1. Expectations for the New Secure Network Age panel discussion Asia PKI Forum Conference Tokyo 24 February 2005 Stephen Wilson (OASIS liaison to APKIF) PKI lessons from Australia Expectations for the New Secure Network Age panel discussion Asia PKI Forum Conference Tokyo 24 February 2005 Stephen Wilson (OASIS liaison to APKIF) www.oasis-open.org

2. Best practice PKI: example 1 Health eSignature Authority See www.hesa.com.au n Owned by a government health IT agency n >7,000 certs issued to healthcare professionals n USB dongles & smartcards n Initial applications focus on doctors’ reports & forms to government (i.e. B2G) n Next applications will be in medical records and doctor-to-doctor messaging (i.e. B2B)

3. Best practice PKI: example 2 Australian Tax Office See www.ato.gov.au n One of the biggest PKIs in the world l 100,000 certificates for business tax reporting (GST) l Several 100,000 certificates for personal tax returns n Led to “Australian Business Number Certificate” (ABN-DSC) for multi-agency B2G (and B2B) n Identrus cross-recognised by Gatekeeper

4. Current understanding of PKI n Fundamental aim is to automate paperless transactions n “Known Customer” certificates represent an existing business relationship with issuer; e.g. l Doctors, lawyers, accountants, other professionals l Licence holders (stock brokers, customs brokers, taxi drivers …) l Credit card holders n One party recognises the affiliation of the other party n Existing transaction context, terms & conditions, liability arrangements all carry over to PKI based transactions n PKI is specific to an application or class of applications

5. A vision for embedded PKI n Secure networks … a main infrastructure of society n The right person should be able to get right services n Digital certificates embedded in applications n Trend from identity towards membership l i.e. e-Business Card, not e-passport

6. www.oasis-open.org OASIS PKI Technical Committee www.oasis-open.org/committees/pki Stephen Wilson OASIS PKI TC Liaison to the APKIF Board Member, Australian IT Security Forum swilson@lockstep.com.au Ph +61 414 488851