SHAKEN Jim Mc Eachern Acting STIGA Director October
SHAKEN Jim Mc. Eachern Acting STI-GA Director October 2018 Advancing ICT Industry Transformation
Phase 2: SHAKEN Governance Model – July 2017 SHAKEN Governance Model and Certificate Management defines mechanism for service provider to obtain SHAKEN STI Certificates: • Roles • Protocols Out of Scope for “Governance Model” In Scope for “Governance Model” ATIS-1000080: SHAKEN: Governance Model and Certificate Management Service Providers use certificates to authenticate and verify calling party information, as specified in SHAKEN (phase 1) 2
Industry-Developed SHAKEN Governance Model FCC STI Governance Authority STI Certification Authority Key roles: • STI Governance Authority (STI-GA) • Defines the rules governing STI Certificates • Selects the STI Policy Administrator Service Provider 3
Industry-Developed SHAKEN Governance Model Key roles: • STI Governance Authority (STI-GA) FCC STI Governance Authority STI Certification Authority STI Policy Administrator Service Provider • Defines the rules governing STI Certificates • Selects the STI Policy Administrator • STI Policy Administrator (STI-PA) • Applies the rules set by the STI-GA • Validates that service providers are authorized to obtain STI Certificates • Issues “Service Provider Token” • Approves STI Certification Authorities (STI-CA) • Maintains a secure list of all authorized STI-CAs 4
Industry-Developed SHAKEN Governance Model Key roles: • STI Governance Authority (STI-GA) FCC STI Governance Authority STI Certification Authority STI Policy Administrator Service Provider • Defines the rules governing STI Certificates • Selects the STI Policy Administrator • STI Policy Administrator (STI-PA) • Applies the rules set by the STI-GA • Validates that service providers are authorized to obtain STI Certificates • Issues “Service Provider Token” • Approves STI Certification Authorities (STI-CA) • Maintains a secure list of all authorized STI-CAs • STI Certification Authorities (STI-CA) • Issues STI Certificates to service providers. 5
STI-GA Selection Process • In December 2017, FCC directed the NANC to: – – Define criteria by which a GA should be selected Recommend process to apply criteria and select GA Identify role the Commission should play in overseeing call authentication Recommend criteria and process for selecting the PA NANC delivered recommendations to the FCC on May 7, 2018. 6
Timeline/Milestones • Timeline for the establishment of the SHAKEN ecosystem: – No more than 3 months after submittal of the report to the FCC: Establish GA – No more than 3 months after establishment of the GA: Issue an RFP or initiate an equivalent transparent process for selection of PA – No more than 3 months after issuance of the RFP: Deadline for responses – No more than 3 months after RFP response deadline: Selection of a PA • Participants are encouraged to expedite steps and shorten timelines. • Service provider interoperability, vendor implementation and deployment of the SHAKEN framework can continue in parallel with above processes. • The clock started when the NANC approved the CATA report => May 4, 2018 7
Establishment of GA • NANC Approved/FCC Endorsed: Industry collaboratively forms the GA: – Allows the industry to begin work immediately; no time lost in a formal FCC rulemaking process – Allows SHAKEN to retain maximum flexibility to rapidly respond to evolving threats • Outcome: Stakeholder group identified in NANC report met in mid-May and selected ATIS to establish STI-GA. 8
STI-GA Board • Structure proposed by NANC report. • Initial Board appointed by the associations identified in the NANC report. • In addition, the associations designated three “at large” Board members: FCC GA GA Board Technical Committee PA 9
Establishing the STI-GA • Associations designated Board members • Approved budget and identified startup funding – Startup funding provided by initial Board members – Ongoing funding TBD • Developed operating procedures • Solicited nominations for Technical Committee • Identified other Board task forces – RFP TF – Corporate Structure TF – Contribution recoupment TF • Formally launched STI-GA on August 29, 2018 10
GA Board • The initial Board composition (and nominating organization): – – – Glenn Clepper, Charter Communications (NCTA) Clint Lee, Jackson Energy Authority 1(ACA) Chris Oatway, Verizon 1(USTelecom) Dave Frigen, Wabash Communications (NTCA) Indra Chalk, T-Mobile (CTIA) Nathan Sutter, Nex-Tech Wireless (CCA) Greg Rogers, Bandwidth (INCOMPAS) Michael Starkey, QSI Consulting, Inc. (Western States CLEC Coalition) Gunnar Halley, Microsoft (VON) Linda Vandeloop, AT&T Tim Kagele, Comcast Darah Franklin, Google 11
Technical Committee • NANC report recommended Technical Committee (TC) consist of three technical experts. • STI-GA Board asked for nominations: – – Initial candidates were from IP-NNI TF Additional nominations followed, with other relevant expertise (e. g. , security) Smaller associations wanted to ensure their perspective was considered by TC 3 => 5 => 7 => 8 nominations for the TC • Board decided that 8 members on the TC might be larger than the optimal size, but was still workable (but probably no larger). • All nominations were approved, and the TC was formally established. 12
Technical Committee • Technical Committee Members: – – – – Martin Dolly, AT&T (Chair) Chris Wendt, Comcast (Vice Chair) Russ Penar, Microsoft Drew Morin, T-Mobile Mark Desterdick, Verizon Dave Frigen, Wabash Communications Doug Davis, Western CLEC Consortium Amol Tuli, Google 13
STI-PA RFP • RFP Task Force began meeting shortly after official Board launch • TC confirmed that technical requirements were covered by existing specs: – ATIS-1000074, ATIS-1000080, ATIS-1000084 – Requirements were extracted to include in the RFP • RFP followed template from the LNPA RFP, and consists of three documents: – RFP – Vendor Qualification Document – Technical Requirements Document (TRD) • TRD draft is available for review by TC • Board is meeting the week of October 29 th to review/approve RFP • Still targeting release of RFP the first week of November 14
Timeline/Milestones You are here May 4, 2018 Submission of NANC report to FCC November 4, 2018 Issuance of PA RFP August 4, 2018 February 4, 2019 August 29, 2018 Establishment of GA Deadline for RFP responses May 4, 2019 Selection of PA Service provider deployment for end-to-end SIP calls can take place concurrently 15
Industry Outreach and Education • NTCA Fall Conference in Seattle • GAO: SHAKEN update • Senate Committee on Aging: SHAKEN Update • SHAKEN 101: GAO, Senate Committee on Aging, FCC • Media enquiries: – – Wall Street Journal San Jose Mercury News NBC Nightly News USA Today • Developing a SHAKEN Webinar Series 16
- Slides: 16