Level of Assurance - Revision history

Tomjones: /* References */

2021-03-14T00:39:04Z

References

← Older revision		Revision as of 00:39, 14 March 2021
Line 15:		Line 15:
	* [[ISO/IEC 29115 Entity Authentication Assurance]] - was based on 63-2, but has been withdrawn pending upcoming changes from NIST.		* [[ISO/IEC 29115 Entity Authentication Assurance]] - was based on 63-2, but has been withdrawn pending upcoming changes from NIST.
	* [[NIST SP 800-63-3]]		* [[NIST SP 800-63-3]]
	* [[NISTIR 8344]] a draft Ontology of Authentication release in 2021-02, comments du on 2021-04-09. It is expected that the ideas on IAA and OAA in tis doc will be carried forward to 63-4.		* [[NISTIR 8344]] a draft Ontology of Authentication release in 2021-02, comments due on 2021-04-09. It is expected that the ideas on IAA and OAA in tis doc will be carried forward to 63-4.

	[[Category: Assurance]]		[[Category: Assurance]]

Tomjones: /* References */

2021-03-14T00:38:43Z

References

← Older revision		Revision as of 00:38, 14 March 2021
Line 13:		Line 13:
	* [[NIST SP 800-63-1]]		* [[NIST SP 800-63-1]]
	* [[NIST SP 800-63-2]]		* [[NIST SP 800-63-2]]
			* [[ISO/IEC 29115 Entity Authentication Assurance]] - was based on 63-2, but has been withdrawn pending upcoming changes from NIST.
	* [[NIST SP 800-63-3]]		* [[NIST SP 800-63-3]]
	* [[ISO/IEC 29115 Entity Authentication Assurance]] - was based on 63-2, but has been withdrawn pending upcoming changes from NIST.
	* [[NISTIR 8344]] a draft Ontology of Authentication release in 2021-02, comments du on 2021-04-09. It is expected that the ideas on IAA and OAA in tis doc will be carried forward to 63-4.		* [[NISTIR 8344]] a draft Ontology of Authentication release in 2021-02, comments du on 2021-04-09. It is expected that the ideas on IAA and OAA in tis doc will be carried forward to 63-4.

Tomjones: /* Healthcare */

2021-03-14T00:37:00Z

Healthcare

← Older revision		Revision as of 00:37, 14 March 2021
Line 6:		Line 6:
	Federations are likely to specify a detailed set of criteria that apply to their particular circumstances.		Federations are likely to specify a detailed set of criteria that apply to their particular circumstances.
	===Healthcare===		===Healthcare===
	* [https://healthcaresecprivacy.blogspot.com/2021/03/healthcare-use-of-identity-level-of.html?m=1 Healthcare Exchange Standards		* [https://healthcaresecprivacy.blogspot.com/2021/03/healthcare-use-of-identity-level-of.html?m=1 Healthcare Exchange Standards] Discussions of Interoperability Exchange, Privacy, and Security in Healthcare by John Moehrke -<blockquote>CyberPrivacy. Topics: Health Information Exchange, Document Exchange XDS/XCA/MHD, mHealth, Meaningful Use, Direct, Patient Identity, Provider Directories, FHIR, Consent, Access Control, Audit Control, Accounting of Disclosures, Identity, Authorization, Authentication, Encryption, Digital Signatures, Transport/Media Security, De-Identification, Pseudonymization, Anonymization, and Blockchain.</blockquote>
	Discussions of Interoperability Exchange, Privacy, and Security in Healthcare by John Moehrke - CyberPrivacy. Topics: Health Information Exchange, Document Exchange XDS/XCA/MHD, mHealth, Meaningful Use, Direct, Patient Identity, Provider Directories, FHIR, Consent, Access Control, Audit Control, Accounting of Disclosures, Identity, Authorization, Authentication, Encryption, Digital Signatures, Transport/Media Security, De-Identification, Pseudonymization, Anonymization, and Blockchain.
	* [https://www.c4tbh.org/wp-content/uploads/2020/04/ONC-identity13-Identity-and-Access-Management-for-Health-HIE.pdf National HIE Governance Forum - Identity and Access Management for Health Information Exchange]		* [https://www.c4tbh.org/wp-content/uploads/2020/04/ONC-identity13-Identity-and-Access-Management-for-Health-HIE.pdf National HIE Governance Forum - Identity and Access Management for Health Information Exchange]
	* [https://www.healthit.gov/sites/default/files/DirectTrust_Comments_MPN_041516.pdf Direct Trust response to Request for Information on Updates to ONC’s Voluntary Personal Health Record Model Privacy Notice, 2016-04239]		* [https://www.healthit.gov/sites/default/files/DirectTrust_Comments_MPN_041516.pdf Direct Trust response to Request for Information on Updates to ONC’s Voluntary Personal Health Record Model Privacy Notice, 2016-04239]

