TechTechRISSRISS

RISSRISS

RISS

RISSTechRISSTech

RISSRISS

Federal CIO Council; XML Community of PracticeFederal CIO Council; XML Community of Practice

RISS / RISSNETRISS / RISSNETTrusted Credential ProjectTrusted Credential Project

Washington, D.C.Washington, D.C.February 16, 2005February 16, 2005

George P. March, DirectorGeorge P. March, DirectorRegional Information Sharing SystemsRegional Information Sharing Systems

Office of Information TechnologyOffice of Information Technology

TechTechRISSRISS

RISSRISS

To permit users with credentials from trusted To permit users with credentials from trusted partners to access resources available via partners to access resources available via

RISSNET without using the user authentication RISSNET without using the user authentication credential (V-ONE SmartPass) currently credential (V-ONE SmartPass) currently

required required

Trusted Credential Project MissionTrusted Credential Project Mission

TechTechRISSRISS

RISSRISS RISS INTELLIGENCE CENTERSRISS INTELLIGENCE CENTERS

WSINSacramento, CA

RMINPhoenix, AZ

ROCICNashville, TN

NESPINFranklin, MA

MAGLOCLENNewtown, PA

MOCICSpringfield, MO

TechTechRISSRISS

RISSRISS

RISS

REGIONAL INFORMATION SHARING SYSTEMS (RISS)

RISSNET

LAW ENFORCEMENT ONLINE (LEO)

LEO

National Law Enforcement Telecommunication System

TechTechRISSRISS

RISSRISS

Information Sharing Information Sharing Participation InitiativesParticipation Initiatives

RISS

TechTechRISSRISS

RISSRISS What is the RISS Intranet?What is the RISS Intranet?

A Sensitive But Unclassified (SBU) secure A Sensitive But Unclassified (SBU) secure electronic communication network electronic communication network

supporting information sharing between thesupporting information sharing between the RISS Intelligence Centers,RISS Intelligence Centers,

node agency systems,node agency systems, and authorized individual users,and authorized individual users,

known asknown as

RISSNETRISSNET

TechTechRISSRISS

RISSRISS

LA HIDTA

CISANetCA DOJ CIB / LEIU

WSIN

NW HIDTAWA SP

OR DOJ / OR HIDTA

HI CD

AZ DPS

RMINNLETS

UT LEIN

WY DCI

CO CBI

S FL HIDTA

FL DLEGC HIDTA

S TX (SWB) HIDTA

EPIC / CLSS

ROCICTN BI

GA BI

FBI LEONW3C

NESPINCT DSP

MI SP

LC HIDTAOH BCII

NY SP

NDIC MAGLOCLEN

WA/BALT HIDTAORI

NY/NJ HIDTA

PA SPDE GOV

SD DCI

MN BCA

MLW HIDTA

NE SP IA DSP

MW HIDTAMO SHP

MOCICCENTRAL SITE

CHI HIDTA

RISS CENTERHIDTA NODESTATE NODE

CENTRAL SITE

CISANet Gateway

PENDING STATE NODE PENDING HIDTA NODEPENDING ATF (BATFE), USSS (NTAC)

ATIX NODE

PENDING ATIX NODE

MATRIX NODE

PENDING MATRIX NODE

FEDERAL & OTHER AGENCIES

RISSNET NODES

US DOJ CDKS BI

PHL/CAM HIDTA

SEISINT

ATF (BATFE)USSS (NTAC)

TechTechRISSRISS

RISSRISS

RISS / RISSNETRISS / RISSNETTrusted Credential Project Trusted Credential Project

TechTechRISSRISS

RISSRISS

Identify industry-leading technologies for user Identify industry-leading technologies for user authentication and access controlauthentication and access control

Develop, test, and demonstrate methods to Develop, test, and demonstrate methods to recognize and accept credentials in addition to recognize and accept credentials in addition to those currently used on RISSNETthose currently used on RISSNET

Provide expanded information sharing and Provide expanded information sharing and collaboration while allowing all partners to keep collaboration while allowing all partners to keep their current infrastructure investments intact their current infrastructure investments intact

Trusted Credential Project ObjectivesTrusted Credential Project Objectives

TechTechRISSRISS

RISSRISS

LDAPLDAP

OctetStringOctetString

XML / SAML XML / SAML

Enterprise Portal Elements Enterprise Portal Elements

PK Certificates, SecureID Tokens, SSL VPNsPK Certificates, SecureID Tokens, SSL VPNs

Trust PillarsTrust Pillars

Agency vettingAgency vetting

CredentialCredential

Trusted Credential Project ComponentsTrusted Credential Project Components

TechTechRISSRISS

RISSRISS

Phase I:Phase I:

Build a foundation for information sharing and Build a foundation for information sharing and collaboration among trusted organizationscollaboration among trusted organizations

Demonstrate RISSNET’s ability to allow vetted Demonstrate RISSNET’s ability to allow vetted users with X.509 certificates issued by trusted users with X.509 certificates issued by trusted partners to access resources currently only partners to access resources currently only available via RISSNET to users presenting a valid available via RISSNET to users presenting a valid V-ONE SmartPass credential V-ONE SmartPass credential

Trusted Credential Project PhasesTrusted Credential Project Phases

TechTechRISSRISS

RISSRISS

Phase II:Phase II:

Build upon lessons learned in Phase IBuild upon lessons learned in Phase I

Develop a Federated Identity Management Develop a Federated Identity Management infrastructure that will operate on the current infrastructure that will operate on the current RISSNET architectureRISSNET architecture

Implement an enterprise information technology Implement an enterprise information technology portal as the focal point of access to offered portal as the focal point of access to offered resources resources

Trusted Credential Project PhasesTrusted Credential Project Phases

TechTechRISSRISS

RISSRISS

Thank YouThank YouFor further information, please contact:For further information, please contact:

George P. MarchGeorge P. March DirectorDirector

Regional Information Sharing SystemsRegional Information Sharing SystemsOffice of Information TechnologyOffice of Information Technology

P.O. Box 1869P.O. Box 1869West Chester, PA 19380-0131West Chester, PA 19380-0131

Telephone: (610) 738-8810Telephone: (610) 738-8810Fax: (610) 738-8813Fax: (610) 738-8813

gmarch@risstech.riss.netgmarch@risstech.riss.netgmarch@iir.comgmarch@iir.com