RE: Scope of FPKI?

["Cao, Tin T" <CaoTT@state.gov>]

Mr. Rundgren,

I notice you have been sending out many emails to the PKI-TWG on PKI and
the tone is not very positive.  If you want to know what PKI is being
used for, I invite you to visit the State Department.  We are using PKI
for access control to Web based applications, information sharing among
Federal agencies, mobile code signing, digital signing of forms, access
control to mainframe based applications, secure emails, and much more.
Recently, we set up a new PKI to support the Department's Machine
Readable Travel Document or e-Passport application.  PKI in conjunction
with Biometrics is being to log on to our Unclassified network (PKI not
biometrics).  Our goal there is to eliminate UsersIDs and Passwords.
Lastly, the Department will use PKI for HSPD-12 and PIV next year.  

Thank you and I hope you find this information useful.


Tin T. Cao
Information Integrity Branch
United States Department of State
Phone: (202) 203-5068
Unclassified Fax: (202) 203-5097
http://sysintegweb.irm.state.gov/si/iib (internal only)
This email is UNCLASSIFIED in accordance with E.O. 12958



-----Original Message-----
From: pki-twg@nist.gov [mailto:pki-twg@nist.gov] On Behalf Of Anders
Rundgren
Sent: Saturday, June 11, 2005 11:08 AM
To: Multiple recipients of list
Subject: Scope of FPKI?


Currently FPKI seems to address three applications:
- Employee access to systems and facilities
- Secure e-mail between employees
- e-Authentication.  A recent addition

After scanning through tons of *.gov sites, I noted that there numerous
initiatives like Global Security Architecture Committee (GSAC), all
eagerly looking for a secure way to connect agencies.  Most of these
efforts target Web Services and associated security solutions rather
than S/MIME.

Many of these efforts also intend to link with various private sector
organizations.

However, I cannot from the FPKI documentation deduct if this very
important application field is within the scope of FPKI or not.

Another closely related application is e-procurement, something that
almost the entire US public sector is involved in.  In what way does
FPKI support this "killer application"?

Looking forward to some feedback.

Sincerely
Anders Rundgren
Located in the EU, working for a US company, but here expressing my
personal opinion