11 KiB
title | description | excerpt | permalink | canonical_url | redirect_from | tags | categories | header | last_modified_at | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
The Pan Canadian Trust Framework | This framework is the next major step after the 2016 publication of the Pan-Canadian Trust Framework Overview by the Digital Identification and Authentication Council of Canada (DIACC) | "The Treasury Board Secretariat of Canada (TBS) and Shared Services Canada (SSC) are seeking a standardized method to issue and rapidly verify portable digital credentials across many different contexts, thereby reducing human judgement error, increasing efficiency and ensuring digital credential veracity using cryptography." | /government/canada/pctf/ | https://decentralized-id.com/government/canada/pctf/ | /public-sector/canada/ |
|
|
|
2023-06-09 |
The Framework
- Pan-Canadian Trust Framework (“PCTF”)
- Trust Registries 2023-03-28 Draft Recommendation V1.0 - Defines criteria, requirements, and guidelines regarding Trust Registries.
Stakeholders have identified the need for a set of criteria, requirements, and guidelines regarding Trust Registries governance, operations, and registration and certification management.
- Digital Wallet 2023-04-25 Final Recommendation V1.0 - Defines criteria, requirements, and guidelines regarding digital wallets.
Stakeholders have identified the need for a set of criteria that will be used to create well-designed, privacy enhancing digital wallets.
- Assurance Maturity Model 2021-06-28 Draft Recommendation V1.0 - Provides guidance regarding how to use PCTF conformance criteria in order to properly classify Levels of Assurance.
Stakeholders have identified the need for an Assurance Maturity Model to provide guidance regarding the use of PCTF conformance criteria in order to classify, compare, and align different Levels of Assurance schemes.
- Glossary 2020-03-10 Final Recommendation V1.0 - A list of terms identified in the PCTF.
Stakeholders have identified the need for a common set of definitions to be used to communicate with regard to identity and access management.
- Infrastructure 2023-04-25 Final Recommendation V1.2 - Defines criteria, requirements, and guidelines regarding the trustworthiness of IT infrastructure.
Stakeholders have identified the need for a set of criteria, requirements, and guidelines regarding the trustworthiness of IT infrastructure.
- Credentials 2020-06-01 Final Recommendation V1.0 - Defines criteria related to the creation, issuance, and management of credentials existing in digital form.
Stakeholders have identified the need for a set of criteria related to the creation, issuance, and management of credentials existing in digital form.
- Verified Organization 2020-02-17 Final Recommendation V1.0 - Defines criteria that allow organizations to exchange trustworthy information about themselves or others (individuals or organizations) with external parties.
Stakeholders have identified the need for a set of criteria that allow organizations to exchange trustworthy information about themselves or others (individuals or organizations) with external parties.
- Verified Person 2022-03-31 Final Recommendation V1.2 - Defines criteria used to establish that a natural person is real, unique and identifiable.
Stakeholders have identified the need for a set of criteria that will be used to establish that a natural person is real, unique and identifiable.
- Privacy 2022-03-31 Final Recommendation V1.2 - Defines criteria concerned with the handling of personal data for digital identity purposes.
Stakeholders have identified the need for a set of criteria concerned with the handling of personal data for digital identity purposes.
- Authentication 2019-05-15 Final Recommendation V1.0 - Defines criteria used to enable access to digital systems.
Stakeholders have identified the need for a set of criteria that will be used to enable access to digital systems.
- Notice Comment 2019-04-03 Final Recommendation V1.0 - Defines criteria used to formulate a statement about the collection, use and disclosure of personal information, and to obtain a consent decision on that statement from a person authorized to do so.
Stakeholders have identified the need for a set of criteria used to formulate a statement about the collection, use and disclosure of personal information, and to obtain a consent decision on that statement from a person authorized to do so.
- Model 2019-02-13 Final Recommendation V1.0 - A high-level model of PCTF related contextual information, goals, and objectives.
Stakeholders have identified the need for a high-level model to organize the Canadian Digital Identity Ecosystem.
- Overview 2016-08-01 Final - Sets out the vision and value proposition for the PCTF.
Canadian citizens and consumers, i.e. end users, are the beneficiaries of trust that will be achieved through service standardization and accountability to the PCTF.
Background
- The Public Sector Profile of the Pan-Canadian Trust Framework Working Group Close-Out Report 2020-12-12 Tim Bouma
the PSP PCTF WG was an important vehicle for ensuring public sector communication and discussion across Canada
- Trust Frameworks? Standards Matter 2020-11-15 Tim Bouma
He points at the NIST documents about it Developing Trust Frameworks to Support Identity Federations published in 2018. He also points at the Canadian government’s definition of standards.
“a document that provides a set of agreed-upon rules, guidelines or characteristics for activities or their results. Standards establish accepted practices, technical requirements, and terminologies for diverse fields.” He goes on to highlight a lot of the work being done in Canada and where it all sits relative to being a standard - “In closing, there are lots of trust frameworks being developed today. But to be truly trusted, a trust framework needs to either apply existing standards or become a standard itself.”
- IMSC Pan-Canadian Trust Framework Executive Summary 2020-04-01
This document describes Version 1.0 of the IMSC Pan-Canadian Trust Framework (PCTF). This framework is the next major step after the 2016 publication of the Pan-Canadian Trust Framework Overview by the Digital Identification and Authentication Council of Canada (DIACC), in collaboration with the Canadian public sector Identity Management Sub-Committee (IMSC) of the Joint Councils (JC).
- Looking Ahead in 2020 2020-01-03
I believe it will be a breakout year for digital identity, and for the underlying technical infrastructure that we need to achieve our goals. I see the work progressing on two fronts: 1) Pan-Canadian Trust Framework, and, 2) Verifiable Credentials/Decentralized Identifiers Deployment.
- Public Sector Profile of the Pan-Canadian Trust Framework Version 1.0 Recommendation Draft 2019-07-05 GitHub
The public sector profile of the PCTF reflects:
- Evolution of the Identity Management Sub-Committee (IMSC) efforts.
- The Need to Apply the PCTF for Assessments.
- Policy Alignment.
- White Paper: Canada’s Digital ID Future - A Federated Approach 2019-05-30
In this brief, we highlight why Canada needs a digital identity system, how other countries have made progress in this area and the lessons we can learn from those experiences to build a system in Canada.
- IMSC Pan-Canadian Trust Framework 2019-03-25
A summary of the latest iterations before our final version to be delivered on March 31st, 2019. The near to final document is here
- A Quick Video Tour of the PCTF Trusted Processes and Cross-Referencing 2019-02-10
- The Pan-Canadian Trust Framework Using Prolog 2019-01-03
A ‘declarative framework’ (such as Prolog) focuses on the ‘what’ needs to be done, satisfied, relied on (i.e., proven to be true) versus ‘how to do it.’ In our case, with the Pan-Canadian Trust Framework (PCTF), it’s the question of ‘Can we rely on or accept a digital identity originating from a province or territory?’
- ssimeetup- Overview of Proposed Pan Canadian Trust Framework 2019-01 Slideshare
The Government of British Columbia and the Government of Ontario have already rolled out a production system using the Sovrin Network for business registration and licensing; together they've issued over 6 million credentials, according to Windley. - How Blockchain may Kill the Password
- Pan-Canadian Trust Framework - Tim Bouma 2018-04-12
The Pan-Canadian Trust Framework is how we will formalize the approval and acceptance of a “trusted digital identity.”
{% include figure image_path="/images/canadian-digital-identity-history.png" alt="canadian-digital-identity-history" caption="Annex E - 2014- 2017 Federating Identity: Milestones and Initiatives" %}