CMI 5 Working Group Meeting Minutes – July 11th, 2014 - AICC/CMI-5_Spec_Current GitHub Wiki

CMI-5 Working Group Meeting Minutes – July 11th, 2014

Attendees

William A. McDonald – Boeing Flight Services
Bruce Williamson – Boeing Defense Systems
William Shook – Boeing Defense Systems
Brandt Dargue – Boeing Research & Technology
Art Werkenthin – RISC Technology
Ben Clark – Rustici Software
Ray Lowery – Pratt & Whitney
Tyler Mulligan – ADL
Andy Johnson – ADL
Craig Wiggins – ADL
Henry Ryng – INXSOL
Chris Handorf – Pearson (Please let know if anyone was missed)

Agenda

Notes

The group primarily discussed the usage of “AuthenticationMethod” (CMI-5 Course Structure – Section 7.1.4 AU Meta Data )

Concerns were raised about the security of the “Basic” authentication method and there was a lengthy discussion about ways it could be improved. One proposal that seemed interesting was including an authentications token “Fetch URL” on the AU Launch line.
This URL would be used by the AU to retrieve the Authentication Token from the LMS (to authenticate to the LRS) The “Fetch URL” could be generated by the LMS and have a limited lifespan so as not to be re-used. The idea sounded interesting to the group and will be explored more.

Issued with OAuth’s effect on the user experience were also discussed. It is possible that requiring re-authentication/authorization could be required every time the learner launched a new AU in a course. Possible ways that content developers might “combine” authentication for groups of AU’s was discussed.

Ben Clark volunteered to pose the Authentication questions raised in this meeting to the larger XAPI mailing list.

Please Note: We will not be meeting next week – Will resume at our normal time (7:30am US Pacific Time) on July 25th.

All Previous CMI-5 Meeting Minutes (Prior to June 6th) http://aicccmi5.wikispaces.com/AICC+CMI5+Specification

All Previous CMI-5 Meeting Minutes (After June 6th) https://github.com/AICC/CMI-5_Spec_Current/wiki

CMI-5 on GitHub https://github.com/AICC