About NFC eAuthentication Services

NFC Chosen As A Shared Service Provider
Conducting E-commerce via the Internet requires that agencies confront the issues of user authentication, confidentiality, data integrity, and non-repudiation. NFC is the only Federal entity positioned to address those needs through the use of Public Key Infrastructure (PKI) for secure E-commerce.

What Is PKI And Why Do You Need It?
PKI is a system in which digital certificates and keys are created, managed, stored, and distributed in order to verify users of secure systems, e-mail, documents, and other online transactions. PKI is based on the use of key pairs-a private key controlled by the user and a public key shared with anyone who wants to use secure services from the person or organization holding the private key. Digital certificates are provided by a Trusted Certification Authority (CA) and signed using that CA's private key. This means that electronic transactions can be conducted with assurance that the information is kept confidential, its integrity is assured, users can be authenticated, and transactions cannot be repudiated.

The advantages of PKI are: (1) users no longer need to remember passwords and ID combinations, (2) PKI provides a way to validate electronic documents and assist agencies with their compliance with such mandates as the Government Paperwork Elimination Act (GPEA).

How Did NFC Become A Certification Authority?
NFC initially established its PKI program in 1997 to support USDA's Rural Development (RD) and Farm Services Agency (FSA) processing of Type 60 Purchase Order Invoices. NFC continued to focus on its PKI services by pursuing becoming an accredited CA. NFC contracted with Klynvel Peat Marwick Goerdelr (KPMG) to become certified and accredited as a Trusted Certification Authority. After an 18-month process, NFC received its Certification and Accreditation as a Medium Assurance CA in September 2002. Required audits continue to be performed each year.  Additionally, NFC will be undergoing its next required Certification and Accreditation during the Fall of 2005.

Where Are We Today?
The Office of Management and Budget had determined that Federal agencies must procure PKI services from a managed services provider.  The Federal Identity Credentialing Committee is responsible for the selection and management of the Shared Service Provider (SSP) program.  In the Spring of 2004, NFC set out to become a SSP. After providing the full array of required documentation and completing an Operational Capabilities Demonstration, NFC was selected as the first government entity to be a SSP for PKI services. 

What NFC Applications Utilize PKI Technology?
NFC is currently developing Web-based applications that will utilize certificate-based security.  The first application targeted for PKI-enabling is the Reporting Center. The implementation of this enabled application is scheduled for Fall 2005.  Future Web development initiatives will continue to incorporate PKI technology.

How Can We Satisfy your eAuthentication Needs?
NFC provides one-stop shopping for all your eAuthentication services by providing secure eAuthentication for Web and desktop applications.  Our services include easy implementation of the registration process, roaming and desktop certificates, smart card issuance, and assistance with PKI enabling of applications. NFC provides a fully managed, perpetual, enterprise-level certificate to satisfy many authentication needs. NFC-serviced agencies experience reduced costs in lieu of incurring the establishment and maintenance cost from building their own PKI environment.  The contract and procurement process is streamlined from a trusted Government-provider. This process allows NFC to market its services and provides a competitive advantage to meet regulatory requirements.

NFC provides application support and integration support services. These tasks include developing integration processes, working with customers to develop an integration strategy, helping customers through the integration process, and assisting customers with testing. We provide first-line Help Desk Support, and an experienced, highly-qualified staff to assist customers with every eAuthentication issue encountered in their deployment efforts.  The Customer Support activities for customers include assistance in trouble shooting problems and locating the correct resources to resolve customer issues.

NFC provides a continuity of operations process including a constant communication Backup Site in a geographically different Government facility.