September 26, 2017 UXC Meeting Page

USER EXPERIENCE COMMITTEE MEETING NOTES

September 26, 2017
Attendees:

• Mary Hodder
• Tom Jones
• Jim Kragh
• Linda Braun, Global Inventures

Meeting Minutes

• Last week we discussed consent with Ken Kingenstein. He originally had done some work on Internet2. Unfortunately, he wasn’t on the call this week to discuss further.
• Mary Hodder suggested the team look at the language Tom Jones has been working on. In particular, Tom suggested we could look at what we could offer relying parties. Why would anybody care about the IDEF and what value does it offers? Tom read some of what he had written on the subject. "How to Make IDEF Attractive to Relying Parties" https://wiki.idesg.org/wiki/index.php?title=User_Experience_Trust_Metrics#Problem:_How_to_Make_IDEF_Attractive_to_Relying_Parties
• The goal of any trust framework is a community of users and providers that will make every person or Digital Entity feel more secure that their privacy, safety and money is not likely to be compromised while operating within the framework.
• This is accomplished by:
  • 1. Verifying that every Digital Entity that is member of the Framework has agreed to follow the principles and rules of the Framework.
  • 2. Enabling any Digital Entity to be assured that they are communicating with other entities that are currently part of the framework.
  • 3. Ensuring that users can be authenticated by Identity Providers that will follow the user's consent when release any user Private Information to any other Digital Entity.
  • 4. Knowing that when a user visits any web site (Relying Party); that site will honor the stipulations that the user places on the entity that holds their User Private Information.
• Equifax has no incentive to make people’s identities safe. That needs to change.
• Tom also suggested we might find some good ideas in a paper from Susan Morrow https://www.csoonline.com/article/3227912/identity-management/identity-data-in-the-world-of-gdpr.html.
• A suggestion was made about mapping the IDEF to GDPR.
• What would cause a Relying Party to put the IDESG logo on their site?
• Jim Kragh volunteered to work with Tom Jones on some use cases; regulated and non-regulated.
• Consent receipts are not in any of the IDESG documents. UXC could propose as a best practice.
• How does the IDEF relate to other frameworks? This definition would be helpful, Tom suggests.
• Mary Hodder will review the text and make some changes. She will share her changes with Tom and Jim Kragh. https://wiki.idesg.org/wiki/index.php?title=User_Experience_Trust_Metrics#Problem
• If Healthcare produces a framework, how does that relate to IDEF? There will be multiple frameworks in Healthcare and will there be subsets of frameworks within those domains. Discussion followed.

• Adjourn
  • 1:00 p.m. EDT

• Next meeting is scheduled for October 3, 2017

[[Category: User Experience]