1. 1 Washington Integrated Justice Information Board December 20, 2005 Scott Bream Department of Information Services Justice Information Network Data Exchange (JINDEX) Security and Business Requirements

2. 2  Decision to move PCH/CACH application to production warranted review of security and authentication requirements.  Production security requirements are more rigorous than pilot security requirements.  Need to provide additional identifiers will require modification to King and Yakima County applications.  Need to provide multiple authentication requirements over time will require need for constant re-coding and will prevent JINDEX from scaling. Issues

3. 3  Assumed that consuming entities (King and Yakima Counties) would be responsible and liable for allowing only authorized users access.  King and Yakima Counties would be required to pass only their agency identifiers to back-end providers.  Trust from consuming entities would be preserved through encrypted messaging between trusted servers.  JINDEX will act primarily as a messaging switch, passing through the required credentials. Pilot Authentication Requirements

4. 4 WSP AOC King County Yakima County Yakima Co. ORI Yakima Co. RAFC ID King Co. ORI King Co. RACF ID King Co. ID Burien Police King Co. ID Seattle Police Yakima Co. ID City of Othello Yakima Co. ID Yakima Police WSP ACCESS User Agreement AOC User Agreement AOC User Agreement TRUST King Co. RACF ID Yakima Co. RAFC ID IGN King Co. ORI Yakima Co. ORI Pilot Authentication Model

5. 5  Based on production requirements established by WSP and AOC.  Requires input of end-user identifier in addition to consuming entity identifier.  Creates need for King and Yakima Counties to modify applications.  Becomes more complex as application grows.  Not consistent with scalable, highly secure, re-usable Web Services best practices. Provider-Driven Production Authentication Model

6. 6 WSP AOC King County Yakima County + King Co. ID + Yakima Co. ID Burien Police Seattle Police City of Othello Yakima Police WSP ACCESS User Agreement AOC User Agreement AOC User Agreement Provider-Driven Production Authentication Model Burien Police ORI Seattle Police ORI Yakima Police ORI Othello PD ORI Yakima Police RACF Othello PD RACF Seattle Police RACF Burien Police RACF Yakima Co. ORI Yakima Co. RAFC ID Yakima Police ORI Yakima Police RACF IGN King Co. ORI Yakima Co. ORI Seattle Police RACF Yakima Police ORI King Co. ORI King Co. RACF Seattle Police ORI King Co. RACF Yakima Co. RACF Seattle PD RACF Yakima Police RACF WSP ACCESS User Agreement AOC User Agreement

7. 7 Input and Discussion Washington State Patrol and Administrative Office of the Courts will provide input on authentication requirements and impacts on code and scalability.

8. 8  Assumes that consuming entities would be responsible and liable for allowing only authorized users access.  Envisions creation of a centralized registration service for each consuming entity that identifies those data-providers to which they have been granted access.  Would change the role of the JINDEX from simple message broker to trusted agent.  Will require the creation of new JINDEX services outside the scope of the current contract with Online Business Systems. Possible JINDEX Authentication Model

9. 9 WSP AOC King County Yakima County Yakima Co. Server ID King Co. Server ID King Co. ID Burien Police King Co. ID Seattle Police Yakima Co. ID City of Othello Yakima Co. ID Yakima Police WSP ACCESS User Agreement AOC User Agreement AOC User Agreement TRUST JINDEX ORI Possible Centralized Authentication Model WSP ACCESS Add-User Agreement AOC Add-User Agreement DOL Add-User Agreement DOL User Agreement JINDEX RACF ID DOL JINDEX DOL ID TRUST JINDEX Validation Service WSDOT - Yakima Co. - King Co. - DOL WSP AOC DOL WSP

10. 10 Questions? Scott Bream, DIS scott@dis.wa.gov (360) 902-3460