Mary Dunkerdunker@vt.edu

Common Solutions GroupJanuary 12, 2010

Where we were…

Rewind to CSG, January 2010• Developing levels of

assurance for personal digital identities at Virginia Tech

• Developing method for determining LoA

• Developing technology for authenticating at LoA

• Aware that InCommon Silver was “out there”

Where we are now…CSG January 2011• Established

Standard for Personal Digltal Identity Levels of Assurance

• CAS recognizes LoA of authentication credential

• CAS front-ends Shibboleth• Ex-officio member of CIC Silver

Project planning group

Where we are going…Initially, achieve InCommon Silver

with• personal digital certificates on

eToken Later possibilities • VASCO Digipass one-time

password devices• soft personal certs for

employees

How we decided…• Participated in CIC Silver

project calls• Learned challenges re: identity

proofing – in-person desirable• Issuing VASCO devices

currently not scalable• Soft certificates require

infrastructure changes, development of new user interfaces

How we decided…• Realized we already had most

of process, security, and documentation in place for personal certificates on eTokens

• Realized users were likely to be faulty/staff – not students.

• eTokens already available to faculty, staff, graduate students

Remaining tasks…• Wait for Silver to be finalized• Ensure line-item compliance

with Silver – may require change to record (and encrypt) DL/passport number

• Ensure that CAS checks certificate revocation list

• Request audit• Apply for Silver