Download - How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System
![Page 1: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/1.jpg)
Open Identity Summit
Enabling Information Sharing Identity in a Multi-Agency First Responder and Emergency Management Environment
Darrell O’Donnell, P.Eng. President Continuum Loop Inc.
![Page 2: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/2.jpg)
Open Identity Summit
Emergency)Informa.on)Sharing)Challenges)
2
![Page 3: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/3.jpg)
Open Identity Summit
How is SA shared? ! USERS:
! Fire fighters, Police, EMS/Paramedics, Emergency Managers, Public Safety/Homeland Security officers
! From “boots on the ground” to senior federal leadership.
! Both “consumers” and “contributors”.
! PROBLEM: ! Sharing of basic SA information does not happen in a systematic
way. Phone calls and emails rule the world of crisis and day-to-day operations.
! The status of SA information is difficult to determine (e.g., whether current, whether confirmed at source, etc.)
![Page 4: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/4.jpg)
What is MASAS? ! Multi-Agency – many agencies and organizations from local all
the way up to international.
! Situational Awareness – Sharing information that helps to understand what is happening around us so we can do our job effectively.
! System (of systems) – MASAS is not a tool, it is a way of sharing information amongst a trusted community.
![Page 5: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/5.jpg)
Open Identity Summit
Situational awareness is needed everyday
...and in many different places
Interdev(
5
![Page 6: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/6.jpg)
Open Identity Summit
Local
Regional (P/T)
Federal
Information Flow
First Responder EOC
P/T EMO EOC
EOC 2…n EOC 1
Regional Office
OGD Regional
Office
Federal Region
ADM-EMC
Field
![Page 7: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/7.jpg)
Open Identity Summit
Road closures, EM weather, check points, command posts, area of
operation, evacuation zone, plume cloud, shelter locations, shelter
status, staging area, supply depot, live cameras, media events,
pictures, sitreps, earthquakes, space weather, ...
Limiting Access
CLASSIFICATION
Completely Unclassified
7
Limited(obstacles(to(success(
Major(obstacles(to(success(
Designated or Classified
![Page 8: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/8.jpg)
Open Identity Summit
It can be this simple!
8
IAM allows users to know that the sender is who they say they and that they are the authoritative source.
![Page 9: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/9.jpg)
Open Identity Summit
Fires and MVA from CAD
9
![Page 10: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/10.jpg)
Open Identity Summit
Hurricane Sandy Good example of information sharing. Or was it?
![Page 11: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/11.jpg)
Open Identity Summit
Common Viewer - OpenLayers
! Little to no training ! Popular browsers
! Source code available
11
![Page 12: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/12.jpg)
Open Identity Summit
ESRI ArcGIS Widget
12
![Page 13: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/13.jpg)
Open Identity Summit
Moving to Common Viewer - ArcGIS
! Plugs into ArcGIS ! User configurable
! Source code available
13
![Page 14: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/14.jpg)
Open Identity Summit
It works locally
It must ...or it won’t work nationally, internationally
14
![Page 15: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/15.jpg)
Open Identity Summit
Local Level ! Tri-services
! Fire, Police, and Ambulance/Paramedics
! Emergency Managers
! Multiple Jurisdictions
! Muddy ! Today’s Incident Command Systems tells you who is in charge and
who does what? Who has what rights?
! No systems integration – no way to share data reliably and predictably (i.e., not automated, and supporting policy)
![Page 16: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/16.jpg)
Open Identity Summit
International – Canada/US
![Page 17: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/17.jpg)
Open Identity Summit
Beyond the Border Beyond the Border - Action Plan on Perimeter Security... December 2011
Page 25: “The second working group will focus on cross-border interoperability as a means of harmonizing cross-border emergency communications efforts. It will pursue activities that promote the harmonization of the Canadian Multi-Agency Situational Awareness System with the United States Integrated Public Alert and Warning System to enable sharing of alert, warning, and incident information to improve response coordination during binational disasters.”
17
![Page 18: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/18.jpg)
Open Identity Summit
Self Examination … ! Given this Surprise …
! Why is MASAS Succeeding? ! ~50 Organizations in 2011, 200 in 2012, 450 in 2013 (May)
! It isn’t Technology ! Information Exchange is somewhat novel – but not magic.
