CIS14: Physical and Logical Access Control Convergence
2 likes2,279 views
The document discusses the convergence of physical and logical access control systems, highlighting the need for centralized access management using PIV and PIV-I credentials. It outlines research and development efforts by the Cyber Security Division, focusing on improving interoperability and efficiency in identity and access management. The presentation emphasizes collaboration and communication among various stakeholders to innovate and transition these technologies into operational use.
CIS14: Physical and Logical Access Control Convergence
- 1. Cloud Identity Summit 2014 Getting Physical: Holistic Identity Management 22 July 2014 Karyn Higa-Smith Program Manager Cyber Security Division Homeland Security Advanced Research Projects Agency Science and Technology Directorate Physical and Logical Access Control Convergence
- 2. • Presenter’s Name June 17, 2003 CSD Mission & Strategy 2 REQUIREMENTS CSD MISSION § Develop and deliver new technologies, tools and techniques to defend and secure current and future systems and networks § Conduct and support technology transition efforts § Provide R&D leadership and coordination within the government, academia, private sector and international cybersecurity community CSD STRATEGY Trustworthy Cyber Infrastructure Cybersecurity Research Infrastructure Network & System Security and Investigations Cyber Physical Systems Transition and Outreach Government Venture Capital IT Security Companies Open Source International
- 3. Background
- 4. • Presenter’s Name June 17, 2003 S&T Identity Management Testbed Attribute RepositoryWS-Security Policy Decision Point Attribute Aggregator
- 5. • Presenter’s Name June 17, 2003 • 5 Identity & Access Management Research & Development
- 6. • Presenter’s Name June 17, 2003 § PIV-I/FRAC Technology Transition Working Group (TTWG) § Public Safety/Emergency Response § Security § Federated Identity for First Responders § National standard, Interoperable, and trusted ID credential § One voice from the TTWG to policy makers § Sharing lessons learned § Provide innovative, Cost-efficient solutions 6 Technology Transition Working Group
- 7. • Presenter’s Name June 17, 2003 PIN Authorization Information: Certifications, Clearance, Job Function, Citizenship… 7 Enrollment Elements
- 8. • Presenter’s Name June 17, 2003 Bio: Something you are • Something you have • Something you know**** • Something you are 8 Authentication
- 9. • Presenter’s Name June 17, 2003 Federated Attribute Exchange
- 10. • Presenter’s Name June 17, 2003 • 10 End-to-End Standard-Based Attribute Exchange Authoritative Sources F/ERO Repository (Attributes) SPML Service SPML Gateway Handheld Local Workstation SAML Service SPML Profile Create, Read, Update, Delete SPML Read- Only Profile ERO Entitlements Authoritative Source SPML Read-Only Request/Response Smartphone OASIS: Organization for the Advancement of Structured Information Standards F/ERO: Federal/Emergency Response Official SPML: Service Provisioning Markup Language SAML: Security Assertion Markup Language Lightweight Protocol JSON over REST SAML Request/ Response BAE SAML Profile Tablet
- 11. Logical and Physical Access Control Systems Convergence *show video*
- 12. • Presenter’s Name June 17, 2003 Capability Need: Centralized access control management; utilize PIV/PIV-I credentials Technology: Develop standard interface between Physical and logical access control system Impact: Security, Remote and Central Access Management, Granular Access Control, Less Footprint, Usability, and Reduce Cost Transition: proof-of-concept pilot, transition to industry Customer: Fusion Center, FEMA, CSO/CIO Execution Model 12
- 13. • Presenter’s Name June 17, 2003 13 § Requirement for access control management using PIV and PIV-I § Interoperability testing at the S&T IdM Testbed § Test Physical Access Control System against the “Logical” Policy Decision Point § PACS vendors to integrate software code based on the standard interfaces § XACML (Extensible Access Control Markup Language) - open standard access control policy language 1 2 4 5 3 Policy Enforcement Point Policy Decision Point Requestor Cyber-Physical Access Control System Convergence
- 14. • Presenter’s Name June 17, 2003 14
- 15. • Presenter’s Name June 17, 2003 15 Pilot at DC Government
- 16. • Presenter’s Name June 17, 2003 Visit Authorization Process
- 17. • Presenter’s Name June 17, 2003 Visitor Enrollment Kiosk
- 18. • Presenter’s Name June 17, 2003 Take Away • Security, Interoperability, Efficiency, Enhances Access Control Benefits • Team dynamics, dedication, education • Convergence required constant communication and coordination with many different groups that normally operate independently Innovation – to - Operations • Kiosk interface • Speed Usability Lessons Learned
- 19. • Presenter’s Name June 17, 2003 Future
- 20. • Presenter’s Name June 17, 2003 Resources Websites http://www.ahcusa.org/PIV-I%20TTWG.htm http://www.dhs.gov/csd-idm http://www.dhs.gov/cyber-research Follow us on Twitter at @dhsscitech
- 21. • Presenter’s Name June 17, 2003 • 21 Karyn Higa-Smith DHS Science and Technology Directorate Homeland Security Advanced Research Projects Agency Cyber Security Division Identity, Access, Privacy Research Program Karyn.Higa-Smith@st.dhs.gov Questions § Additional Resources Location-based Access Control § https://www.youtube.com/watch?v=j3LXxqW160k Data Privacy Research: http://go.usa.gov/8JZ9