CIS2015-NAPPS-FirstResponders
•Download as PPTX, PDF•
1 like•243 views
This document discusses the need for an identity ecosystem to enable single sign-on and centralized credential management for first responders. It provides examples of how various public safety mobile applications could leverage APIs protected by access tokens to securely share identity and context information. This would allow real-time health monitoring, location tracking, video streaming, and records access on a single authenticated device. The examples show how a trusted authority could issue access tokens to enable these different use cases throughout a first responder's shift.
Recommended
More Related Content
What's hot
What's hot (13)
Similar to CIS2015-NAPPS-FirstResponders
Similar to CIS2015-NAPPS-FirstResponders (20)
CIS2015-NAPPS-FirstResponders
- 1. 1 MissionCriticalAPIsandNAPPS Adam Lewis – Motorola Solutions – Chief Technology Office Mission Critical APIs and NAPPS
- 4. 4 MissionCriticalAPIsandNAPPS Health APIs Presence & Location Key Mgmt Home Agency Public Safety LTE will usher in a new era of mobile applications for First Responders
- 5. 5 MissionCriticalAPIsandNAPPS EACH OF THESE APPLICATIONS IS GOING TO NEED TO KNOW WHO THE RESPONDER IS AND WHAT THEY ARE AUTHORIZED TO DO
- 7. 7 MissionCriticalAPIsandNAPPS In a Nutshell Problem: Identity solved independently = overall solution complexity + inconvenience to both the administrator and the end- user + weakened security + obstacle to interoperability Public Safety needs an Identity Ecosystem Enabling: centralized credential management Enabling: migration path to strong authentication Enabling: SSO across native and web apps And it must be built upon open standards.
- 8. 8 MissionCriticalAPIsandNAPPS Question It’s 6 a.m. Do you know where your first responder is?
- 9. 9 MissionCriticalAPIsandNAPPS Gesture Recognition Holster/ Weapon Sensor Augmented Reality Eye- wear Wrist Display& Biometric Sensors Heart rate sensor Camera Time: 6:00 a.m. CONNECTED FIRST RESPONDER BRINGING WEARABLES TO MISSION CRITICAL WORKGROUP COMMUNICATIONS
- 10. 10 MissionCriticalAPIsandNAPPS GRABS A SHARED BROADBAND DEVICE FROM THE FLEET CHARGING STATION. PROCEEDS TO FLEET VEHICLE Time: 6:10 a.m.
- 11. 11 MissionCriticalAPIsandNAPPS Kill Header OFFICER ENTERS VEHICLE AND LOGS ONTO THEIR DEVICE LITTLE DOES OFFICER KNOW, MAGIC BEGINS TO HAPPEN BEHIND THE SCENES Time: 6:15 a.m.
- 12. 12 MissionCriticalAPIsandNAPPS WEBVIEW-DRIVEN AUTHENTICATION ENABLES TA TO BE AGNOSTIC TO AUTHENTICATION THIS IS HUGE UA AuthZ EP Token EP AppInfo EP TA Time: 6:15 a.m. HTTP/1.1 302 Found Location: https://client.example.com/cb?code=SplxlOBeZ QQYbYS6WxSbIA POST /token HTTP/1.1 Host: server.example.com Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW Content-Type: application/x-www-form- urlencoded grant_type=authorization_code&code=SplxlOB eZQQYbYS6WxSbIA &redirect_uri=https://client.example.com/cb HTTP/1.1 200 OK Content-Type: application/json Cache-Control: no-store Pragma: no-cache { "access_token":"SlAV32hkKG", "token_type":"bearer", "expires_in":3600, "refresh_token":"tGzv3JOkF0XG5Qx2TlKWIA", "id_token":"eyJ0 ... NiJ9.eyJ1c ... I6IjIifX0.DeWt4Qu ... ZXso" } https://server.example.com/authorize? response_type=code &client_id=s6BhdRkqt3 &redirect_uri=https://client.example.org/cb &scope=openid napps GET /AppInfo/service Authorization: Bearer SlAV32hkKG Cache-Control: no-cache Application Metadata tailored to User roles
- 13. 13 MissionCriticalAPIsandNAPPS TA PAN service Context API (health, sight, gun) Time: 6:15 a.m. grant_type=refresh_token& refresh_token=qANLTbu17rk17lPsze cHRi7rqJt46pG1qx0nTAqXWH& scope=urn:oauth:context_api HTTP/1.1 200 OK Content-Type: application/json Cache-Control: no-store Pragma: no-cache { "access_token":"SlAV32hk KG", "token_type":"bearer", "expires_in":3600, }
- 14. 14 MissionCriticalAPIsandNAPPS TA Real-time Video App Real-time Video Intelligence Home Agency Time: 9:17 a.m. grant_type=refresh_token& refresh_token=qANLTbu17rk17lPsze cHRi7rqJt46pG1qx0nTAqXWH& scope=urn:oauth:video_api In-vehicle camera beings streaming live video back to dispatch center Notification sent to all responders within vicinity based upon location context HTTP/1.1 200 OK Content-Type: application/json Cache-Control: no-store Pragma: no-cache { "access_token":"SlAV32hk KG", "token_type":"bearer", "expires_in":3600, }
