Norman Wiseman JISC Head of Programmes Presentation to JISC Authentication Concertation Day March 1999 International Authentication Activities Joint Information Systems Committee

Programme i)CNI ii)UCCAP iii)Internet 2 iv)IETF v)and next…? Joint Information Systems Committee Describe what is happening in (mostly) the USA in the authentication field:

CNI - History Authentication White Paper (Cliff Lynch) Proxies IP source filtering Credential-based access management Workshop: Enabling Access in Digital Libraries April 1998, report published February Joint Information Systems Committee History

CNI Authentication Workshop Principles Identified: Simplicity - implementation, adoption, acceptability Privacy - no compromise Good Faith - reasonable barriers to abuse Trusted Intermediaries - recognise role Reasonable terms -access by need and for accidental discovery Joint Information Systems Committee CNI

CNI Authentication Workshop (cont) Areas for Research: System Usability - user interaction need for new information types functionality of new types Economic models - assessing usage new pricing schemes Joint Information Systems Committee CNI

UCCAP University of California Common Authentication Project One of many in USA Campus similar in size to whole UK Following up CNI workshop Evaluation completed of different models (as proposed by Ira Fuchs of JSTOR) Joint Information Systems Committee UCCAP

UCCAP ( cont ) Components University Directory list every person ever associated with UC Public key infrastructure manage certificates using Netscape server hierarchical certificate architecture develop RFI/RFP for future technical development Authorisation Infrastructure gateway to database of user attributes associated query protocol Joint Information Systems Committee UCCAP

UCCAP ( cont ) But….. Scalability Only for internal UC certificates Not addressing wider issues for some time Costs: University of Minnesota expects certificates to cost $1million per year Gartner group estimates $100 per user per year Joint Information Systems Committee UCCAP

Internet 2 Network, Applications and ‘Middleware’ Run by UCAID Network - Abilene Applications: Qbone Digital Video Network (DVN) Distributed Storage Infrastructure (DSI) Joint Information Systems Committee Internet 2

Internet 2 (cont) Network, Applications and ‘Middleware’ Middleware includes: Security Quality of Service Network Management Topology IPv6 Routing Working Groups to take each area forward Joint Information Systems Committee Internet 2

Internet 2 (cont) Working Group Objectives Identify technology Scalable and interoperable Standard API’s JISC Involvement through MoU? Explanatory paper on JISC web pages soon Joint Information Systems Committee Internet 2

Internet Protocols Request for Comment: General Authentication, Authorisation and Accounting Protocol / Discusses underlying technology and protocols to allow services to work Joint Information Systems Committee IETF

International solution needed through joint efforts with US, Europe, Australia and Govt. How can we maintain awareness within technical/information community? What is the role of ATHENS? Processes to develop models and protocols? What are the human and organisational issues? Priorities and next steps for JISC? Joint Information Systems Committee Summary Where Next?

CNI UCCAP Internet2 IETF / Joint Information Systems Committee Reprise Addresses

Joint Information Systems Committee Joint Information Systems Committee Networks and Innovative Services for United Kingdom Education