nih – educause pki interoperability pilot update peter alterman, ph.d. director of operations,...

9
NIH – EDUCAUSE PKI NIH – EDUCAUSE PKI Interoperability Interoperability Pilot Update Pilot Update Peter Alterman, Ph.D. Peter Alterman, Ph.D. Director of Operations, Office of Director of Operations, Office of Extramural Research, NIH and Extramural Research, NIH and Senior Advisor to the Chair, Senior Advisor to the Chair, Federal PKI Steering Committee Federal PKI Steering Committee

Upload: wilfred-cooper

Post on 18-Dec-2015

213 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to

NIH – EDUCAUSE PKI NIH – EDUCAUSE PKI Interoperability Pilot UpdateInteroperability Pilot Update

Peter Alterman, Ph.D.Peter Alterman, Ph.D.Director of Operations, Office of Director of Operations, Office of Extramural Research, NIH andExtramural Research, NIH and

Senior Advisor to the Chair, Federal PKI Senior Advisor to the Chair, Federal PKI Steering CommitteeSteering Committee

Page 2: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to

1/16/031/16/03 22

Basic Architecture of Interop PilotBasic Architecture of Interop Pilot

NIH Mail ServerUniversity A

University B

University C

Internet

E-LockAssured OfficeDigital Signed

Grant Appl

E-LockAssured OfficeDigital Signed

Grant Appl

E-LockAssured OfficeDigital Signed

Grant Appl

NIH Recipient

E-LockAssured OfficeDigital Signed

Grant App.

E-LockAssured OfficeCAM-enabled

NIH CAM Server with DAVE

FBCA

HEBCA

CertStatus

CertStatus

Certificate ValidationUniversity B

Certificate ValidationUniversity A

Certificate ValidationUniversity C

Page 3: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to

1/16/031/16/03 33

Unfinished WorkUnfinished Work

NIH Mail ServerUniversity A

University B

University C

Internet

E-LockAssured OfficeDigital Signed

Grant Appl

E-LockAssured OfficeDigital Signed

Grant Appl

E-LockAssured OfficeDigital Signed

Grant Appl

NIH Recipient

E-LockAssured OfficeDigital Signed

Grant App.

E-LockAssured OfficeCAM-enabled

NIH CAM Server with DAVE

FBCA

HEBCA

CertStatus

CertStatus

Certificate ValidationUniversity B

Certificate ValidationUniversity A

Certificate ValidationUniversity C

Page 4: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to

1/16/031/16/03 44

Finish Off Phase Two Work – From Finish Off Phase Two Work – From Proof of Concept to PilotProof of Concept to Pilot

1.1. Add UCOP & UTH-HSC by Incorporating VeriSignAdd UCOP & UTH-HSC by Incorporating VeriSign2.2. Continue Development of Path Discovery Continue Development of Path Discovery

Software and Harden for Production UseSoftware and Harden for Production Use3.3. Split Registry of Directories in two: .edu and .govSplit Registry of Directories in two: .edu and .gov4.4. Complete CA Product Interoperability Work Complete CA Product Interoperability Work

Within Bridge Membrane (Entrust-RSA/DST Within Bridge Membrane (Entrust-RSA/DST interop)interop)

5.5. Reinstall NIH CAM/DAVEReinstall NIH CAM/DAVE6.6. Move NIH CA to DST for trust anchorMove NIH CA to DST for trust anchor7.7. Produce How-To Documentation for Cross-Produce How-To Documentation for Cross-

Certifying University CAs with HEBCACertifying University CAs with HEBCA

Page 5: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to

1/16/031/16/03 55

New “Phase Three” ArchitectureNew “Phase Three” Architecture

NIH App Server: The Bot

Alabama-Birmingham

Wisconsin-Madison

Dartmouth

Internet

Desktop signingApplication signs

XML form

Desktop signingApplication signs

XML form

Desktop signingApplication signs

XML formXML form to be

Processed by e-grantsBack end

Automatically validate

signature

Local validation

service

Federal Bridge CA

Higher Ed Bridge CA

Instiutution CAs

Send electronic

receipt

E-authgateway

Page 6: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to

1/16/031/16/03 66

New NIH “Phase Three” WorkNew NIH “Phase Three” Work

1.1. Automate receipt of signed grant application and Automate receipt of signed grant application and validation of digital signaturesvalidation of digital signatures

2.2. Automate return receipt e-mail per GPEA Automate return receipt e-mail per GPEA requirementrequirement

3.3. Build prototype signed document archive that Build prototype signed document archive that satisfies National Archives and Records satisfies National Archives and Records Administration requirements for storing signed Administration requirements for storing signed digital documentsdigital documents

4.4. Continue work to make desktop app bridge-Continue work to make desktop app bridge-aware (replace reliance on internal trust lists to aware (replace reliance on internal trust lists to trust in bridge trust path delivery process).trust in bridge trust path delivery process).

Page 7: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to

1/16/031/16/03 77

Other WorkOther Work

Support institutionalization of Higher Support institutionalization of Higher Ed Bridge CAEd Bridge CA• Policy Authority instantiationPolicy Authority instantiation• Bridge Operational Authority supportBridge Operational Authority support• NMI InteractionsNMI Interactions

Page 8: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to

1/16/031/16/03 88

Enough Acronyms for You?Enough Acronyms for You?

All Questions WelcomeAll Questions Welcome Just Throw MoneyJust Throw Money

Page 9: NIH – EDUCAUSE PKI Interoperability Pilot Update Peter Alterman, Ph.D. Director of Operations, Office of Extramural Research, NIH and Senior Advisor to

1/16/031/16/03 99

junkyardjunkyard

NIH App Server: The Bot

Alabama-Birmingham

Wisconsin-Madison

Dartmouth

Internet

Desktop signingApplication signs

XML form

Desktop signingApplication signs

XML form

Desktop signingApplication signs

XML form

NIH CAM Server with DAVE

Certificate

Private KeyPrivate KeyMathematically

LinkedKey Pair