6th CACR Information Security Workshop
1st Annual Privacy and Security Workshop
Incorporating Privacy into the Security Domain: Issues and Solutions

Centre for Applied Cryptographic Research (CACR)
University of Waterloo, Waterloo, Ontario, Canada

November 10, 2000
8:30 am - 4:30 pm
The Fields Institute, 222 College Street, Room 230, Toronto, Ontario.

The Sixth CACR Information Security Workshop, also titled the 1st Annual Privacy and Security Workshop, will be held on Friday, November 10, 2000 at the Fields Institute, Toronto, Ontario. This workshop, organized jointly with the Information & Privacy Commission, Ontario, will focus on issues and solutions that arise when incorporating privacy into the security domain.

Privacy is a growing issue in the area of technology (both wired and wireless applications). Privacy needs to be understood as a separate issue to that of security. It also needs to be addressed in the design and implementation of any system using PKI, wired and/or wireless technologies. This includes everything from devices to databases.

This workshop provides an opportunity for participants to develop a working vocabulary of privacy issues which technology needs to address for consumer acceptance. The workshop will also speak to the need for public and private sector organizations to address the privacy issues inherent in using these technologies. Additionally, tools to assess the privacy impact of technologies will be covered.

The intended audience includes technology and security experts, CIO's, senior technology executives, cryptographers, and engineers.

Sponsors:

• Certicom Corp.
• Information & Privacy Commission, Ontario
• MasterCard International
• MITACS
• Mondex International Limited
• Pitney Bowes

• Mike Gurski (Conference Chair)
  Information & Privacy Commission, Ontario
• Alfred Menezes
  Centre for Applied Cryptographic Research (CACR)
  University of Waterloo
• Sherry Shannon
  Centre for Applied Cryptographic Research (CACR) and SVI Consulting

• Mike Knowles, IBM Consulting Group IT Security & Privacy Services
• Karen Spector, Management Board Secretariat, Ontario Government

• Stefan Brands, Zero-Knowledge Systems
• Jason Catlett, Junkbusters.com
• Ann Cavoukian, Information & Privacy Commission, Ontario
• Peter Cullen, Royal Bank of Canada
• Jo Anne DeLaurentiis, Mondex Canada
• Guy Herriges, Management Board Secretariat, Ontario Government
• Peter Hope-Tindall, dataPrivacy Partners Ltd.
• Barry Sookman, McCarthy Tetrault
• Dave Wallace, Management Board Secretariat, Ontario Government
• Brenda Watkins, Treasury Board Secretariat, Government of Canada

• 8:00 - 8:30
  • Registration and continental breakfast

• 8:30 - 8:45
  • Welcome
    Dr. Scott Vanstone, Executive Director, CACR,
    NSERC/Pitney Bowes Chair, St. Jerome's University and
    University of Waterloo
    Chief Cryptographer at Certicom Corp.

  • Introduction to Program Mike Gurski, Conference Chair
    Sr. Policy/Technology Advisor, Information & Privacy Commission, Ontario

• 8:45 - 9:45 (Introduction by Mike Gurski)
  • Incorporating Privacy into Technology: Understanding the Issues, Identifying the Principles
    The Case for Privacy
    Privacy and Security Defined
    The Technology Challenges of the Legal and Public Context of Privacy
    
    Review of Privacy and Technology Design Principles used to address Privacy in Technology Projects within the Ontario Government's Enterprise Architecture
    
    Speakers
    Ann Cavoukian, Commissioner, Information and Privacy Commission Ontario
    
    Dave Wallace, Chief Strategist, Enterprise Architecture, Management Board Secretariat, Ontario Government

• 9:45 - 10:15 (Introduction by Karen Spector, Management Board Secretariat, Ontario Government)
  • Knowing the Legal Framework
    Information Technology and Cyberlaw, a primer
    Implications for Security Professionals of Canadian & Provincial Privacy and E-commerce Legislation for Private Sector
    
    Speaker
    Barry Sookman, Partner, McCarthy Tetrault
    Chair, Internet and E-Commerce Group

• 10:15 - 10:30
  • Coffee Break

• 10:30 - 11:30
  • Introducing Privacy into PKI: From Algorithms to Architecture
    
    Moderator
    Mike Knowles, IBM, Security Architect, SmartCard Project, Ontario Government
    
    Speakers
    Stefan Brands, Sr. Cryptographer, Zero-Knowledge Systems
    
    Brenda Watkins, PKI Secretariat, Treasury Board Secretariat, Government of Canada

• 11:30 - 12:30 (Introdcution by Mike Gurski, Sr. Policy/Technology Advisor, Information & Privacy Commission, Ontario)
  • Privacy and Wireless Technology
    
    Speaker
    Jason Catlett, President, Junkbusters.com

• 12:30 - 2:00 (Introduction by Ann Cavoukian, Commissioner, Information & Privacy Commission Ontario)
  • Lunch
  • The Emerging Role of the Privacy Architect - A Biometric View
    
    Speaker
    Peter Hope-Tindall, Privacy Architect, dataPrivacy Partners Ltd.

• 2:00 - 2:45
  • Business Responses to Privacy in the Security Domain
    
    Moderator
    Karen Spector, Privacy Impact Assessment Coordinator, SmartCard Project, Management Board Secretariat, Ontario Government
    
    Speakers
    Peter Cullen, Head of Privacy, Royal Bank of Canada
    
    Jo Anne DeLaurentiis, President, Mondex Canada

• 2:45 - 3:00
  • Coffee Break

• 3:00 - 4:00 (Introduction by Mike Gurski, Sr. Policy/Technology Advisor, Information & Privacy Commission, Ontario)
  • Tools for Introducing Privacy into Technology
    Privacy Impact Assessments
    Getting at the Architecture Design Issues
    
    Speaker
    Guy Herriges, Manager, Corporate Freedom of Information and Protection of Privacy, Management Board Secretariat, Ontario Government

• 4:00 - 4:20
  • Next Steps:
    
    Facilitator
    Ann Cavoukian, Commissioner, Information and Privacy Commission, Ontario
    
    Feedback/Evaluation from this Workshop
    Ideas for Future Events

• 4:20 - 4:30
  • Wrap Up:
    
    Dr. Alfred Menezes, Director, CACR

• Cdn $300 (US $200).
• For participants affiliated with an academic institution: Cdn $100 (US $66).

------------------------cut from here---------------------------------
6th CACR INFORMATION SECURITY WORKSHOP      REGISTRATION FORM

Fullname:
_________________________________________________________

Affiliation:
_________________________________________________________

Address:
_________________________________________________________

_________________________________________________________

_________________________________________________________

_________________________________________________________

_________________________________________________________

E-Mail Address:
_________________________________________________________

Telephone #:
_________________________________________________________

**Make Cheque/Money Order Payable in Cdn or US funds only to: CACR

**Credit Card payments can now be accepted:

[ ] Visa       [ ] MasterCard

Cardholder's Name: ____________________________________________

Card Number: __________________________________________________

Expiration Date: ______________________________________________

Signature: ____________________________________________________

-------------------------cut from here-------------------------------