Time

Agenda Item

Lead

Notes

3 min

• Start recording

• Welcome & antitrust notice

• Introduction of new members

• Agenda review

Chairs

• Antitrust Policy Notice: Attendees are reminded to adhere to the meeting agenda and not participate in activities prohibited under antitrust and competition laws. Only members of ToIP who have signed the necessary agreements are permitted to participate in this activity beyond an observer role.

• New Members:

5 min

General announcements

All

Updates from TSWG members of general interest to the group:

• @Daniel Bachenheimer shared that the Biometrics Institute had their main event in London last week. Dan and his Accenture associate Kotryna presented on digital identity. Dan said there was a lot of interest in ISO mDL and ICAO DTC (Digital Travel Credential).

  • Drummond asked about the status of ICAO DTC's status. Dan explained that the only international standard cross-border credential is the ICAO ePassport. The DTC is based on that standard, so it is the only internationally approved travel credential. However it is very rigid in terms of issuance, extensibility and verifiability.

  • Dan also explained that the ICAO DTC does not specify an issuance protocol.

  • It also allows only proximity-based presentation.

  • @Michael Palage agreed with everything that Dan said about ICAO DTC. He said that AMVA is rolling out their trust registry for mDL later this year. Michael himself has a Florida driver's license now. Michael said that they do envision an online presentation of how Florida is looking at doing this.

  • Dan is worried about the "phone home" component of the way ISO mDL verification works — to be able to request additional information from the issuer about the subject — is scary from a privacy standpoint.

  • Dan did say that the ISO mDL/mDOC spec allows for selective disclosure if claims are pre-issued.

• @Jacques Latour (Deactivated) is leading the Trust Registry WG at DIACC. They are working on a definition of a trust registry, and it would be ideal if that aligned with ToIP.

• @Michael Palage said that both he and Jacque are going to be participating in an ICANN meeting on alternative identifiers. They will be sharing about ToIP and GLEIF LEIs and vLEIs.

• @Drummond TODO about Bermuda.

2 min

Review of Action Items from the previous meeting

Chairs

15 min

Task Force Reports

TF Leads

Technology Architecture TF — @Wenjing Chu  @Drummond Reed

• We are moving into the final stages of preparing the First Public Review Draft of the ToIP Technology Architecture Specification. 

• @Drummond Reed is back from his next set of travels and will be focusing intensely this week on PRs that will address all the priority: high and priority: medium GitHub issues. 

Trust Registry TF — @Darrell O'Donnell

• Drummond explained that Darrell was traveling this week and could not attend to give an update, but that Darrell wants to start work on this in earnest after Internet Identity Workshop.

• @Jacques Latour (Deactivated) met with the Franhaufer team working on TRAIN, which is DNS-based, and wants to explore how that can be accommodated in V2.

ACTION: @Drummond Reed to put the Trust Registry TF charter update on the agenda for the next TRTF meeting (post IIW), and let @Jacques Latour (Deactivated) know what that date is.

ACDC TF — @Sam Smith @Philip Feairheller 

• No one from ACDC was able to attend.

AI & Metaverse (AIM) Technology TF — @Wenjing Chu @Vikas Malhotra 

• @Sandy Aggarwal said that he was part of the last meeting, where they discussed doing a POC on personas and how they would register with one or more trust registries. Each of them could tie back to a specific real-world person, but some of the avatars may actually be AI bots of some kind. So the question is how they can be registered for purposes of authenticating and establishing trust.

  • Sandy gave an example of Second Life, where two people are interacting, and they form a Second Life family that starts having "offspring" that do not actually tie back to any actual person. The "children" are just a process that is getting spun up.

  • This closely ties back to some questions about the OpenWallet Foundation and responsibility for payments from a digital wallet. What do you do about an avatar-to-avatar payments? How do you handle receipts and accounting?

  • @Daniel Bachenheimer said that, at the biometrics meeting he mentioned (see Announcements above), there was a presentation by Meta about this same question about accountability. Dan was not very satisifed with the answers provided there.

  • Sandy said that is why he is doing his research about how this aspect of payments needs to work. Do all actors in a payment system need to be registered with a trust registry of some kind, but at the same time enable anonymous "cash" transactions?

  • @Jacques Latour (Deactivated) noted: "a persona would not register with a trust registry, the issuer would be registered in the trust registry... A persona would be registered in an issuer registry..."

W3C Concept Development TF (W3TF) — @Darrell O'Donnell 

• Still in formation.

10 min

OpenWallet Foundation discussion

@Drummond Reed 

OWF is starting to coalesce around proposals for specific code modules and associated WGs. Candidates include:

• Payment Tokenisation (EMV Payment Tokenisation Specification)

• ISO mDL (ISO/IEC 18013-5:2021 - Mobile Driving Licence (mDL))

• W3C Verifiable Credentials (W3C Verifiable Credentials Data Model v1.1)

• Anonymous Credentials (AnonCreds Specification v1.0 Draft)

ToIP members and the TSWG may want to consider the code modules and associated/joint WGs that would provide ToIP interoperability.

• Drummond explained that he believes OWF will have Associate Memberships for other industry non-profits like ToIP, DIF, OIDF, OIX, etc.

• @Daniel Bachenheimer asked the question of how OWF will define how to organize the effort such that all the parties at the table will have the same view of a digital wallet.

15 min

Internet Identity Workshop sessions

All

What TSWG-related sessions do we want to propose at IIW in two weeks? Candidates:

1. Introduction to the ToIP Technology Architecture Specification Public Review Draft

2. The ToIP Trust Spanning Protocol

3. The ToIP Trust Registry Protocol

5 min

Any other business

5 min

• Review decisions/action items

• Planning for next meeting 

Chairs

Our next meeting falls on the Monday before IIW when a number of us will be traveling. Should we cancel that meeting?

ACTION: @Drummond Reed will cancel the next meeting on Nov 14. Our next meeting with be November 28 and will include a report on highlights of Internet Identity Workshop.