1. Upgrading CP/CPS: RFC 2527 RFC 3647 Majid Arabgol IRAN GRID CA Institute for Studies in Theoretcal Physics and Mathematics Teharn, Iran.

2. Back ground Iran GRID CA was approved on the basis of CP/CPS: RFC 2527 in May 2008 We promised to change to RFC 3647 as soon as possible.

3. How ??? 1.Choose existing examples ( based on RFC 3647) 2.Export the existing policy and practices into the new template 3.Think about the new/extra stipulations

4. Examples of cp/cps Magrid (Morroco) – Recently accredited PK Grid (Pakistan) – Recently upgraded ( 2527 to 3647) – Similarity with Iran UFF Brazilian CA (Brazil) – Good cross references

5. Combine with the standard template Currently approved cp/cps ( rfc 2527 ) RFC 3647 template http://www.faqs.org /rfcs/rfc3647.html Examples of cp/cps ( rfc 3647) Upgraded cp/cps (rfc 3647)

6. RFC 2527 vs RFC 3647 Improvements : – …In particular, representatives of the ISC made changes to the framework to better suite it to the legal environment and make it more accessible to lawyers (new Section 9) – … From a technical perspective, the changes to the RFC 2527 framework were minimal and incremental, rather than revolutionary.RFC 2527

7. Mapping

8. Exporting the contents of RFC 2527 Identical Improved or incremented Reconfiguration or reorganized New items

9. Examples rfc 2527rfc 3647action.. 1.2 Identification1.2Incremental or improved 4.5.6 Audit Collection System (Internal vs. External) 5.4.6Identical 2.1.3 Subscriber Obligations 4.1.2, 4.4, 4.5, 4.5.1, 4.6.5, 4.7.5, 4.8.1, 4.8.5, 4.9.1, 4.9.2, 4.9.13, 4.9.15, 5., 6., 9.6.3, 9.9 reconfiguration 2.3 Financial Responsibility9.2moved

10. Inverse Mapping

11. Examples New RFC 3647Old RFC 2527.. 1.2 Document Name and Identification 1.2 IdentificationIncremental or improved 5.4.6 Audit collection system (internal vs. external) 4.5.6 Audit Collection System (Internal vs. External) Identical 4.5 Key Pair and Certificate Usage 1.3.4, 2.1.3, 2.1.4Reconfiguration( merge /split /move) 4.9.5 Time Within Which CA Must Process the Revocation Request No Available (N/A)New item

12. Reconfigured

14. Incremented

15. Identical

16. Reconfigured

17. New Stipulations 1.3.4Relying PartiesIn Glossary 1.3.5Other ParticipantsNo stipulation 1.6Definitions and AcronymsGlossary 3.1.3Anonymity or Pseudonymity of Subscribers 3.2.4Non-Verified Subscriber Information No stipulation 3.2.6Criteria for InteroperationNo stipulation 4.9.5Time Within Which CA Must Process the Revocation Request 4.11End of Subscription 6.8Time-Stamping 7.3OCSP ProfileNo stipulation 9.4.1Privacy Plan 9.10Term and Termination 9.16.2Assignment

18. New items

19. In a nutshell Currently approved cp/cps ( rfc 2527 ) RFC 3647 to RFC 2527 mapping table Examples of cp/cps ( rfc 3647) Upgraded cp/cps (rfc 3647) RFC 3647 template http://www.faqs.org /rfcs/rfc3647.html