iTC Meeting Minutes 2019 10 24 - biometricITC/cPP-biometrics GitHub Wiki

Agenda:

https://github.com/biometricITC/cPP-biometrics/wiki/iTC-Meeting-Agenda-2019-10-24

Call started at 10am EDT

Attendees

  • Brian Wood
  • Naruki Kai
  • Albert Martorell
  • Clare Olin

Record of Decisions

  • It was announced during the meeting that the vote to change the ESR was passed with a total of 9 votes (8 approvals and one abstention).

Action Items

  • Naruki will finish the ESR update (entering dates, accepting changes, etc)
  • Brian will send the updated ESR to NIAP for posting on the CC Portal (along with some text updates to go with the new ESR)
  • The iTC needs to review #189
  • The PP-Module (and SD) need to be updated based on the ESR changes

Minutes

The call started with a quick review of the task list (no changes at this time).

The first topic of discussion was to announce the approval of the changes to the ESR by vote of the iTC. Brian provided an overview of what this was for Clare (since this was her first call).

The next topic reviewed was a look at the Eye toolbox that had been migrated to the new toolbox template. Brian explained that this removed some of the agreed tests (photo-scan-print) but otherwise had no changes that weren't related to renaming/renumbering. Naruki asked how he can find out how to follow this, and Brian pointed to the Toolbox template which was based on the Face toolbox originally to follow.

The next topic was TB #16 about the sliding scale or whole test set. This led directly into the discussion of the Attack Potential as it seems that it is likely that all tests should be covered, so the real question is the limit of those tests to a specific scope. Brian pointed to this in the last comment of the issue.

The Attack Potential discussion TB #20 then followed directly. Brian answered questions about what FIDO is doing and how they are measuring the attack potential with their levels. It was generally agreed that this seemed fine, and at least at this point that being able to resist Basic attacks would be sufficient for the PAD testing right now.

The plan is that once a toolbox has been migrated into the new template form that the attacks will be reviewed and Attack Potentials assigned. These values will be reviewed by the group before being accepted to the Master branch. It was noted that any attacks that had a higher potential value would be moved into a Moderate Potential (or similar) folder and kept for future review.

the next topic was a review of the proposed changes to the PP-Module and PP-Configuration to move the MDFPP content into the PP-Config and make the PP-Module a little more generic #189. Brian went over the changes, stating that in addition to the main change there were some additional ones that were more about formatting. His goal is to have this as part of the next public review release.

The last topic was a quick rundown on the plan for the PP-Module updates. Brian would like to get the next version out for review in November that would include both the MDFPP changes and the changes for the ESR.

The call ended at 10:50am EDT.