Overview of US PKIOverview of US PKI

Peter Alterman, Ph.D.

Chair, Federal PKI Policy Authority and

Asst. CIO E-Authentication, NIH

2

Overview of Federal PKIOverview of Federal PKI

FBCA

C4

eGCA (3)

Common Policy

CertiPath

SSPs

Industry PKIs

CertiPath SSP

SAFE

In discussion

begun

TAGPMA

HEBCA?

Test since 2002

3

Overview of Federal PKIOverview of Federal PKI

FBCA

C4

eGCA (3)

Common Policy

CertiPath

SSPs

Industry PKIs

CertiPath SSP

DOD DHSNASA CommerceUSPS USPTOHHS DOE IL USDA/NFCDOJ BoeingState DOD/ECAGPOTreasuryWells FargoMIT LL Serving all other

Agencies

Boeing Northrop GrummanRaytheon Lockheed MartinAirbus BAE

VeriSignCybertrustORCTreasuryGPO?Exostar?Identrust?Entrust?

Total: 12 – 15Musers

EAF member CSPsTLS certs

USHER?

SAFE

Abbott Labs

AstraZeneca

Bristol-Myers Squibb

Genzyme

GlaxoSmithKline

INC Research

Johnson & Johnson

Merck

Pfizer

Procter & Gamble

Sanofi-Aventis

TAP Pharmaceuticals

TAGPMA

begun

HEBCA?

4

Current Outward-Facing Current Outward-Facing InitiativesInitiatives

• Cross certify University of Texas System @ Basic

• Cross certify TAGPMA new profile at C4 – GRIDS!

• Cross certify SAFE

• Cross certify MIT Lincoln Lab at Medium

5

Current Inward-Facing InitiativesCurrent Inward-Facing Initiatives

• Harmonize Common Policy with FIPS 201

• Harmonize Bridge Policy with Common Policy

• Update Crits & Methods for both Bridge and SSP

6

Shared Service Provider UpdateShared Service Provider Update

• Current SSPs:– CyberTrust– VeriSign– Treasury– Exostar– ORC

• Pending– GPO– IdenTrust– Entrust

7

On The HorizonOn The Horizon

• Policy/Guidelines For Encryption Services

• Attributes – SAML interfacing

• SCVP