1. Overview of US PKI Peter Alterman, Ph.D. Chair, Federal PKI Policy Authority and Asst. CIO E-Authentication, NIH

2. 2 Overview of Federal PKI FBCA C4 eGCA (3) Common Policy CertiPath SSPs Industry PKIs CertiPath SSP SAFE In discussion begun TAGPMA HEBCA? Test since 2002

3. 3 Overview of Federal PKI FBCA C4 eGCA (3) Common Policy CertiPath SSPs Industry PKIs CertiPath SSP DOD DHS NASA Commerce USPS USPTO HHS DOE IL USDA/NFC DOJ Boeing State DOD/ECA GPO Treasury Wells Fargo MIT LL Serving all other Agencies Boeing Northrop Grumman Raytheon Lockheed Martin Airbus BAE VeriSign Cybertrust ORC Treasury GPO? Exostar? Identrust? Entrust? Total: 12 – 15M users EAF member CSPs TLS certs USHER? SAFE Abbott Labs AstraZeneca Bristol-Myers Squibb Genzyme GlaxoSmithKline INC Research Johnson & Johnson Merck Pfizer Procter & Gamble Sanofi-Aventis TAP Pharmaceuticals TAGPMA begun HEBCA?

4. 4 Current Outward-Facing Initiatives Cross certify University of Texas System @ Basic Cross certify TAGPMA new profile at C4 – GRIDS! Cross certify SAFE Cross certify MIT Lincoln Lab at Medium

5. 5 Current Inward-Facing Initiatives Harmonize Common Policy with FIPS 201 Harmonize Bridge Policy with Common Policy Update Crits & Methods for both Bridge and SSP

6. 6 Shared Service Provider Update Current SSPs: –CyberTrust –VeriSign –Treasury –Exostar –ORC Pending –GPO –IdenTrust –Entrust

7. 7 On The Horizon Policy/Guidelines For Encryption Services Attributes – SAML interfacing SCVP