1. PKI Forum Sydney 2000 Members Meeting Stephen Wilson Chair -- Certification Forum of Australia Director -- PricewaterhouseCoopers beTRUSTed PKI in Australia

2. PKI Forum Sydney 2000 PKI in Australia n Evolution of PKI in Australia n What’s hot in PKI? n The PKI market n Certification Forum of Australia n Towards a national PKI

3. PKI Forum Sydney 2000 Evolution of PKI in Australia 1996 20011997199819992000 NEAC Certification Forum Law reform A-G’s Expert Group Non Govt PKI Model States Project Gatekeeper Standards Australia PKAF ReportAS4539 PKAF ETA Research Projects Gatekeeper ReportFirst CAs Gatekeeper 2 Unified model “Light touch” PKI policy

4. PKI Forum Sydney 2000 What’s hot in PKI? n Internet transaction value -- and risk -- on the rise n Applications: corporate banking, health, govt services n Non-value transactions n corporate & taxation reporting n online healthcare n superannuation, conveyancing n Communities of Interest; certificate policy customisation n Mutual recognition rather than cross certification

5. PKI Forum Sydney 2000 Characterising the Australian PKI environment n Light touch politics & regulatory settings (UNCITRAL) n Strong Internet & e-commerce uptake n Strong history of e-security technology companies n Government a vigorous PKI user and regulator ( Gatekeeper ) n Increasing latent demand for authentication n But historically difficult to crystalise PKI business case

6. PKI Forum Sydney 2000 PKI market highlights in Australia n Australian Tax Office certificates for GST returns n 300,000 certs issued; 20-40,000 used n leading to general purpose govt endorsed Australian Business Certificate (see www.noie.gov.au/projects/govt/ABNDSC.htm) n Finance sector experience n National Australia Bank retail Internet banking n Australian Stock Exchange block trading system n Identrus (three of the four majors joined up)

7. PKI Forum Sydney 2000 PKI market highlights in Australia (cont.) n Government services delivery n Australia Securities & Investment Commission (live) n Electronic Conveyancing Victoria (planned) n HealthConnect national health network n PKI central to practitioner & patient identifiers n see www.health.gov.au

8. PKI Forum Sydney 2000 The Certification Forum of Australia n Pre-eminent authentication sector industry group n lobbying & position papers n awareness & education n Code of Practice & control model n represent PKI on the NEAC n 40+ members n PKI services and vendors n users & user groups n governments n lawyers, auditors, insurers

9. PKI Forum Sydney 2000 Accreditation Body ISO/IEC Guides Accreditation Body ISO/IEC Guides Accreditation Body ISO/IEC Guides The CFA model: audit-based PKI Auditor AS/NZS 4444 Supplier Security System Goods or Services Auditor e.g. AS 4539 CA CP CPS Alice CA 1010111001

10. PKI Forum Sydney 2000 n Light touch; no legislation needed n Industry-based yet highly trusted n Utilises existing bodies & processes n Transparent liability for all types of CA n Demystifies the role of Root CA n Supports fitness for purpose Advantages of audit-based PKI

11. PKI Forum Sydney 2000 Independent NEAC review [We] can expect that it will soon become normal practice for every electronic business system … to undergo regular audits of compliance with legal and regulatory requirements... there will be considerable demand for an accreditation framework for electronic authentication products and services, driven by the need for businesses to assure their information systems and processes in the emerging climate of electronic business there is already a general framework for certifying appropriate auditors and development of appropriate audit standards n NEAC now proposing a joint Gatekeeper-CFA national model

12. PKI Forum Sydney 2000 PKI as communities of interest Doctors Nurses ATO ABN-DSC CA Health sector Auditor Gatekeeper Auditor Australian PKI Accreditation Body Bank 1 Bank 2 Bank 3 Auditor B Auditor A Identrus

13. PKI Forum Sydney 2000 Discussion www.aeema.asn.au (look for CFA under “Groups”) www.noie.gov.au/neac www.gpka.gov.au www.health.gov.au/healthonline/ehr_rep.htm www.apii.or.kr/apec/atwg/preatg.html