CMI 5 Working Group Meeting Minutes – July 11th, 2014

CMI-5 Working Group Meeting Minutes – July 11th, 2014

Attendees

• William A. McDonald – Boeing Flight Services
• Bruce Williamson – Boeing Defense Systems
• William Shook – Boeing Defense Systems
• Brandt Dargue – Boeing Research & Technology
• Art Werkenthin – RISC Technology
• Ben Clark – Rustici Software
• Ray Lowery – Pratt & Whitney
• Tyler Mulligan – ADL
• Andy Johnson – ADL
• Craig Wiggins – ADL
• Henry Ryng – INXSOL
• Chris Handorf – Pearson (Please let know if anyone was missed)

Agenda

Notes

The group primarily discussed the usage of “AuthenticationMethod” (CMI-5 Course Structure – Section 7.1.4 AU Meta Data )

Concerns were raised about the security of the “Basic” authentication method and there was a lengthy discussion about ways it could be improved. One proposal that seemed interesting was including an authentications token “Fetch URL” on the AU Launch line.
This URL would be used by the AU to retrieve the Authentication Token from the LMS (to authenticate to the LRS) The “Fetch URL” could be generated by the LMS and have a limited lifespan so as not to be re-used. The idea sounded interesting to the group and will be explored more.

Issued with OAuth’s effect on the user experience were also discussed. It is possible that requiring re-authentication/authorization could be required every time the learner launched a new AU in a course. Possible ways that content developers might “combine” authentication for groups of AU’s was discussed.

Ben Clark volunteered to pose the Authentication questions raised in this meeting to the larger XAPI mailing list.

Please Note: We will not be meeting next week – Will resume at our normal time (7:30am US Pacific Time) on July 25th.

All Previous CMI-5 Meeting Minutes (Prior to June 6th) http://aicccmi5.wikispaces.com/AICC+CMI5+Specification

All Previous CMI-5 Meeting Minutes (After June 6th) https://github.com/AICC/CMI-5_Spec_Current/wiki

CMI-5 on GitHub https://github.com/AICC