Wiki

Attendees

Nat Sakimura
Mark Haine
Torsten Lodderstedt
Alberto Pulido
Don Thibeau
Kosuke Koiwai
Takahiko Kawasaki
Julian White
Daniel Fett
Stuart Low
Joseph Heenan
Durand Stephane
Achim Schlosser
Naohiro Fujie

Agenda

Brief review of external Orgs & Events
Agenda items
PRs & Issues

Added agenda item on the A/B Connect WG

Conditional claims managed by eKYC WG
Torsten and Alberto will join the A/B Connect WG call

Brief review of external Orgs & Events

GLEIF - Mark, Don
- Mark had a presentation about KYC in the context of legal entity at GLEIF meeting.
- Agreed to meet again in January to discuss how we may work together.
- Don has been a part of the conversation as well.
- Early next year, this is an important piece of work as the GLEIF is investing heavily on this topic.
- If anyone in this WG who have an interest in this PoC or sandbox, it would be appreciated to join the activities and please let Don or Mark know.
- As the Tokyo Stock Exchange is the member of the GLEIF, it would be interesting work for the members of the working group from OIDF-Japan.
- Also as the GLEIF have been founded by G20, it is quite worthy engagement for the OIDF and give the eKYC standard which will directly visible in those countries.
METI
- Mark created PR for the authority extension
- METI people have just started to review the document

Agenda Items

Incorporation of Santander contribution
- Haven't created a PR yet.
Creation of roadmap and FAQ documentation Issues ~~#1123~~ and ~~#1222~~
- Before creating the roadmap, we need to discuss how to get to the 3rd implementers draft
How to get to 3rd implementers draft
- We need to solve PR #52, PR #50 and some of the issues to move on to the 3rd implementers draft.
- Torsten proposed to have co-chairs meeting in the end of this week
- Julian have raised an issue about using alpha-2 or alpha-3 on country code and the issue will be discussed whether it will be on the implementers draft 3 or not.

PRs & Issues

Introduction of PR #52 – abort/omit
- Daniel created PR separeted from PR #50
- His proposal aims to make it more flexible if the PR expected to abort a transaction if the condition cannot be met.
- Key proposal
  +| | within verified_claims/verification | else |
  +| ------------------ | ------------------------------------- | ------ |
  +| if_unavailable | omit | omit |
  +| if_not_consented | omit | omit |
  +| if_no_match | omit_verified_claims | omit |
- Torsten asked
  - From PR's perspective, it seems that the result is the same if an user did not consent or the OP was unavailable to provide the requested claims.
  - Torten will add a comment on the PR.
- Alberto asked.
  - For the scenario that RP aggregate claims from multiple OPs, it would be more complex. It would be better discuss in the core spec.
Introduction of PR #51 – authority extension
- Mark showed short presentation slides about the authority extension.
- Comment from Torsten
  - How to create chain of trust? Even though the user is one of the member of the board of directors of the legal entity, the assertion for the user is being generated by an IdP.
  - IdP have trustframework that define how to verify claimants.
  - Currently we don't have full chain of trust.
  - Keep this PR for while to get more comments
- Comment from Achim
  - Concern about B2B use-cases where generating assertion around business entities using OAuth2. We'd better to involve some folks that actually specialize in B2B scenarios.
  - This is the reason why to have engagement with the global legal entity identifier foundation. Also Mark have already been working with the Trust over IP foundation and looking at using verifiable credentials for the use-case of a person being able to assert their authority over a company.
- Comment from Nat
  - METI from Japanese government have an interest on this kind of topic.
  - They are creating the registry of the directors like this.
  - And Tokyo Stock Exchange have also have registration authority.
  - Mark have met a guy from Tokyo Stock Exchange who have been looking at the same thing.
PR #50 – Attaching evidence documents - Kai
- Form implementer's perspective, it is important to localize the name of organization
- Taka will add comment on the PR
- Suggest to have discussion the next time when Kai attend the call
Issue ~~#1221~~ - Same Person different Subject Identifiers
- General consensus is we don’t have to do this.