1 of 58

ANNUAL GENERAL MEMBERS MEETING��10 DECEMBER 2024, 10AM ET

1

2 of 58

Kantara Initiative

Anti - Trust Statement

ARTICLE 19 COMPLIANCE WITH ANTITRUST LAWS The members will be combining unique experience and skills to foster identity community harmonization, interoperability, innovation and broad adoption through the development of open identity Technical Specifications, operational frameworks, education programs, deployment and usage best practices for privacy-respecting, secure access to online services. This purpose is believed by the Members to be more difficult to achieve through the independent efforts of each company. The Members are committed to fostering open competition. The Members understand that in certain lines of business they are direct competitors and that it is imperative that they and their representatives act in a manner which does not violate any applicable antitrust or competition laws pertaining to monopolistic or anti-competitive practices. Thus, all Members shall comply with all applicable antitrust and competition laws of all relevant jurisdictions. In addition, with the advice of counsel, the Board shall from time to time promulgate detailed Antitrust Compliance Guidelines for the consideration of the Members concerning their participation in the Corporation. These Guidelines are not intended to replace or displace each member’s own antitrust policies but shall operate to guide the Members’ participation in the Corporation. Members are not required to develop or market any offerings and are not precluded from engaging in any business activities whatsoever, even if they are competitive with the activities conducted under these Bylaws.

2

3 of 58

3

	Welcome & Opening Remarks
	2024 Organizational Updates
	US Assurance Program Report
	UK Certification Program Report
	Member Spotlight - Maxine Most and Prism Reports
	Leadership Council – Individual Work Group Reports
	Board of Directors Update
	Liaisons
	2025 Board of Directors
	Closing Remarks

2024 AGM - Agenda

4 of 58

4

2024 Organizational Updates

5 of 58

2024 Organizational Achievements

Increased staffing

CTO
Audit Staff
Assurance Program Assistant

Government Engagement

Collaborated with General Services Administration (GSA) on Special Item Number (SIN) schedule for Kantara-approved credential service providers
Increased agency membership and Work Group participation
Delivered briefings to agency partners

5

6 of 58

2025 Organizational Goals

Continue to build internal infrastructure and refine programming

Expand staff support for Member Engagement and Work Groups
Renew focus on membership value

Transition to ISO 17065 accreditation and processes
Form Advisory Council
Increase fees to cover additional expenses and added value of service

6

7 of 58

7

Membership Update

8 of 58

8

New Members in 2024

Kantara Initiative proudly welcomed the following new members this year!

Organizations

Department of Health and Human Services (HHS)
Thales DIS USA
GSA (returning)
Notarize (Proof)
JakobsenID

Individuals

Adam Bradley

Yehoshua Silberstein

Peter Davis

Michael Magrath

Tom Maduri

Mark Lizar

Maxine Most

Ernesto Pena

Gigi Agassini

9 of 58

Member Breakdown

as of December 6, 2024

9

10 of 58

10

Organizational Members *

*As of December 6, 2024, not all organizations shown

11 of 58

11

US Assurance Program

12 of 58

12

Total Assurance Program Participants

Congratulations to our NEW 2024 Assurance Program Services
NextGenID Trusted Services Solution – IAL3
AU10TIX ID Verification Service – IAL2
Exostar OTP Service – IAL2 & AAL2
CLEAR NextGen Identity+ Service – IAL2
Onfido Real Identity Platform – IAL2
GSA - Login.gov – IAL2 & AAL2

Total Services: 32

13 of 58

13

2020 - 2024 Grants of Approval &

Annual Conformity Reviews

Includes CSPs and Assessors.

14 of 58

Assurance Program

Increase in Program Support Personnel
Changes in fees
Release of NIST 800-63 rev. 4
Removal of ‘Technical’ & ‘Classic’ Classes of Approval
Seeking accreditation as ISO 17065 certification body

2025 Anticipated Changes

14

15 of 58

15

UK Certification Program

16 of 58

2024 UK Certification Achievements

Uplift in UK Programme Personnel

Business Development Manager
Head of Accreditation
Head of Delivery

Beginning of UK Digital Identity and Attributes Trust Framework (UKDIATF) Accreditation Journey

Desktop Audit Complete and Findings Remediated

Significant Growth to UKDIATF Delivery

16

17 of 58

2025 UK Certification Goals

Continue to grow market share
Gain accreditation
Refine and automate internal processes
Uplift to UKDIATF Gamma version
Seeking accreditation as ISO 17025/27006 certification body

17

18 of 58

18

Spotlight - Maxine Most

Shining a New Light on Digital Identity

19 of 58

19

The Prism Project Reports

The Prism reports are designed to provide a market landscape framework that helps influencers and decision-makers understand, evaluate, and implement digital identity technologies and solutions.

