Introduction
Riding the Identity Tsunami - British Business Federation Authority
First the transistor then the computer then the Internet. Each of these has been a tsunami, having huge effect upon society and business, which no one really foresaw. The next tsunami is already upon us - federated identity management.
Federation is the ability of one organisation's identity management credentials to be trusted by another organisation so that employees and customers of one organisation can be trusted by those belonging to another. Supply chain globalisation and regulatory compliance are key drivers for adoption.
Re-use, time to market and competitive advantage are others. The rising levels of fraud are another driver - there were over $1 trillion of cybercrime in 2010. BBFA is reacting to the ID tsunami and seeks leading, innovative companies to work with BBFA and government organisations to put UK industryat the forefront of international federation.
Read the Full Story
Introduction - British Business Federation Authority
The BBFA (British Business Federation Authority) is a not-for-profit, self-regulating organisation to enable the implementation of federated trust across regulated UK companies and industries, based on strong authentication and authorisation policies, procedures and mechanisms, using industry investment. Its Steering Group comprises major companies from a number of regulated industry sectors.
Under the Steering Group’s direction, the BBFA’s working groups and Policy Management Authorities (PMAs) are starting to leverage existing international best practice to produce policies, procedures and enable the implementation of services for federated trust. The PMAs include Government representation.
Read the Full Story
- 19 Mar. TM Forum workshop to continue development of cyber operations metrics.
- 12+ Mar. BBFA supports UK-MOD leadership in MNE7 planning workshop in Budapest for the Limited Operational Experiment in Cyber Situational Awareness, taking place in Sep 12.
- 1 Mar. BBFA progress discussions with CIO Wales.
- 20+ Feb. BBFA support new counter cybercrime initiative.
- 16 Feb. BBFA dialogues with Chatham House.
- 9 Feb. BBFA meeting with Cabinet Office Crisis Management Team.
- 24 Jan. BBFA support TMForum in Madrid in the development of cyber operations metrics.
- 10-12 Jan 12. BBFA supports MOD in Multi National Experiment 7 - 'Secure Collaboration' in Lillehammer (with 15 nations) and inputs into the MNE7 Information Sharing Framework (ISF).
- 22 Dec. Cabinet Office IdAP Standards Workstream progress the Good Practice Guide 45 (Identity Verification) that is set to become a UK standard.
- 21 Dec. UK Payments Council attend BBFA Steering Group #17.
- 15 Dec. PANCRAS Printer Manufacturers WG meeting.
- 14 Dec. European Commission advise that details of the BBFA PANCRAS counter-fraud project to defeat fake documents have been sent to all member states. This follows on from the US Dept of Homeland Security briefing the White House.
- 9 Dec. BBFA run an RFI briefing session for potential Credential Service Providers for the UK PKI Bridge. Nine companies attend.
- 7 Dec. BBFA and its EUSTIC partners attend FP7 briefing run by the Technology Strategy Board.
- 2 Dec. BBFA meet with UK and Austrian partners to plan the international development of a Trust Framework Meta Model, using international funding. BBFA also met with the Austrian MOD (re MNE7) and Austrian Government CIO.
- 28/29 Nov. BBFA supported MOD in Multinational Experiment 7 Workshop in London to develop thinking on international Cyber Space Situational Awareness.
- 16 Nov. BBFA Federation PMA meeting, including NHS and Metropolitan Police
- 15 Nov. BBFA Steering Group #16. UK PKI Bridge on target for Jul 12.
- 14 Nov. BBFA expands Governance Structure to form the Assurance Oversight Committee (AOC) to lead on assurance and certification, linked to tScheme and Kantara Initiative.
- 9 Nov. Initial meeting with Dept of Business Innovation & Skills re Cyber Security
- 8 Nov - Panel member on the European Commission GINI-SA Hearing. (GINI is EU initiative similar to US NSTIC).
- 4 Nov - Strategy meeting with Legal Counsel for OpenID, OIX and Connect.me.
- 31 Oct - BBFA invited to Cabinet Office Minister's Briefing on e-Identity and Government Digital Services.
- 28 Oct - MOD debriefs BBFA on MNE7 workshops in Helsinki and Rome. MOD asks for further BBFA support.
- 27 Oct - BBFA attends the BCS/EEMA event on E-Identity and questions why the level of understanding and awareness in UK is failing to keep pace with national and international developments.
