Comment for Web Payments IG Charter

Thank you for the opportunity to comment on the Web Payments Interest Group
Charter. This submission is offered by Mary Bold, Ph.D., Chief Research
Officer, Accreditrust LLC (New Jersey, USA). Contact:
Mary.Bold@accreditust.com


*Comments regarding Section 2 Deliverables, Point 4 Identity,
Authentication, and Security:*


> Identity and authentication methods for the Web should meet criteria for
additional spheres. Accreditrust needs a global solution for storing high
stakes credential data and ability to associate them with identity on the
Web. We think any solutions working for finance should also work for the
education sector.


> Use-cases can appropriately include educational data--the same
requirements for authentication exist. Educational data might include a
range of elements and would surely differ around the globe. Elements could
be high stakes exam results, performance records, personal history. People
using such systems range in age from child- to adulthood. Educational
records of adults actually number larger because they include training and
professional credentials.


> The education industry requires identity and credential assurance,
comparable to the financial industry. Credential data that provide data
portability and are privacy-aware (e.g., the identity provider should not
know where the credential data are being sent) should be considered in the
use-cases and requirements.


> Using cryptography and 2-factor mechanisms is a requirement for high
stakes credentials. The IG charter places correct priority on minimizing
risks around incorrectly identifying users.


> We acknowledge that it may be necessary to limit the scope of identity
work; our interest is how to store and transmit high-stakes credentials to
relying parties.


Accreditrust will be interested in joining this work through contributions
to a Working Group and membership at the W3C.


Mary Bold, Ph.D., CFLE
EVP and Chief Research Officer
Accreditrust LLC
Email: mary.bold@accreditrust.com
Direct: 940-367-3852