http://www.projectliberty.org Whenever an event is posted to the Liberty Alliance website, it will be pushed into this feed. http://www.projectliberty.org/news_events/events/global_authentication_liberty_alliance_identity_assurance_framework http://www.projectliberty.org/news_events/events/liberty_identity_assurance_framework_roundtable_discussion_at_catalyst_conference_north_america_2008 Learn from our panel about the Liberty Identity Assurance Framework Roundtable discussion at Catalyst Conference North America 2008. http://www.projectliberty.org/news_events/events/liberty_alliance_standards_workshop_at_the_2nd_european_identity_conference_munich_germany http://www.projectliberty.org/news_events/events/webcast_zero_day_threat http://www.projectliberty.org/news_events/events/webcast_identity_governance_framework_new_standards_to_protect_privacy_through_governing_policy http://www.projectliberty.org/news_events/events/webcast_liberty_alliance_privacy_summit_1_of_3_part_series In the past 18 months, the Liberty Public Policy Expert Group (PPEG) has run five Privacy Summit events world-wide, gathering privacy stakeholders from many different disciplines (IT, policy, regulation, legal, academic) for a peer-to-peer discussion of strategic issues and possible solutions. As the series unfolded, the group quickly found that a major stumbling block was the lack of a shared terminology and model for the basic concepts of identity data and privacy. It was too easy for useful discussions of 'second-order' topics such as trust and privacy to get mired in largely unnecessary confusion over basic concepts and terminology. As a result, simple models were created which illustrate the different 'layers' of identity data, their application in different 'sectors' (such as employment, healthcare, tax and so on), and the relative roles of credentials, attributes and indices. The models also illustrate concepts such as identity 'contexts', the establishment of contexts which span sectors, and some of the ways in which architecture, technology and policy need to interact in order for the system as a whole to function correctly. Through the Summits, some key lessons were learned, and we derived simple models which help remove many of the obstacles to a productive, multi-stakeholder discussion of privacy issues. These lessons and models will be explored on this webcast, along with trends to watch for in the future. http://www.projectliberty.org/news_events/events/webcast_understanding_and_leveraging_the_open_source_liberty Understanding and Leveraging the Open Source Liberty Client Library will outline the functionality of the OpenLiberty-J client code and detail the 2008 roadmap for driving the project from beta to general availability. The webcast will provide an overview of OpenLiberty.org, discuss projects in the works and what the community expects to deliver in the future. Participants will understand how to begin building identity consuming applications with OpenLiberty-J today. Presented by Asa Hardcastle, Zenn New Media. http://www.projectliberty.org/news_events/events/driving_trusted_federations_with_standardized_identity_assurance_criteria_at_rsa_conference_2008 This panel presents the ongoing work and roadmaps of global organizations advancing trusted interfederations that span industries and regions. Addressing business and user benefits, technology challenges and regulatory concerns - participants will understand how global cross-industry interfederations are being developed today capable of supporting billions of simultaneous identity transactions. Type: Track Session Intermediate Legal/Compliance Speakers: Roger Sullivan President of Liberty Alliance, and VP Oracle Identity Management, Oracle Corporation Jane Hennessy Senior Vice President, Strategy/Cross-Sell and Marketing, International Personal Banking and WellsSecure, International Group, Wells Fargo Bank, N.A, Alexander Popowycz Vice President Information Security, Fidelity Investments Myisha Frazier-McElveen E-Authentication Solutions, US GSA Søren Peter Nielsen IT Architect, Chief Consultant, Danish National IT and Telecom Agency http://www.projectliberty.org/news_events/events/capitalizing_on_integrated_identity_management_at_2008_fstc_annual_conference Join Brett McDowell, Executive Director of Liberty Alliance for a panel discussion on Identity Management. Chaired by Leigh Williams, BITS. http://www.projectliberty.org/news_events/events/real_world_identity_risk_mitigation_via_collaborative_policies_at_bits_security_forum Join Jim Gross, Senior Vice President, WellsSecure, Wells Fargo for a panel discussion (Panel 6: Collaboration/Public Policies to Mitigate Risk) at the BITS Security Forum. A discussion from 5 panel experts - Jim will highlight the Identity Assurance Expert Group's Trust Framework as a public/private collaboration to minimize risks of repudiation, spoofing and phishing fraud. Moderator: Tom