensure the accuracy or completeness of any assurance or whether any such assurance is, in fact, of a Patent Claim that is essential for the use of the standard under development. Instruct the WG Secretary to record in the minutes of the relevant WG meeting: That the foregoing information was provided and that slides 1 through 4 (and this slide 0, if applicable) were shown; That the chair or designee provided an opportunity for participants to identify patent claim(s)/patent application claim(s) and/or the holder of patent claim(s)/patent application claim(s) of which the participant is personally aware and that may be essential for the use of that standard Any responses that were given, specifically the patent claim(s)/patent application claim(s) and/or the holder of the patent claim(s)/patent application claim(s) that were identified (if any) and by whom. The WG Chair shall ensure that a request is made to any identified holders of potential essential patent claim(s) to complete and submit a Letter of Assurance. It is recommended that the WG chair review the guidance in IEEE-SA Standards Board Operations Manual 6.3.5 and in FAQs 12 and 12a on inclusion of potential Essential Patent Claims by incorporation or by reference. Note: WG includes Working Groups, Task Groups, and other standards-developing committees with a PAR approved by the IEEE-SA Standards Board. 12/31/2018 (Optional to be shown)

Participants, Patents, and Duty to Inform All participants in this meeting have certain obligations under the IEEE-SA Patent Policy. Participants: “Shall inform the IEEE (or cause the IEEE to be informed)” of the identity of each “holder of any potential Essential Patent Claims of which they are personally aware” if the claims are owned or controlled by the participant or the entity the participant is from, employed by, or otherwise represents “Personal awareness” means that the participant “is personally aware that the holder may have a potential Essential Patent Claim,” even if the participant is not personally aware of the specific patents or patent claims “Should inform the IEEE (or cause the IEEE to be informed)” of the identity of “any other holders of such potential Essential Patent Claims” (that is, third parties that are not affiliated with the participant, with the participant’s employer, or with anyone else that the participant is from or otherwise represents) The above does not apply if the patent claim is already the subject of an Accepted Letter of Assurance that applies to the proposed standard(s) under consideration by this group (Quoted text excerpted from IEEE-SA Standards Board Bylaws subclause 6.2) Early identification of holders of potential Essential Patent Claims is strongly encouraged No duty to perform a patent search 12/31/2018 Slide #1

Patent Related Links All participants should be familiar with their obligations under the IEEE-SA Policies & Procedures for standards development. Patent Policy is stated in these sources: IEEE-SA Standards Boards Bylaws http://standards.ieee.org/guides/bylaws/sect6-7.html#6 IEEE-SA Standards Board Operations Manual http://standards.ieee.org/guides/opman/sect6.html#6.3 Material about the patent policy is available at http://standards.ieee.org/board/pat/pat-material.html If you have questions, contact the IEEE-SA Standards Board Patent Committee Administrator at patcom@ieee.org or visit http://standards.ieee.org/board/pat/index.html This slide set is available at http://standards.ieee.org/board/pat/pat-slideset.ppt 12/31/2018 Slide #2

Call for Potentially Essential Patents If anyone in this meeting is personally aware of the holder of any patent claims that are potentially essential to implementation of the proposed standard(s) under consideration by this group and that are not already the subject of an Accepted Letter of Assurance: Either speak up now or Provide the chair of this group with the identity of the holder(s) of any and all such claims as soon as possible or Cause an LOA to be submitted 12/31/2018 Slide #3

Other Guidelines for IEEE WG Meetings All IEEE-SA standards meetings shall be conducted in compliance with all applicable laws, including antitrust and competition laws. Don’t discuss the interpretation, validity, or essentiality of patents/patent claims. Don’t discuss specific license rates, terms, or conditions. Relative costs, including licensing costs of essential patent claims, of different technical approaches may be discussed in standards development meetings. Technical considerations remain primary focus Don’t discuss or engage in the fixing of product prices, allocation of customers, or division of sales markets. Don’t discuss the status or substance of ongoing or threatened litigation. Don’t be silent if inappropriate topics are discussed … do formally object. --------------------------------------------------------------- See IEEE-SA Standards Board Operations Manual, clause 5.3.10 and “Promoting Competition and Innovation: What You Need to Know about the IEEE Standards Association's Antitrust and Competition Policy” for more details. 12/31/2018 Slide #4

2008 Meeting Schedule August 11-12: Camas WA @ Sharp (with PWG) September 9-10: Arlington, VA @ Sharp October 24: Lexington, KY @ Lexmark (with PWG) December 11-12: Plantation, FL @ Equitrac 12/31/2018

