Draft memo to CommonLine on AT&T purchase (please review)

[sfullerton@glhec.org]

     Below is a draft memo to go out to CommonLine members.  Please review 
     and respond by the end of tomorrow (8/18).
     Scott
     
     ---------------
     The following is a brief update on the current status of our efforts 
     to provide security standards and access to software which will 
     support our shift to the Internet-compliant standards for CommonLine 
     file transport.  
     
     Please review and begin planning the number of licenses for security 
     software you think your agency will need.  This will help the vendor 
     anticipate the volume of purchases that can be expected in a 
     relationship with the CommonLine group. A response is not needed at 
     this time, although we will soon be requesting this information.   
     
     We would like to request that for now you direct any questions to the 
     members of the subcommittee rather than to the vendor.  This will ease 
     the vendor's burden as we move to finalize arrangements.
     
     -----------------
     BACKGROUND
     In the addendum, we had specified the use of PGP using the RSA 
     algorithm, a product marketed by Network Associates Inc. (NAI).  It 
     turned out, however, that NAI was unable any longer to license this 
     technology.  
     
     The Electronic Exchange Subcommittee researched the alternatives and 
     presented their findings to the July CommonLine meeting in Chicago.  
     There, they recommended the use of the product suite offered by 
     Information Security Corporation (a subsidiary of AT&T).  They provide 
     an end-user product as well as software to support developers' who 
     want to embed this functionality in their own applications.  The 
     end-user product is called Secret Agent.  They have a 16-bit Windows 
     version and will soon be releasing a 32-bit version; the software for 
     embedding in applications is called Secret Agent Command Line 
     Interface.  They have both 16- and 32-bit Windows versions of this 
     currently available.  Their products also run on various Unix 
     platforms.
     
     The full text of the recommendation can be found in the July meeting 
     minutes or on the Electronic exchange listserve archive 
     http://lists.glhec.org/cl-elec-exch/ (The document is stored as a link 
     placed at the end of the body of the message, "CmnLn July Mtg 
     recommendation").
     -------------------
     ACQUIRING THE SOFTWARE: ESTIMATING NEED
     
     In order to migrate to the new standard participants may have to 
     purchase encryption software.  The type of software and the number of 
     licenses needed will vary according to the type of participant you 
     are.  The breakdown below is intended to help you determine which 
     group you fall into and the kind of purchase you might make. 
     
     We will be following up with a letter of intent form to provide the 
     vendor with an estimate of the number of licenses for each of their 
     products needed by CommonLine as a whole.  In anticipation of this, 
     PLEASE TAKE TIME NOW TO ESTIMATE THE NUMBER OF COPIES OR LICENSES OF 
     SECURITY SOFTWARE NEEDED BY YOUR INSTITUTION TO SUPPORT THE MIGRATION. 
     
     Group 1:   Schools using CommonLine-compliant School-Based-Software to 
     send CommonLine transactions.
     
     No action is necessary.  This will be addressed in your 
     School-Based-Software
     
     Group 2:   Schools not using SBS and Service Providers both of whom  
     want a stand alone, user friendly interface for  encrypting CommonLine 
     files. 
     
     You will probably want one copy of  Secret Agent GUI per machine on 
     which this would be loaded at $179.95/copy (there are volume discounts 
     available).  
     
     Group 3:   Schools or Service Providers using software developed in 
     house to send CommonLine transactions and who want to embed the 
     encryption functionality in their automated process. 
     
     You will probably want at least one copy of  Secret Agent CLI (Command 
     Line Interface) at $20/copy.  
     
     Group 4:   Distributors of School-Based-Software (SBS).
     
     You will need to purchase the Secret Agent CLI at $20.00/license. You 
     WILL need extra licenses, one for each installation transmitting via 
     POP3.
     
     ------------------
     
     Thank you for your attention.  If you have any questions, please do 
     not hesitate to call or write
     
     Karen Haney, 
     (202) 822-2196 or by e-mail at khaney@nchelp.org 
     or 
     Scott Fullerton
     (608) 246-1779 sfullerton@glhec.org