www.oasis-open.org Getting to Grips with e-ID Interoperability with a Perspective on the STORK LSP Roger Dean Executive Director EEMA What are eema’s Credentials? Founded 1987 European wide non profit association Registered in Brussels 1,500 member representatives Membership base of multinational end user organisations including Volvo, Siemens AG, AIB, European Commission, Hoffmann le Roche, Total, Visa, K.U.Leuven. Vender members include Microsoft, HP, Identrus, Verizon, CoreStreet, Grabowsky BV, Orange, Aware, KPMG, BEA. eema Organisation Headquarters Staff • Day to day management of the Association • Administration • Liaison with Government, Industry and other Associations • Member communications • Organise Teleconferences Ad-Hoc Focus Workgroups • Temporary teams focussing on a specific topic to produce a position paper or run an event EEMA Online Forums and Events Elected Board of Directors • • • • Strategic planning Program planning Corporate governance Subsection coordination Project Teams • Temporary teams working on a specific project – occasionally teaming with other associations National Interest Groups • Organise mini events within specific European regions 2008 eema Publications Position Papers e-mail Archiving White Paper Spam & e-mail Abuse Management Towards Understanding Identity Role Based Access Control – A User Guide Password Synchronisation Twice Monthly eema Online Member Section of the web Members submit “independent” papers for publication Events Reports from eema events Conference proceedings and presentations Online forum Members discussion forum on current topics eema current Projects STORK - (Secure idenTity acrOss boRders linKed). To resolve the interoperability challenges of cross border Identity Cards. eema is involved in the communication and dissemination and exploitation of the initiative. Sponsor: EU (13 Governments Across Europe) Partners: e-Forum (Brussels) and GOV2U (Greece) Duration: 3 Years ICECom - Intelligent Content Evaluation for Communication Retention of electronic communications for legislative purposes. eema’s Role is to create awareness through our usual channels Sponsor: DTI Partners: Pera, Loughborough University, Essential Computing, intY Ltd Duration: 2 Years LEONARDO DA VINCI Community Vocational Training Action Programme. It is part of the European Commission's new Lifelong Learning Programme for SME’s and is designed to build a skilled workforce through European partnerships. eema’s role is part of the European wide e-Training and e-mentoring sub-project. Sponsor: EU Partners: Hungary, Italy, Poland, Romania, Slovinia Duration: 2 Years STORK – our vision To simplify administrative formalities by providing secure online access to public services across EU borders. Stork is an EU co-funded project INFSO-ICT-PSP-224993 eGovernment objectives (ICT-PSP call 2007) Type A Type B eProcurement eID interoperabilit y eHealth Thematic Networks Electronic documents eParticipation Accessible & inclusive eGovernment Impact & user satisfaction Combined delivery of social services Brokering pan-EU eGov solutions & services online Stork is an EU co-funded project INFSO-ICT-PSP-224993 STORK – our mission To develop and test common specifications for secure and mutual recognition of national electronic identity (eID) between participating countries. Stork is an EU co-funded project INFSO-ICT-PSP-224993 STORK – the member states Austria Belgium Estonia France Germany Italy Luxembourg Netherlands Portugal Slovenia Spain Sweden United Kingdom Plus - Iceland Stork is an EU co-funded project INFSO-ICT-PSP-224993 STORK - at a glance Project coordinator ATOS Origin Sociedad Anonima Española Duration: 3 years from the start of the project (1st June 2008) Total cost: €20M Programme: ICT Policy Support Programme under the Competitiveness and Innovation Framework Programme (CIP) Stork is an EU co-funded project INFSO-ICT-PSP-224993 STORK – the team 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. Atos Origin sae (Spain) Capgemini Nederland B.V. (The Netherlands) Bundeskanzleramt Österreich (Austria) Federale Overheidsdienst Informatie en Communicatie Technologie (Belgium) Bundesamt fuer Sicherheit in der Informationstechnik (Germany) AS Sertifitseerimiskeskus (Estonia) Ministerio de Administraciones Publicas (Spain) Direction Générale de la Modernisation de l'Etat (France) Government To You (Greece) Politecnico di Torino (Italy) Ministry of Finance (Iceland) Service eLuxembourg (Luxembourg) Ministry of the Interior and Kingdom Relations (The Netherlands) Agência para a Modernização Administrativa, I.P. (Portugal) 15. 