Trusted Computing Group Update 12/31/2018

INCITS CS1 : Cyber-Security Update Thrasher 12/31/2018

CC Vendors Forum Update Sukert/Thrasher 12/31/2018

CC Vendors Forum Not much activity since last meeting Discussion on the June 5 letter from the Dept of the Army titled “Approval and Acquisition of Information Assurance (IA) Tools and Products in the United States Army” Now accept CC evaluations from any CC lab accredited under CCRA, not just NIAP No longer mandate Medium Robustness Maintained need for separate DoD Lab evaluation, FIPS 140-2 certification, Kerberos authentication and IPv6 capable requirements Discussion on the perceived lack of quantity and quality of submissions for the Sep 08 ICCC. 12/31/2018

Action Items from Previous Meetings Review entries in P2600-action-items excel spreadsheet Pre-meeting Spreadsheet P2600-action-items-20080618.xls 12/31/2018

Old Business PP Evaluation ad hoc (Nevo) Update on JBMIA June meeting Update on IPA's perspective NIAP versus BSI versus others for PPs NIAP does PP-A BSI does PP-B, PP-C, PP-D BSI will get PP-A at least for information Possible the all PPs would have approvals by both schemes Evaluation schedule outline 12/31/2018

“New Approach” Protection Profile Decision on PP+packages approach Explanation of  New Structure document Group agreed to use the PP+packages approach – FINAL decision… no going back!!!!!!!!!!!!!!!!!! Decision on Functionality/Packages to include No SMI Mediation document Keep SMI mediation in; consult with NIAP, et al, regarding best way to implement FINAL ANSWER!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! No Offline Salvage document Nonvolatile storage devices holding “valuable” data have to be protected 12/31/2018

Protection Profiles Protection Profiles Review PP-A (36c proto) PP-B (36c proto) PP-C (36c proto) PP-D (36c proto) Comments 12/31/2018

Issues raised on e-mail None 12/31/2018

PP Guide Ad Hoc Team Held status meeting on Jun 18th: Current Plan Based on latest PP restructuring proposal we have enough information to start all Guide sections Assigned specific chapters or sections to team members (see Revised PP Guide Outline for assignments) Still would like Atsec feedback on PP Guide outline Current Plan Create extended outline for all sections by Jul 4th Provide completed text for posting and review at Aug P2600 Meeting by noon Jul 28th Will try to have as much as we can by then PP Guide Outline 12/31/2018

Production Printing Protection Profile Production Printing Profile Status (Sukert) Draft (version 36c proto) Issues/Comments/Ideas? 12/31/2018

Existing Project Schedule May Meeting (May 21-22) Feedback from atsec Recommendation on “family” versus “packages” June Meeting (June 23-24 in Longmont CO) WG Comments on “packages” draft Feedback from IPA from JBMIA meeting Update on Production Printing Profile Make a decision on getting a PAR for Production Printing Profile Make a decision on the SCHEME(s) to be used Create new sponsor ballot bodies (After June 28) August Meeting (Aug 11 & 12) @ Sharp in Portland OR Revisit NIAP CIM comments Deal with SCHEME comments Deal with WG comments Draft of Guide Start Evaluation of PPs (post meeting) Start .1, .2, .3, & .4 Sponsor Ballot (post meeting) September Meeting (Sept 9 & 10 at Sharp in Washington DC) Deal with any comments received from SCHEME/atsec Work on Guide October Meeting (Oct 24 at Lexmark in Lexington) Process sponsor ballot comments on .1, .2, .3, .4 Discuss if PP’s still match Std 2600 – if not, process amendment PAR December (Dec 11-12 at Equitrac in Hollywood, FL) Meeting Process Sponsor Ballot *recirculation” Comments Finish Guide 12/31/2018

Other Items Do we need to plan for any more meetings? Others? 12/31/2018

August Meeting Deadlines All PPs are under change control All comments must be in the tool The editor may not make changes EXCEPT based on submitted and accepted comments. Posting of Documents: July 28,2008 Posting of Comments: August 4, 2008 12/31/2018

Next Meeting Details August 11-12, 2008 Sharp Labs of America 5700 NW Pacific Rim Blvd. Camas, WA 98607 No hotel block 12/31/2018

Next Meeting Location Map Longmont Boulder 12/31/2018

Thanks! See you in Camas, Washington!! 12/31/2018

Back-up Charts BACK-UP CHARTS 12/31/2018

Mailing List and Web Site Listserv run by the IEEE An archive is available on the web site Subscribe via a note to: listserv@listserv.ieee.org containing the line: subscribe stds-2600 Only subscribers may send e-mail to the mailing list. No Change 12/31/2018