LRA Process: Certification Meeting

1
U.S. Department of Agriculture eGovernment Program

• LRA Process Certification Meeting

eGovernment Program
October 30, 2003
2
Certification Meeting Agenda

• eAuthentication Overview
• LRA Roles and Responsibilities
• LRA Standards
• Paperwork

3
eAuthentication Overview

• Purpose
• Under the Government Paperwork Elimination Act
  (GPEA) and the Presidential Management Agenda,
  USDA Agencies are required to provide
  authentication for all web-enabled transactions
• Thus
• The eAuthentication Initiative is in place to
  ensure security of USDA Agency personnel as well
  as informational materials posted on the USDA
  website. Customers must obtain the appropriate
  credentials and Assurance Levels to gain access
  to various applications and transactions on the
  USDA website

4
eAuthentication Overview

• Assurance Levels
• Assurance levels represent the level of
  confidence the relying party has in the
  electronic identity credentials presented.
• Assurance levels are directly related to the
  relying partys degree of certainty that these
  credentials are being used by the individual to
  whom they have been assigned.

• The Office of Management Budget (OMB) has
  identified four levels of assurance for
  authentication

Each assurance level is based upon the degree of
security and confidentiality required for various
electronic transactions and applications
Level 4
Note Agencies can determine the assurance level
that is appropriate for their applications and
transactions
Level 3
Level 2
Level 1
5
eAuthentication Overview

• Level 1 Assurance - Minimal Assurance
• The customer must obtain a user profile online.
  For Level 1 Assurance it is not necessary for and
  LRA to verify customer information. At this
  level, little or no assurance is placed in the
  asserted electronic identity of the customer.

Level 2 Assurance Low Assurance A higher degree
of confidence is enforced to ensure that the
customer accessing an application on the USDA
website is indeed the person he claims to be. In
order to obtain Level 2 Assurance, the user must
fill out an online application and must visit a
service center to have his identity verified by a
certified LRA.
6
Certification Meeting Agenda

• eAuthentication Overview
• LRA Roles and Responsibilities
• LRA Standards
• Paperwork

?
7
LRA Roles and Responsibilities

• Role Description
• The Local Registration Authority serves as an
  integral part of the eAuthentication System. LRAs
  are responsible for the following 3 functions

Search- The LRA searches for the customers name
in the USDA eAuthentication website
Search
Validate- The LRA validates the customers user
profile as displayed in the eAuthentication
interface against the customers government
issued photo ID
Activate- The LRA activates the customers
Level 2 credential after the identity proofing
process is successfully completed
Validate
Activate
8
Certification Meeting Agenda

• eAuthentication Overview
• LRA Roles and Responsibilities
• LRA Standards
• Paperwork

?
?
9
LRA Standards
USDA Agencies may choose to create their own LRA
processes and procedures instead of using the
default eAuthentication LRA process. In this
case, the Agency must ensure that the Standards
outlined below are followed and must obtain
Certification from the eAuthentication Team
before their LRA Process may come into effect.
Users may have their identities verified in any
location that the LRA Agency supports, including
the users home or business. However, the LRA
must maintain a record of all information
required below and must enter this information
into the USDA eAuthentication website.
Customer presents valid government issued ID to
LRA
LRA updates customer profile in the system and
activates level 2 credentials
LRA verifies ID information against customer
profile in the system
10
LRA Standards- New Users

• Regardless of the chosen Process, the LRA MUST
  perform the following
• When the customer presents himself to the LRA,
  the LRA must verify
• Valid photo ID of the following types
• -State Drivers License
• -State Photo Identification
• -Military ID
• -Passport
• Valid (future) expiration date of the photo ID
• Matching First and Last names as entered into the
  eAuthentication Level 2 online customer profile
  (these must match exactly, no nicknames)
• Matching Date of Birth as entered into the
  eAuthentication Level 2 online customer profile
• Matching Biometric (e.g., the customer looks like
  the picture on his photo ID)
• The LRA must maintain a record of all information
  required and must enter this information into the
  USDA eAuthentication website.

11
Certification Meeting Agenda

• eAuthentication Overview
• LRA Roles and Responsibilities
• LRA Standards
• Paperwork

?
?
?
12
Agency Application Information
Application Name
Application Owner
Application Description
13
LRA Process Information

• LRA Process Description

14
LRA Process Information

• Timeline for Implementation
• Intended Audience
• eAuthentication Manager

15
Questions and Answers