Burton Group Catalyst Meeting xxxxxxxxx Stephen Wilson Chair, OASIS PKI Adoption TC The OASIS PKI Adoption TC Objectives and Work Program Burton Group Catalyst Meeting xxxxxxxxx Stephen Wilson Chair, OASIS PKI Adoption TC

The PKI environment c n PKI is resurgent n Embedded PKI is commonplace n We’re all in the midst of a paradigm shift to identity plurality n Digital Certificates can be about relationships as well as (or instead of) personal identity n Successful PKI has always been application specific, not general purpose

Resurgent, embedded PKI n Closed (vertical) schemes l US PIV, Identrus, ICAO e-passports, CableLabs, Skype, BankID (Sweden) n Health smartcards l France, Germany, Taiwan, Italy, Austria, Australia … n Digital Credentials l US Patent Office, France, Taiwan, Australia …

Identity plurality n “Identity 2.0” (archetype: Cardspace) l Too soon to tell precise outcomes l But it’s a progressive re-think of identity, context, privacy, control etc. l Fundamental concept is plurality of identities. n Stephen Kent’s critique: “For big CAs, there is an implicit assumption that a single certificate is all that a user should need. This assumes that one identity is sufficient for all applications, which contradicts experience”

The top five obstacles According to OASIS Surveys 1 & 2: 1. Software applications don’t support PKI 2. Costs too high 3. PKI poorly understood 4. Too much focus on technology (not need) 5. Poor interoperability

PKIA TC: Fresh objectives n Continue to overcome obstacles with targeted practical initiatives that improve understanding of PKI n Disseminate case studies n Develop position papers that de-mystify legal, governance and interoperability issues and modernise the PKI message so it reflects real needs n Liaise more closely with other OASIS efforts, esp. under the umbrella of the new IDtrust Member Section

Embedded PKI application: Device authentication Some of the oldest, most successful PKIs are for device authentication: n GSM SIM cards n SSL server certificates n IPsec VPN devices n Cable Open TV set-top boxes

Embedded PKI application: Skype n Each Skype subscriber receives a digital certificate embedded in Skype install n “Zero User Interface” (ZUI) principle; i.e. Subscriber unaware of their certificate! n

Embedded PKI application: Medicos’ smartcards n France (500,000) n Taiwan (300,000) n Australia (10,000) l wide range of PKI enabled lodgments l electronic prescribing in development l certificates represent doctor’s qualifications l wholesale supply to hospitals etc.

OASIS PKI Technical Committee Stephen Wilson