This innovative biometric-centric framework is based on the foundational conviction that in the age of digital transformation, the only true, reliable link between humans and their digital data is biometrics.

Two Components: Market Analysis and Vendor Evaluations

20 of 58

20

Prism Market Landscape Model

The only truly biometric-centric market framework.

21 of 58

21

Prism Lens & Identity Hierarchy Models

The Prism Lens defines key vertical market challenges and describes how biometric-centric digital identity can help solve them

The Prism Identity Hierarchy illustrates the six levels of identity: human, foundational, biographic, contextual, pseudonymous, and transactional.

22 of 58

22

Data: Survey & Market Forecasts

23 of 58

23

Prism Evaluations

Growth & Resources Revenue, growth, financial stability, resources

Market Presence Geographic footprint & market penetration and dominance.

Proof Points Profile, size, and status of customer base. 3rd party testing results and certifications, speed of implementation.

Unique Positioning UVP, differentiable technology, and market innovation

Business Model & Strategy Marketing and sales positioning, messaging, strategy, channel & communications scope, quality, range of partnerships, thought leadership.

Proprietary Versus Integrated Biometrics and Document Authentication – Depending on the market and solution(s), Beam may be rated higher as proprietary or integrated technology.

X-Factor – unique Beam and market sector-specific metric.

24 of 58

24

Prism Beam Categories

25 of 58

25

Final Government Services Prism

26 of 58

26

Prism Profiles

27 of 58

27

Issues-Based Prism Reports

Considering:

Synthetic Identity & Deepfakes
Privacy & Compliance
Customer Experience & Fraud

Plan for 2025

Download a Prism Report

28 of 58

28

Leadership Council and Work Group Reports

29 of 58

29

Privacy Enhancing Mobile Credentials Work Group

(PEMC)

30 of 58

PEMC - 2024 Goals and Achievements

Last year we said we would:

Complete Requirements Report

This year, we have delivered:

Published Implementors Guidance in January
Requirements Report going to vote in December/January

30

31 of 58

PEMC - 2025 Goals

Next year, we will:

Publish PEMC Requirements V 1
Update Implementors Guidance
Pilot Implementation

31

32 of 58

32

Anchored Notice and Consent Receipt Work Group

(ANCR)

33 of 58

33

Transparency Performance Report

TPI’s: 1,2,3,4

Comments

ISO SC 27 WG 5

Support open standards

NIST IR 8480

Presentations

Podcasts
Conferences

IEEE
Connect24
Think Digital
ASIS/GSX

2024 - Goals and Achievements

34 of 58

34

Proof of notice for valid consent
TPR

Conformance
Compliance

Receipt Generator

Notice Controller Schema
Demo

2025 - Goals

35 of 58

35

Deepfake/AI Threats to �ID Proofing and Verification Discussion Group (Deepfakes)

36 of 58

Deepfake - IDV Discussion Group

The Kantara Deepfake-IDV Discussion Group—Deepfake Threats To Identity Verification & Proofing—was formed in September 2023 to explore how IDPV (Identity Proofing and Verification) systems could be subverted or fooled by “deepfakes,” “Generative AI,” and other AI-related mechanisms.

The group primarily comprised technical experts from within the biometric and digital identity marketplace, including vendors, individual subject matter experts, and contributors from end-user organizations.