- 26 Oct - BBFA is a panel speaker at the Information Age Cloud Security Conference, London.
- 25 Oct - BBFA Steering Group. Work programme continues to expand. NHS and Police present letters of support to BBFA and request assistance.
- 20 - 21 Oct - BBFA attends the Kantara Initiative Summit (in San Francisco). KI asks BBFA to partner and play a leading role in European expansion.
- 20 Oct. US Federal CIO publishes OMB memo requiring all Federal agencies to develop plans within 90 days for accepting certified, externally issued credentials at LoA 1 within 3 years and LoA 2, 3 and 4 in due course.
- 18-19 Oct - BBFA attends Internet Identity Workshop (in San Francisco), including the NSTIC Workshop with US Gov. Excellent coordination on enabling technologies and major Internet Identity Providers, including Google, OpenID and OIX. This reinforces the importance and opportunities of BBFA's role in high assurance federation.
- 10-14 Oct - BBFA attends ISO/IEC SC27 WG5 in Nairobi as UK Project Leader on key Authentication & Authorisation standards. Also the UK lead on new work for Data Protection in the Cloud (including Privacy). Korea and Japan engage with BBFA.
- 3 Oct - BBFA attends European Commission launch of eIAS Project, which is to recommend way ahead for Europe on e-Identity, Authentication and Signatures (eIAS) from end 2012. eIAS ask for BBFA input.
- 28 Sep - BBFA presents to the IET Policy Board; key points for EDF Energy(Smart Metering) and BIS (Cyber Security Strategy).
- 28 Sep - BBFA presents to Jericho Forum.
- 26 Sep - Welsh Assembly Government requests BBFA assistance and joins BBFA Federation PMA.
- 20 Sep - NSA Trusted Computing Conference, Orlando, FL. BBFA is invited to present as one of four highliight innovations of the year. BBFA describes PANCRAS. NSA confirms new policy to require the use of Trusted Platform Module (TPM) in some Federal agencies. Microsoft outlines extensive use of TPM in Windows 8 (due 2013). Intel outlines TPM enhancements. Harris describes TIA4 cloud data centre using SCAP for controlled software.
- 19 Aug - BBFA assists MOD to plan UK industry support to NATO's Multinational Experiment 7 (MNE7) - Ensuring access to the Global Commons. UK is the lead nation for the Cyber-Security Situational Awareness component.
- 4 Aug - BBFA weekly support to Cabinet Office IdAP continues. Cabinet Office confirms policies are to conform with international standards, notably ISO 29115, based on the four Levels of Assurance 1-4 outlined in US M-04-04. CESG produces an initial draft HMG Standard for Identity Proofing & Verification of persons.
- 2 Aug - MOJ advises BBFA on its next steps in response to European Commission requirements affecting the legal profession and electronic exchange of legal data.
- 25 Jul - BBFA begins work with European partners to develop the Employer Register Service.
- 20 Jul - BBFA Steering Group #13 & Half Year Review attended by guest companies, NHS and Police.
- 19 Jul - BBFA Kick Off meeting of the UK Secure Printer Service using Pancras. Attended by secure printer manufacturers and printing operators.
- 1- 15 Jul - BBFA engages with secure printer companies who are Genesius members.
- 14 Jul - BBFA supports the weekly Cabinet Office Identity Assurance (IdAP) Workstream on Assurance and Standards (in addition to the Proposition Workstream)
- 13 Jul - BBFA increases support to the TFMM (Trust Framework Meta Model) work in Kantara being led by Austria
- 13 Jul - Notaries Society joins BBFA dialogue with Ministry of Justice on European e-Justice
- 8 Jul - BBFA continues support to MOD for the planning of NATO MNE7 Cyber-Security Situational Awareness
- 8 Jul - Federation PMA plans the completion of the policy document set to enable the UK PKI Bridge Team to plan implementation
- 30 Jun - Further discussions with Companies House on the potential relationship with a UK Employer Register
- 29 Jun - US/European SEUAC meeting of global pharmaceutical companies involved federation for drug registration and trials, and e-health patient records
- 22 Jun - Initial BBFA meeting with the Ministry of Justice on European Justice initiatives affecting UK
- 22 Jun - BBFA briefs Project Genesius, the Metropolitan Police Service's counter-fraud group of secure printer companies. BBFA proposes a new approach to defeat fake documents codenamed Pancras.