Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

NFR010 Archiving #13

Closed
bluesteens opened this issue Aug 5, 2022 · 2 comments · Fixed by #66
Closed

NFR010 Archiving #13

bluesteens opened this issue Aug 5, 2022 · 2 comments · Fixed by #66
Assignees
@bluesteens
Labels
documentation Improvements or additions to documentation Steering - Review Proposal and Completed work must be reviewed by Steering.

Comments

@bluesteens
Copy link
Member

bluesteens commented Aug 5, 2022 •
edited
Loading

Steering summary:
NFR requires wallets to keep transaction records for 6+ years. The duration of record-keeping should be dealt with in customer contracts. Suggest rewording to require capability of record storage & transfer without specifying the duration.

the criteria state,

The Wallet Provider SHALL keep detailed records of all VP generation and verification events as well as monitoring activities for a period of not less than six (6) years.

The duration of record-keeping should be dealt with in customer contracts. This requirement ignores the fact that contracts may end before 6 years are up. Does OCI require a wallet provider to keep records of ex-customers (for free)? Customers and providers should negotiate data retention and transfer in their service contract. Setting the duration is beyond the scope of OCI in my opinion. What OCI can ask for is that wallets are capable of relevant data logging.

I suggest to re-word the criteria section as follows:

The Wallet Provider SHALL be capable of keeping detailed records of all VP generation and verification events as well as monitoring activities. These detailed records constitute an audit trail to be used in the event of an investigation into credential-related activities of the credential holder.

It may be added that:

The Wallet Provider SHALL be capable of transferring such records to the user.
@lleifermann lleifermann added the triage This Issue has not been triaged by the OCI WG yet and will be discussed in the next group call label Aug 11, 2022
@rceleste125 rceleste125 removed the triage This Issue has not been triaged by the OCI WG yet and will be discussed in the next group call label Mar 8, 2023
@bluesteens bluesteens added the documentation Improvements or additions to documentation label Mar 9, 2023
@bluesteens
Copy link
Member Author

bluesteens commented Mar 9, 2023 •
edited by rceleste125
Loading

Triage:

  • Is Issue appropriate for OCI Architecture
  • Create Steering-level Summary of request
  • Assign Size
  • Assign Priority
  • Assign Label (if needed)
  • OCI affected Artifacts Identified
  • Assign Triage - Artifact Version Target (v x.x.x Milestone)
  • Assign Triage - Interop Profile Version Target (v x.x.x Milestone)
  • Create sub-project (if needed)

Affected Parties (help determine Sunrise/Sunset):

  • Trading Partners
  • Issuers
  • Wallet Solutions
  • PI Verification Solutions

Affected OCI Artifact

  • Schema Document
  • Identity Schema
  • ATP Schema
  • Issuer Conformance Criteria
  • Wallet Conformance Criteria
  • VRS Solution Conformance Criteria
  • Wallet API Specification
  • Governance Document
  • Conformance Program
  • OCI Website
  • Internal Process
  • Getting Started

Change Category (Guides Steering Review)

- Steering/Industry Review

  • Business-Level (May affect business operations)
  • OCI Governance, Policy or website feature

- Steering/Industry Notification

  • Technical-Level (Do not affect business operations)
  • OCI Internal Process or Infrastructure

@bluesteens bluesteens changed the title NFR011 Archiving NFR010 Archiving Apr 24, 2023
@bluesteens bluesteens mentioned this issue May 1, 2023
Closed
28 tasks
@bluesteens
Copy link
Member Author

relates to issue #43

@bluesteens bluesteens self-assigned this Jun 14, 2023
@bluesteens bluesteens mentioned this issue Jun 14, 2023
Merged
bluesteens added a commit that referenced this issue Jun 14, 2023
@bluesteens
NFR010 reworded
1efba2d 
addresses #13
@bluesteens bluesteens linked a pull request Jun 14, 2023 that will close this issue
NFR003-009-010 #66
Merged
@rceleste125 rceleste125 added the Steering - Review Proposal and Completed work must be reviewed by Steering. label Jul 17, 2023
bluesteens added a commit that referenced this issue Aug 10, 2023
@bluesteens
NFR003-009-010 (#66)
bf4a761 
* NFR010 reworded

addresses #13

* NFR3, 9, 10

adjusted 3
merged 9 + 10

* NFR003 tweaks

* reworked NFR3+9+10 following P&A feedback

* NFR003 tweaks

brining 3 more in line with 9 +10

* typo

* Updated following P&A review
@rceleste125 rceleste125 mentioned this issue Oct 5, 2023
Open
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees

@bluesteens bluesteens

Labels
documentation Improvements or additions to documentation Steering - Review Proposal and Completed work must be reviewed by Steering.
Projects
OCI Change Management
Status: ✅ Done - Published
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

NFR003-009-010 Open-Credentialing-Initiative/Digital-Wallet-Conformance-Criteria
3 participants
@lleifermann @bluesteens @rceleste125