1. State CP Model (“Discussion Draft”)
Snowmass PKI Summit
Art Vandenberg
Advanced Campus Services
Georgia State University

2. A Summary
State CP Model: not a CP for public key certificates, but a policy for e-signing?
Influenced by State activities in Citizen CRM
Driven top-down
PKI isn’t “the” e-signing solution
PKI is a tool, not the end
“Discussion Draft”
August 9, 2001
State CP

3. Context of e-sign services
Providing signing services - as in contracts and agreements
Perhaps limited need for interoperation
Looks to cross certification as solution to lesser problem:
State to state in regional context
With Federal agencies
On a scale of 50 states, not universities
August 9, 2001
State CP

4. One OID for Policy Single level of assurance mapping
Defines limited application area for certs
Works in the “enterprise mode” of a State environment? (applications understand the certs and assurances)
Think of it as a “PKI-Lite” approach
It is a “Draft” – change is an option
August 9, 2001
State CP

5. Developed in the Community
NECCC (National Electronic Commerce Coordinating Council)
State Auditors, Procurement officers, Secretaries of State, Governors, Chief Administrators… and CIO
Focus on improving State infrastructure for government SERVICES
PKI is not the end, but a tool
August 9, 2001
State CP

6. Technology Basis States do not enjoy higher ed’s connectivity
Broadband initiatives: Internet is still being developed (much less Internet2/Abilene…)
Digital Divide: enfranchising the people (just like in our dorms!)
Anonymity is not the issue – States expect to know identity of citizens applying for services
Privacy means: “How’re you using my data?”
August 9, 2001
State CP

7. Bottom Line Top down approach to e-signing
Specifically limited cert application:
Confidentiality/encryption
Digital signing (medium & high
Digital Notary
Not Anonymous
Strengths: governing law, auditing, financial responsibility, liability/risk, operational
Opportunity to link efforts
August 9, 2001
State CP

8. Other observations NECCC Activities a Clue: Broadband Digital divide
Portals
Justice Agencies Sharing Initiative
Privacy
Funding
August 9, 2001
State CP

9. Internet2-like Activities
The Center for Technology in Government to search for e-government best practices.
Practitioners of e-government have the promise of a road map in their quest to implement best practices.
August 9, 2001
State CP