! Been done before.
! Mimics the real world – enables relationships
! Easy to approach
![Page 19: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/19.jpg)
Open Identity Summit
Moving Pieces – lots… MASAS Controlled ! Server Software
! Information Exchange
! Access Control
! Apps
! OpenLayers/JavaScript
! ArcGIS Flex
! Mobile (Android, iOS, BlackBerry)
EXTERNAL SYSTEMS ! Incident management systems
(IMS)
! Geographic information systems (GIS)
! Computer aided dispatch systems (CAD)
! Records management systems (RMS)
! Forest fire management systems
! … including external IAM (e.g. Federal AD)
![Page 20: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/20.jpg)
Open Identity Summit
Current Access Control ! Django-Based
! Modified Django user access and identity
! Incredibly onerous to maintain and add capability
! Permissions?
! Granular?
! Roles?
! Groups?
! Scale?
![Page 21: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/21.jpg)
Open Identity Summit
MASAS Basic
Toolset
MASAS Basic
Toolset
VERY Simple Architecture
Your Tools
Their Tools
Firewall Firewall
ESRI, EmerGeo, Interdev, Sentinel, IHS, CriSys, Command View,
IDV, MyStateUSA, SharePoint, Hazus, …,
basic MASAS tools
Your Tools Your
Tools
Their Tools Their
Tools
Incident management, mapping, dispatch, consoles, tablets,
smartphones, sensors, digital radio, …
21
![Page 22: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/22.jpg)
Open Identity Summit
Access Control - REST RESTful Query:
https://access.masas-sics.ca/api/check_access/?query_secret=XXXXXX&secret=YYYYYY
JSON response: {
"groups": [ "https://access.masas-sics.ca/accounts/group/1” ],
"hubs": [
{ "url": https://sandbox2.masas-sics.ca/hub, "post": "Y” },
{ "url": https://sandbox1.masas-sics.ca/hub, "post": "Y” }
],
"id": 5, "name": "MASAS NIT - Darrell ODonnell”, "uri": "https://access.masas-sics.ca/accounts/user/######/"
}
Groups not used yet.
![Page 23: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/23.jpg)
Open Identity Summit
It Starts Simple ! Username and Password access per hub
! Add read-only and read/write access
! 4 hubs operationally (2 for dev)
! Consolidate account into one account
! r/o & r/w per hub
! OAuth 2.0 (app level access?)
! Integrate CMS (Joomla)
! Allow self-admin …
! What are we building???
![Page 24: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/24.jpg)
Open Identity Summit
Starting to Sound Familiar ! Roll your own
! Add capabilities as you go
! Total Control
! …
! Until …
! It Controls you – and you have build an Identity & Access Management System – a black hole for development funds
![Page 25: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/25.jpg)
Open Identity Summit
Community is About… ! TRUST
! How do I know you?
! Have we met?
! How do I know I can trust you?
! Who else trusts you? – professional referrals
! How has this translated so far? ! Simply - but that’s a problem
! Growing needs for deeper information
![Page 26: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/26.jpg)
Open Identity Summit
Future Needs ! Increase Information Exchange Types
! Hospital Availability, Resource Request, Requests for Information
! Limiting Access to Information
! Deep Identity and Access Management ! Authentication, Authorization, and Audit (A3)
! Identity
! Credentialing, revocation…
! Multi-Factor Authentication
! Integration into Directories
![Page 27: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/27.jpg)
Open Identity Summit
Lessons Learned to Date ! Limit scope
! Being able to say NO is powerful
! Work on the majority – not the exceptions
! Standards take additional time in the beginning but provide scale.
