# Presentation: 749355

## Slide 1

## Global Justice Information Sharing Initiative
Global Advisory Committee

RISS / RISSNET
Trusted Credential Project

Washington, D.C.
April 28, 2005

George P. March, Director
Regional Information Sharing Systems
Office of Information Technology

**Global Advisory Committee**
**RISS / RISSNET**
**Trusted Credential Project**
**Washington, D.C.**
**April 28, 2005**
**George P. March, Director**
**Regional Information Sharing Systems**
***Office of Information Technology***

## 

To permit users with credentials from trusted partners to access resources available via RISSNET without using the user authentication credential (V-ONE SmartPass) currently required 

**To permit users with credentials from trusted partners to access resources available via RISSNET without using the user authentication credential (V-ONE SmartPass) currently required **

**Trusted Credential Project Mission**

## RISS INTELLIGENCE CENTERS 

**RISS INTELLIGENCE CENTERS**** **

**WSIN**
**Sacramento, CA**

**RMIN**
**Phoenix, AZ**

**ROCIC**
**Nashville, TN**

**NESPIN**
**Franklin, MA**

**MAGLOCLEN**
**Newtown, PA**

**MOCIC**
**Springfield, MO**

## REGIONAL INFORMATION SHARING SYSTEMS (RISS)

**REGIONAL INFORMATION SHARING SYSTEMS (RISS)**
**RISSNET**

**LAW ENFORCEMENT ONLINE (LEO)**
**LEO**

**National Law Enforcement Telecommunication System**

## Information Sharing  Participation Initiatives

##  RISSNET

- A Sensitive But Unclassified (SBU) secure electronic communication network supporting information sharing between the
-  RISS Intelligence Centers,
-  node agency systems,
-  and authorized individual users,
-  known as
-  **RISSNET**

## RISSNET NODES

- LA HIDTA

- CISANet

- CA DOJ CIB / LEIU

- WSIN

- NW HIDTA

- WA SP

- OR DOJ / OR HIDTA

- HI CD

- AZ DPS

- RMIN

- NLETS

- UT LEIN

- WY DCI

- CO CBI

- S FL HIDTA

- FL DLE

- GC HIDTA

- S TX (SWB) HIDTA

- EPIC / CLSS

- ROCIC

- TN BI

- GA BI

- FBI LEO

- NW3C

- NESPIN

- CT DSP

- MI SP

- LC HIDTA

- OH BCII

- NY SP

- NDIC

- MAGLOCLEN

- WA/BALT HIDTA

- ORI

- NY/NJ HIDTA

- PA SP

- DE GOV

- SD DCI

- MN BCA

- MLW HIDTA

- NE SP

- IA DSP

- MW HIDTA

- MO SHP

- MOCIC

- CENTRAL SITE

- CHI HIDTA

- US DOJ CD

- KS BI

- PHL/CAM HIDTA

- ATF (BATFE)

- USSS (NTAC)

## RISS / RISSNET

**Trusted Credential Project **

## Identify industry-leading technologies for user authentication and access control
Develop, test, and demonstrate methods to recognize and accept credentials in addition to those currently used on RISSNET
Provide expanded information sharing and collaboration while allowing all partners to keep their current infrastructure investments intact 

- Develop, test, and demonstrate methods to recognize and accept credentials in addition to those currently used on RISSNET
- Provide expanded information sharing and collaboration while allowing all partners to keep their current infrastructure investments intact

**Trusted Credential Project Objectives**

## LDAP
OctetString
XML / SAML 
Enterprise Portal Elements 
PK Certificates, SecureID Tokens, SSL VPNs
Trust Pillars
Agency vetting
Credential composition

- OctetString
- XML / SAML
- Enterprise Portal Elements
- PK Certificates, SecureID Tokens, SSL VPNs
- Trust Pillars
- Agency vetting
- Credential composition

**Trusted Credential Project Components**

## Phase I:
Build a foundation for information sharing and collaboration among trusted organizations
Demonstrate RISSNET’s ability to allow vetted users with X.509 certificates issued by trusted partners to access resources currently only available via RISSNET to users presenting a valid V-ONE SmartPass credential 

- Build a foundation for information sharing and collaboration among trusted organizations
- Demonstrate RISSNET’s ability to allow vetted users with X.509 certificates issued by trusted partners to access resources currently only available via RISSNET to users presenting a valid V-ONE SmartPass credential

**Trusted Credential Project Phases**

## Phase II:
Build upon lessons learned in Phase I
Develop a Federated Identity Management infrastructure that will operate on the current RISSNET architecture
Implement an enterprise information technology portal as the focal point of access to offered resources 

- Build upon lessons learned in Phase I
- Develop a Federated Identity Management infrastructure that will operate on the current RISSNET architecture
- Implement an enterprise information technology portal as the focal point of access to offered resources

**Trusted Credential Project Phases**

## Phase II (continued):
Build a robust and flexible system that allows for interoperability with a wide variety of potential partners with whom RISS can work to 
Agree on a set of rules governing federated authentication, authorization, and access control
Agree on a set of individual and role-based privileges
Generate and consume the proper SAML assertions
Make the appropriate privilege management decision based upon the content of the SAML assertions
Ensure initial and continued system interoperability with the Federated Identity and Privilege Management Security Demonstration project

- Build a robust and flexible system that allows for interoperability with a wide variety of potential partners with whom RISS can work to
- Agree on a set of rules governing federated authentication, authorization, and access control
- Agree on a set of individual and role-based privileges
- Generate and consume the proper SAML assertions
- Make the appropriate privilege management decision based upon the content of the SAML assertions
- Ensure initial and continued system interoperability with the Federated Identity and Privilege Management Security Demonstration project

**Trusted Credential Project Phases**

## Thank You

**	****For further information, please contact:**
**George P. March**
** ****Director**
**Regional Information Sharing Systems*****Office of Information Technology***
- P.O. Box 1869
- West Chester, PA 19380-0131
**Telephone: (610) 738-8810**
- Fax: (610) 738-8813
**gmarch@risstech.riss.net**

## Thank You

**	****For further information, please contact:**
**Lawrence M. Maloney**
** ****Senior Project Manager**
**Regional Information Sharing Systems*****Office of Information Technology***
- P.O. Box 1869
- West Chester, PA 19380-0131
**Telephone: (610) 738-8810**
- Fax: (610) 738-8813
**lmaloney@risstech.riss.net**