<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div><font color="#1F497D">Dear all,</font></div>
<div><font color="#1F497D">Please find a new updated version of the preliminary notes (on US POC)</font></div>
<div><font color="#1F497D">Any other update wanted, please let me know</font></div>
<div><font color="#1F497D">Philippe</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D"><u>Participants</u>: John, Torsten, Joerg, Bjorn, Gonzalo, Matthieu, Philippe</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D"><u>Agenda:</u></font></div>
<ol style="margin:0;padding-left:30pt;">
<font color="#1F497D">
<li>PoCs: Spain, US, Germany (information and requirements towards WG)</li><li>Status/next steps discovery spec</li><li>Status registration spec</li><li>Status/next steps authentication spec</li></font>
</ol>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D"><u>Discussions:</u></font></div>
<ol style="margin:0;padding-left:48pt;">
<font color="#1F497D">
<li><b>PoCs: Spain, US, Germany (information and requirements towards WG)</b></li></font>
</ol>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Gonzalo (Spain)</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">ID Gateway implemented in-house. SPs are provided with an App through OAuth.</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Spam code has been inserted, and ID token is signed. </span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">2 authenticators are delivered: SMS (OTP or URL) and SIM applet.</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Architecture: reuse of TDAF (Telefonica digital architecture framework), MSSP is outside the TDAF perimeter</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">SP integrated with OneAPI Exchange, do not use the credential management</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;"> </span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Matthieu (Spain)</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Project to be launched end of this year</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">First phase (SIM applet only for Orange Services): Orange Spain doesn’t need an ID Gateway, nor OpenID Connect. Next phase will, components will be mutualized.</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Existing OpenID Connect gates exposing features with existing APIs will have to combine with MC.</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">New trials scheduled in France for Authorization services</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;"> </span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Bjorn (US) </span></font></div>
<div><font color="#1F497D">U.S. POC. GSMA partnered with the four major U.S. MNOs to pilot a common approach to use mobile devices for secure, privacy-enhancing identity and access management as part of NSTIC (<a href="http://www.nist.gov/itl/nstic-091714.cfm">http://www.nist.gov/itl/nstic-091714.cfm</a>).
The project, MC4US, leverages Mobile Connect and is divided into 3 phases (<a href="https://www.idecosystem.org/filedepot_download/172/1650">https://www.idecosystem.org/filedepot_download/172/1650</a>). Phase 2 architecture design work has just started allowing
for both a Hub and MNO identity gateway architecture, exposing OpenID Connect interface to SP, to be supported. The work in MODRNA WG is important to address the implementation and scalability of OneAPI Exchange.</font></div>
<div><font color="#1F497D"> </font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Torsten (Germany)</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Telefonica having suspended its activities in the frame, DT and Voda are experiencing.</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">DT tests its Id Management system with MC specificities on the OIDC basic client profile.</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">2 authenticators: login/password as primary, and SIM applet as a second factor.</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Objective to test MC with Vodaphone and improve protocol to facilitate SP – OP interfaces.</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;"> </span></font></div>
<ol start="2" style="margin:0;padding-left:48pt;">
<font color="#1F497D">
<li><b>Status/next steps discovery spec</b></li></font>
</ol>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Document to be updated, collaboration by the group is proposed after circulating</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;"> </span></font></div>
<ol start="3" style="margin:0;padding-left:48pt;">
<font color="#1F497D">
<li><b>Status registration spec</b></li></font>
</ol>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;">Document to update and comment</span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;"> </span></font></div>
<ol start="4" style="margin:0;padding-left:48pt;">
<font color="#1F497D">
<li><b>Status/next steps authentication spec</b></li></font>
</ol>
<div><font color="#1F497D">Torsten suggest to create a separate issue and a new section for security considerations.</font></div>
<div><font color="#1F497D">Discussions about a possible confusion between authorization context and authentication context. Terminology to adapt.</font></div>
<div><font color="#1F497D">Questions about authorization and consent overlap.</font></div>
<div><font color="#1F497D">Matthieu to summarize</font></div>
<div><font color="#1F497D">John evokes a working group about contracts exchange, see KDDI</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D">Kind regards,</font></div>
<div><font color="#1F497D">Philippe</font></div>
<div><font color="#1F497D"> </font></div>
<div><font face="Tahoma" size="2"><span style="font-size:10pt;">-----Rendez-vous d'origine-----<br>
<b>De :</b> Lodderstedt, Torsten [<a href="mailto:t.lodderstedt@telekom.de"><font color="blue"><u>mailto:t.lodderstedt@telekom.de</u></font></a>]
<br>
<b>Envoyé :</b> mardi 14 juillet 2015 10:16<br>
<b>À :</b> Lodderstedt, Torsten; <a href="mailto:openid-specs-mobile-profile@lists.openid.net"><font color="blue"><u>openid-specs-mobile-profile@lists.openid.net</u></font></a><br>
<b>Objet :</b> [Openid-specs-mobile-profile] MODRNA WG Call<br>
<b>Date :</b> mercredi 15 juillet 2015 16:00-17:00 (UTC+01:00) Amsterdam, Berlin, Berne, Rome, Stockholm, Vienne.<br>
<b>Où :</b> <a href="https://global.gotomeeting.com/join/764054389"><font color="blue"><u>https://global.gotomeeting.com/join/764054389</u></font></a></span></font></div>
<div> </div>
<div> </div>
<div>Zeit: Mittwoch, 15. Juli 2015 16:00-17:00 (UTC+01:00) Amsterdam, Berlin, Bern, Rom, Stockholm, Wien.</div>
<div>Ort: <a href="https://global.gotomeeting.com/join/764054389"><font color="blue"><u>https://global.gotomeeting.com/join/764054389</u></font></a></div>
<div> </div>
<div>Hinweis: Die oben angegebene Abweichung von GMT berücksichtigt keine Anpassungen für Sommerzeit.</div>
<div> </div>
<div>*~*~*~*~*~*~*~*~*~*</div>
<div> </div>
<div>Hi all,</div>
<div> </div>
<div>I propose the following agenda:</div>
<div> </div>
<ol style="margin:0;padding-left:30pt;">
<li>PoCs: Spain, US, Germany (information and requirements towards WG)</li></ol>
<ol style="margin:0;padding-left:30pt;">
<li>Status/next steps discovery spec</li></ol>
<ol style="margin:0;padding-left:30pt;">
<li>Status registration spec</li></ol>
<ol style="margin:0;padding-left:30pt;">
<li>Status/next steps authentication spec</li></ol>
<div> </div>
<div>best regards,</div>
<div>Torsten.</div>
<div> << Fichier: ATT00001.txt >> </div>
<div> </div>
</span></font>
<PRE>_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.
</PRE></body>
</html>