Re: [VoT] How to express duplicate checks with VoT?

This seems like it would be really hard to specify, unless you scope it pretty clearly.

"Proofed unique among accounts with identity vetting level (moderate or higher)" seems like it might be achievable (and maybe is what you have in mind). "Proofed unique" literally seems nearly impossible. How would you prove someone didn't get a low-value account on the same IdP? 

The challenge to me would be defining the scope in a way that is understandable and agreeable.

--- Eric

-----Original Message-----
From: vot [mailto:vot-bounces@ietf.org] On Behalf Of Justin Richer
Sent: Thursday, March 10, 2016 10:58 AM
To: Rolf Brugger
Cc: vot@ietf.org
Subject: Re: [VoT] How to express duplicate checks with VoT?

This would probably be another category/dimension, I think. Unless you wanted to wrap it into your own definitions of the “P” dimension, where there’d be a “Pu” for “proofed unique” that could be added to that category. 

 — Justin

> On Mar 10, 2016, at 11:51 AM, Rolf Brugger <rolf.brugger@switch.ch> wrote:
> 
> Hi all,
> 
> I'm new to this list and I hope my question is not totally irrelevant here.
> 
> We have plenty of use cases where RPs need to have confidence, that a person does not have multiple identities in one IdP. I don't see how this aspect of identity quality can be expressed, and I believe it is pretty orthogonal to the P, C, M and A dimensions that are currently specified in the VoT draft.
> 
> We could imagine multiple ways to gradually prove that an identity has 
> been checked against duplicates. The most straightforward approach 
> would be to make sure that unique personal attributes are used only 
> once within one IdP or an IdP federation, like
> - email address(es)
> - mobile phone number
> - home postal address
> - social security number
> - ID / passport number
> - the combination of name and birth date
> - etc.
> 
> Would it make sense to express this in VoT?
> 
> best regards
> 
> Rolf
> 
> 
> --
> SWITCH
> --------------------------
> Rolf Brugger, project Swiss edu-ID
> Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland phone +41 44 268 15 
> 15, direct +41 44 268 15 89 rolf.brugger@switch.ch, 
> http://www.switch.ch
> 
> _______________________________________________
> vot mailing list
> vot@ietf.org
> https://www.ietf.org/mailman/listinfo/vot

_______________________________________________
vot mailing list
vot@ietf.org
https://www.ietf.org/mailman/listinfo/vot