Tomjones: /* Healthcare */

2021-03-14T00:35:16Z

Healthcare

← Older revision		Revision as of 00:35, 14 March 2021
Line 6:		Line 6:
	Federations are likely to specify a detailed set of criteria that apply to their particular circumstances.		Federations are likely to specify a detailed set of criteria that apply to their particular circumstances.
	===Healthcare===		===Healthcare===
			* [https://healthcaresecprivacy.blogspot.com/2021/03/healthcare-use-of-identity-level-of.html?m=1 Healthcare Exchange Standards
			Discussions of Interoperability Exchange, Privacy, and Security in Healthcare by John Moehrke - CyberPrivacy. Topics: Health Information Exchange, Document Exchange XDS/XCA/MHD, mHealth, Meaningful Use, Direct, Patient Identity, Provider Directories, FHIR, Consent, Access Control, Audit Control, Accounting of Disclosures, Identity, Authorization, Authentication, Encryption, Digital Signatures, Transport/Media Security, De-Identification, Pseudonymization, Anonymization, and Blockchain.
	* [https://www.c4tbh.org/wp-content/uploads/2020/04/ONC-identity13-Identity-and-Access-Management-for-Health-HIE.pdf National HIE Governance Forum - Identity and Access Management for Health Information Exchange]		* [https://www.c4tbh.org/wp-content/uploads/2020/04/ONC-identity13-Identity-and-Access-Management-for-Health-HIE.pdf National HIE Governance Forum - Identity and Access Management for Health Information Exchange]
	* [https://www.healthit.gov/sites/default/files/DirectTrust_Comments_MPN_041516.pdf Direct Trust response to Request for Information on Updates to ONC’s Voluntary Personal Health Record Model Privacy Notice, 2016-04239]		* [https://www.healthit.gov/sites/default/files/DirectTrust_Comments_MPN_041516.pdf Direct Trust response to Request for Information on Updates to ONC’s Voluntary Personal Health Record Model Privacy Notice, 2016-04239]

Tomjones at 00:21, 14 March 2021

2021-03-14T00:21:13Z

← Older revision		Revision as of 00:21, 14 March 2021
Line 12:		Line 12:
	* [[NIST SP 800-63-1]]		* [[NIST SP 800-63-1]]
	* [[NIST SP 800-63-2]]		* [[NIST SP 800-63-2]]
	* [[ISO/IEC 29115 Entity Authentication Assurance]]		* [[NIST SP 800-63-3]]
			* [[ISO/IEC 29115 Entity Authentication Assurance]] - was based on 63-2, but has been withdrawn pending upcoming changes from NIST.
			* [[NISTIR 8344]] a draft Ontology of Authentication release in 2021-02, comments du on 2021-04-09. It is expected that the ideas on IAA and OAA in tis doc will be carried forward to 63-4.

	[[Category: Assurance]]		[[Category: Assurance]]
			[[Category: Identity]]
			[[Category: Authentication]]
			[[Category: Federation]]
	[[Category: Health]]		[[Category: Health]]

Tomjones: /* Solutions */

2020-08-24T00:39:33Z

Solutions

← Older revision		Revision as of 00:39, 24 August 2020
Line 4:		Line 4:
	Specification from NIST and ISO are general and difficult to apply in real world situations.		Specification from NIST and ISO are general and difficult to apply in real world situations.
	==Solutions==		==Solutions==
	Federations a likely to specify a detailed set of criteria that apply to their particular circumstances.		Federations are likely to specify a detailed set of criteria that apply to their particular circumstances.
	===~~Healtcare~~===		===Healthcare===
	* [https://www.c4tbh.org/wp-content/uploads/2020/04/ONC-identity13-Identity-and-Access-Management-for-Health-HIE.pdf National HIE Governance Forum - Identity and Access Management for Health Information Exchange]		* [https://www.c4tbh.org/wp-content/uploads/2020/04/ONC-identity13-Identity-and-Access-Management-for-Health-HIE.pdf National HIE Governance Forum - Identity and Access Management for Health Information Exchange]
	* [https://www.healthit.gov/sites/default/files/DirectTrust_Comments_MPN_041516.pdf Direct Trust response to Request for Information on Updates to ONC’s Voluntary Personal Health Record Model Privacy Notice, 2016-04239]		* [https://www.healthit.gov/sites/default/files/DirectTrust_Comments_MPN_041516.pdf Direct Trust response to Request for Information on Updates to ONC’s Voluntary Personal Health Record Model Privacy Notice, 2016-04239]

	==References==		==References==
	* [[NIST SP 800-63-1]]		* [[NIST SP 800-63-1]]

Tomjones at 00:38, 24 August 2020

2020-08-24T00:38:12Z

← Older revision		Revision as of 00:38, 24 August 2020
Line 2:		Line 2:
	Early Identity Assurance combined Identity Proofing and Authentication into a single list of four [[Level of Assurance]] criteria.		Early Identity Assurance combined Identity Proofing and Authentication into a single list of four [[Level of Assurance]] criteria.
	==Context==		==Context==
			Specification from NIST and ISO are general and difficult to apply in real world situations.
			==Solutions==
			Federations a likely to specify a detailed set of criteria that apply to their particular circumstances.
			===Healtcare===
			* [https://www.c4tbh.org/wp-content/uploads/2020/04/ONC-identity13-Identity-and-Access-Management-for-Health-HIE.pdf National HIE Governance Forum - Identity and Access Management for Health Information Exchange]
			* [https://www.healthit.gov/sites/default/files/DirectTrust_Comments_MPN_041516.pdf Direct Trust response to Request for Information on Updates to ONC’s Voluntary Personal Health Record Model Privacy Notice, 2016-04239]
	==References==		==References==
	* [[NIST SP 800-63-1]]		* [[NIST SP 800-63-1]]
Line 9:		Line 14:

	[[Category: Assurance]]		[[Category: Assurance]]
			[[Category: Health]]

Tomjones: Created page with "==Full Title== Early Identity Assurance combined Identity Proofing and Authentication into a single list of four Level of Assurance criteria. ==Context== ==References== *..."

2020-08-24T00:32:25Z

Created page with "==Full Title== Early Identity Assurance combined Identity Proofing and Authentication into a single list of four Level of Assurance criteria. ==Context== ==References== *..."

New page

==Full Title==
Early Identity Assurance combined Identity Proofing and Authentication into a single list of four [[Level of Assurance]] criteria.
==Context==

==References==
* [[NIST SP 800-63-1]]
* [[NIST SP 800-63-2]]
* [[ISO/IEC 29115 Entity Authentication Assurance]]

[[Category: Assurance]]