# Presentation: 547727

***Technical Overview***

- June 18, 2002

**Notes:**
Photo of a USA Flag and a photo of the Statue of Liberty. 

## Conceptual Process Flows
Context Diagrams
Key Points
Gateway Development Team

**Context Diagrams**
**Key Points**
**Gateway Development Team**

**Topics**

**Notes:**
Photo of the Statue of Liberty in the left hand margin.  This photo has been included on all of the following slides.

## Gateway Notional Design

**Authentication**

**Gateway**

**State or Federal**

**Government**

**Identity**

**Verification Required**

**Identity**

**Verification**

**Not Required**

**Federal Agency**

**Relying Parties**

**ID/Credential**

**Issuers**

**Credential**

**Validation**

**Protocol(s)**

**Gateway Notional Design**

**Notes:**
Citizens (clip art of men 7 women), Agent (clip art of a man & woman talking) and Business (skyscrapers clip art) are interfacing with each other and the FIRSTGOV portal (Your Click to the U.S. Government).

Citizens and the FIRSTGOV portal are interfacing with the Social Security Administration, the Department of Health & Human Services, and the USDA (labeled “Federal Agency Relying Parties”).

The FIRSTGOV portal is interfacing with the Authentication Gateway (clip art of a gate and brick columns).

The Federal Agency Relying Parties are interfacing with the Authentication Gateway.

The Authentication Gateway interfaces with ID/Credential Issuers (State of Federal Government, Health Care, and Academia).

## eAuthentication Process Flow

**eAuthentication**** Process Flow**

**Notes:**
A laptop communicates with the FIRSTGOV.GOV web page.

## eAuthentication Process Flow Details

**Authentication**

**Gateway**

**Validation**

**Services**

**Application**

**#1**

**Application**

**#2**

**Application**

**#3**

**3**

**1**

**5**

**PKI Basic**

**SP/VPN**

**Pin/**

**password**

**PKI High**

**(Smart**

**Card)**

- Receive API

**Mechanisms**

**Authentication**

**Requirement**

**Level**

**Risk Assessment = Risk Profile**

**Gateway**

**delivers**

- Application

- gives

***Gateway Scope***

- Send API

- Send API

- Send API

- Send API

- Receive API

- Receive API

- Receive API

**Rejected validation**

**Rejected validation**

**FirstGov.gov**

**Webpage**

**eAuthentication Process Flow Details**

**Notes:**
FIRSTGOV.GOV web page interfaces with an Authentication Gateway and it goes thru an authentication requirement level to an application.

## Context

**Context**

**Notes:**
A User goes thru the portal to an agency application(s), to the Authentication Gateway and then to digital credential providers & validation services.

## Digital Credential Providers (DCPs)

**VS**

**PCI**

**C**

**VR**

***DCP***

- Private Consumer Info provided during application

- Credentials issued

- Validation Responder

**DCP****2**

- Validation svc
- CAM/DAVE
- Commercial

**DCP**

**FBCA**

- digital credential & challenge response

- credential status & AuthN level

**Gateway AuthN Services (GWANS)**

**DCP****1**

**GW**

**Digital Credential Providers (DCPs)**

**Notes:**
The Gateway uses a digital credential & challenge response to the digital credential providers for a credential status & authentication level.

## Key Points

**Key Points**

**Notes:**
To be discussed only on the 18th:
DCP Becomes approved provider AuthN level(s)
AA undergoes risk analysis

## GSA
NIH
NASA
Treasury
USDA
Mitretek Systems

**NIH**
**NASA**
**Treasury**
**USDA**
**Mitretek Systems**

**Call Steve Timchak on 703.872.8604 for more information**

**Gateway Development Team**