<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Arial" size="2"><span style="font-size:10pt;">
<div>Dear all,</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>Please find below the preliminary notes of our call on Feb 6th 2018.</div>
<div>Due to bad conditions, some parts of the conversation were noisy or extremely low level. So please don’t hesitate to correct these notes and send me suggestions in case of misunderstandings.</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><u>Agenda</u></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Roll Call</li><li style="margin-top:5pt;margin-bottom:5pt;">Adoption of the Agenda [Bjorn/John]</li><li style="margin-top:5pt;margin-bottom:5pt;">Liaisons Updates</li></span></font>
</ul>
<ul style="margin:0;padding-left:72pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">GSMA</li><li style="margin-top:5pt;margin-bottom:5pt;">CPAS Update [Siva]</li></span></font>
</ul>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">UQ API Discussion [Orange]</li><li style="margin-top:5pt;margin-bottom:5pt;">Working Group Updates</li><li style="margin-top:5pt;margin-bottom:5pt;">FAPI WG [John]</li><li style="margin-top:5pt;margin-bottom:5pt;">Specification Status</li><li style="margin-top:5pt;margin-bottom:5pt;">UQ API [Orange]</li><li style="margin-top:5pt;margin-bottom:5pt;">Issue Tracker</li><li style="margin-top:5pt;margin-bottom:5pt;">Authentication Profile</li><li style="margin-top:5pt;margin-bottom:5pt;">CIBA</li><li style="margin-top:5pt;margin-bottom:5pt;">Other</li><li style="margin-top:5pt;margin-bottom:5pt;">AOB</li></span></font>
</ul>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><u>Discussion</u></div>
<ul style="margin:0;padding-left:18pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Roll Call</li></span></font>
</ul>
<div style="padding-left:36pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Participants : John Bradley, Bjorn Hjelm (Verizon), J Burgess, Marianne, MOHAJERI, SHAHRAM (at&t), Nicolas AILLERY (Orange), Petteri Stenius (Ubisecure), Philippe,
Jörg (DT), Celestin Bayard, Siva(GSMA), Charles Marais (Orange)</span></font></div>
<ul style="margin:0;padding-left:18pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Adoption of the Agenda [Bjorn/John]</li></span></font>
</ul>
<div style="margin-top:5pt;margin-bottom:5pt;padding-left:35.4pt;">Agreed.</div>
<ul style="margin:0;padding-left:18pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Liaisons Updates</li></span></font>
</ul>
<ul style="margin:0;padding-left:54pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">GSMA</li><li style="margin-top:5pt;margin-bottom:5pt;">CPAS Update [Siva]</li></span></font>
</ul>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">CPAS is working on PSD2 and LOA4 to find the best approaches. Some discussions appeared concerning SE mode to know which topic should be treated in CPAS
or not. Not much demand for discovery and registration from operators, could be addressed in the future. Orange mentions its request on that for security reasons and a lack of security in actual process of exchanging SP credentials.</span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">John mentions that banks consider the GSMA is positioning uniquely through redirect CIBA. But an interpretation of the EU text prevent to redirect the
user from the TPP to the bank. Could impact MODRNA as FAPI too. The TPP authenticates the user to what ? The TPP could use CIBA for auth, but how any 3<font size="1"><span style="font-size:7.3pt;"><sup>rd</sup></span></font> party can trust it ? The TPP in
this case could be the IDP (?)The TPP has to provide the interface, cannot redirect the user to the bank. </span></font></div>
<ul style="margin:0;">
<li style="margin-top:5pt;margin-bottom:5pt;">Discussion necessary into the OIF.</li></ul>
<ul style="margin:0;padding-left:18pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">UQ API Discussion [Orange]</li></span></font>
</ul>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Orange: had to close the different issues. Done. No more open issue on UQ, how to progress ? question to Nat whether FAPI has taken position for UQ. Nat:
the priority was rather on authentication, not UQ. The point was to maintain UQ and CIBA open to accommodate FAPI requests…</span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">A vote in the WG is appropriate. Is Orange doing implementations of UQ ? must have 2 different implementations from independent bodies. In Spain Orange
experiments with different partners, this feeds the process. In case of issue for these people, let’s consider it in OIF.</span></font></div>
<ul style="margin:0;padding-left:18pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Working Group Updates</li><li style="margin-top:5pt;margin-bottom:5pt;">FAPI WG [John]</li></span></font>
</ul>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">In the last Workshop on Monday, discussion on different interpretations about specs, and requests concerning client ID and parameters. The interpretation
of the European Commission didn’t make the banks very happy. Talks on removing redirection from the profile, considered as an impediment. This position could block CIBA and UQ.</span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Open Issues for part 1 and part 2 for CIBA. Profile issues . some of them seem to concern CIBA core spec. Should be brought back to MODRNA WG.</span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">What is the FAPI profile for CIBA ? </span></font></div>
<ul style="margin:0;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Bjorn to send a link on this doc.</li></span></font>
</ul>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Issue Tracker</li></span></font>
</ul>
<div style="margin-top:5pt;margin-bottom:5pt;">To be addressed next call</div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Authentication Profile</li></span></font>
</ul>
<div style="margin-top:5pt;margin-bottom:5pt;">To be addressed next call</div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>Best regards,</div>
<div>Philippe</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
</span></font>
<PRE>_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.
</PRE></body>
</html>