nih – educause pki interoperability pilot update peter alterman, ph.d. director of operations,...
TRANSCRIPT
![Page 1: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to](https://reader036.vdocument.in/reader036/viewer/2022072006/56649d0e5503460f949e4627/html5/thumbnails/1.jpg)
NIH – EDUCAUSE PKI NIH – EDUCAUSE PKI Interoperability Pilot UpdateInteroperability Pilot Update
Peter Alterman, Ph.D.Peter Alterman, Ph.D.Director of Operations, Office of Director of Operations, Office of Extramural Research, NIH andExtramural Research, NIH and
Senior Advisor to the Chair, Federal PKI Senior Advisor to the Chair, Federal PKI Steering CommitteeSteering Committee
![Page 2: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to](https://reader036.vdocument.in/reader036/viewer/2022072006/56649d0e5503460f949e4627/html5/thumbnails/2.jpg)
1/16/031/16/03 22
Basic Architecture of Interop PilotBasic Architecture of Interop Pilot
NIH Mail ServerUniversity A
University B
University C
Internet
E-LockAssured OfficeDigital Signed
Grant Appl
E-LockAssured OfficeDigital Signed
Grant Appl
E-LockAssured OfficeDigital Signed
Grant Appl
NIH Recipient
E-LockAssured OfficeDigital Signed
Grant App.
E-LockAssured OfficeCAM-enabled
NIH CAM Server with DAVE
FBCA
HEBCA
CertStatus
CertStatus
Certificate ValidationUniversity B
Certificate ValidationUniversity A
Certificate ValidationUniversity C
![Page 3: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to](https://reader036.vdocument.in/reader036/viewer/2022072006/56649d0e5503460f949e4627/html5/thumbnails/3.jpg)
1/16/031/16/03 33
Unfinished WorkUnfinished Work
NIH Mail ServerUniversity A
University B
University C
Internet
E-LockAssured OfficeDigital Signed
Grant Appl
E-LockAssured OfficeDigital Signed
Grant Appl
E-LockAssured OfficeDigital Signed
Grant Appl
NIH Recipient
E-LockAssured OfficeDigital Signed
Grant App.
E-LockAssured OfficeCAM-enabled
NIH CAM Server with DAVE
FBCA
HEBCA
CertStatus
CertStatus
Certificate ValidationUniversity B
Certificate ValidationUniversity A
Certificate ValidationUniversity C
![Page 4: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to](https://reader036.vdocument.in/reader036/viewer/2022072006/56649d0e5503460f949e4627/html5/thumbnails/4.jpg)
1/16/031/16/03 44
Finish Off Phase Two Work – From Finish Off Phase Two Work – From Proof of Concept to PilotProof of Concept to Pilot
1.1. Add UCOP & UTH-HSC by Incorporating VeriSignAdd UCOP & UTH-HSC by Incorporating VeriSign2.2. Continue Development of Path Discovery Continue Development of Path Discovery
Software and Harden for Production UseSoftware and Harden for Production Use3.3. Split Registry of Directories in two: .edu and .govSplit Registry of Directories in two: .edu and .gov4.4. Complete CA Product Interoperability Work Complete CA Product Interoperability Work
Within Bridge Membrane (Entrust-RSA/DST Within Bridge Membrane (Entrust-RSA/DST interop)interop)
5.5. Reinstall NIH CAM/DAVEReinstall NIH CAM/DAVE6.6. Move NIH CA to DST for trust anchorMove NIH CA to DST for trust anchor7.7. Produce How-To Documentation for Cross-Produce How-To Documentation for Cross-
Certifying University CAs with HEBCACertifying University CAs with HEBCA
![Page 5: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to](https://reader036.vdocument.in/reader036/viewer/2022072006/56649d0e5503460f949e4627/html5/thumbnails/5.jpg)
1/16/031/16/03 55
New “Phase Three” ArchitectureNew “Phase Three” Architecture
NIH App Server: The Bot
Alabama-Birmingham
Wisconsin-Madison
Dartmouth
Internet
Desktop signingApplication signs
XML form
Desktop signingApplication signs
XML form
Desktop signingApplication signs
XML formXML form to be
Processed by e-grantsBack end
Automatically validate
signature
Local validation
service
Federal Bridge CA
Higher Ed Bridge CA
Instiutution CAs
Send electronic
receipt
E-authgateway
![Page 6: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to](https://reader036.vdocument.in/reader036/viewer/2022072006/56649d0e5503460f949e4627/html5/thumbnails/6.jpg)
1/16/031/16/03 66
New NIH “Phase Three” WorkNew NIH “Phase Three” Work
1.1. Automate receipt of signed grant application and Automate receipt of signed grant application and validation of digital signaturesvalidation of digital signatures
2.2. Automate return receipt e-mail per GPEA Automate return receipt e-mail per GPEA requirementrequirement
3.3. Build prototype signed document archive that Build prototype signed document archive that satisfies National Archives and Records satisfies National Archives and Records Administration requirements for storing signed Administration requirements for storing signed digital documentsdigital documents
4.4. Continue work to make desktop app bridge-Continue work to make desktop app bridge-aware (replace reliance on internal trust lists to aware (replace reliance on internal trust lists to trust in bridge trust path delivery process).trust in bridge trust path delivery process).
![Page 7: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to](https://reader036.vdocument.in/reader036/viewer/2022072006/56649d0e5503460f949e4627/html5/thumbnails/7.jpg)
1/16/031/16/03 77
Other WorkOther Work
Support institutionalization of Higher Support institutionalization of Higher Ed Bridge CAEd Bridge CA• Policy Authority instantiationPolicy Authority instantiation• Bridge Operational Authority supportBridge Operational Authority support• NMI InteractionsNMI Interactions
![Page 8: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to](https://reader036.vdocument.in/reader036/viewer/2022072006/56649d0e5503460f949e4627/html5/thumbnails/8.jpg)
1/16/031/16/03 88
Enough Acronyms for You?Enough Acronyms for You?
All Questions WelcomeAll Questions Welcome Just Throw MoneyJust Throw Money
![Page 9: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to](https://reader036.vdocument.in/reader036/viewer/2022072006/56649d0e5503460f949e4627/html5/thumbnails/9.jpg)
1/16/031/16/03 99
junkyardjunkyard
NIH App Server: The Bot
Alabama-Birmingham
Wisconsin-Madison
Dartmouth
Internet
Desktop signingApplication signs
XML form
Desktop signingApplication signs
XML form
Desktop signingApplication signs
XML form
NIH CAM Server with DAVE
Certificate
Private KeyPrivate KeyMathematically
LinkedKey Pair