Assurance

["Jones, Mark B" <>]

We are not doing ‘remote’ proofing.  At least not in the NIST SP800-63 sense.

 

We have a process that involves the user appearing in-person before a Public Notary that we are interpreting as an ‘in-person’ proofing even though it occurs remote from our campus.  So we are applying the ‘in-person’ policies which do not include the problematic record checking.

 

My understanding is that there are services similar to public notaries available in other countries:  http://travel.state.gov/law/judicial/judicial_2086.html

 

 

 

From: [mailto:] On Behalf Of Lisa Campeau
Sent: Monday, September 17, 2012 3:30 PM
To:
Subject: [Assurance] remote proofing

 

For Silver certification:

 

Remote proofing (4.2.2.4.3.2):  ‘The RA verifies other information provided by the Subject using both of the ID numbers [government ID number and either a second government ID number or a financial account number] through record checks either with the applicable agency or institution or through credit bureaus or similar databases and confirms that: name, date of birth, and other personal information in records are on balance consistent with the application and sufficient to identify a unique individual.  If this appears to be the case, the RA authorizes issuance of Credentials.’

 

How are you, at your institutions,  performing  the record checking with ‘applicable agency or institution or through credit bureaus or similar databases’?

 

And does your institution’s solution work for remote proofing of non-U.S. individuals?

 

-          Lisa

 

Lisa Campeau

Team Leader, Identity Management Information

     and System Operations

Data Administration - Admin Information Technologies

University of Pennsylvania