- 15. 15 MissionCriticalAPIsandNAPPS TA Records Lookup App Time: 12:35 p.m. grant_type=refresh_token& refresh_token=qANLTbu17rk17lPsze cHRi7rqJt46pG1qx0nTAqXWH& scope=urn:oauth:records_api HTTP/1.1 200 OK Content-Type: application/json Cache-Control: no-store Pragma: no-cache { "id_token":"eyJ0 ... NiJ9.eyJ1c ... I6IjIifX0.DeWt4Qu ... ZXso" } HTTP/1.1 200 OK Content-Type: application/json Cache-Control: no-store Pragma: no-cache { "access_token":"SlAV32hkKG", "token_type":"bearer", "expires_in":3600, } POST /token.oauth2 HTTP/1.1 Host: as.example.com Content-Type: application/x-www-form- urlencoded grant_type=urn.ietf.params.oauth.grant- type.jwt-bearer &assertion=eyJhbGciOiJFUzI1NiIsImtpZCI6IjE 2In0. eyJpc3Mi[...omitted for brevity...]. J9l-ZhwP[...omitted for brevity...] Public Safety SaaS OFFICER PULLS OVER DRIVER DUE TO SUSPICION USES NATIVE MOBILE APP TO RUN THE LICENSE PLATE AGAINST A CLOUD- EXPOSED APIJWT Id_token identifies user as being a sworn law enforcement offier
- 16. 16 MissionCriticalAPIsandNAPPS OFFICER PULLS OVER ANOTHER VEHICLE BECAUSE OF BROKEN TAIL LIGHT PASSENGER BEGINS TO FLEE – OFFICER BEGINS TO PURSUE SUSPECT ON FOOT CHASE Health APIs Presence & Location Key Mgmt Home Agency Time: 6:15 p.m. First Responder’s elevated heart rate seamlessly communicated to context & health monitoring APIs, protected by previously-obtained access token Dispatcher at command central alerted Other responder within same vicinity are dispatched for backup
- 17. 17 MissionCriticalAPIsandNAPPS TA Web Launcher InitSSO EP Time: 7:10 p.m. grant_type=refresh_token& refresh_token=qANLTbu17rk17lPsze cHRi7rqJt46pG1qx0nTAqXWH& scope=urn:oauth:nief HTTP/1.1 200 OK Content-Type: application/json Cache-Control: no-store Pragma: no-cache { "access_token":"SlAV32hk KG", "token_type":"bearer", "expires_in":3600, } SAML response GET /initsso.ep/service?target=NIEF HTTP/1.1 Host: server.example.com:9031 Authorization: Bearer qANLTbu17rk17lPszecHRi7rqJt46pG1qx0nTAqXWH
- 19. 19 MissionCriticalAPIsandNAPPS And in Closing … • Questions? • Comments? • Scrutiny? • Thank you! :-) adam.lewis@motorolasolutions.com
Editor's Notes
- Public Safety Community of Interest is riding the same wave of mobile, cloud and APIs as other Communities of Interest, public citizens TA = Token Agent UA = User Agent
- And we cannot ask the agency IT admin to maintain credentials separately in each application. Or for the first responder to remember the identity & credential combinations for a dozen different systems
- https://www.youtube.com/watch?v=Gca8_xn6rSg https://www.youtube.com/watch?v=gD4hXzZg34M https://www.youtube.com/watch?v=u2Wo7749-j4 (best) https://www.youtube.com/watch?v=tM33PcvmfNA (connected first responder)
- The map shows the incident, and navigation button that will plot the fastest route to it. (Whether on foot or in a car). You’ll also see other units that are responding so you can see who’s there to help, and what other resources are the area that the officer should be aware of. You’ll also see more information on the incident, that can include images of the suspect, arrest history, known associates, firearm, information relevant to the address of the incident.
- BOOTSTRAP
- Wearable technology begins to communicate with backend APIs
- Wearable technology begins to communicate with backend APIs
- Key Takeaway - LTE is gaining traction in public safety. LTE is gaining traction in public safety as the mobile broadband standard. It is estimated that by 2020, there will be 4 million public safety LTE users worldwide. Globally, the discussion has on how broadband will be deployed. I’m sure you have heard of certain agencies’ adoption of broadband for their public safety operations. For example, the US government is planning to build a dedicated public safety network, known as FirstNet. FirstNet will likely be the first high-speed, nationwide network with dedicated spectrum for public safety. Let’s take a look at the broadband deployment models evolving around the world. _____________________________________________ Source(s): PS LTE growth 60% between 2014 – 2020 – IMS Research, 2011 IMS Research, “IMS Research Report: Broadband Public Safety Risk Using Public Cellular Networks,” 2011 It is estimated that by 2020, there will be 4 million private public safety LTE subscribers worldwide. – IMS Research, 2011 IMS Research, “IMS Research Report: Broadband Public Safety Risk Using Public Cellular Networks