! Build only what you must – buy, configure, borrow (beg, steal) the rest
! Building for resilience and flexibility is necessary (and hard)
![Page 28: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/28.jpg)
Open Identity Summit
Core Market-ecture
Information Exchange Layer
Identity & Access Management Layer
integrated
![Page 29: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/29.jpg)
Open Identity Summit
Information Exchange ! BUILD
! Architecture -> Dev -> Support
! Integrate with IAM Layer ! Protect resources
! Use Standards
! Integrate through Configuration where possible
![Page 30: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/30.jpg)
Open Identity Summit
Problems ! Technical jargon tossed around:
! Credentials
! Revocation
! Provisioning
! Federation
! Access Control
! Audience Control
! OAuth
! XACML
! SAML
! …
![Page 31: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/31.jpg)
Open Identity Summit
Local
Regional (P/T)
Federal
Information Flow
First Responder EOC
P/T EMO EOC
EOC 2…n EOC 1
Regional Office
OGD Regional
Office
Federal Region
ADM-EMC
Field
![Page 32: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/32.jpg)
Open Identity Summit
Identity & Access Management ! Open Source Focus of Team
! OFFSITE
! A3
– Authentication
– Authorization – rights, permissions, membership
– Audit
! Integration – internal & external
! Huge Enterprise Space (Oracle, IBM, MS, etc.)
![Page 33: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/33.jpg)
Open Identity Summit
IAM Needs ! Authentication & Authorization
! Provisioning & Management – Users, Organizations, Systems, Devices, etc.
! Integration – Core Tools, Internal Systems, External Systems etc.
! OPPORTUNITY – Identity is an investment of the community
! STICKY and hard to leave
![Page 34: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/34.jpg)
Open Identity Summit
Identity Management - Asset ! A MASAS community member invests in MASAS:
! Fees (nominal)
! Time
! Reputation…
! In the social space, this is sticky ! No common space in Canada right now beyond MASAS
! No credentialed system beyond organization boundaries
! Identity underpins trust – and it needs enterprise and cloud scale
![Page 35: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/35.jpg)
Open Identity Summit
Open Identity Stack ! Open-Source – but
commercially supported
! Already C&A capable
! Supports Integration out of box
! Out-of-box for admins
! Still need Community Management
![Page 36: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/36.jpg)
Open Identity Summit
MASAS – Growing Community ! Business Problem: Managing thousands of user
accounts takes a lot of time – more time than the New Entity can reasonably spend.
! SOLUTION: Offload effort by allowing Organizations to manage their own needs.
![Page 37: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/37.jpg)
Open Identity Summit
MASAS – Community Management ! NEED: MASAS will need to track usage (revenue) and
manage the overall directory ! # of Organization Accounts
! Access Rights for Organization, Organization Hierarchy
! Policy Enforcement
! MASAS OPS team gets OpenAM … in its RAW form…
![Page 38: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/38.jpg)
Open Identity Summit
Organization Management ! Firefighters, Police, EMS/Paramedics
! OpenAM tools for Management?
![Page 39: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/39.jpg)
Open Identity Summit
Applicant Processing ! Outside of Open Identity Stack
![Page 40: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/40.jpg)
Open Identity Summit
Admin/Clerk View ! Examines Existing, Approved, and Rejected Applications
! Edits if needed – keeps log of Rejections
! Approval Process – OpenIDM REST – create Org and Org Admin’s account.
![Page 41: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/41.jpg)
Open Identity Summit
Participant Administrator ! Skin on OpenAM (via REST)
! Custom View for the Organization ! Focuses on their Organization only
! Manages permissions for their members
! Creates/Edits/Deletes Accounts for that Organization
![Page 42: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/42.jpg)
Open Identity Summit
Upcoming Decisions ! Granular Permissions/Entitlements
! Groups? XACML? Attributes + Policy…
! OpenIDM vs. OpenAM REST APIs
! Scale ! Issues and Roadblocks
! Federation
![Page 43: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/43.jpg)
Open Identity Summit
Thanks Darrell O’Donnell, P.Eng.
@darrello
Chief Technology Officer MASAS National Implementation Team (under contract) Centre for Security Science
President, Principal Consultant Continuum Loop Inc. Ottawa, Ontario, CANADA
![Page 44: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/44.jpg)
Q & A
Logo of Presenter Company HERE
![Page 45: How Do Get Police, Fire, Paramedics and Others to Share Information? Built Trust into the System](https://reader033.vdocuments.mx/reader033/viewer/2022060203/559ebe751a28ab712a8b47f7/html5/thumbnails/45.jpg)
Notional Market-ecture