80 likes | 427 Views
Higher Education Bridge CA (HEBCA) – Planting is required before the harvest (Scott Rea) Fed/Ed June 2007 Plowing the field Why is HEBCA still only in test mode of operation? Demand is not there yet from multiple schools (NOTE: Texas is an exception in this regards)
E N D
Higher Education Bridge CA (HEBCA) – Planting is required before the harvest(Scott Rea)Fed/Ed June 2007
Plowing the field • Why is HEBCA still only in test mode of operation? • Demand is not there yet from multiple schools (NOTE: Texas is an exception in this regards) • Anecdotally there is higher interest in PKI from schools than ever before but this interest is mostly focused on introspective projects rather than those that require cross-boundary authentication – some caveats do exist • An exception to the above is the Federal government as the external campus entity – there is a lot of interest in what the feds are doing and what that means for campuses • By the feds own admission – 75% of their applications that are the focus of the eAuthentication “federation” are assertion based – there are not many higher level applications out there
Planting seeds • What are the drivers being manifest • Identity theft is the fastest growing crime in the US, higher education is the primary target (43% of reported incidents occurred in our sector) • Stronger binding and stronger technologies for IDM, better access controls, and security services are being investigated • There are lots of small internal PKI pilots quietly going about their business – looking to grow organically • Federation is required for bridging PKI – but the main thrust (in terms of advertising and focus) for federations has been in the assertion based arena – notably shibboleth – this both a catalyst and a crutch
Solving Silos of Trust Institution FBCA Dept-1 Dept-1 Dept-1 HEBCA CAUDIT PKI USHER CA CA CA SubCA SubCA SubCA SubCA SubCA SubCA SubCA SubCA SubCA
Challenges and Opportunities • Open Tasks • Audit • Updated Business Plan • Mapping Grid Profiles • Classic PKI • SLCS • Promotion of PKI Test bed • Validation Authority service • Cross-certification with FBCA • Cross-certification with other HE PKI communities • CAUDIT PKI (AusCERT) • HE JP • HE BR
Proposed Inter-federations CA-2 CA-1 CA-2 CA-3 HE BR CA-1 AusCert CAUDIT PKI CA-n NIH HE JP FBCA Cross-cert Cross-certs C-4 DST ACES Texas Dartmouth HEBCA Cross-certs IGTF Wisconsin UVA Univ-N USHER CertiPath SAFE CA-4 Other Bridges CA-1 CA-2 CA-3
E-AUTH FPKI E-Auth Level 4 High HEBCA/USHER Medium Hardware CBP High E-Auth Level 3 Medium Software CBP Medium Basic Classic Strong Basic E-Auth Level 2 Rudimentary Rudimentary C-4 IGTF Classic Ca Foundation E-Auth Level 1 SLCS MICS
For More Information • HEBCA Website: http://webteam.educause.edu/hebca/ Scott Rea - Scott.Rea@dartmouth.edu