200 likes | 315 Views
Digital Presence. Presence. , Inc. Digital. Data, Document & ID Integrity. PKI Observations 17 April 07. Boring Topic?. Tired of listening to visions of the future?
E N D
Presence , Inc. Digital Data, Document & ID Integrity PKI Observations 17 April 07
Boring Topic? • Tired of listening to visions of the future? • There is not the slightest indication that nuclear energy will ever be obtainable. It would mean that the atom would have to be shattered at will. Albert Einstein, 1932 • It will be years--not in my time--before a woman will become Prime Minister.Margaret Thatcher, 1974
No matter what happens, the U.S. Navy is not going to be caught napping. U.S. Secretary of Navy, December 4, 1941 • I think there's a world market for about five computers. Thomas J. Watson, chairman of the board of IBM. • There is no reason anyone would want a computer in their home. Ken Olson, president of Digital Equipment Corp. 1977
Managed PKI – Point Solution? Aren’t we headed to a world of tunneled VPNs ….. Trading Partner / Customer Client / Government Interaction Watching Advances in PKI Management & Business Processes HSPD-12 DoD Key Management Industry Best Practice Next Page >
PKI in the new topography . . . . • Medical • Financial • HSPD-12 / CAC • Credit • Personal • Barcode • eNotary PKI • Telephony • RFID • Unique ID • DoD Biometrics • Etc, etc, etc • GPS, • WiFi, • Readers • Cellphone Identity Location • GSM / CDMA • SATCOM • WiFi • RS232 • Ethernet • USB Connectivity
Example; eWills • By show of hands – How many of you • know exactly where your will is? • know that your loved ones know where it is? • think that a safety deposit box is convenient?
eWills • Storage / Location with IPv6
Notary today…. Is paper-based, not electronic…. Relies on human-based quality control…. Can’t be reliably authenticated after the fact… Is difficult to locate after long periods of time… Most Important – is inconvenient, time-consuming and sometimes difficult to execute
And, if that’s not enough…. There’s Notary fraud….. Illegal sale of Notary Seals….. Misidentification of participants…. Misidentification of a Notary…..
A Decade of PKI Innovation… that can fuel eNotary CAs – Notaries across US are not the same . . . RAs – Who does the Notary back office management? Local RAs – Do we want to really distribute authority Lot’s of tools . . . Hardware – Transport, Node, Enclave, Biometric; etal Next Page >
Best Practice; DoD and the “outside” world CONFIDENTIAL
Yin & Yang of PKI / Crypto . . . • GOTS v. COTS for HW, SW, Mgmt • Public v. Private Management • Authorities -- Government v. Private Next Page >
Art of the Possible -- SISAC accreditation of NNA certs… eNotary PKI eNotary PKI eNotary PKI eNotary PKI eNotary PKI CAC/Cred. is used…. As the identifier for each entity (NEMS Identifier) As an authentication mechanism Serialization Server organizes “numbering” Every Person, System, Document/Transaction and Storage Location has an “PKI” Address….
twalsh ********** Log In Now OK Next >
Select Next >
Reports Finish Next > DPI / NNA Proprietary
Presence , Inc. Digital Data, Document & ID Integrity For more information: Jim Bacchus Digital Presence, Inc. Cell: 704-756-8947 j.bacchus@digitalpresence.us