1. Higher Education Bridge CA (HEBCA) – Planting is required before the harvest (Scott Rea) Fed/Ed June 2007

2. Plowing the field Why is HEBCA still only in test mode of operation?
Demand is not there yet from multiple schools (NOTE: Texas is an exception in this regards)
Anecdotally there is higher interest in PKI from schools than ever before but this interest is mostly focused on introspective projects rather than those that require cross-boundary authentication – some caveats do exist
An exception to the above is the Federal government as the external campus entity – there is a lot of interest in what the feds are doing and what that means for campuses
By the feds own admission – 75% of their applications that are the focus of the eAuthentication “federation” are assertion based – there are not many higher level applications out there

3. Planting seeds What are the drivers being manifest
Identity theft is the fastest growing crime in the US, higher education is the primary target (43% of reported incidents occurred in our sector)
Stronger binding and stronger technologies for IDM, better access controls, and security services are being investigated
There are lots of small internal PKI pilots quietly going about their business – looking to grow organically
Federation is required for bridging PKI – but the main thrust (in terms of advertising and focus) for federations has been in the assertion based arena – notably shibboleth – this both a catalyst and a crutch

4. Solving Silos of Trust Institution FBCA Dept-1 Dept-1 Dept-1 HEBCA
CAUDIT
PKI
USHER CA CA CA
SubCA
SubCA
SubCA
SubCA
SubCA
SubCA
SubCA
SubCA
SubCA

5. Challenges and Opportunities
Open Tasks
Audit
Updated Business Plan
Mapping Grid Profiles
Classic PKI
SLCS
Promotion of PKI Test bed
Validation Authority service
Cross-certification with FBCA
Cross-certification with other HE PKI communities
CAUDIT PKI (AusCERT)
HE JP
HE BR

6. Proposed Inter-federations CA-2 CA-1 HE BR AusCert CAUDIT PKI CA-n NIH
HE JP
FBCA
Cross-cert
Cross-certs
C-4
DST
ACES
Texas
Dartmouth
HEBCA
Cross-certs
IGTF
Wisconsin
UVA
Univ-N
USHER
CertiPath
SAFE
CA-4
Other
Bridges
CA-1
CA-2
CA-3

7. E-Auth Level 4 E-Auth Level 3 E-Auth Level 2 E-Auth Level 1
FPKI
E-Auth Level 4
High
HEBCA/USHER
Medium Hardware CBP
High
E-Auth Level 3
Medium Software CBP
Medium
Basic
Classic Strong
Basic
E-Auth Level 2
Rudimentary
Rudimentary
C-4
IGTF
Classic Ca
Foundation
E-Auth Level 1
SLCS
MICS

8. For More Information HEBCA Website: http://webteam.educause.edu/hebca/
Scott Rea -