1. Stephen Wilson Chair, PKI Adoption Technical Committee Managing Director, Lockstep, Australia PKIA Goals for 2007 Stephen Wilson Chair, PKI Adoption Technical Committee Managing Director, Lockstep, Australia www.oasis-open.org

2. The PKI environment c. 2006 n PKI is resurgent n Embedded PKI commonplace n Certificates now about relationships than “identity” n Midst of paradigm shift to identity plurality n APKI becoming application specific, not general purpose

3. Resurgent, embedded PKI n Closed schemes l US PIV, Identrus, ICAO e-passports, CableLabs, Skype, BankID (Sweden) n National ID l Hong Kong, Malaysia, Estonia, Belgium, Thailand … n Health smartcards l France, Germany, Taiwan, Italy, Austria, Australia … n Digital Credentials l US Patent Office, France, Taiwan, Australia …

4. Identity plurality n Cardspace n Stephen Kent’s critique: l For big CAs, there is an implicit assumption that a single cert is all that a user should need. This assumes that one identity is sufficient for all applications, which contradicts experience

5. The top five obstacles According to OASIS Surveys 1 & 2: 1. Software applications don’t support PKI 2. Costs too high 3. PKI poorly understood 4. Too much focus on technology (not need) 5. Poor interoperability

6. PKI TC previous subcommittees n Application Guidelines SC n Interoperability SC n Ask vendors SC n Education SC l Website, resources page l ROI Guidelines n Lower costs SC l Third survey

7. PKI Adoption: Fresh objectives n Continue to overcome obstacles with targeted practical initiatives that improve understanding of PKI n Re-vitalise and complete the Third International Survey n Disseminate case studies n Modernise the PKI message so it reflects real needs n De-mystify legal, governance and interoperability issues n Liaise more closely with other OASIS efforts