P HDSS 6/2/20151 P2600 Hardcopy Device and System Security October 2008 Working Group Meeting Don Wright Director of Standards Lexmark International

6/2/2015 P HDSS Opening Agenda Items Self Introductions Approval of the Agenda

6/2/2015 P HDSS Agenda Items Friday, October 24  Welcome/Introductions/Announcements  Update and Approve Agenda  Review and approve September Minutes  IEEE Patent Policy Review  2008 Meeting Schedule  Update on PWG IDS/TCG (Thrasher)  Update on INCITS CS1 Working Group (Thrasher)  Report from ICCC #9 (Smithson)  Update of CC Vendor's Forum (Smithson)  Review of Action Items from September Meeting  PP Evaluation ad hoc status (Nevo)

6/2/2015 P HDSS Agenda Items Friday, October 24  Evaluation Status (Smithson/atsec)  Issues raised on Making NVS applicable only to TSF Data in OpEnv B  Protection Profiles version 39 PP-A PP-B PP-C PP-D Comments  Guide to P2600 PPs ad hoc status (Sukert) Version 39 Comments

6/2/2015 P HDSS Agenda Items Friday, October 24  Production Printing Profile (Sukert) Version 39 Comments?  Schedule Review  Other items  Posting and Comment deadlines for the December Meeting  Next meeting details

6/2/2015 P HDSS Minutes from September Meeting Minutes were published shortly after the meeting. They are available at: P2600-minutes-Sep2008.pdf P2600-minutes-Sep2008.pdf Any additions, deletions or corrections to the September minutes?

6/2/2015 P HDSS The IEEE-SA strongly recommends that at each WG meeting the chair or a designee:  Show slides #1 through #4 of this presentation  Advise the WG attendees that: The IEEE’s patent policy is consistent with the ANSI patent policy and is described in Clause 6 of the IEEE-SA Standards Board Bylaws; Early identification of patent claims which may be essential for the use of standards under development is strongly encouraged; There may be Essential Patent Claims of which the IEEE is not aware. Additionally, neither the IEEE, the WG, nor the WG chair can ensure the accuracy or completeness of any assurance or whether any such assurance is, in fact, of a Patent Claim that is essential for the use of the standard under development.  Instruct the WG Secretary to record in the minutes of the relevant WG meeting: That the foregoing information was provided and that slides 1 through 4 (and this slide 0, if applicable) were shown; That the chair or designee provided an opportunity for participants to identify patent claim(s)/patent application claim(s) and/or the holder of patent claim(s)/patent application claim(s) of which the participant is personally aware and that may be essential for the use of that standard Any responses that were given, specifically the patent claim(s)/patent application claim(s) and/or the holder of the patent claim(s)/patent application claim(s) that were identified (if any) and by whom.  The WG Chair shall ensure that a request is made to any identified holders of potential essential patent claim(s) to complete and submit a Letter of Assurance.  It is recommended that the WG chair review the guidance in IEEE-SA Standards Board Operations Manual and in FAQs 12 and 12a on inclusion of potential Essential Patent Claims by incorporation or by reference. Note: WG includes Working Groups, Task Groups, and other standards-developing committees with a PAR approved by the IEEE-SA Standards Board. Instructions for the WG Chair (Optional to be shown)

6/2/2015 P HDSS Participants, Patents, and Duty to Inform All participants in this meeting have certain obligations under the IEEE-SA Patent Policy. Participants:  “Shall inform the IEEE (or cause the IEEE to be informed)” of the identity of each “holder of any potential Essential Patent Claims of which they are personally aware” if the claims are owned or controlled by the participant or the entity the participant is from, employed by, or otherwise represents “Personal awareness” means that the participant “is personally aware that the holder may have a potential Essential Patent Claim,” even if the participant is not personally aware of the specific patents or patent claims  “Should inform the IEEE (or cause the IEEE to be informed)” of the identity of “any other holders of such potential Essential Patent Claims” (that is, third parties that are not affiliated with the participant, with the participant’s employer, or with anyone else that the participant is from or otherwise represents)  The above does not apply if the patent claim is already the subject of an Accepted Letter of Assurance that applies to the proposed standard(s) under consideration by this group ( Quoted text excerpted from IEEE-SA Standards Board Bylaws subclause 6.2) Early identification of holders of potential Essential Patent Claims is strongly encouraged No duty to perform a patent search Slide #1

