Identity Management in a Federated Environment NATO Id

Identity Management in a Federated Environment

NATO Id. M Initiatives § SC/4 -SC/5 NATO Id. M Workshop (2008/09) § § output: NATO Id. M Strawman Paper directory services oriented view focused on alliance aspect of NATO Id. M identifies Id. M use cases in NATO § SC/4 Service Management Infrastructure AHWG (2008/09) § § output: SMI Technical Services Definitions working paper Security Management architecture view requirements/standards/technology agnostic approach identifies interfaces with other security management services NATO UNCLASSIFIED 2

Some Challenges § Terminology § Identity Management is ambiguous § Identity Management includes: § § § Identity Assurance Identity Exploitation or Use Identity Services § What is an “Identity” § Is it a PKI certificate? § Is it a set of attributes? § Is it the same for every entity in the enterprise?

Some Challenges § NATO has a two-dimensional challenge § Id. M in the NATO Alliance § 28 NATO nations § and partners § constitute a federation § Id. M in the NATO Organization § NATO HQs § and NATO agencies § constitute an enterprise (? ) NATO UNCLASSIFIED 4

In summary § The concept of NATO Id. M is in a very early stage of formalization § Requirements for NATO Id. M need to be defined § Two dimensions of the NATO has potential to cause conflicts for Id. M § Modern tendencies (Identity 2. 0) not reflected either in NATO Id. M Strawman Paper or in SMI working paper § Policy document for NATO Id. M § Interoperability at all levels NATO UNCLASSIFIED 5

…and Finally § What can we accomplish today? § § § Listen Inform Plan for the future