RE: [soa-rm-ra] Thought Experiment on SOA Security and Governance

["Chiusano Joseph" <chiusano_joseph@bah.com>]

My take is that we would never reach the question of federated identity,
because the chances of fraud (especially through a virus) are so high
that it will probably be a very long time before Internet-based voting
is a reality (if at all).

Joe

Joseph Chiusano
Associate

Booz | Allen | Hamilton
______________________--

700 13th St. NW, Suite 1100
Washington, DC 20005
O: 202-508-6514
C: 202-251-0731
Visit us online@ http://www.boozallen.com

-----Original Message-----
From: Michael Stiefel [mailto:development@reliablesoftware.com] 
Sent: Monday, October 30, 2006 9:40 AM
To: soa-rm-ra@lists.oasis-open.org
Subject: [soa-rm-ra] Thought Experiment on SOA Security and Governance

One of my action items was to come with a scenario that we could use to
think about SOA Governance. Here is one "use case". Try to imagine what
it would take for the United States to have secure Internet voting in
state and federal elections.

Who would offer the "voting service"?

This would be the extreme case of Federated Identity. Would the state
federated identity servers be trusted by the federal identity servers? I
cannot imagine everybody getting an X509 certificate. Would we restrict
voting to a few days?

Comments?

Michael