1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising...
-
Upload
cornelius-alexander -
Category
Documents
-
view
216 -
download
3
Transcript of 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising...
![Page 1: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/1.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
ScotlandModernising Government, Efficient Governement
Conference
29th October 2004
![Page 2: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/2.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Supplier Workshop 2
Authentication & Managing Identities
![Page 3: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/3.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Authentication & Managing Identities
• Introduction
• A Practical Example
• Panel Session
![Page 4: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/4.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Introduction
Neil Boyd
Business Development Manager
SBL Scotland
![Page 5: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/5.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Introduction
•Neil Boyd
•Business Development Manager
•SBL Scotland
•Edinburgh
![Page 6: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/6.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Introduction
• Software Licensing• Security Specialist• Information Assurance• Public Sector
– MOD– Police– Local Government– Central Government– NHS
• GCat Prime Contractor• DIPCOG/GIPSI/CIPCOG• SIAF
![Page 7: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/7.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Introduction
• Definitions
• Setting the scene
• Concepts
![Page 8: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/8.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Introduction
“Gaining and maintaining the confidence and trust of individuals, businesses and other organisations will be one of the key success factors for the provision of e.Government services.”
“Registration and Authentication are two necessary activities for gaining and maintaining trust”
Registration and Authorisation
E-Government Startegy and Framework Policy and Guidelines
Office of E-Envoy
![Page 9: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/9.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Registration
“The process by which a user gains a credential such as a username or digital ceritificate for subsequent authentication”.
Registration and Authorisation
E-Government Startegy and Framework Policy and Guidelines
Office of E-Envoy
![Page 10: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/10.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Authentication
“The process that an electronic identity of a user is asserted to, and validated by, an information system for a specific occasion using a credential issued following a registration process. It may also involve establishing that the user is the true holder of that credential, by means of a password or biometric.”
Registration and Authorisation
E-Government Startegy and Framework Policy and Guidelines
Office of E-Envoy
![Page 11: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/11.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Identity Changes Through Time
• People are born• People are married• People die• People move house• People move into the
area• People change their
identities
![Page 12: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/12.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Identity Changes Through time
• People are born• People are married• People die• People move house• People move into the
area• People change their
identities G8
![Page 13: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/13.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Identity
• Something owned
• Something known
• Some personal (biometric) characteristic
![Page 14: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/14.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Identity
Name
Address
Mothers Maiden Name
Address
Appearance
NI Number
NHS Number
• Passport
• Driving Licence
• Birth and marriage Certificate
• Bank Statement
• Utility Bill
• Benefits/Tax documents
• Payslips
• Educational Qulaifications
![Page 15: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/15.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Identity
Name
Address
Mothers Maiden Name
Address
Appearance
NI Number
NHS Number/Birth NHS Number/Birth Registration NumberRegistration Number
• Passport
• Driving Licence
• Birth and marriage Certificate
• Bank Statement
• Utility Bill
• Benefits/Tax documents
• Payslips
• Educational Qulaifications
![Page 16: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/16.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Authentication
• Password/PIN
• Smartcards
• Tokens
• Door Entry Systems
[**********]
![Page 17: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/17.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Authentication
• Chip implants
– Obtained US approval this month
– Quickly access patients medical records
– Shares in Applied Digital Solutions jumped 68% on the news
![Page 18: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/18.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
“The Four A’s”
• Authenticate
• Authorise
• Administer
• Audit
![Page 19: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/19.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Why Authenticate ?
• Security
• Establishing the right to a service
• Registering for that service
![Page 20: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/20.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Why Authorise ?
