Time

Agenda Item

Lead

Notes

5 min

• Start recording

• Welcome & antitrust notice

• Introduction of new members

• Agenda review

Chairs

• Antitrust Policy Notice: Attendees are reminded to adhere to the meeting agenda and not participate in activities prohibited under antitrust and competition laws. Only members of ToIP who have signed the necessary agreements are permitted to participate in this activity beyond an observer role.

• New Members:

5 min

Review of previous action items

Chairs

15 mins

IIW Updates and Discussions

Andor

Discuss IIW

• Sample Topics:

  • OIDF Updates. v2 proposals.

  • Decentralized Trust Service 

    • https://github.com/verana-labs/decentralized-trust-spec/tree/main/docs/iiw39

  • Trust Frameworks for Aviation Security

  • did:tdw

  • high assurance VIDs

  • Trust Network Design

• IIW: 

  • Highest Attendance Ever : 350 People

• High Assurance VIDs:

  • Very likely needed for Trust Registries. 

  • Confidence to specific Trust Registries. 

• Decentralized Trust Service

  • Schedule a full session for later? 

  • Mobile application: Hologram.

  • 2 Credentials:

    • Identifies the service

    • Identifies the organization

    • Enforced the Trust Resolution. Prevents solution/services that do not comply.

    • Decentralized Trust – User Agent: 

      • Trust Registries. Organize permissions. 

      • Decentralized Trust Registry

Open

Open

Open

Open

Open

Open

Aviation :

• Lucy and Savita

• Rules and regulations to fly domestic vs. international. 

• Email handles:

  • Airlines: 

  • Print out physical documents and onboard every single flight. 

  • Get signatures at the airport. 

• Proposal to Trust Registry

  • LEI system and C2PA system. 

• Shared document working on. Not publicly available. 

• Security: 

  • Level of verification of person on the other end. 

  • Hey it came from @@americanAirlines.com

• International Aviation Trust Framework.

https://docs.google.com/document/d/1pS8eAZjwvQe-12SbJq_QAjTdEU-yM4KlocxAbydedKc/edit?tab=t.0

@Scott Perry : More information on the International Aviation Trust Framework.  It is being built as a traditional x.509 PKI: https://www.icao.int/APAC/Meetings/2021%20Cyber%20Security%20Webinar/SP102%20%E2%80%93%20FAA%20contribution%20to%20the%20IATF%20and%20Importance%20of%20IATF%20to%20FAA.pdf#search=iatf

DID:TDW:

• Spec moving and splitting out. 

• Presentation was well received. 

• https://docs.google.com/document/d/1Zhxr80VbpNs80ZRYWjan1u6jjlVkP7X_S7Cw5lkJoWc/edit?tab=t.0

OIDF: v2 Proposal

• Simplify the specification. 

  • Implementation Guides

• Profiles to get more modular and generalized. 

• Pressure to get the spec finalized.

• Possibly another approach to TRQP? 

Trust Network Design: 

• Abstract Model of how to communicate to a Trust Network:

  • Someone from https://en.m.wikipedia.org/wiki/National_Strategy_for_Trusted_Identities_in_Cyberspace came to the session.

  • NSTIC: Started from scratch. Met quite a bit, gave funding, died in time. No new funds. Estimation : People spent a lot of time and investments. 
    
    

    • Worth seeing if there were any techniques we can use. Using PKI. x509. 

  • @Judith Fleenor:

    • Done by NIST. 

    • Under the Obama administration. 

    • IDESG : The Identity Ecosystem Steering Group (IDESG) :

      • Bogged down in creating governance.

      • Several pilots/projects. 

      • Not necessarily useful. 

    • NSTIC paper good overview. 

    • NSTIC:  A lesson in overgovernance: https://www.nist.gov/document/nsticgovernancerecos31512finalv2a-2pdf

• High Assurance VIDs
  
  

  • Trying to transition bridge between technical realms. 

  • x509 to VID

  • Coming together to realize high assurance is misleading. 

    • Assurance of one technical trust realm to another technical trust realm. Linking them in a cryptographically verifiable way.

      • Increase the Level of Assurance in any of those identifiers. 

  • Markus gave a demo.

  • Trying to create harmonization between standards and approaches in silos. 

  • How do we talk together in hybrid environment. 

  • Bi-directional binding? 
    
    

    • Still 

10 mins

Deprecating old repo. 

Andor

Deprecate: https://github.com/trustoverip/tswg-trust-registry-tf/pull/117

Versioning Change: https://github.com/trustoverip/tswg-trust-registry-protocol/pull/75

10 mins

Backlogged: PRs and Issues 

Andor

Started addressing Github issues/PRs

5 mins

• Review decisions/action items

• Planning for next meeting 

Chairs