Zero Trust for Machines from Shop Floor to Cloud and Back Again

Corsha's Identity Provider for Machines is a highly innovative solution for Machine and API Identity, Credential and AccessManagement (ICAM) that provides next-generation authentication security, connection visibility, and control of APIs and otherM2M protocols. Our system provides the first and only dynamic, automated dynamic identity provider (IdP) for machines.Corsha is designed to be dual-use and implemented principally as a security platform for the public sector and regulatedcommercial industries such as financial and banking services, health care providers, and utilities, as well as companies withSaaS and automated manufacturing enterprises.With this TACFI effort, Corsha will leverage recent Series A private funding to advance it’s dual-use Identity Provider forMachines and will adapt and extend Corsha’s platform for the AFSC mission needs to securely and efficiently connect OT andIT systems across network boundaries. The key goals for Corsha’s Identity Provider for Machines will be to scale and deploythe platform in different settings across multiple Air Logistics Complexes as well as integrate seamlessly with existingtechnologies and programs such as ATHENA and the AFSC Zero Trust Data Fabric.In addition, through the successes and knowledge that Corsha has acquired in its engagement with AFSC, its end-users,leadership, and cybersecurity teams, Corsha has been asked to help develop a cybersecurity blueprint to help AFSC introduceand adopt digitization and new technologies across the shop floor. AFSC end users are consistently finding it difficult to obtainInterim-Authority-To-Test (IATT)’s and Authority-to-Operate (ATO) accreditations for new technologies to demonstrate thatthey adhere to the necessary high cybersecurity standards to operate on Air Force networks. Corsha has been very successfulto date in obtaining IATT’s and ATO’s for this platform and AF Customers have requested Corsha to work closely with the AFSCAODR and security ISSMs to help develop a blueprint for vendors as well as a reference architecture for secure connectivity andoperation in OT settings.