Assurance

["Jones, Mark B" <>]

We have to be careful with the term 'remote' here because it is used with a
specific meaning in 800-63.

I say yes if you mean, 'is it a way to do in-person identity proofing for
people who may never visit your campus'.  But if you mean 'remote' in the
800-63 sense the answer is no, in my opinion this method does not meet the
requirements for 'remote' proofing, it meets the 800-63 requirements for
in-person proofing.  Using a Notary is more like sending an agent of your
institution to wherever your user is to do the proofing.


> -----Original Message-----
> From: 
> 
>  [
> ]
>  On Behalf Of Dunker, Mary
> Sent: Friday, April 04, 2014 10:55 AM
> To: 
> 
> Subject: [Assurance] RE: Remote Identity Proofing
> 
> Mark,
> 
> I would also consider using a public notary to be in-person, but it is
still a way
> to handle proofing for remote people. This is helpful. Thanks!
> 
> Mary
> 
> 
> -----------------------------------------------------------------
> Mary Dunker
> Director, Secure Enterprise Technology Initiatives Virginia Tech
Information
> Technology
> 1700 Pratt Drive
> Blacksburg, VA 24060
> 540-231-9327
> 
> --------------------------------------------------------------------
> 
> 
> -----Original Message-----
> From: 
> 
>  [
> ]
>  On Behalf Of Jones, Mark B
> Sent: Friday, April 04, 2014 11:21 AM
> To: 
> 
> Subject: [Assurance] RE: Remote Identity Proofing
> 
> By the way, in terms of 800-63, we actually consider this in-person, not
> remote.
> 
> > -----Original Message-----
> > From: 
> > 
> >  [
> > ]
> >  On Behalf Of Jones, Mark B
> > Sent: Friday, April 04, 2014 10:19 AM
> > To: 
> > 
> > Subject: [Assurance] RE: Remote Identity Proofing
> >
> > Not sure if this is in the IAP or if it has been discussed, but we use
> > Public Notaries to do remote identity proofing.  I can't say that it
> solves
> > every problem or that it is wildly popular, but it does work.
> >
> > > -----Original Message-----
> > > From: 
> > > 
> > >  [
> > > ]
> > >  On Behalf Of Dunker, Mary
> > > Sent: Friday, April 04, 2014 9:06 AM
> > > To: 
> > > 
> > > Subject: [Assurance] Remote Identity Proofing
> > >
> > > Hello, Assurance colleagues,
> > >
> > > I'm wondering if any progress has been made on remote identity
> proofing
> > > procedures that could be used not only for InCommon Silver, but also
for
> > > students who will never visit the physical campus. Section 4.2.2.4.3
of
> > the IAP
> > > contains requirements for Silver remote proofing, and Michael Gettes
> > > proposed a procedure at
> > >
> >
> https://urldefense.proofpoint.com/v1/url?u=https://spaces.internet2.edu/
> > > display/InCAssurance/CMU%2B-
> > >
> >
> %2BMichael%2BGettes%2BProposal&k=yYSsEqip9%2FcIjLHUhVwIqA%3D%3
> > >
> >
> D%0A&r=o50KCUcRVN10tgtglyNVFw2kmizyPIIFTSGui%2BBSZ5A%3D%0A&m
> > >
> >
> =XTMopIC5JRcpqBkLY7TnY5D%2BaCNMxmpubPM63q%2FCjAY%3D%0A&s=7
> > >
> e5d85f19908cd6b6ee7792607519eb3f464d66a8e9ba888f6a1bb4a1e03b296 .
> > >
> > > Has anyone actually implemented one of these procedures or something
> > > similar? If so, would you please share some details?
> > >
> > > Thank you,
> > > Mary
> > > -----------------------------------------------------------------
> > > Mary Dunker
> > > Director, Secure Enterprise Technology Initiatives Virginia Tech
> > Information
> > > Technology
> > > 1700 Pratt Drive
> > > Blacksburg, VA 24060
> > > 540-231-9327
> > > 
> > > --------------------------------------------------------------------
> > >

Attachment: smime.p7s
Description: S/MIME cryptographic signature