13 KiB
| title | description | excerpt | permalink | redirect_from | tags | categories | header | updated | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Governments of Canada and the Pan Canadian Trust Framework | This framework is the next major step after the 2016 publication of the Pan-Canadian Trust Framework Overview by the Digital Identification and Authentication Council of Canada (DIACC) | "The Treasury Board Secretariat of Canada (TBS) and Shared Services Canada (SSC) are seeking a standardized method to issue and rapidly verify portable digital credentials across many different contexts, thereby reducing human judgement error, increasing efficiency and ensuring digital credential veracity using cryptography." | /government/canada/ | /public-sector/canada/ |
|
|
|
2020-12-04 |
The Framework
- Pan-Canadian Trust Framework (“PCTF”)
- Infrastructure (Technology & Operations): Component Overview and Conformance Profile Nov 2, 2020 (PCTF08)
Defines criteria, requirements, and guidelines regarding the trustworthiness of IT infrastructure.
- Credentials (Relationship & Attributes): Component Overview and Conformance Profile Sep 29, 2020 (PCTF07)
Defines criteria related to the creation, issuance, and management of credentials existing in digital form.
- Verified Organization: Component Overview and Conformance Profile Sep 29, 2020 (PCTF06)
Defines criteria that allow organizations to exchange trustworthy information about themselves or others (individuals or organizations) with external parties.
- Verified Person: Component Overview and Conformance Profile Sep 15, 2020 (PCTF05)
Defines criteria used to establish that a natural person is real, unique and identifiable.
- Privacy: Component Overview and Conformance Profile Sep 15, 2020 (PCTF04)
Defines criteria concerned with the handling of personal data for digital identity purposes.
- Authentication: Component Overview and Conformance Profile Sep 15, 2020 (PCTF03)
Defines criteria used to enable access to digital systems.
- Notice & Consent: Component Overview and Conformance Profile Sep 15, 2020 (PCTF02)
Defines criteria used to formulate a statement about the collection, use and disclosure of personal information, and to obtain a consent decision on that statement from a person authorized to do so.
- Infrastructure (Technology & Operations): Component Overview and Conformance Profile Nov 2, 2020 (PCTF08)
Background
- The Public Sector Profile of the Pan-Canadian Trust Framework Working Group Close-Out Report Tim Bouma
the PSP PCTF WG was an important vehicle for ensuring public sector communication and discussion across Canada
- Trust Frameworks? Standards Matter Tim Bouma
He points at the NIST documents about it Developing Trust Frameworks to Support Identity Federations published in 2018. He also points at the Canadian government’s definition of standards.
“a document that provides a set of agreed-upon rules, guidelines or characteristics for activities or their results. Standards establish accepted practices, technical requirements, and terminologies for diverse fields.” He goes on to highlight a lot of the work being done in Canada and where it all sits relative to being a standard - “In closing, there are lots of trust frameworks being developed today. But to be truly trusted, a trust framework needs to either apply existing standards or become a standard itself.”
- Looking Ahead in 2020
I believe it will be a breakout year for digital identity, and for the underlying technical infrastructure that we need to achieve our goals. I see the work progressing on two fronts: 1) Pan-Canadian Trust Framework, and, 2) Verifiable Credentials/Decentralized Identifiers Deployment.
- Public Sector Profile of the Pan-Canadian Trust Framework Version 1.0 Recommendation Draft — Now available on GitHub
The public sector profile of the PCTF reflects:
- Evolution of the Identity Management Sub-Committee (IMSC) efforts.
- The Need to Apply the PCTF for Assessments.
- Policy Alignment.
- IMSC Pan-Canadian Trust Framework Executive Summary
This document describes Version 1.0 of the IMSC Pan-Canadian Trust Framework (PCTF). This framework is the next major step after the 2016 publication of the Pan-Canadian Trust Framework Overview by the Digital Identification and Authentication Council of Canada (DIACC), in collaboration with the Canadian public sector Identity Management Sub-Committee (IMSC) of the Joint Councils (JC).
- IMSC Pan-Canadian Trust Framework - A summary of the latest iterations before our final version to be delivered on March 31st, 2019. The near to final document is here
- The Pan-Canadian Trust Framework Using Prolog
A ‘declarative framework’ (such as Prolog) focuses on the ‘what’ needs to be done, satisfied, relied on (i.e., proven to be true) versus ‘how to do it.’ In our case, with the Pan-Canadian Trust Framework (PCTF), it’s the question of ‘Can we rely on or accept a digital identity originating from a province or territory?’
- Pan-Canadian Trust Framework - Tim Bouma
The Pan-Canadian Trust Framework is how we will formalize the approval and acceptance of a “trusted digital identity.”
{% include video id="sg8qM9D_vqU" provider="youtube" %}
-
A Quick Video Tour of the PCTF Trusted Processes and Cross-Referencing
-
Pan-Canadian Trust Framework (Draft for Discussion) — deck, ... Here is a link to the discussion deck of the Pan-Canadian Trust Framework. One of the slides is depicted below.
-
White Paper: Canada’s Digital ID Future - A Federated Approach In this brief, we highlight why Canada needs a digital identity system, how other countries have made progress in this area and the lessons we can learn from those experiences to build a system in Canada.
-
canada-ca/PCTF-CCP - Public Sector Profile of the Pan-Canadian Trust Framework | Cadre de Confiance pancanadien
Public Sector Profile of the Pan-Canadian Trust Framework Version 1.0 Recommendation Draft (July 4th, 2019) A quick video overview of the document (this video is of a previous version will be updated shortly)
-
ssimeetup- Overview of Proposed Pan Canadian Trust Framework 1\2019 Slideshare
The Government of British Columbia and the Government of Ontario have already rolled out a production system using the Sovrin Network for business registration and licensing; together they've issued over 6 million credentials, according to Windley. - How Blockchain may Kill the Password
{% include figure image_path="/images/canadian-digital-identity-history.png" alt="canadian-digital-identity-history" caption="Annex E - 2014- 2017 Federating Identity: Milestones and Initiatives" %}
Related
- User-Centric Verifiable Digital Credentials
The Treasury Board Secretariat of Canada (TBS) and Shared Services Canada (SSC) are seeking a standardized method to issue and rapidly verify portable digital credentials across many different contexts, thereby reducing human judgement error, increasing efficiency and ensuring digital credential veracity using cryptography.
- USER AUTHENTICATION GUIDANCE FORINFORMATION TECHNOLOGY SYSTEMS
- Directive on Identity Management — 10 Years Later
On July 1st, 2019 the new Treasury Board Directive on Identity Management (DIDM) went into effect, 10 years to the day when it was first issued under the revised Policy on Government Security back on July 1, 2009. The directive is issued under the new Policy on Government Security (PGS) and the Directive on Security Management (DSM).
- Canadians expect government, private sector to develop digital ID framework
Some 70 percent of Canadians would adopt digital identity and think the government should join forces with the private sector to implement a Digital ID framework for better access to government benefits, healthcare, e-commerce, and financial services, found a survey conducted by non-profit Digital ID and Authentication Council of Canada (DIACC).