2. Componentization of FICAM TFS into Trustmarks Sample FICAM Trustmark Definition Overview of Trustmark Issuance and Binding Agenda

3. Analyzed full set of FICAM TFS v2 requirements Looked at LOA1 to LOA4 Focused only on SAML identity scheme Componentized FICAM in conjunction with NIEF Primary objective is maximal reuse of components Identified 41 total FICAM components (trustmarks) 30 pertain to FICAM SAML IDPs Others pertain to FICAM RPs and BAE endpoints 32 can be reused within NIEF now Componentization of FICAM TFS

4. List of FICAM TFS SAML IDP Trustmarks

5. FICAM LOA1 SAML IDP TIP FICAM LOA2 SAML IDP TIP FICAM Non-PKI LOA3 SAML IDP TIP FICAM LOA4 SAML HoK IDP TIP Organizational Trustmarks2 (common) LOA-Specific ID Trust Trustmarks1661 Privacy Trustmarks15 (common) Crypto Mgmt. Trustmarks3 (common) SAML Interop. Trustmarks4 (common)5 Attribute Profile Trustmarks1 (common) Required Trustmarks1119 16 Optional Trustmarks1221 Total Trustmarks1221 17 Some Stats…

6. NIEF Trustmark Count82 Trustmarks Needed for GTRI Pilot63 FICAM Trustmark Count41 NIEF/FICAM Trustmark Overlap Count32 Trustmarks Related to Security & Resilience52 Trustmarks Related to Privacy21 Trustmarks Related to Interoperability48 Trustmarks Related to Cost-Effectiveness & Ease of Use7 Total Trustmarks Identified (so far)107 FICAM Stats in Context

7. A Sample Trustmark Definition (Partial Screen Shots of Components)

8. Trustmark Assessment Tool Process Flow Trustmark Assessment Tool Database Trustmark Assessment Tool FICAM LOA 2 Authn Process TD FICAM LOA 2 Authn Process TD Trustmark Provider Trustmark Recipient Trustmark Definitions 1. Load TDs into Assessment Tool 2. Receive request for trustmark from Trustmark Recipient candidate 3. Perform assessment of Trustmark Recipient candidate 4. Store assessment artifacts / evidence in database 5. Issue trustmark to Trustmark Recipient

9. Sample Screen Shot from GTRI Trustmark Assessment Tool

10. NIEF Trustmark Issuance Process Flow NIEF Trust Fabric Registry NIEF Trust Fabric Registry NIEF Trustmark Assessment Processes Trustmark 1 Trustmark 2 Trustmark N NIEF Trust Fabric Entry Trustmark 1 Trustmark 2 Trustmark N Signed by NIEF NIEF Member Agency (Trustmark Recipient) NIEF Member Agency (Trustmark Recipient) Trustmark Assessment Tool Trust Fabric Entry Editor Trust Fabric Registry Manager Tool

11. NIEF Trustmark Usage Process Flow NIEF Trust Fabric Registry NIEF Trust Fabric Registry Trustmark Relying Party 1. Query for trust fabric entries with required trustmarks, in accordance with local TIP Trust Interoperability Profile 2. Receive matching trust fabric entries 3. Install entries in local product

12. Questions?