OASIS – PKI Member Section Steering Committee

Meeting (Teleconference) Notes

Thursday, October 5, 2006

(Minutes provided by Dee Schur)

Roll Call:

The meeting was called to order at 12:05pm EDT.

Members Present:

June Leung

Arshad Noor

Ann Terwilliger

John Sabo

Members Absent:

Peter Alterman

Others Present:

Dee Schur

Patrick Gannon

Minutes:

Dee Schur previously sent 9 Sept. 2006draft minutes for the PKI Member Section SC meetings. Typo (advise) corrected.

Vote 1.To approve the minutes of the September 9, 2006 PKI MS SC meeting as submitted. Moved by June, seconded by Ann, passed unanimously.

Review Action Items:

1.John reports that Alan cannot take on the contract–‘PKI within OASIS.’ Work needs to be completed by end of year. Patrick informs group that OASIS will be hiring FT person first of year for cross pollination.

A. Action 1. John might know another researcher – will explore.

B. Action 2. Dee to circulate copy of basic contract with deliverables and scope of work.

C. Action 3. Stephen W. might be interested – June to ping.

D. Action 4. Peter works with Contractors – Dee to ping Peter.

E. Action 5. Arshad has contact too – he will ping and send hisbio to SC.

2. Arshad has recommended Mike Nelson, the President of the San Francisco chapter of ISACA - as international association of information security auditors - to be 5th member of Steering Committee. Arshad believes the goals for PKI MS SC and ISACA as related to new EKMI TC are aligned.

Arshad believes the new EKMI TC will create technical guidelines for building and operating Enterprise Key Management Infrastructures, and support ISACA in creating audit guidelines for such EKMIs. Audits of key-management infrastructures are a requirement for the Payment Card Industry's Data Security Standard (PCI-DSS) in the credit card industry, and are becoming increasingly visible in other sectors.

.

A. Action 1. SC agrees to pursue Mike Nelson. Dee to ask Peter Roden to contact Mike regardingmembership.

B. Action 2. Ask Stephen Wilson to join as 5th member of SC. Will discuss further.

Vote 2.To approve Arshad Noor’s travel expenses to OASIS Adoption Forum. Moved by June, seconded by John, passed unanimously.

Items for Discussion:

1.PKI MEMBER SECTION BUDGET:

A.Patrick comments on growing excess balance in PKI MS account and discussion begins.

1.80,000USD was described as committed when presented to OASIS Board of Directors.

2.10,000USD will be committed to the “PKI within OASIS” project by end of year.

3.Patrick introduces the idea of a One DayPKI Workshop atAdoption Forum on the day of 27 November 2006- this day became available because EEMA was unable to allocate resources to this event. John would like to get buy -in from EEMA if PKI is going to pay for thisevent he would like EEMA’s support to promote the event. He will be meeting with folks at EEMA next week. Event to include roundtable, key management session andmining from interest. ISSE (EEMA) is pluggedinto PKI- the SC can use this time to meet with them. Arshad states that more European companies use symmetric key management.

A.Action Item 1. Dee to distribute information on the Adoption Forum.

B.Action Item 2. SC would like to meet at this event. June to confirm participation.

C.Action Item 3. Dee to work with Jane and set meeting with Steering Committee.

Vote 3.To approve to allocate 25,000USD to support OASIS PKI full day event at Adoption Forum. Motion made by John, seconded by Ann, passed unanimously.

Outstanding:

1.Converting all PKI references and resources on OASIS PKI Member Section = cost 10K. Ann to speak with Stephen related to his time availability to convert. Dee to train Stephen. **ON HOLD**

2.Converting PKI Member Section to Drupal format =cost 5K, OASIS Staff. **Need decision by next meeting. **ON HOLD**

Financials:

Sent by June on September 27, 2006 to Steering Committee. <

Any Other Business:

N/A

Next Meeting:

Date: Thursday,2 November, Time: 12:00pm - 01:00pm EST

Adjourn

Vote 4.The meeting was adjourned at 1:06pm E.D.T
Moved by June, seconded by Anne, passed unanimously.

Action Items

No. / Name / Action / Due Date
March 02-5.1
Updated Oct. 05-1A-E / John/Dee/June/Arshad / Report back to PKISC on “PKI Within OASIS” timetable.
A. Action 1. John might know another researcher – will explore.
B. Action 2. Dee to circulate copy of basic contract with deliverables and scope of work.
C. Action 3. Stephen Wilson might be interested – June to ping.
D. Action 4. Peter works with Contractors – Dee to ping Peter.
E. Action 5. Arshad has contact too – he will ping and send his bio to SC. / Updated
April 17
Updated Oct. 05 -2-A and B / June/Dee / Dee will assist with initiating new election for SC member. Update: Arshad suggested Mike Nelson.
A. Action 1. SC agrees to pursue Mike Nelson .Dee to ask Peter Roden to contact Mike regardingmembership.
B. Action 2. Ask Stephen Wilson to join as 5th member of SC.
. / Updated – pursuing Mike Nelson and Stephen Wilson
April 17-
3.2 / Peter / Peter will define new technical projects, scope and support needed. / Open-exploring Symposium
May 4-2.2 / Peter / Peter would like to outline a proposal defining new areas in PKI space for OASIS. / Open
May 4-3.2 / All SC / PKI Member recruitment. Staff and SC members will reach out to key members. The PKI Survey is a good outreach tool. / Ongoing – will keep survey open.
Aug 3-1 / Peter/Dee / Dee to follow up with Peter and explore the idea of a Symposium (evolving bridge mesh.) / Open
Aug 3-2 / Dee / Follow up with ETSI contact – invite to Adoption Forum? / Open
Oct 5 -1-A-3 (A-C) / A.Action Item 1. Dee to distribute information on the Adoption forum.
B.Action Item 2. SC would like to meet at this event. June to confirm participation.
C.Action Item 3. Dee and Jane tomeet with Steering Committee. / Open

DRAFT 1 OASIS PKI MS SC 10/05/06 MinutesPage 1 of 5