RISSNET Trusted Credential Project

1
(No Transcript)
2

• Federal CIO Council XML Community of Practice
• RISS / RISSNET
• Trusted Credential Project
• Washington, D.C.
• February 16, 2005
• George P. March, Director
• Regional Information Sharing Systems
• Office of Information Technology

3
Trusted Credential Project Mission

• To permit users with credentials from trusted
  partners to access resources available via
  RISSNET without using the user authentication
  credential (V-ONE SmartPass) currently required

4
RISS INTELLIGENCE CENTERS
NESPIN Franklin, MA
MOCIC Springfield, MO
MAGLOCLEN Newtown, PA
WSIN Sacramento, CA
RMIN Phoenix, AZ
ROCIC Nashville, TN
5
REGIONAL INFORMATION SHARING SYSTEMS
(RISS) RISSNET
LAW ENFORCEMENT ONLINE (LEO) LEO
National Law Enforcement Telecommunication System
6
Information Sharing Participation Initiatives
7
What is the RISS Intranet?
A Sensitive But Unclassified (SBU) secure
electronic communication network supporting
information sharing between the RISS
Intelligence Centers, node agency systems, and
authorized individual users, known as RISSNET
8
RISSNET NODES
WA SP
NW HIDTA
OR DOJ / OR HIDTA
MN BCA
NESPIN
CT DSP
NY SP
MLW HIDTA
SD DCI
MI SP
NY/NJ HIDTA
WY DCI
NDIC
MAGLOCLEN
WSIN
CHI HIDTA
PA SP
PHL/CAM HIDTA
CA DOJ CIB / LEIU
NE SP
IA DSP
LC HIDTA
CISANet
DE GOV
OH BCII
UT LEIN
WA/BALT HIDTA
ORI
MW HIDTA
KS BI
FBI LEO
LA HIDTA
CO CBI
MO SHP
NW3C
US DOJ CD
CENTRAL SITE
MOCIC
ATF (BATFE)
USSS (NTAC)
AZ DPS
NLETS
TN BI
RMIN
ROCIC
GA BI
EPIC / CLSS
HI CD
FL DLE
GC HIDTA
SEISINT
S TX (SWB) HIDTA
S FL HIDTA
9
RISS / RISSNET Trusted Credential Project
10
Trusted Credential Project Objectives

• Identify industry-leading technologies for user
  authentication and access control
• Develop, test, and demonstrate methods to
  recognize and accept credentials in addition to
  those currently used on RISSNET
• Provide expanded information sharing and
  collaboration while allowing all partners to keep
  their current infrastructure investments intact

11
Trusted Credential Project Components

• LDAP
• OctetString
• XML / SAML
• Enterprise Portal Elements
• PK Certificates, SecureID Tokens, SSL VPNs
• Trust Pillars
• Agency vetting
• Credential

12
Trusted Credential Project Phases

• Phase I
• Build a foundation for information sharing and
  collaboration among trusted organizations
• Demonstrate RISSNETs ability to allow vetted
  users with X.509 certificates issued by trusted
  partners to access resources currently only
  available via RISSNET to users presenting a valid
  V-ONE SmartPass credential

13
Trusted Credential Project Phases

• Phase II
• Build upon lessons learned in Phase I
• Develop a Federated Identity Management
  infrastructure that will operate on the current
  RISSNET architecture
• Implement an enterprise information technology
  portal as the focal point of access to offered
  resources

14
Thank You

• For further information, please contact
• George P. March
• Director
• Regional Information Sharing SystemsOffice of
  Information Technology
• P.O. Box 1869
• West Chester, PA 19380-0131
• Telephone [phone]
• Fax [phone]
• gmarch_at_risstech.riss.net
• gmarch_at_iir.com