Overview#

Trust Framework is a framework using a pre-negotiated set of business, legal, and technical agreements that bind Community of Interest with mutual assurance that transactions are reliable and repeatable.

In other words, a framework that is trusted by Community of Interest

A Trust Framework may follow a Trust Model

Examples of Trust Framework #

• Credit Card trust framework (Payment Card Industry PCI)
• ACH electronic Funds Transfer System trust framework
• Privacy (e.g., TRUSTe Trustmark)
• Open Identity Trust Framework - The Open Identity Trust Framework administered by the Open Identity Trust Framework is the best known model.
• LIGHTest

Trust Framework NIST#

The “rules” for Federated Identity Management are known as “Trust Framework” (Identity Trust Framework) and the organizations that agree to follow such rules and participate are known as “Identity Federations.”

Much Disagreement [1]#

As with all Frameworks, there is much Disagreement as to What a Trust Framework Is:

• FICAM - processes and controls for determining an identity provider’s compliance to OMB M-04-04 Level of Assurance (LOA)
• ISO 29115 - a set of requirements and enforcement mechanisms for parties exchanging identity information
• Kantara Trust Framework - a complete set of contracts, regulations or commitments that enable participating actors to rely on certain assertions by other actors to fulfill their information security requirements
• OIX - a certification program that enables a party who accepts a digital identity credential (called the relying party) to trust the identity, security, and privacy policies of the party who issues the credential (called the identity service provider) and vice versa.
• OITF Model - a set of technical, operational, and legal requirements and enforcement mechanisms for parties exchanging identity information !! More Information

There might be more information for this subject on one of the following:

• Acceptable Use
• Accreditation Authority
• Acr_values
• Data Privacy
• Digital Identity Acceptance Policy
• Drummond Reed
• Identity Trust Framework
• LIGHTest
• Legitimacy of Social Login
• Open Identity Trust Framework
• OpenID Connect Federation Async
• Permissioned Systems
• Qiy Trust Framework
• Respect Trust Framework
• Sovrin
• Sovrin Foundation
• Sovrin Steward
• Trust Framework Provider
• Trust Model

---

• [#1] - What Is an Identity Trust Framework? - American Bar Association - based on information obtained 2016-05-30-