Embed Size (px)
Citation preview
Where we were…Where we were…
Rewind to CSG, January 2010• Developing levels of
assurance for personal digital identities at Virginia Tech
• Developing method for determining LoA
• Developing technology for authenticating at LoA
• Aware that InCommon Silver was “out there”
Where we are now…Where we are now…
CSG January 2011• Established
Standard for Personal Digltal Identity Levels of Assurance
• CAS recognizes LoA of authentication credential
• CAS front-ends Shibboleth• Ex-officio member of CIC Silver
Project planning group
Where we are going…Where we are going…
Initially, achieve InCommon Silver with
• personal digital certificates on eToken
Later possibilities • VASCO Digipass one-time
password devices• soft personal certs for
employees
How we decided…How we decided…
• Participated in CIC Silver project calls
• Learned challenges re: identity proofing – in-person desirable
• Issuing VASCO devices currently not scalable
• Soft certificates require infrastructure changes, development of new user interfaces
How we decided…How we decided…
• Realized we already had most of process, security, and documentation in place for personal certificates on eTokens
• Realized users were likely to be faulty/staff – not students.
• eTokens already available to faculty, staff, graduate students
Remaining tasks…Remaining tasks…
• Wait for Silver to be finalized• Ensure line-item compliance
with Silver – may require change to record (and encrypt) DL/passport number
• Ensure that CAS checks certificate revocation list
• Request audit• Apply for Silver