Doughty, Prudential Financial Panelists: Paul Kurtz, Good Harbor Consulting Matthew Moynahan, Veracode Dan Schutzer, FSTC Bob Wilkinson, Citigroup Jim Gross, Wells Fargo http://www.projectliberty.org/news_events/events/towergroup_pre_conference_workshop_on_identity_assurance_credential_and_assurance_programs_for_financial_services_identity_assurance_success The financial services sector is leading the industry in innovative new services and processes that utilize key identity information. What information is used, how it is shared and how it is protected has been the topic of much discussion and regulatory guidance, and organizations have struggled to grow their identity deployments outside of the virtual walls of the institution, impeding the growth that many have predicted would take place. The Identity Assurance Framework—a product of work from the global membership of the Liberty Alliance with heavy financial services and egovernment sector input—builds on existing NIST assurance level standards and collaborative input from other organizations. It aims to break through the barriers of growth, providing guidance for the support of mutual acceptance, validation, and life cycle maintenance across identity federations. Use of assurance levels, which range in confidence level from low to high, is determined by the level of confidence or trust necessary to mitigate risk in the transaction, and mirror the various levels of transactions common in the financial services sector. Through case studies of many leading financial services companies, including Citi, Fidelity, and Wells Fargo, among others, we'll introduce the Identity Assurance Framework and also formally launch our Identity Assurance Accreditation Program for Credential Service Providers (CSPs), introducing some of the program participants. Credential Service Providers are electronic trust service providers that operates one or more credential services, and can include Registration Authorities. This program builds upon Liberty's proven interoperability certification program, establishing and certifying test participants against baseline criteria for general organizational conformity, identity proofing services, credential strength, and credential management services The goal of this program is to initially provide federations and Federation Operators with the means to certify their members for the benefit of inter-federation and streamline the certification process for the industry. Follow-on phases will target the development of criteria for certification of relying parties and federations, themselves. This workshop will provide attendees with a solid understanding of Identity Assurance work underway in the marketplace, tangible guidance on what other institutions are doing, and a blueprint for how to get involved. Some technical knowledge is helpful but not mandatory as the bulk of the presentations will focus on business level case studies and the accreditation process. Business line managers, directors of risk management and security, risk and compliance officers, technoly strategists, product managers, and marketing officers are encouraged to attend. Location: 2008 TowerGroup Financial Services Business & Technology Conference & Exhibition Conference Dates: May 28 - May 30, 2008 Westin Boston Waterfront Hotel Boston, Massachusetts Draft Agenda: 1-1:30 pm Introduction of the Liberty Alliance - Brett McDowell, Executive Director 1:30-1:45 pm Introduction of the Identity Assurance Framework: Defining the Framework and Establishing Goals—Frank Villavicencio, Global Transaction Services, Citi, and Co-Chair of the Identity Assurance Expert Group 1:45-3 pm Case studies on financial sector application of Identity Assurance Framework and Concepts: Citi, Fidelity, and Wells Fargo—goal of these case studies is to provide understanding of how it fits into their business plans/goals, how they are contributing to a single standard solution (ie. marketplace alignment), and foundational guidance on how to get started 3-3:15pm Break 3:15-3:45 pm Introduction of the Accreditation Program and Program Participants--, Alex Popowycz, Fidelity Investments, and Co-Chair of the Identity Assurance Expert Group Presentation includes roll-out/launch the IAF accreditation program and announce initial participants 3:45-4:15 pm TBD 4-4:45 pm Putting the Accreditation Program to Use: Practice and Next Steps—Roundtable Q&A (moderated by Brett McDowell) 4:45-5 pm Wrap Up/Getting Involved—Brett McDowell http://www.projectliberty.org/news_events/events/webcast_identity_assurance_framework_common_organization_service_assessment_criteria This first webcast, the first in a four-part series, will be moderated by Jim Gross, Sr. Vice President, WellsSecure Identity Assurance, Wells Fargo. It is designed to discuss and gather feedback on the Common Organization Service Assessment Criteria section of the Identity Assurance Framework, currently a draft