E-gov projects to get boost from sharing PKI credentials

 

Connecting state and local government leaders

The sharing of authentication credentials between government and the private sector is closer to reality than ever before.

The sharing of authentication credentials between government and the private sector is closer to reality than ever before.After nearly four years of fits and starts, the General Services Administration's E-Authentication project is expected, by Sept. 30, to share public-key infrastructure credentials for anywhere from one to more than 200 applications. Several agencies and a few private-sector financial institutions will take part in the initial programs.The move should take federal e-government projects'both the 25 cross-agency initiatives the Office of Management and Budget set forth in 2001 and agency-specific applications'from providing mainly information to making transactions.'This is a critical first step, because once you get started and understand the benefits, you expand,' said Chris Niedemayer, the Agriculture Department's associate CIO for planning, project and information management. 'I see a larger expansion of these services over the next few years, especially with Homeland Security Presidential Directive 12 as a driver.'HSPD-12 calls for agencies to begin issuing interoperable identification cards by October of next year.But even before HSPD-12 takes off, agencies such as Agriculture, the Social Security Administration and GSA will use the federated architecture to share certifications. GSA and Office of Management and Budget officials declined to provide the exact number of agencies that will share credentials.The agencies will join GSA's E-Offer program in using the architecture. E-Offer was the first application to go into production. So far, 6,000 feds and contractors use E-Offer to submit and receive requests for proposals online.GSA originally tried to create a centralized gateway but realized after about a year that it wouldn't work. The new approach addresses authenticating users through a portal, the agency transaction or the credential service provider. The portal will use the Security Assertion Markup Language scheme to verify the identity of remote users accessing government systems.The architecture is based on open standards, using industry-accepted protocols that accommodate personal identification numbers and passwords as well as PKI digital certificate authentications.'The main goal is to make reusing credentials simpler for citizens to securely interact with government online,' said Georgia Marsh, GSA's E-Authentication deputy program manager. 'Some agencies will bring individual applications, and some will bring enterprisewide applications.'USDA has one of the most established programs, with 112 applications already using shared credentials. It has issued more than 120,000 credentials to em- ployees and citizens over the past three years.Niedemayer said Agriculture will add e-authentication capabilities to 61 more systems by Sept. 30.In the meantime, USDA is testing its system in GSA's testing lab to make sure it is compliant with SAML. The agency is using eTrust SiteMinder software from Computer Associates International Inc.The testing should be finished by the end of May, Niedemayer said. 'SAML will let us be interoperable with other agencies' authentication services,' he said.USDA's enterprise approach has saved the department more than $23 million a year in maintenance costs alone, Niedemayer said. He estimated that Agriculture's cost to bring a new application online at no more than $30,000 using the enterprise scheme, instead of $300,000 per system if they set up the e-authentication structure piece by piece.'The common infrastructure increases our flexibility and speed to respond to a changing environment,' Niedemayer said.GSA tested the federated ap- proach over the last year with six agencies, said Mary Mitchell, deputy associate administrator for electronic government in GSA's Office of Governmentwide Policy.'We proved how the federated architecture works in their environment,' she said. 'The purpose was to assess the components of the framework and to make sure the policy delivered what we intended it to.'

'Once you get started and understand the benefits, you expand.'

'USDA's Chris Niedemayer

Henrik G. de Gyor













Joining E-Offer























X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.