IMPLEMENTING HSPD-12: A PROGRAM MANAGER S PERSPECTIVE

Size: px

Start display at page:

Download "IMPLEMENTING HSPD-12: A PROGRAM MANAGER S PERSPECTIVE"

Roland Ethelbert Harper
5 years ago
Views:

Presented by Mike Butler Director of Smart Card

1 IMPLEMENTING HSPD-12: A PROGRAM MANAGER S PERSPECTIVE Smart Card Alliance 2005 Fall Annual Conference Presented by Mike Butler Director of Smart Card Programs and Operations Defense Manpower Data Center October 2005

2 WHY HSPD-12? The Government requires an identification methodology that: Is issued based on sound criteria for verifying an employee s identity Strongly resistant to identity fraud, tampering, counterfeiting, and terrorist exploitation Can be rapidly authenticated electronically Issued only by providers whose reliability has been established by an official accreditation process CREDENTIAL 2 October 2005

3 HOW OMB Policies FIPS Standard and Special Publications GSA Procurement Guidance Conformance Testing 3 October 2005

4 WHAT S IMPORTANT IDENTITY, IDENTITY, IDENTITY Concentration on a card Concentration on legacy processes Concentrate on IDENTITY 4 October 2005

5 GOAL Provide a reasonable chain of trust in binding a person to a credential Use the credential in real time for authentication (like a credit card) 5 October 2005

6 Challenges How to establish a chain of trust between an agency (and even the entire government) and a user How is a person s identity securely and accurately transferred to a credential How will agencies enable their users to authenticate 6 October 2005

7 Challenges (continued) Which entity will provide and supervise conformance testing How does an agency migrate from today s environment to tomorrow s Policies across agencies vary 7 October 2005

8 Challenges (continued) How will a credential be issued prior to completion of background investigation How will agencies implement and fund electronically-based systems How will agencies enhance the protection of employees privacy rights 8 October 2005

9 DoD s Approach Coordination tool begins with the details and rolls the data into more PIV I manageable and actionable units. Provides three levels of detail: 700+ line gap analysis reviewed by various stakeholders to identify all gaps in current process, policy, and technology. Action Item List Rolls all gaps into functional groups (per FIPS-201) and identifies action items associated with those gaps. Dashboard provides graphical representation of progress from the Gap and Action Item perspective. GAP ANALYSIS ACTION ITEMS DASHBOARDS CURRENT GAP GAP GAP GAP GAP GAP GAP GAP GAP FIPS GAP GAP GAP GAP GAP GAP GAP GAP GAP POLICY ACTION ITEM PROCESS ACTION ITEM TECHNICAL ACTION ITEM POLICY ACTION ITEM PROCESS ACTION ITEM TECHNICAL ACTION ITEM POLICY ACTION ITEM PROCESS ACTION ITEM TECHNICAL ACTION ITEM GAP PHASE I PHASE II PHASE III 9 October 2005

10 Functional Areas: Identity Proofing PKI Biometrics Topology Physical Security Authentication and Data Structure Interface to Card Privacy Certification and Accreditation Policy, Process, and Technical action items associated with each area. 10 October 2005

11 DoD Gap Analysis Findings DoD identified 151 action items: 42 Policy 39 Process 70 Technical And determined that the Department is 80% compliant with the HSPD-12 requirements Findings will be posted to: Note: All agencies will have different compliance levels as well as different action items 11 October 2005

12 HSPD-12 and Agency Gaps Gaps are not only found in credentials, biometrics, physical security, and logical access..but mostly in. IDENTITY 12 October 2005

13 Questions? Mike Butler (703) October 2005

Personal. Identity. Information

Personal. Identity. Information Personal Identity Information What is it? Work Membership Student Citizen Identity Healthcare On-line Financial Military What Is Identity Information? Definition: Identity information is an assortment