Introduction of ISO/IEC 29003 Identity Proofing ITU Workshop on “ICT Security Standardization for Developing Countries” (Geneva, Switzerland, 15-16 September 2014) Introduction of ISO/IEC 29003 Identity Proofing Patrick Curry Director, British Business Federation Authority (& SC27 WG5) patrick.curry@federatedbusiness.org Geneva, Switzerland, 15-16 September 2014
Why is identity proofing so important? Trust is globally, strategically essential Authentication is key to trust Strength of credential depends on strength of enrolment & registration Core of enrolment is identity proofing and verification Geneva, Switzerland, 15-16 September 2014
What is identity proofing? Process from application to entry into a register = authoritative source Identity proofing Checking the application & evidence of identity for Level of Assurance (LoA) Checking binding to the subject Proofing Examining corroborative sources of data Looking for contra-indicators Geneva, Switzerland, 15-16 September 2014
The Key Entities Person Organisation Device Software Complicated Much national variation Organisation Register(s) of Legal Organisations 6 categories of attributes; 2 mandatory Device TPM best practice Secure issuance Software To be confirmed Geneva, Switzerland, 15-16 September 2014
The fast changing international situation National cyber strategies Cyber control frameworks Pressure for strong authentication New regulations EU eID Authentication & Signature Regulations Many national e-ID programmes More authentication requirements in supply chains Geneva, Switzerland, 15-16 September 2014
The role of international standards Enable interoperability = agility Enable deployment and affordability Reduces risks and costs Standards bodies need to: Engage with governments and industry Establish better coordination Move faster Geneva, Switzerland, 15-16 September 2014
Conclusions and Recommendations Too slow Spread the load Avoid gaps Broadening communities Become more proactive Collaborate with ISO Framework approach Communicate better Geneva, Switzerland, 15-16 September 2014