36

37 of 58

RIDV Process

37

Live Biometric Capture Channel

Edge Device

Data Capture

Signal Processing

Identity Document Capture Channel

Host System

Environment Risk Factor Comparison

Edge Device

Live Video Chat

Data Review

IDV Decision Engine

Adjudicate

Accept

Reject

Manual Workflow

Process used for opt-out and/or exception handling

Edge Device

Data Capture

Environmental Risk Factors Channel

Edge Device

Data Capture

Signals Processing

Signal Processing

Document Comparison

Biometric Comparison

Human Review

Accept

Reject

Biometric Reference Data

Identity Document Reference Data

Environmental Risk Factors Reference Data

Automated Workflow

Baseline IDV Process

NOTES

Data Capture at the edge is often stored as Reference Data on the host (for model building, adjudication, extensibility)
Signal Processing may be on the edge device, host system, or hybrid

Document

Biometric

Other Data/Signals

Attack Types

38 of 58

RIDV Attack Vectors

38

Live Biometric Capture Channel

Edge Device

Data Capture

Signal Processing

Identity Document Capture Channel

Host System

Environment Risk Factor Comparison

Edge Device

Live Video Chat

Data Review

IDV Decision Engine

Adjudicate

Accept

Reject

Manual Workflow

Process used for opt-out and/or exception handling

Edge Device

Environmental Risk Factors Channel

Edge Device

Data Capture

Signals Processing

Signal Processing

Document Comparison

Biometric Comparison

Human Review

Accept

Reject

Biometric Reference Data

Identity Document Reference Data

Environmental Risk Factors Reference Data

Attack Vectors

DF Physical Presentation Attack
DF Injection Attack
DF/Modified document; Synthetic ID document
DF/Synthetic Document Injection Attack
Modified or Synthetic Data Attack
Modified or Synthetic Injection Data Attack
DF in Live Video Chat Attack
Biometric Reference Data Injection
Document Reference Data Injection
Environmental Risk Factor Reference Data Injection
Insider threats

11

1

2

3

4

5

6

7

8

9

10

Data Capture

Automated Workflow

Baseline IDV Process

NOTES

Data Capture at the edge is often stored as Reference Data on the host (for model building, adjudication, extensibility)
Signal Processing may be on the edge device, host system, or hybrid

Document

Biometric

Other Data/Signals

Attack Types

39 of 58

RIDV Countermeasures

39

Live Biometric Capture Channel

Edge Device

Data Capture

Signal Processing

Identity Document Capture Channel

Host System

Environment Risk Factor Comparison

Edge Device

Live Video Chat

Data Review

IDV Decision Engine

Adjudicate

Accept

Reject

Automated Workflow

Baseline IDV Process

Manual Workflow

Process used for opt-out and/or exception handling

Edge Device

Environmental Risk Factors Channel

Edge Device

Data Capture

Signals Processing

Signal Processing

Document Comparison

Biometric Comparison

Human Review

Accept

Reject

Biometric Reference Data

Identity Document Reference Data

Environmental Risk Factors Reference Data

11

1

2

3

4

5

6

7

8

9

10

Data Capture

Countermeasures

Biometric liveness/PAD technologies, cryptographic systems, and environmental data signature analysis.
Sensor/input isolation and control capabilities, biometric liveness/IAD technologies, cryptographic systems, and environmental data signature analysis.
Optical Character Recognition (OCR), cryptographic systems, identity document validation and verification systems, biometric matching systems, and reference data comparison.
Sensor/input isolation and control capabilities, cryptographic systems, identity document validation and verification systems, biometric matching systems, and reference data comparison.
Data signature analysis and reference data comparison
Sensor/input isolation and control capabilities, cryptographic systems, data signature analysis, and reference data comparison.
Biometric liveness /PAD and comparison, cryptographic systems , and interviewer training and policy.
Biometric comparison, cryptography hic, and SEIM systems
Identity document cryptographic systems and SEIM systems.
Cryptographic systems and SEIM systems
Biometric matching and cryptographic systems, training, and policy.

