Navigating the Standards Landscape Andrew Owen SEARCH
SEARCH, The National Consortium for Justice Information and Statistics | 1 Goals Discuss Information Sharing Standards Describe the problems these standards solve Introduce proven approaches for implementing these standards
SEARCH, The National Consortium for Justice Information and Statistics | 2 Many ways to share information and capabilities
SEARCH, The National Consortium for Justice Information and Statistics | Poorly or un-Planned Information Sharing 3
SEARCH, The National Consortium for Justice Information and Statistics | Nicely Planned Information Sharing 4
SEARCH, The National Consortium for Justice Information and Statistics | Careful Architecture is Key 5
SEARCH, The National Consortium for Justice Information and Statistics | Global Reference Architecture (GRA) Reference architecture for doing Service Oriented Architecture (SOA) Based on the OASIS SOA Reference Model 6
SEARCH, The National Consortium for Justice Information and Statistics | GRA/SOA 7
SEARCH, The National Consortium for Justice Information and Statistics | SOA 8
SEARCH, The National Consortium for Justice Information and Statistics | GRA/SOA Principles Standard Service Contracts Loose Coupling Abstraction Reuse Autonomy Statelessness Composability 9
SEARCH, The National Consortium for Justice Information and Statistics | GRA makes SOA Easy 10
SEARCH, The National Consortium for Justice Information and Statistics | Web Services Service Interaction Profile Describes how to meet GRA requirements with Web Services: SOAP WSDL WS-Addressing WS-Reliable Messaging WS-Trust NIEM GFIPM/SAML 11
SEARCH, The National Consortium for Justice Information and Statistics | GRA Service Specification Package Service-level interoperability Specific rules for packaging Self-contained 12
SEARCH, The National Consortium for Justice Information and Statistics | National Information Exchange Model (NIEM) Standard vocabulary for information exchanges System-independent Multi-domain (justice, public safety, emergency management, family services, intelligence etc.) 13
SEARCH, The National Consortium for Justice Information and Statistics | Information Exchange Package Documentation (IEPD) 14 Defines one or more specific information exchanges Message interoperability Normative and non- normative documentation Methodology for developing IEPD
SEARCH, The National Consortium for Justice Information and Statistics | GRA and NIEM 15
SEARCH, The National Consortium for Justice Information and Statistics | Add a User to the mix 16
SEARCH, The National Consortium for Justice Information and Statistics | Global Federated Identity and Privilege Management (GFIPM) Makes user identity management easier to do Enables single sign-on Eliminates the need for multiple logins for a single user Keeps identity management and user authentication local 17
SEARCH, The National Consortium for Justice Information and Statistics | GFIPM Provides a standard vocabulary of identity access attributes Enables informed access and authorization decisions 18
SEARCH, The National Consortium for Justice Information and Statistics | Service Provider Protects a web resource Requests user information from identity provider Enforces access control policies Logs user activity 19
SEARCH, The National Consortium for Justice Information and Statistics | Identity Provider Snaps on to existing user credential store Authenticates users Issues users assertions to service providers 20
SEARCH, The National Consortium for Justice Information and Statistics | GFIPM 21
SEARCH, The National Consortium for Justice Information and Statistics | GFIPM and SAML Based on the OASIS standard called Security Assertion Markup Language (SAML) version 2.0 Request User Authentication (SP to IdP) User Authentication Statement (IdP to SP) User Assertion (IdP to SP) SP and IdP Metadata Industry standard – you probably use this everyday 22
SEARCH, The National Consortium for Justice Information and Statistics | GFIPM and Web Services Control access when a user is behind a web service request SAML token is passed to the web service GFIPM provides specific profiles for this Still requires existence of IdP and SP 23
SEARCH, The National Consortium for Justice Information and Statistics | Trust Shared IdP and SP metadata Federation Management Function Cryptography IT Policy 24
SEARCH, The National Consortium for Justice Information and Statistics | Refresher GRA: big picture of service design and orientation NIEM: message vocabulary consistency GFIPM: user access control and identity management 25
SEARCH, The National Consortium for Justice Information and Statistics | Implementation Options Apache CXF Apache Camel Shibboleth IdP Shibboleth SP Microsoft ADFS
SEARCH, The National Consortium for Justice Information and Statistics | Next session… 27