1 / 36

Scotland

Scotland. Modernising Government, Efficient Governement Conference 29 th October 2004. Supplier Workshop 2 Authentication & Managing Identities. Authentication & Managing Identities. Introduction A Practical Example Panel Session. Neil Boyd Business Development Manager SBL Scotland.

Mercy
Télécharger la présentation

Scotland

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Scotland Modernising Government, Efficient Governement Conference 29th October 2004 Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  2. Supplier Workshop 2Authentication & Managing Identities Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  3. Authentication & Managing Identities • Introduction • A Practical Example • Panel Session Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  4. Neil Boyd Business Development Manager SBL Scotland Introduction Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  5. Introduction • Neil Boyd • Business Development Manager • SBL Scotland • Edinburgh Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  6. Introduction • Software Licensing • Security Specialist • Information Assurance • Public Sector • MOD • Police • Local Government • Central Government • NHS • GCat Prime Contractor • DIPCOG/GIPSI/CIPCOG • SIAF Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  7. Introduction • Definitions • Setting the scene • Concepts Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  8. Introduction “Gaining and maintaining the confidence and trust of individuals, businesses and other organisations will be one of the key success factors for the provision of e.Government services.” “Registration and Authentication are two necessary activities for gaining and maintaining trust” Registration and Authorisation E-Government Startegy and Framework Policy and Guidelines Office of E-Envoy Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  9. Registration “The process by which a user gains a credential such as a username or digital ceritificate for subsequent authentication”. Registration and Authorisation E-Government Startegy and Framework Policy and Guidelines Office of E-Envoy Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  10. Authentication “The process that an electronic identity of a user is asserted to, and validated by, an information system for a specific occasion using a credential issued following a registration process. It may also involve establishing that the user is the true holder of that credential, by means of a password or biometric.” Registration and Authorisation E-Government Startegy and Framework Policy and Guidelines Office of E-Envoy Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  11. Identity Changes Through Time • People are born • People are married • People die • People move house • People move into the area • People change their identities Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  12. Identity Changes Through time • People are born • People are married • People die • People move house • People move into the area • People change their identities G8 Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  13. Identity • Something owned • Something known • Some personal (biometric) characteristic Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  14. Name Address Mothers Maiden Name Address Appearance NI Number NHS Number Passport Driving Licence Birth and marriage Certificate Bank Statement Utility Bill Benefits/Tax documents Payslips Educational Qulaifications Identity Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  15. Name Address Mothers Maiden Name Address Appearance NI Number NHS Number/Birth Registration Number Passport Driving Licence Birth and marriage Certificate Bank Statement Utility Bill Benefits/Tax documents Payslips Educational Qulaifications Identity Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  16. Authentication [**********] • Password/PIN • Smartcards • Tokens • Door Entry Systems Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  17. Authentication • Chip implants • Obtained US approval this month • Quickly access patients medical records • Shares in Applied Digital Solutions jumped 68% on the news Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  18. “The Four A’s” • Authenticate • Authorise • Administer • Audit Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  19. Why Authenticate ? • Security • Establishing the right to a service • Registering for that service Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  20. Why Authorise ? • Security • To control access to applications and services • To control citizen access levels Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  21. Administration • Security • Registration • Self registration • Self service • Empowering the citizen • Efficiency/Cost reduction Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  22. Audit • Security • Accountability • Recoverability • Anti-Fraud Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  23. Audit • Security • Accountability • Recoverability • Anti-Fraud • Compliance Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  24. Compliance • Control • Controls affecting internal people • Controls affecting external people • The citizen • People in other organisations or departments • “Federated Access Systems” • Automatic enforcement of controls • Controls affecting applications • Web Services Management • Enforcing controls between applications • Corporate Applications • Inter-company applications Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  25. "Identity and access management related issues are among the weaknesses often cited by companies needing to accurately audit and document interactions with sensitive resources." "Whether it's Sarbanes-Oxley, HIPAA, Gramm-Leach-Bliley, or other security or privacy regulations, customers need a complete identity management solution that can provide control and visibility into the activities of employees, customers, partners, and any other users of corporate applications across multiple systems and domains." Roberta J. WittyResearch Vice PresidentGartner, Inc. Compliance Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  26. A Practical Example Birmingham City Council Keith Hickson, Manager, PwC IdM in Action Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  27. Users Identity Management Applications Solaris Domino People’s Network Tarantella. Web User Admins Identity Management Overview Foster Carers • Birmingham City Council • Extension to People’s Network • Foster Carers Secure Pages Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  28. User Management Services Personal information profile Administration • Centralised • Delegated • User Self Service Group Management Object Management Workflow What is User Management? User Management is the term used to describe technologies that enable the management of large numbers of users, typically in the millions. Provisioning is also a term used to describe this space. Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  29. Authentication Services Username and Password • Basic over LDAP • Form Based Additional Criteria • PIN Number • Security Question Stronger Authentication • Digital Certificates • Token Based Authentication • Biometric What is Authentication? Authentication mechanisms are tools that provide differing levels of confidence about a persons identity (are they who they say they are?) – so as to enable business transactions Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  30. Access Management Services Group / User Criteria Role Based Access Advanced Access control Multiple levels of Privileges HTTP Headers Cookies Integration Services Web Services What is Access Control? Ensuring that users are given access only to those applications or resources that they are entitled to see or use. Also known as Privilege Management Infrastructure (PMI) Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  31. Enterprise Directory Services Repository for Identity Information Directory Enabled Applications Multiple Directories Content management Other Applications Portals Lotus Notes Oracle / SAP Web Services / The Gateway What is a Directory? A directory serves as a repository for user information. Access to the directory is via the Lightweight Directory Access Protocol (LDAP). Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  32. Challenges Website Design and Security Libraries Non Web Based Architecture Authentication Service for UNIX Operating system Personal Information & Data Protection Administration Model Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  33. Looking Forward Government Gateway Payment Services Online bookings and Applications Linked Services such as social services and Healhcare Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  34. A Practical Example Birmingham City Council Keith Hickson, Project Manager, PWC IdM in Action Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  35. The Panel • Peter Gibbon,Senior Manager • Terry Wilkinson, Manager of Sales Support • Mike Wawro, Managing Consultant Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

  36. Modernising Government Workshop Neil Boyd Email: neil_boyd@softbox.co.uk Tel: 07734 59116 www.softbox.co.uk SBL Scotland PO Box 28263 Edinburgh EH9 3YT Software Box Ltd Tel : 01347 812100 www.softbox.co.uk

More Related