Attendees April 6 2021

Co-Leads:

• Bryn Robinson-Morgan (Mastercard)
• Paco Garcia (Yoti)

ID2020 PM:

• Todd Gehrke

Participants: 

• Matt Snyder (CLEAR)          
• John Garratt (iProov)          
• Mike Varley (SecureKey)        
• Dan Bachenheimer (Accenture) 
• Paul Murdoch (Roche)           
• Chester Drum (AOKPass)   
• Rob Haslam (Tech5)  
• Scott Perry
• Drummond Reed
• Sid Mishra
• Stew Whitman
• Kaliya Young
• Sankarshan (Dhiway)

Agenda Items

Presentations - Identity Binding – Introductory Information.pdf

(PDFs posted)

Recording - Link

Notes

1. Welcome and Linux Foundation antitrust policy

The way we have structured GHP is around the three zones. 

Could use biometric binding 

The cert doesn’t need to happen at the same time as vac - linking it to a person is in fact linking it to an identity

[Dan] - We are talking about assurance levels. Biometrics is one way. 

• Ideally at the point of vac a live photo is captured - this would work on paper as well.
• All of the cred that are already out there are not likely to change their model
• We need to collaborate on what good looks like and the consequences of making compromise.
• Add assurance level to the cred so the verifier can decide.

[Paco] what is the minimum level we need across the three zones.

• Can add the concept of late binding to provide enough trust in each zone. Today we use a PDF document which is not verifiable.

[Scott] 

1. We state that we can’t give the answers to everything but we can give recommendations.

[Bryn]

1. Economics and the commercials around this topic of identity binding would also need to be considered. Especially when the beneficiary is some org like an airport, border control etc. Providers of health pass solutions have the ability to implement the specifics of identity binding. ‘Who is paying for things, who is going to invest in technology and who are the beneficiaries’
2. GHP not being ‘perfect’ health pass collaborative. Looking at solutions which can be rolled out in a quick time scale.
3. [Daniel B] Economics for getting people vaccinated and getting vaccination certificates becomes much simpler in absence of international travel. ‘I have the means to travel internationally and I need to prove at the destination country of my status’. What good looks like could be broken up into major use cases
1. [Rob Haslam] Can it be legislated in advance as to what it is needed for? Because the usage are many
4. [Paco] Might not be useful to get into predicting the future. However, we can define levels of assurance specific to each Zone. WG recommendations could be around what needs to happen for LoAs across the different zones.
5. [Bryn] What do we need to do between now and meeting up next week?
1. Please read the draft paper being put together 
2. Need individuals to comment on the paper - both on what exists and what is possibly missing (eg. ‘this needs to change, for this reason and this is the change’). Add rationale if there is additional information and section
3. The overall blueprint outline is published on the GHP site. Socialize that through the professional network to give a shout-out.
4. Conversations in this WG would have an impact on other WGs. eg. Identity Binding would have impact on the Credential Definition
5. [Todd] All files for this group are on google drive here: https://drive.google.com/drive/u/0/folders/1LFF5ipUmE1moxjc9pzndMdyBlit-bm0e 
6. [Paco] What are the key questions and what do we need to focus on in the very short term
1. [Todd] we can use them to isolate what we are going to focus on. Will be working with Bryn to enable taking in comments/edits as well

• Next steps
  1. Everyone is asked to review the Identity Binding and Authentication - Draft for Review.pdf
  2. Identity Binding — Key Interoperability Questions That Must Be Answered 

Action Items

1. TBC