Secure Citizen Interaction Framework

Abstract

The hypothesis for this research is that it is possible to integrate a set of existing guidelines and technologies to architect and specify an operationally secure, risk-balanced, and effective Citizen's Interaction Channel. This set of technologies could include a method to assure that a personal system used by Citizens will not compromise the channel's security. This document formulates a generalized approach to the process an agency could take to establish a secure channel over the internet that will interact with Citizens. Sample requirements and representative business processes are defined, assumptions documented, and a baseline technical architecture presented as a baseline "Model" design set for use as a base of analysis. This Model is then evaluated along with potential solutions. A representative set of data that would be collected from Citizens, maintained, shared, or disseminated is defined, as well as how this information set might be used. The sensitivity level associated with the representative information was also ascertained. A privacy impact assessment of collecting and maintaining this information is then presented.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Feb 06, 2008
Accession Number
AD1107128

Entities

People

  • Clarke Thomason
  • David L. Carroll

Organizations

  • MITRE Corporation

Tags

Communities of Interest

  • Cyber
  • Materials and Manufacturing Processes

DTIC Thesaurus Topics

  • Authentication
  • Commerce
  • Computer Access Control
  • Computers
  • Configuration Management
  • Cryptography
  • Cybersecurity
  • Denial Of Service Attack
  • Department Of Homeland Security
  • Financial Management
  • Governments
  • Identification
  • Identity Management Systems
  • Information Processing
  • Information Security
  • Information Systems
  • Law
  • Mobile Phones
  • National Security
  • Network Protocols
  • Operating Systems
  • Personal Digital Assistants
  • Reliability
  • Risk
  • Risk Analysis
  • Social Engineering
  • Unauthorized Disclosure
  • United States Government

Fields of Study

  • Computer science

Readers

  • Cybersecurity.
  • Systems Analysis and Design
  • Theoretical Analysis.