NOTES

Data Capture at the edge is often stored as Reference Data on the host (for model building, adjudication, extensibility)
Signal Processing may be on the edge device, host system, or hybrid

Document

Biometric

Other Data/Signals

Attack Types

40 of 58

40

Resilient Identifiers for Underserved Populations Work Group (RIUP)

41 of 58

RIUP - 2024 Goals and Achievements

Last year we said we would develop:

Use Cases and Personas - Digital Identifier Inclusion
Gateway Provider Trust Network
Visuals

This year, we have delivered:

Reports: Digital Identifier Inclusion and Purpose Consent Query
Visuals: Use case/customer journey and Mapping of the digital identity divide
Framework Partner Network
Gateway Provider Trust Network

41

42 of 58

RIUP - 2025 Goals

42

Next year, we will …. :

Publish Purpose and Consent Query Framework (Q1)
Developing version 1.1 of Digital Identifier Inclusion Report (Q2)
Update the Mobile Assurance Statement (Q3)
Continued outreach to national and local organizations to promote the DII and PCQ recommendations

43 of 58

43

Diversity, Equity, Inclusion, and Accessibility Work Group (DEIA)

44 of 58

DEIA - 2024 Goals and Achievements

Please complete the 2024 DEIA Survey

Next year, we will …. :

Updated the charter to become a Work Group
Defined 2025 deliverables

44

45 of 58

45

User Managed Access

Work Group (UMA)

46 of 58

UMA - 2024 Achievements and 2025 Goals

This year, we have worked through a reported vulnerability

Have validated the disclosure & are working on a report to help implementors determine if they’re affected
No impacts to known implementations
Affects very dynamic ecosystems, where unknown participants are trusted
Can be addressed via DPOP and other known Oauth BCP mitigations

Next year, we will be discussing further Oauth alignment of the UMA specification

46

47 of 58

47

Identity Assurance Work Group (IAWG)

48 of 58

IAWG - 2024 Goals and Achievements

Last year we said we would:

Deliberate and contribute to NIST 800-63v4 call for public review.
Respond to ‘customer’ feedback on service assessment criteria and refine as needed.

This year, we have delivered:

Responded to NIST 800-63-4 2^nd public draft call for contributions.
Published Kantara position on meaning of 800-63-3 “Address of Record”.
Analyzed 800-63 text on ‘syncable authenticators’ requirements – challenges exist with interpretation and conversion into assessable criteria – solution is proposed.

48

49 of 58

IAWG - 2025 Goals

Next year, we will:

Develop Kantara service assessment criteria for NIST 800-63-4 (once published).
Collaborate with Kantara staff to prepare for ISO 17065 Accreditation as a “certification body”.

ISO 17065 standardizes how a a certification body should operate in order to ensure high quality, consistency, accountability when evaluating and certifying products or services.
Kantara UK is undergoing ISO 17065 accreditation now.
Kantara’s US program must too, to establish stronger foundations for expansion and commercial value of the certification marks.

49

50 of 58

50

Board of Directors Update

51 of 58

Board of Directors Report

Kantara continues to deliver on our mission:

�To grow and fulfil the market for trustworthy use of identity and personal data

In 2024:

Executing on the plan to try to double the size of US Assurance program

2023: Assurance program revenue approximately $360k
2024: Assurance program revenue approximately $590k

Net income was essentially flat as planned

2025: Assurance program revenue budgeted $1,000,000

Includes new revenue stream from Assessor services by Kantara staff plus 9 new trust marked services

Expenses will rise as continued investment in 'infrastructure' and staff capacity & capabilities incur fixed and variable costs

Financial stability and prudent management continue

51

52 of 58

Board of Directors Report

In 2025 the Board plans to:

Add focus on deepening Member engagement and recruiting
Support Leadership Council & Group expansion into new topic areas
Strengthen Kantara profile and influence through liaisons and outreach
Improve resiliency and corporate continuity
Improve financial reporting and business planning
Continue to support ‘industrialization’ of Assurance program activities

While continuing prudent management of corporate resources to the benefit of Members

52

53 of 58

53

Kantara Initiative Liaisons

54 of 58

�Liaison Activities

FIDO Alliance
OIDF
DIACC
IDPro
DirectTrust
Women in Identity
ISO – Work Groups
OECD
INCITS
CARIN Alliance
tScheme

54

55 of 58

55

2025 Board of Directors

56 of 58

56

2025 Board of Directors

57 of 58

57

Closing Remarks

Contact: Staff@kantarainitiative.org

US Assurance Program: Secretariat@kantarainitiative.org

UK Certification Program:

Applications@kantarainitiative.co.uk

58 of 58

58

www.kantarainitiative.org

Communications@kantarainitiative.org

+1 (571) 475-8895

Thank You!

@KantaraInitiative

Get in touch!