• Security
• To control access to applications and services
• To control citizen access levels
![Page 21: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/21.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Administration
• Security
• Registration
• Self registration
• Self service
• Empowering the citizen
• Efficiency/Cost reduction
![Page 22: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/22.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Audit
• Security
• Accountability
• Recoverability
• Anti-Fraud
![Page 23: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/23.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Audit
• Security
• Accountability
• Recoverability
• Anti-Fraud
• ComplianceCompliance
![Page 24: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/24.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Compliance
• Control– Controls affecting internal people– Controls affecting external people
• The citizen• People in other organisations or departments
– “Federated Access Systems”• Automatic enforcement of controls
– Controls affecting applications– Web Services Management
• Enforcing controls between applications– Corporate Applications– Inter-company applications
![Page 25: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/25.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Compliance
"Identity and access management related issues are among the weaknesses often cited by companies needing to accurately audit and document interactions with sensitive resources." "Whether it's Sarbanes-Oxley, HIPAA, Gramm-Leach-Bliley, or other security or privacy regulations, customers need a complete identity management solution that can provide control and visibility into the activities of employees, customers, partners, and any other users of corporate applications across multiple systems and domains."
Roberta J. WittyResearch Vice President
Gartner, Inc.
![Page 26: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/26.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
IdM in Action
A Practical Example
Birmingham City CouncilBirmingham City Council
Keith Hickson, Keith Hickson, Manager, PwCManager, PwC
![Page 27: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/27.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
SolarisSolaris
DominoDomino
Tarantella.Tarantella.
WebWeb
Identity Management Applications
Identity Management Overview
Foster Carers
Users
User Admins
People’s Network
Birmingham City CouncilExtension to People’s Network Foster Carers Secure Pages
![Page 28: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/28.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
User Management
ServicesPersonal information profile
Administration
• Centralised
• Delegated
• User Self Service
Group Management
Object Management
Workflow
What is User Management?
User Management is the term used to describe technologies that enable the management of large numbers of users, typically in the millions. Provisioning is also a term used to describe this space.
![Page 29: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/29.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Authentication
What is Authentication?What is Authentication?
Authentication mechanisms are tools that provide differing levels of confidence about a persons identity (are they who they say they are?) – so as to enable business transactions
Services
Username and Password
• Basic over LDAP
• Form Based
Additional Criteria
• PIN Number
• Security Question
Stronger Authentication
• Digital Certificates
• Token Based Authentication
• Biometric
![Page 30: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/30.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Access Management
Services
Group / User Criteria
Role Based Access
Advanced Access control
Multiple levels of Privileges
HTTP Headers
Cookies
Integration Services
Web ServicesWhat is Access Control?
Ensuring that users are given access only to those applications or resources that they are entitled to see or use. Also known as Privilege Management Infrastructure (PMI)
![Page 31: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/31.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Enterprise Directory
What is a Directory?What is a Directory?
A directory serves as a repository for
user information. Access to the
directory is via the Lightweight
Directory Access Protocol (LDAP).
Services
Repository for Identity Information
Directory Enabled Applications
Multiple Directories
Content management
Other Applications
Portals
Lotus Notes
Oracle / SAP
Web Services / The Gateway
![Page 32: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/32.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Challenges
Website Design and Security
Libraries Non Web Based Architecture
Authentication Service for UNIX Operating system
Personal Information & Data Protection
Administration Model
![Page 33: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/33.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Looking Forward
Government Gateway
Payment Services
Online bookings and Applications
Linked Services such as social services and Healhcare
![Page 34: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/34.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
IdM in Action
A Practical Example
Birmingham City CouncilBirmingham City Council
Keith Hickson, Keith Hickson, Project Manager, PWCProject Manager, PWC
![Page 35: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/35.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
The Panel
• Peter Gibbon,Senior Manager
• Terry Wilkinson, Manager of Sales Support
• Mike Wawro, Managing Consultant
![Page 36: 1.02 – 13/08/2003 – CR 2730 Software Box Ltd Tel : 01347 812100 Scotland Modernising Government, Efficient Governement Conference 29.](https://reader035.fdocuments.in/reader035/viewer/2022062800/56649dff5503460f94ae793d/html5/thumbnails/36.jpg)
Software Box Ltd Tel : 01347 812100 www.softbox.co.uk
1.02 – 13/08/2003 – CR 2730
Software Box Ltd
Modernising Government Workshop
SBL ScotlandPO Box 28263Edinburgh EH9 3YT
Neil BoydEmail: [email protected]: 07734 59116www.softbox.co.uk