[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
CMNLN Elec Exch: 6/11 Minutes. (Reminder: Meeting today)
CommonLine Electronic Exchange subcommittee minutes for 06/11/98. Please
respond to the EE listserve with any corrections or additions.
Scott Fullerton* Great Lakes(Chair) sfullerton@glhec.org
Brian Wilson* Great Lakes bwilson@goliath.com
Karl Ebert SLMA 105502.3154@CompuServe.Com
John Falconer SLMA
Frank Hum SLMA franklin.r.hum.jr@slma.com
Libby Meeker SLMA Libby.Meeker@SLMA.com
Gary Thomas SLMA 70664.401@compuserve.com
Mike Nolan PHEAA mnolan@pheaa.org
Darwin Peiffer* PHEAA dpeiffer@pheaa.org
Chris Seiders* PHEAA cseiders@pheaa.org
Terry Zuch PHEAA tzuch@pheaa.org
John Hall PHEAA
Linda Laub PHEAA llaub@pheaa.org
Jeff Knass USA Group jknass@usagroup.com
Brian Allison* USA Group BALLISON@usagroup.com
Ron Clark USA Group rclark@usagroup.com
Paul Logston USA Group plogston@usagroup.com
Mike Brannon USA Group MBrannon@usagroup.com
Matt Parrett* USA Group mparrett@usagroup.com
Paul Jansen USA Group pjansen@usagroup.com
Jon Kroehler* USA Group
Ki Ha* NELA kiha@nela.net
Gary Burleson TGSLC gary.burleson@tgslc.org
Kelly Klipple TGSLC kelly.klipple@tgslc.org
Will Thien TGSLC will.thien@tgslc.org
Dennis Alley* TGSLC
Warren Sherard Edfund wsherard@edfund.org
Patrick Walters SLFC waltersp@slf.org
Gad Hazum Access ghazum@accessgrp.org
Ed McGowan ESF emcgowan@esfweb.com
Ruth Smith NYHESC rsmith@hesc.com
Kevin Malmberg* NYHESC kmalmberg@hesc.com
Mike Schoeppler NYHESC mschoeppler@hesc.com
Jason Mantor NYHESC
Betty Hansman ISAC bhansman@isc016r1.state.il.us
Mike Yip ISAC
Debbie Phillips ISAC dphillip@isc016r1.state.il.us
Fred Highsmith* Guarantec fhighsmith@guarantec.com
Tim Hearley* KHEAA thearley@kheaa.com
Mark Lifland Nellie Mae mark_lifland@nelliemae.com
Goeff Boisvert Nellie Mae geoff_boisvert@nelliemae.com
Doug McCaleb Nellie Mae doug_mccaleb@nelliemae.org
Tom Jurado AFSA twjurado@aol.com
Bill Horn College Foundation whorn@cfi-nc.org
Dawn Harris College Foundation dharris@cfi-nc.org
* = present
================
*SUMMARY*
1) University of Austin Model
2) PGP NAI
3) Evaluation Team report on AT&T
4) Legal support
=================
1) *UNIVERSITY OF AUSTIN MODEL (Scott)*
A suggestion was made at the Alexandria meeting to use the example of The
University of Austin, which serves as a hub to route transcripts. Scott
contacted David Stones, involved in the design and support of this hub and
discussed their setup.
They secure their transactions using PGP with the RSA algorithm. Schools
transfer files using ftp or POP3. Their system is based on the use of EDI.
Transcripts are laid out as EDI transaction sets. EDI wrappers are used to
carry routing information. The entire bundle of transcripts sent by a school
is encrypted to the U of Austin public key. Processes at the hub then
authenticate and decrypt the file, establish the recipient from the
information in the router and then forward the data encrypted with the
recipient's public key.
Schools must perform EDI translation. They must also handle encryption and
file transfer at their own sites. There was an assertion at the Alexandria
meeting that file transfers could be done with a web browser. This is not the
case.
U. of Austin provides this as a service to the University Community at no
charge. They have arrangements with the University of Georgia to serve as an
alternate processing center should Austin ever shut down. This provides
schools with needed assurance the system will remain in place. Since they
require the use of EDI and are restricted to non-commercial use, it would not
be possible for us to use their service.
2) *NAI (back in the saddle again?)*
NAI recently reached a settlement with RSA DSI. The suit has been dropped and
NAI can license RSA technology. It would be very much to our advantage if we
could pick up with them where we left off and use the 4.x toolkits. Scott and
Brian will contact NAI and report to the subcommittee next week.
Ki Ha reported facts he gleaned from an NAI seminar on security. They support
c and c++ now. There are Delphi parts already available (not written by NAI).
NAI are completing Visual Basic support.
3) *EVALUATION STATUS (Evaluation Team)*
Brian Wilson Chris Seiders and others reported their findings on the AT&T
product. Although there are questions about some things, the product so far
seems to meet all requirements. The command-line interface toolkit product
(strange name) is 32-bit. The code is either production release or late beta.
The 32-bit version of the corresponding end-user product, Secret Agent, is
not yet in production. Brian understood it would be sometime in July.
Outstanding questions.
Concurrent access to key management and encryption functions?
Exact date of production release of Secret Agent?
Message compatibility with NAI products? with others?
Language support for VB and Delphi (confirm)
We know it uses RSA. Does it use Diffie Hellman?
4) *LEGAL SUPPORT*
Regrettably Linda Laub is moving on from PHEAA. Her services have been of
enormous value and greatly appreciated. Mike Nolan will be looking for a
replacement for her to serve when needed on this committee.
=================
*ELECTRONIC EXCHANGE LISTSERVE*
These minutes will go out via the Electronic Exchange listserve. They can be
viewed with a browser at the archive site
<http://lists.glhec.org/cl-elec-exch> (case sensitive). To subscribe to the
listserve, send a message to cl-elec-exch-request@lists.glhec.org. Put the
word subscribe in the body of the message (You may make the subject anything
you want). To post to the listserve, send messages to
cl-elec-exch@lists.glhec.org (You must first have subscribed).
--------------------------------
NEXT SCHEDULED MEETING:
Thursday 6/18/98 10a.m. central time. The number to call is (800) 374-8567.
When asked for the name of the conference, reply "CommonLine Electronic
Exchange." If asked for the host's name, reply "Scott Fullerton."
------------
Agenda
1) NAI (Scott).
2) AT&T (Evaluation Team)
3) Other
Open Issues
- Standard vs. Product - open issue (group)
- Creating DLL wrappers for products that only support C/C++
------------------------------------------------------