GFIPM

DATE and TIME: May 27, 2011, 9:00 AM

CONVENER: Jeff Krug, Georgia Tech

SCRIBE: Andrea Beesing

Slides: GFIPM SLIDES

# of ATTENDEES: 8

MAIN ISSUES DISCUSSED

- What is GFIPM?  See slides. Work is focused on supporting data model for federated systems, IdM, audit privacy functions
-Three networks involved: RISS, JNET, CISAnet; other groups have joined or are considering joining
-LAISP was another federation, hub and spoke model, now SEGIS (FBI)
-Providing bug fix reports back to Shibboleth community

-Not closely engaged in NSTIC at the moment. Opportunities may exist here

-Much work being done on policy around interfederation

-IdP's have complete audit logs? Yes. NSTIC model is to maintain privacy at the IdP level regarding release of attributes

-Have written tool to detect errors to track down source of access problems and address. Potential interest in open sourcing this capability.

-No plans to go international

-Intent to use LoA3 and 4

-UApprove would not go well with this audience

-Where will this go? Model with state and local LE agencies will continue to grow. At stage where value hasn't reached crtiical mass yet. May merge with FBI/SEGIS model

-Usability is critical for this user base which will in part determine timeframe for significant roll-outs

-Using Justice Reference Architecture for security model at this point

-Driving force to release of this information is probably presidential directive in 2002 for information sharing across agencies

ACTIVITIES GOING FORWARD / NEXT STEPS

-Look at cloud initiative work on standardizing schemas and offer in put
-May not fit in this category--reports on progress/status are of interest
-
I