60 likes | 158 Views
Ninth Federal & Higher Education PKI Coordination Meeting 6/16/2004. Introductions. Neil Sattler (CIO, E-Commerce Services) Enterprise Initiatives E-Signature Initiatives E-Gov E-Authentication Initiatives Paul Hill (Schools Channel) School Business Processes
E N D
Ninth Federal & Higher Education PKI Coordination Meeting6/16/2004
Introductions • Neil Sattler (CIO, E-Commerce Services) • Enterprise Initiatives • E-Signature Initiatives • E-Gov E-Authentication Initiatives • Paul Hill (Schools Channel) • School Business Processes • Federated Identities; Institutional Routing Identities • XML Initiatives • Srinivas Kankanahalli (CIO, Security) • IT Management Services • Authentication and Access Management Shared Services • Simplified Sign On • Trey Wiesenburg (CIO, E-Commerce Services) • Project Management
Ongoing Initiatives • Internal • Security • Shared Services • Authentication & Access Management (FSA Target Vision) • Front End Business Integration (FEBI) • Simplified Sign-on • E-Signatures (PIN based) • External • Federal Bridge Certificate Authority • Higher Education Bridge Certificate Authority • E-Gov E-Authentication Initiative • Federated Identities • Interagency coordination
PKI Initiatives • None currently… • No business process uses PKI except for server based authentications. • FSA is not a participant in the Federal Bridge Certificate Authority. • FSA is basically a PIN/Password based operation. • but… • FSA recognizes that PKI offers some operational advantages for secured transactions. • FSA recognizes that any developing infrastructure should accommodate PKI based transactions. • FSA recognizes that schools and students have PKI digital certificates. • FSA wants to learn about business benefits of PKI. • Some FSA projects starting to look at “PKI-light” (relying party only).
Questions… • Since schools are issuing certificates to administrators/students, do schools want to use these credentials in FSA systems? • What business processes do schools want to PKI enable within FSA? • Does ED/FSA have to join the Federal Bridge to do PKI? • How will any proposed pilot work with the goals and objectives of the E-Gov E-Authentication initiative? • Can we do a pilot that is based on already existing model, (i.e. the NIH Shiboleth approach) • Can the E-Gov initiatives help a EDUCAUSE/FSA pilot in any way? • What would be the value that a pilot would prove? • What is the message we should carry back to FSA management? • Why should FSA invest time and resources into PKI solutions?