NSTIC /4 Sessions Combined (W5C)
Session Topic: ANSTIC and Privacy (W5C)
Convener: Jeff, John Biccum, Dave Sanford
Notes-taker(s): Rick Campbell
Tags for the session - technology discussed/ideas considered:
Discussion notes, key understandings, outstanding questions, observations, and, if appropriate to this discussion: action items, next steps:
Some privacy compromise is an expected part of doing business, e. g. fraud analysis by credit card companies. In Identity parlance, the IDP (or Attribute Provider - AP) needs to know the RP, not just the user.
NSTIC - motivation is fundamentally that there is a public good.
FIPPS could be that public good.
Things that government can do:
- put money into it (analagous to building roads)
- begin to define regulartions in ways that help people understand
- Incentivize the desired behavior, e. g. define procurement regulations for suppliers
Proposal: Some modification to the trust framework could enable private sector IDPs to make money. (See credit card thing above)
PETS - Privacy Enhancing Technologies - to model a coin (???).