<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Cisco Blog &#187; NSTIC</title>
	<atom:link href="http://blogs.cisco.com/tag/nstic/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.cisco.com</link>
	<description></description>
	<lastBuildDate>Thu, 23 May 2013 22:23:22 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Establishing Trust in the NSTIC</title>
		<link>http://blogs.cisco.com/security/establishing-trust-in-the-nstic/</link>
		<comments>http://blogs.cisco.com/security/establishing-trust-in-the-nstic/#comments</comments>
		<pubDate>Wed, 15 Jun 2011 16:29:15 +0000</pubDate>
		<dc:creator>Jim Fenton</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[identity]]></category>
		<category><![CDATA[NSTIC]]></category>
		<category><![CDATA[NSTIC Series]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=33671</guid>
		<description><![CDATA[The National Strategy for Trusted Identities in Cyberspace (NSTIC) proposes a large ecosystem of identity providers, attribute providers, and relying parties that must establish trust with each other in various ways. NSTIC requires various types of trust within the identity ecosystem. ]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/establishing-trust-in-the-nstic/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Adapting Levels of Assurance for the NSTIC</title>
		<link>http://blogs.cisco.com/security/adapting-levels-of-assurance-for-the-nstic/</link>
		<comments>http://blogs.cisco.com/security/adapting-levels-of-assurance-for-the-nstic/#comments</comments>
		<pubDate>Thu, 19 May 2011 14:16:59 +0000</pubDate>
		<dc:creator>Jim Fenton</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[identity]]></category>
		<category><![CDATA[NSTIC]]></category>
		<category><![CDATA[NSTIC Series]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=30955</guid>
		<description><![CDATA[One of the goals of the National Strategy for Trusted Identities in Cyberspace (NSTIC) is to support a wide range of use cases.  These might include everything from low-value purchases to making adjustments to critical infrastructure, like power systems, where someone might get hurt if an unauthorized action takes place.  The level of confidence in the validity associated with an identity is referred to as Level of Assurance (LOA). ]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/adapting-levels-of-assurance-for-the-nstic/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Credential and Attribute Providers in the NSTIC</title>
		<link>http://blogs.cisco.com/security/credential-and-attribute-providers-in-the-nstic/</link>
		<comments>http://blogs.cisco.com/security/credential-and-attribute-providers-in-the-nstic/#comments</comments>
		<pubDate>Fri, 06 May 2011 15:24:58 +0000</pubDate>
		<dc:creator>Jim Fenton</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[identity]]></category>
		<category><![CDATA[NSTIC]]></category>
		<category><![CDATA[NSTIC Series]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=29769</guid>
		<description><![CDATA[The <a href="http://www.nist.gov/nstic/" target="_blank">National Strategy for Trusted Identities in Cyberspace</a> (NSTIC) <a href="http://www.whitehouse.gov/sites/default/files/rss_viewer/NSTICstrategy_041511.pdf" target="_blank">describes</a> two types of intermediaries between subjects (users) and relying parties: identity providers and attribute providers. This is a separation not frequently found in identity systems.  In order to emphasize this distinction, I often use the term “credential provider” or “authentication provider” rather than identity provider to refer to a service that provides authentication services and makes assertions resulting from authentication but does not directly provide attributes about the subject.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/credential-and-attribute-providers-in-the-nstic/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Identity Intermediaries and the NSTIC</title>
		<link>http://blogs.cisco.com/security/identity-intermediaries-and-the-nstic/</link>
		<comments>http://blogs.cisco.com/security/identity-intermediaries-and-the-nstic/#comments</comments>
		<pubDate>Thu, 28 Apr 2011 19:40:02 +0000</pubDate>
		<dc:creator>Jim Fenton</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[NSTIC]]></category>
		<category><![CDATA[NSTIC Series]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=28841</guid>
		<description><![CDATA[A couple of months ago, I spoke with a security researcher at a conference about the NSTIC.  He questioned the need for an intermediary to manage users' identity information; he asked why we don't just do this at the user's endpoint, eliminating the need for the user to trust an external party.  This is a good place to begin a discussion about the NSTIC architecture.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/identity-intermediaries-and-the-nstic/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>NSTIC Strategy Released</title>
		<link>http://blogs.cisco.com/security/nstic-strategy-released/</link>
		<comments>http://blogs.cisco.com/security/nstic-strategy-released/#comments</comments>
		<pubDate>Wed, 20 Apr 2011 21:45:35 +0000</pubDate>
		<dc:creator>Jim Fenton</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[NSTIC]]></category>
		<category><![CDATA[NSTIC Series]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=28146</guid>
		<description><![CDATA[Last June, <a href="http://blogs.cisco.com/security/the_national_strategy_for_trusted_identities_in_cyberspace/" target="_blank">I blogged</a> about a draft of the National Strategy for Trusted Identities in Cyberspace (NSTIC) that had been released for public comment.  This past April 15, the finalized <a href="http://www.whitehouse.gov/sites/default/files/rss_viewer/NSTICstrategy_041511.pdf" target="_blank">NSTIC strategy document</a> was <a href="http://www.nist.gov/public_affairs/releases/whitehouse_nstic.cfm" target="_blank">released</a> at an event at the US Chamber of Commerce.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/nstic-strategy-released/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
