recording

Agenda

• Review Key Management Services Conceptual Architecture

Discussion

• Bruno presented the suggested changes for the KMS Conceptual Architecture
  • Proposal separates application and KMS not just logically but to make that a clear design and implementation choice. They should be effectively seen as 2 separate systems.
  • Other integration APIs that we should consider:
    • WebKMS
    • Universal Wallet
  • Suggestion that the diagram should include an KMS interface layer that is developed within the OWF that could access multiple KMS systems (remote or local)
  • Suggestion to include a locking mechanism for software-based LocalKMS (without TEE) to support protection schemes
  • Suggestion to include authentication to RemoteKMS

Action Items

• Bruno will make changes based on the discussion