document. This section outlines the criteria for a Credential Service Provider's general business and organizational conformity of its services and its providers as it pertains to the four Levels of Assurance in the IAF. The review session will have a particular focus on elements such as enterprise & service maturity, information security management, operational infrastructure, external services & components, secure communications, etc. http://www.projectliberty.org/news_events/events/webcast_identity_assurance_framework_certification_accreditation_business_rules Moderated by Nathan Faut, Senior Associate, Federal practice, KPMG, this fourth of a four-part webcast series will focus on the Certification/Accreditation Business Rules. This section covers the business rules associated with participation in the Liberty Framework. The review session will focus on roles and responsibilities of CSP's, the role of the Federation Operator and a best practices guideline for relying parties. In addition, this section will discuss the process for accrediting assessors/auditors of CSP's for certification to the Liberty IAF. http://www.projectliberty.org/news_events/events/webcast_identity_assurance_framework_identity_proofing_service_assessment_criteria Moderated by Dr. Peter Alterman, Asst. CIO for EAuthentication, NIH, and Chair, Federal PKI Policy Authority, this webcast will focus on the Identity Proofing Service Assessment Criteria section of the IAF. The third in a four-part webcast series, content will focus on the criteria for a CSP's functional conformity of its identity proofing practices within the Four Levels of Assurance. The review session will focus on identity proofing elements such as Identity Proofing Policy, Identity verification practices, verification records, etc. http://www.projectliberty.org/news_events/events/webcast_identity_assurance_framework_credential_management_service_assessment_criteria This webcast, the second in a four-part series, will focus on the Credential Management Service Assessment Criteria. It will be moderated by Vijay Takanti, Exostar VP, Security Services; CertiPath, CTO and Policy Chair; and TSCP, Design Authority Lead. This section outlines the criteria for the functional conformity of a CSP's credential management services and those of its providers to comply with the Four Levels of Assurance. The review session will focus on the various credential-related processes including the operating environment, issuance, revocation, status management and validation/authentication of credentials. http://www.projectliberty.org/news_events/events/privacy_summit_at_net_id_2008 This interactive, round-table event will draw on the expertise of leading stakeholders from the policy-maker, legal, academic, privacy and technology communities. The identity and privacy challenges confronting us cannot be solved by a 'single-stakeholder' approach. This summit will give you a forum to contribute your perspective to a set of strategic recommendations, which will be documented and reported back to the participants. http://www.projectliberty.org/news_events/events/pki_logical_access_technology_applications_at_the_18th_annual_ctst_2008_conference Conor Cahill of Intel Corporation will speak on Liberty's Federated Identity in the PKI Logical Access Technology & Applications track. http://www.projectliberty.org/news_events/events/3rd_world_congress_3rd_annual_leadership_summit_on_the_road_to_interoperability The 3rd Annual World Congress Leadership Summit on The Road to Interoperability assembles the industry’s foremost industry practitioners and thought leaders who will address best practices in the implementation of innovative information technology strategies and solutions to improve the state of the healthcare system, to transform operations and enhance safety and quality, in an effort to meet the federally-mandated 2014 goal for nationwide health record portability and health data exchange. Specific solution areas to be covered include: * Electronic Medical Records (EMR) * Personal Health Records (PHR) * Patient-Centric Portals/Internet-based Communication Exchanges * Regional Health Information Networks (RHIO) http://www.projectliberty.org/news_events/events/workshop_understanding_liberty_s_identity_technology_standards_built_for_today_paving_way_to_tomorrow Strong open standards are driven by real customer and business needs that recognize marketplace growth is best achieved through interoperability. The Liberty Alliance was formed in Sept. 2001 to address these needs in the identity space, recognizing at the core of every transaction—across a variety of devices—identity information is shared: how much and how securely remains a key focus as identity web services now become more pervasive. http://www.projectliberty.org/news_events/events/achieving_identity_assurance_in_a_federated_world_at_2nd_annual_identity_access_management_for_government_conference