Скачать презентацию The Federal Bridge Certification Authority Description and Скачать презентацию The Federal Bridge Certification Authority Description and

d18457f034420a8a3fa3266ba4171ef7.ppt

  • Количество слайдов: 10

The Federal Bridge Certification Authority – Description and Current Status Peter Alterman, Ph. D. The Federal Bridge Certification Authority – Description and Current Status Peter Alterman, Ph. D. Senior Advisor to the Chair, Federal PKI Steering Committee and Acting Director, Federal Bridge Certification Authority

The FBCA Architecture CA, Directory, End users Bridge CA And Directory Trust paths CA, The FBCA Architecture CA, Directory, End users Bridge CA And Directory Trust paths CA, Directory, End users

FBCA Overview n Designed for the purpose of creating trust paths between among PKI FBCA Overview n Designed for the purpose of creating trust paths between among PKI domains Issues cross-certificates to Member CAs only n Employs a distributed, NOT a hierarchical, model n n Commercial products participate within the membrane of the Bridge OR interoperate with products within the membrane n Develops cross certificates within the membrane to bridge the gap among dissimilar products

FBCA Goals Leverage emerging Federal Agency PKIs to create a unified Federal PKI n FBCA Goals Leverage emerging Federal Agency PKIs to create a unified Federal PKI n Limit workload on Agency CA staff n Support Agency use of: n Any FIPS-approved cryptographic algorithm n A broad range of commercial CA products n Propagate policy information to certificate users in different Agencies n

FBCA Operation Issues Cross-Certificates to Participating CAs only n FPKI Steering Committee oversees FBCA FBCA Operation Issues Cross-Certificates to Participating CAs only n FPKI Steering Committee oversees FBCA development and operations n Documentation n Enhancements n Client-side software n Operates in accordance with Policy Authority and FPKISC direction n

FBCA Management Hierarchy Steering Committee oversees FBCA development and operations n Direct Operational Authority FBCA Management Hierarchy Steering Committee oversees FBCA development and operations n Direct Operational Authority n Bridge Documentation n Enhancements n Policy Authority determines participants and levels of crosscertification n Administers Certificate Policy n Approves requests to cross-certify n Enforces compliance by member organizations n GSA named Operational Authority n Operates in accordance with Policy Authority and Steering Committee direction n

Current Status - August 10, 2001 n Policy Authority approved final documentation on June Current Status - August 10, 2001 n Policy Authority approved final documentation on June 18, 2001 n Certificate Policy n Certification Practices Statement n Independent Compliance Analysis n FBCA “open and ready for business” at the GSA/FTS Willow. Woods facility operated by Mitretek Systems on June 7, 2001 Prototyping/Compatibility lab continues operational off-site Hot backup site nearing completion C & A Audit under way by KPMG Three federal agencies and one state government preparing documentation for application for interoperability with Bridge: NASA, NFC, FDIC, Illinois n n

What Will It Take to Use the FBCA? n n n Policy mapping of What Will It Take to Use the FBCA? n n n Policy mapping of certificate policies Sharing annual audits Careful management of cross-certificates to limit transitive trust (exclusion trees) Directory interoperability and synchronization Client software for certificate path discovery and processing

Next Steps Continue to bring federal agencies into interoperability n Bring additional products into Next Steps Continue to bring federal agencies into interoperability n Bring additional products into Bridge membrane and/or verify interoperability with products in membrane: working with RSA, Cylink, Spyrus and talking with Veri. Sign and Microsoft n n Pursue interoperability with State PKIs n Pursue interoperability with Nation of Canada n Pursue interoperability with non-government sector bridges

References Federal PKI Steering Committee Website: http: //www. cio. gov/fpkisc n FBCA Page: http: References Federal PKI Steering Committee Website: http: //www. cio. gov/fpkisc n FBCA Page: http: //www. cio. gov/fpkisc/fbca/index. htm n NIST PKI Website: http: //csrc. nist. gov/pki n