1. U.S. General Services Administration Federal Technology Service November 9, 1999 Judith Spencer Director, Center for Governmentwide Security Office of Information Security

2. Paperwork Reduction Act National Performance Review’s Access America FPKISC Access With Trust Government Paperwork Elimination Act Mandates for On-Line Access

3. Facilitates secure on-line access to Government information and services by the Public through the use of public key technology. The ACES Concept

4. Provides a Government-wide Public Key Infrastructure. Provides auxiliary services that participating agencies may need to make use of the Infrastructure. Reduces overall costs by aggregating Government requirements. ACES Features

5. Identity Proofing Certificate Issuance On-line Validation Access to Information Compliance with Federal Requirements Validation Pricing Options The ACES PKI

6. Any Web-based Government Application Access Federal System with ACES Return Personalized Government Benefits/Information Validate Electronic ID (ACES) Secure Web Citizen Getting Services

7. Controlled by the application Application binds certificate identity to specific record data through second level proofing Application determines access based on certificate status and identity Application retains the right to deny access at any time Access to Information

8. Procurement Integrity Act OMB Circular A-130 –Paperwork Reduction Act –Computer Security Act –Privacy Act OMB Circular A-123 –Federal Managers Financial Integrity Act Cryptographic and Digital Signature Standards (FIPS 140-1 and 186) Compliance with Federal Requirements

9. Task Order Based Competition –Certificate Issuance for users Industry Partner provided Identity Proofing Government provided Identity Proofing –Certificate Issuance for agency applications Transaction-based validation pricing –Set by Contract. Common across all awardees. –Transaction Costs are Volume Banded. Higher use, lower rates $1.20 to $0.40 per transaction ACES Pricing Scheme

10. Agency Application Certificate Certificates issued to and renewed by Agencies for applications participating in ACES. Supplemental PKI Services Support for other system integration and PKI requirements such as: products, services, programming, and other systems integration support as may be required to enable Agency applications to implement PKI solutions that meet unique requirements (e.g. encryption Technology Updates Incorporation of new algorithms, formats, technologies, mechanisms, and media Ad Hoc Data Ad hoc data collection, analysis, and/or dissemination services related to ACES infrastructure services. Hardware Tokens Optional hardware token for generation of key pairs and storage of private key. Auxiliary Services Task Order Based

11. ABAecom, America Online, Baltimore Technologies, Booz-Allen Hamilton, Computer Sciences Corp. (CSC), Cygnacom Solutions, Entrust, Microsoft, Netscape National Computer Systems, Price Waterhouse Coopers, Valicert Inc., Xcert International Inc. Cygnacom Solutions, DataKey, Litronics, nCipher, Netscape Verisign, Inc Industry Partners

12. ACES provides strong authentication using identity-based digital signature certificates. Agencies should consider the need for such strong authentication when deciding which on line applications need ACES protection. Five categories of Government to Public communications have been identified by OMB that could require this strong authentication. Defining Need

13. Benefits Grants Filings Personal/Private/Proprietary Information Procurement Five Communication Categories

14. Agency Recognizes a Need ACES PKI Services Auxiliary PKI Services PKI Needs Analysis Sign Relying Party Agreement Contacts OIS Sign MOU w/OIS OIS Contacts Partners to Activate Notifies FEDCAC Partners Provide Billing to FTS FTS aggregates charges, Bills Agency, and pays Partners Finalize SOW Develop Task Order Conduct Evaluation Award Task Order Getting ACES Services

15. Initial ACES Award 9/10/99 Source Selection Ends10/27/99 Certification & Accreditation 9/20/99 - 1/27/00 Certificate Issuance begins12/20/99 Task Order CLINS Available NOW Program Timeframes

16. ACES Program Manager Stanley Choffrey202-708-7943 stanley.choffrey@gsa.gov ACES Contracting Officer Jeanne Davis781-860-7138jeanne.davis@gsa.gov Center for Governmentwide Security Judith Spencer202-708-5600judith.spencer@gsa.gov Contact Information