National Institutes of Health Interfederation Initiatives Peter Alterman, Ph.D. Assistant CIO for e-Authentication.

Slides:

Advertisements

Similar presentations

Overview of US Federal Identity Management Initiatives Peter Alterman, Ph.D. Chair, Federal PKI Policy Authority and Asst. CIO E-Authentication, NIH.

Advertisements

Levels of Assurance: An Overview Peter Alterman, Ph.D. Chair, Federal PKI Policy Authority.

EDUCAUSE 2001, Indianapolis IN Securing e-Government: Implementing the Federal PKI David Temoshok Federal PKI Policy Manager GSA Office of Governmentwide.

Authentication solutions for Outlook and Office 365 Multi-factor authentication for Office 365 Outlook client futures.

Federal PKI Architecture Update

Ongoing Efforts to Build The US Federal PKI Bridge

15June’061 NASA PKI and the Federal Environment 13th Fed-Ed PKI Meeting 15 June ‘06 Presenter: Tice DeYoung.

Copyright Judith Spencer This work is the intellectual property of the author. Permission is granted for this material to be shared for non-commercial,

The SAFE-BioPharma Identity Proofing Process Author of Record SWG (Digital Credentials) October 3, 2012 Peter Alterman, Ph.D. Chief Operating Officer,

US E-authentication and the Culture of Compliance RL “Bob” Morgan University of Washington CAMP, June 2005.

NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to.

Federal Electronic Identity Initiatives – Current Status Peter Alterman, Ph.D. Chair, Federal PKI Policy Authority and Asst. CIO for E-Authentication,

Update on federations, PKI, and federated PKI for US feds and higher eds Tom Barton University of Chicago.

PKI in US Higher Education TAGPMA Meeting, March 2006 Rio De Janeiro, Brazil.

U.S. Environmental Protection Agency Central Data Exchange EPA E-Authentication Pilot NOLA Network Node Workshop February 28, 2005.

The U.S. Federal PKI and the Federal Bridge Certification Authority

EDUCAUSE Fed/Higher ED PKI Coordination Meeting

The 4BF The Four Bridges Forum Higher Education Bridge Certificate Authority.

1 eAuthentication in Higher Education Tim Bornholtz Session #47.

NIH-EDUCAUSE Interoperability Project, Phase 3: Fulfilling the Promise Dartmouth PKI Implementation Workshop Peter Alterman, Ph.D. Assistant CIO for E-Authentication.

NIH iTrust Peter Alterman/Debbie Bucci National Institutes of Health October 2010.

Single Sign-On, Federated Authentication and Beyond at NIH Dr. Peter Alterman National Institutes of Health.

Cloud app Cloud app Cloud app Separate username/password sign-in Manual or semi-automated provisioning Active Directory App Separate username/password.

The E-Authentication Initiative: A Status Report Presented at Educause Meeting June 16, 2004 The E-Authentication Initiative.

Shibboleth Update a.k.a. “shibble-ware”

The E-Authentication Initiative An Overview Peter Alterman, Ph.D. Assistant CIO for e-Authentication, NIH and Chair, Federal PKI Policy Authority The E-Authentication.

The U.S. Federal PKI, 2004: Report to EDUCAUSE Peter Alterman, Ph.D. Assistant CIO for E-Authentication National Institutes of Health.

EDUCAUSE PKI Working Group Where Are We and Where are We Going.

Deploying a Certification Authority for Networks Security Prof. Dr. VICTOR-VALERIU PATRICIU Cdor.Prof. Dr. AUREL SERB Computer Engineering Department Military.

Transforming Education Through Information Technologies Common Solutions Group, January, 2002 (Sanibel Island) HEBCA: Higher Education.

The InCommon Federation The U.S. Access and Identity Management Federation

Interfederation RL “Bob” Morgan University of Washington and Internet2 Digital ID World 2005 San Francisco.

Single Sign-On Multiple Benefits via Alaska K20 Identity Federation 20 May 2011 BTOP Partner Meeting Anchorage, Alaska 20 May 2011 BTOP Partner Meeting.

The Evolving U.S. Federal PKI Richard Guida Chair, Federal PKI Steering Committee Federal Chief Information Officers Council

E-Authentication: The Need for Public and Private Sector Trust David Temoshok Director, Identity Policy and Management GSA Office of Governmentwide Policy.

The NIH PKI Pilots Peter Alterman, Ph.D. … again.

Using Levels of Assurance Well, at least thinking about it…. MAX (just MAX)

PKI and the U.S. Federal E- Authentication Architecture Peter Alterman, Ph.D. Assistant CIO for e-Authentication National Institutes of Health Internet2.

Internet2 Middleware PKI: Oy-vey! Michael R. Gettes Principal Technologist Georgetown University

Government-University Identity Management Opportunities Peter Alterman, Ph.D. Chair, U.S. Federal PKI Policy Authority and Assistant CIO/E-Authentication,

The Federal Bridge A Brief Overview 1. 4BF Industry Forum April Fed PKI: View from 20,000 km FBCA C4 Common Policy CA (HSPD-12) CertiPath SSPs.

Federated Authentication at NIH: Trusting External Credentials at Known Levels of Assurance Debbie Bucci and Peter Alterman November, 2009.