6/2/2015 P HDSS Patent Related Links All participants should be familiar with their obligations under the IEEE- SA Policies & Procedures for standards development. Patent Policy is stated in these sources:  IEEE-SA Standards Boards Bylaws  IEEE-SA Standards Board Operations Manual  Material about the patent policy is available at Slide #2 If you have questions, contact the IEEE-SA Standards Board Patent Committee Administrator at or visit This slide set is available at

6/2/2015 P HDSS Call for Potentially Essential Patents If anyone in this meeting is personally aware of the holder of any patent claims that are potentially essential to implementation of the proposed standard(s) under consideration by this group and that are not already the subject of an Accepted Letter of Assurance:  Either speak up now or  Provide the chair of this group with the identity of the holder(s) of any and all such claims as soon as possible or  Cause an LOA to be submitted Slide #3

6/2/2015 P HDSS Other Guidelines for IEEE WG Meetings All IEEE-SA standards meetings shall be conducted in compliance with all applicable laws, including antitrust and competition laws.  Don’t discuss the interpretation, validity, or essentiality of patents/patent claims.  Don’t discuss specific license rates, terms, or conditions. Relative costs, including licensing costs of essential patent claims, of different technical approaches may be discussed in standards development meetings. Technical considerations remain primary focus  Don’t discuss or engage in the fixing of product prices, allocation of customers, or division of sales markets.  Don’t discuss the status or substance of ongoing or threatened litigation.  Don’t be silent if inappropriate topics are discussed … do formally object See IEEE-SA Standards Board Operations Manual, clause and “Promoting Competition and Innovation: What You Need to Know about the IEEE Standards Association's Antitrust and Competition Policy” for more details. Slide #4

6/2/2015 P HDSS 2008 Meeting Schedule December 11-12: Plantation, Equitrac

6/2/2015 P HDSS PWG-IDS/Trusted Computing Group Update

14Copyright © 2008, Printer Working Group. All rights reserved. PWG Imaging Device Security (IDS) Working Group Lexington, KY – P2600 Meeting October 24, 2008

15Copyright © 2008, Printer Working Group. All rights reserved. Purpose of the effort The industry is moving beyond basic authentication for access to corporate networks to a fairly detailed assessment of the device that is connecting before being allowed to access the network. Examples of what’s being measured for PC Clients: OS Type, Version, Patch Level Anti-virus Type, Version, Definition Level, Is Active Hardcopy Devices attach to networks, but there’s no standard set of metrics that is used to assess an HCD. Our Goal is to provide these metrics!!!

16Copyright © 2008, Printer Working Group. All rights reserved. Work Items for the WG What We’re Doing Defining a standard set of metrics that might be measured or assessed in Hardcopy Devices to gauge if they should be given access to a network Defining example “bindings” for how these metrics are used in the individual network assessment protocols. What We’re NOT Doing We are NOT defining any new assessment protocols or assessment extensions to existing authentication protocols. We are NOT endorsing any of the competing network assessment protocols (NEA/TNC, NAC, NAP), but plan to enable Hardcopy Devices to participate in any/all of them.

17Copyright © 2008, Printer Working Group. All rights reserved. Working Group Officers IDS WG Chairs: Peter Cybuck (Sharp), Ron Bergman (Ricoh) IDS WG Secretary: Lee Farrell (Canon) IDS WG Document Editors: Jerry Thrasher (Lexmark), Ron Nevo (Sharp) Brian Smithson

18Copyright © 2008, Printer Working Group. All rights reserved. Status Reviewed Network Assessment Protocols Cisco NAC (Network Access Control) TCG TNC (Trusted Network Connect) Microsoft NAP (Network Access Protection) IETF NEA (Network Endpoint Assessment) NAP has been targeted to be the first candidate Well documented (public documents) Supported in MS O/S versions Current effort is to Complete Assessment Attribute Specification. Complete the binding to NAP for HCD Attributes. Define the required NAP protocol stack support. Next Step Start an HCD to NEA binding document

