Higher Education Bridge CA (HEBCA) – Planting is required before the harvest (Scott Rea) Fed/Ed June 2007

2 Plowing the field Why is HEBCA still only in test mode of operation? –Demand is not there yet from multiple schools (NOTE: Texas is an exception in this regards) –Anecdotally there is higher interest in PKI from schools than ever before but this interest is mostly focused on introspective projects rather than those that require cross-boundary authentication – some caveats do exist –An exception to the above is the Federal government as the external campus entity – there is a lot of interest in what the feds are doing and what that means for campuses –By the feds own admission – 75% of their applications that are the focus of the eAuthentication “federation” are assertion based – there are not many higher level applications out there

3 Planting seeds What are the drivers being manifest –Identity theft is the fastest growing crime in the US, higher education is the primary target (43% of reported incidents occurred in our sector) –Stronger binding and stronger technologies for IDM, better access controls, and security services are being investigated –There are lots of small internal PKI pilots quietly going about their business – looking to grow organically –Federation is required for bridging PKI – but the main thrust (in terms of advertising and focus) for federations has been in the assertion based arena – notably shibboleth – this both a catalyst and a crutch

4 Solving Silos of Trust Dept-1 Institution Dept-1 SubCA CA SubCA CA SubCA CA SubCA USHER HEBCA FBCA CAUDIT PKI

5 Challenges and Opportunities Open Tasks –Audit –Updated Business Plan –Mapping Grid Profiles Classic PKI SLCS –Promotion of PKI Test bed –Validation Authority service –Cross-certification with FBCA –Cross-certification with other HE PKI communities CAUDIT PKI (AusCERT) HE JP HE BR

6 Proposed Inter-federations FBCA CA-1CA-2 CA-n Cross-cert HEBCA Dartmouth Wisconsin Texas Univ-N UVA USHER DST ACES Cross-certs SAFECertiPath NIH CA-1 CA-2CA-3 CA-4 HE JP AusCert CAUDIT PKI CA-1 CA-2 CA-3 HE BR Cross-certs Other Bridges IGTF C-4

7 High Medium Hardware CBP Medium Software CBP Basic Rudimentary C-4 High Medium Basic Rudimentary Foundation Classic Ca SLCS MICS FPKI IGTF HEBCA/USHER Classic Strong E-Auth Level 1 E-Auth Level 2 E-Auth Level 3 E-Auth Level 4 E-AUTH

8 For More Information HEBCA Website: Scott Rea -