The Federal PKI Or, How to Herd Worms Peter Alterman Senior Advisor, Federal PKI Steering Committee.

The Feds and Shibboleth Peter Alterman, Ph.D. Asst. CIO, E-Authentication National Institutes of Health.

Identity Federations and the U.S. E-Authentication Architecture Peter Alterman, Ph.D. Assistant CIO, E-Authentication National Institutes of Health.

1 Federal Identity Management Initiatives Federal Identity Management Initatives David Temoshok Director, Identity Policy and Management GSA Office of.

Transforming Government Federal e-Authentication Initiative David Temoshok Director, Identity Policy and Management GSA Office of Governmentwide Policy.

Identity Federations: Here and Now David L. Wasley Thomas Lenggenhager Peter Alterman John Krienke.

Identity Management, Federating Identities, and Federations November 21, 2006 Kevin Morooney Jeff Kuhns Renee Shuey.

Federal PKI Update Peter Alterman, Ph.D. Chair, Federal PKI Policy Authority.

Higher Education Bridge CA (HEBCA) – Planting is required before the harvest (Scott Rea) Fed/Ed June 2007.

E-Authentication briefing for 11th Fed/Ed PKI Meeting Thursday June 16th, 2005.

Trusted Electronic Communications for Federal Student Aid Mark Luker Vice President EDUCAUSE Copyright Mark Luker, This work is the intellectual.

Peter Alterman, Ph.D. Chair, Federal PKI Policy Authority Meet FedFed.

Interfederation: From Demo to Eternity RL “Bob” Morgan, University of Washington and Internet2 Internet2 Member Meeting, Chicago December, 2006.

Using PIV Cards with NIH Login Chris Leggett NIH Login Technical Lead CIT/NIH.

Interoperability and the Evolving Federal PKI Richard Guida, P.E. Member, Government Information Technology Services Board Chair, Federal PKI Steering.

USDA/STATE AGENCY MEETING U.S. Department of Agriculture Food and Nutrition Service November 2, Sarah Smith-Holmes, National Office Shannon Jones,

Federal Identity Management Overview and Current Status Dr. Peter Alterman, Chair Federal PKI Policy Authority.

Federal Initiatives in IdM Dr. Peter Alterman Chair, Federal PKI Policy Authority.

The Federal E-Authentication Initiative David Temoshok Director, Identity Policy GSA Office of Governmentwide Policy February 12, 2004 The E-Authentication.

EAuthentication – Update on Federal Initiative Jacqueline Craig IR&C September 27, 2005.

Privacy, Security, and Identity Management Update

U.S. Federal e-Authentication Initiative

ESA Single Sign On (SSO) and Federated Identity Management

NAAS 2.0 Features and Enhancements

EDUCAUSE Fed/Higher ED PKI Coordination Meeting

Technical Approach Chris Louden Enspier

HIMSS National Conference New Orleans Convention Center

Australian PKI experience

Presentation transcript:

National Institutes of Health Interfederation Initiatives Peter Alterman, Ph.D. Assistant CIO for e-Authentication

2 NIH Interfederation Goals Trust credentials issued by business partners at known Levels of Assurance Lower costs to all Simplify transactions for customers

3 NIH Interfederation Process 1.Identify need (internal and/or external process) 2.Engage Policy Mapping with Candidate Federations 3.Engage Technical Interoperability Testing with Candidate Federations 4.Draft and sign MOAs (yes, the lawyers) 5.Regular reviews

4 NIH Service Provider Architecture NIH SSO Level 1 apps Level 2 apps Level 3 apps Level 4 apps NIH SSO CSP validationFed PKI validation Local AuthZ Local AuthZ Local AuthZ Local AuthZ Level 3 apps

5 Federated Credential Validation Model NIH SSO End user credential Userid/passwords issuer Parse credential Digital certificates validated CA Digital certificates validated via Federal PKI Architecture Issuer known/trusted? Reject no SAML assertions issuer yes

6 Who Does NIH SSO Trust Now … and How Much? InCommon Member users: 1 (2 pending) U Tx Sys Adm PKI end users 2 All Feds And Contractors w/ HSPD-12 creds 3 & 4 End Users with PKI creds from FPKI xcert CAs 3 & 4 End Users with Grants.gov Userid/pswd 2 End Users with eAuth creds 1 & 2 Users with NIH AD Accounts 3

7 Federated Online Apps – Phase I NCI Tumor Microenvironment Network TMEN eRA Fed PKI Policy Authority Doc Mgt Sys HSPD-12 NIH Communication Officers Network Firebird Departmental Systems (cross-Operating Divisions) NIAID Training caBIG/caGrid NIH Library NCRR Grant Reporting System NICHD Clinical reporting system Level 1 appsLevel 2 appsLevel 3 appsLevel 4 apps

8 Questions?

9 U.S. Federal Trust Mapping E-Auth Level 1 E-Auth Level 2 E-Auth Level 3 E-Auth Level 4 FPKI Rudimentary; C4 FPKI Medium/HW & Medium/HW-cbp FPKI Basic FPKI Medium & Medium-cbp FPKI High (governments only) HSPD-12- compatible HSPD-12- compatible FRAC, TWIC, ACIS