19Copyright © 2008, Printer Working Group. All rights reserved. Schedule Q1 2008: Initial education and Study Specify Network Assessment Protocols COMPLETE Develop (Use Cases) and Requirements COMPLETE Q2 2008: Draft Proposals Required Minimal Attribute Set COMPLETE Extended Attribute Set COMPLETE Q3 2008: HCD Health Assessment Attributes Spec IN REVIEW NAP Binding Spec Proposal IN REVIEW Q4 2008: Complete HCD Attributes Spec Finalize NAP Binding Spec Start NEA Binding Spec

20Copyright © 2008, Printer Working Group. All rights reserved. Current Documentation HCD Health Assessment Attributes Spec ftp://ftp.pwg.org/pub/pwg/ids/wd/wd-idsattributes pdf (.doc)ftp://ftp.pwg.org/pub/pwg/ids/wd/wd-idsattributes pdf HCD Health Assessment NAP Binding Spec ftp://ftp.pwg.org/pub/pwg/ids/wd/wd-ids-napsoh pdf (.doc)ftp://ftp.pwg.org/pub/pwg/ids/wd/wd-ids-napsoh pdf Microsoft NP Protocols ftp://ftp.pwg.org/pub/pwg/ids/white/Microsoft%20NAP%20Protocols.pdf (.ppt)ftp://ftp.pwg.org/pub/pwg/ids/white/Microsoft%20NAP%20Protocols.pdf

21Copyright © 2008, Printer Working Group. All rights reserved. General Teleconferences are held bi-weekly at 1 pm EDT The teleconference schedule: November 6 November 20 December 3-5 (Face to Face meeting) Contact Information distribution list To subscribe to the IDS mail list see:

6/2/2015 P HDSS INCITS CS1 : Cyber-Security Update Thrasher

6/2/2015 P HDSS CS1 Update International SC27 Plenary held in October

6/2/2015 P HDSS 9 th International Common Criteria Conference Update Smithson

6/2/2015 P HDSS CC Vendors Forum Update Smithson

6/2/2015 P HDSS Action Items from Previous Meetings Review entries in P2600-action-items excel spreadsheet  Pre-meeting Spreadsheet action-items xls action-items xls

6/2/2015 P HDSS Old Business PP Evaluation ad hoc (Nevo) Evaluation Status (Smithson/atsec)

6/2/2015 P HDSS Issues raised on Making NVS applicable only to TSF Data in OpEnv B  Comment #56 in Ballot/P2600.X/P Sponsor-Ballot- b01v02.pdf Ballot/P2600.X/P Sponsor-Ballot- b01v02.pdf  Aubrey Note Aubrey Note  Smithson Response Smithson Response

6/2/2015 P HDSS Protection Profiles Protection Profiles (version 39)  PP-A PP-A  PP-B PP-B  PP-C PP-C  PP-D PP-D  Comments Comments

6/2/2015 P HDSS PP Guide Ad Hoc Team Current Status:  PP Guide Version 39a postedVersion 39a  Comments Comments

6/2/2015 P HDSS Production Printing Protection Profile Production Printing Profile Status  PP-E Version 39a postedVersion 39a  Comments?  Joint meeting with AFP Consortium (slides)slides

6/2/2015 P HDSS Project Schedule

6/2/2015 P HDSS Other Items 2009 Meeting Plan  February Waikoloa Beach Marriott Waikoloa Beach Drive Waikoloa, Hawaii (along the Kona Coast) Details to follow Others Items?

6/2/2015 P HDSS December Meeting Deadlines All PPs are under change control  All comments must be in the tool  The editor may not make changes EXCEPT based on submitted and accepted comments. Posting of Documents: November 27, 2008 Posting of Comments: December 4, 2008

6/2/2015 P HDSS Next Meeting Details December 11 & 12  Equitrac 1000 South Pine Island Road, Suite 900 Plantation, FL  Nearest airport: Fort Lauderdale  No hotel block

6/2/2015 P HDSS Next Meeting Location Map

6/2/2015 P HDSS Next Meeting Location Map

6/2/2015 P HDSS Thanks! See you in Florida!!

6/2/2015 P HDSS Back-up Charts BACK-UP CHARTS

6/2/2015 P HDSS Mailing List and Web Site Web Site: Mailing list:  Listserv run by the IEEE  An archive is available on the web site  Subscribe via a note to: containing the line: subscribe stds-2600  Only subscribers may send to the mailing list. No Change