National Strategy for Trusted Identities in Cyberspace

National Strategy for Trusted Identities in Cyberspace

Happening NOW on the NSTIC Notes Blog (view all blogs)

Introducing 3 newest members of NSTIC pilots family: The NSTIC pilots family is growing today with the announcement of three new pilot projects receiving NIST grants! These projects will join the ranks of the 15 active NSTIC pilots and alumni that know all about catalyzing a marketplace of identity solutions. NIST civic hacking challenge sparks the creation of an innovative new API: Multi-factor authentication (MFA) is near and dear to our hearts at NSTIC. We understand how important it is to the security and privacy of online transactions and we get excited about any opportunity to increase the awareness of—and encourage the adoption of—MFA. This is why we jumped at the opportunity to submit a challenge about MFA for the National Day of Civic Hacking earlier this summer. Goals of NSTIC past, present, and future: NCSA guest blog interview It’s certainly too early to spike the ball, but yesterday the Identity Ecosystem Steering Group (IDESG) met another milestone by approving the initial set of baseline requirements for the Identity Ecosystem Framework (IDEF). These requirements are a critical element to building the IDEF—which the IDESG has been chartered to establish and govern. Summer homework: NIST welcomes comments until 7/13 on draft privacy risk management framework Earlier today, the privacy engineering team at NIST released its draft NIST Internal Report 8062, Privacy Risk Management for Federal Information Systems, and is seeking comments on that draft. This report introduces a privacy risk management framework (PRMF) for anticipating and addressing privacy risks that result from the processing of personal information in federal information technology systems. In particular, it focuses on three privacy engineering objectives—predictability, manageability, and disassociability—and a privacy risk model.

Fourth and goal: closing in on the Identity Ecosystem Framework It’s certainly too early to spike the ball, but yesterday the Identity Ecosystem Steering Group (IDESG) met another milestone by approving the initial set of baseline requirements for the Identity Ecosystem Framework (IDEF). These requirements are a critical element to building the IDEF—which the IDESG has been chartered to establish and govern. As identified in the NSTIC, successful establishment of the IDEF is a must-have in the ongoing successful development of online commerce, government efficiency, and effective and efficient communication among and between individuals, the private sector, and the public sector. The baseline requirements were developed by IDESG work committees to address minimum requirements for Identity Ecosystem participants in four key areas: privacy, security and resiliency, interoperability, and user experience. These areas align directly with the committee structure of the IDESG and with the Guiding Principles of the NSTIC. NIST joins the FIDO Alliance Recently NIST joined the FIDO Alliance under its newly-created government membership class. The FIDO Alliance was formed in July of 2012 and aims to bring easy-to-use, privacy-enhancing authentication devices to the consumer mass market. FIDO-based credentials are designed to provide an anonymous key without any publicly available serial number or central authority. The FIDO 1.0 specifications allow for strong, multifactor credentials, a major point of focus in the National Strategy for Trusted Identities in Cyberspace.