16. Swedish Administrative Development Agency (Sweden) Ministry of Public Administration of the Republic of Slovenia (Slovenia) 17. Identity and Passport Service (UK) 18. Universitat Jaume I (Spain) 19. Agència Catalana de Certificació (Spain) 20. Centro Nazionale per l'Informatica nella Pubblica Amministrazione (Italy) 21. Regione Lombardia (Italy) 22. Instituto Superior Tecnico (Portugal) 23. MULTICERT - Serviços de Certificação Electrónica, S.A. (Portugal) 24. European Electronic Messaging Association (UK) 25. European Forum for e-Public Services (Brussels) 26. Þjóðskrá (Iceland) 27. Technische Universität Graz (Austria) 28. Kruispuntbank van de Sociale Zekerheid (Belgium) 29. T-Systems Enterprise Services GmbH (Germany) Stork is an EU co-funded project INFSO-ICT-PSP-224993 STORK – objectives 1. Define common rules and specifications to assist mutual recognition of eIDs across national borders; 2. Test in real life environments, secure and easy-to-use eID solutions for citizens and businesses; 3. Interact with other EU initiatives to maximize the usefulness of eID services. Stork is an EU co-funded project INFSO-ICT-PSP-224993 STORK – work packages Description WP1 LEADER Project Management Atos DEFINITION WP2 eID inventory, trust and application groups NL MOI WP3 eID and upcoming technologies AT TUG ARCHITECTURE WP4 eID process flows WP5 eID and common specifications UK IPS BE FEDICT ES MAP IMPLEMENTATION WP6 Pilots (specification – definition – implementation - evaluation) WP7 Communication and Sustainability Gov2U Stork is an EU co-funded project INFSO-ICT-PSP-224993 Pilots - using open standards common service architecture allowing citizens to use their national eIDs to access e- Government portals across borders, platform for safer online communication using eIDs for children, service facilitating students’ mobility across Europe, use of eID for cross-border electronic delivery for citizens and businesses, and for testing the electronic process of address change for EU citizens that move to other Member States. Stork is an EU co-funded project INFSO-ICT-PSP-224993 EXAMPLES on a EU eIDM framework A citizen located in country A with an eID… will be able to get the pension rights from country D (where h/she worked some years ago) online will be able to make tax declarations in country B where h/she is working (commuting)… will be able to get automatic and paperless reimbursement of health expenses incurred during holidays in country C… Stork is an EU co-funded project INFSO-ICT-PSP-224993 EXAMPLES on a EU eIDM framework A business located in country A with an eID… will be able to participate in public tenders published in country B… eProcurement will be able to get the repayment and refund of VAT expenditures easier in country D… “one stop shop” will be able to make safer electronic transactions with clients and suppliers in country C… eCommerce Stork is an EU co-funded project INFSO-ICT-PSP-224993 STORK - security Security and privacy are serious concerns within the project. All efforts will be made to ensure that mutual recognition of electronic identity makes identity theft extremely difficult. As authentication levels for a given application may differ across Member States, the project will develop “circles of trust” at European scale. Stork is an EU co-funded project INFSO-ICT-PSP-224993 STORK – impact The project will result in the smooth cross- border operation of several key public services. The solution will: be scalable to all EU Member States. be technology-transparent, robust, with measurable benefits, be implemented in such a way that it is sustainable beyond the life of the pilot. save time and money with safer transactions, less fraud, better control over personal data and simplified procedures. Stork is an EU co-funded project INFSO-ICT-PSP-224993 STORK Consortium Layer – how to get involved Development EU Wide Specifications “Building Blocks” Spec Block Testing Policy Information Member State Reference Group Industry Group Service Community of Interest Stork is an EU co-funded project INFSO-ICT-PSP-224993 STORK – how to get involved Member State Reference Group • EC and consortium members; • Representatives of all EU Member States not already in the project; • 3 focus group meeting over a 3 year period. Industry • This is an open forum to which we will invite all interested industrial and academic organizations to send representatives. • Minimum of 2 workshops over a 3 year period Community of Interest • All other stakeholders including non-EU countries will be invited to participate through our web-site www.eidstork.eu and to our workshops. • Throughout the project duration Stork is an EU co-funded project INFSO-ICT-PSP-224993 Forthcoming eema events 2008/9 8thOct 7-9 Oct 4th Nov 11th Nov 2nd Dec 2009 3rd Feb - STORK Workshop & 1st Industry Group meeting - ISSE – Information Security Solutions Europe Madrid Madrid - Benelux Regional Interest Group Federated Identity ING, Amsterdam - eema UK Regional Interest Group e-Mail Archiving – compliance & governance BCS, London - Benelux Regional Interest Group Legal & interoperability issues for e-Health Leuven, Belgium - Benelux Regional Interest Group Using RFID in Identity & Access Management Deloitte, Brussels 17/18 Mar - The European e-ID Interoperability Conference Brussels rd 23 Apr - Benelux Regional Interest Group Identity & Access Management Belgium STORK - www.eid-stork.eu Conclusions Questions? roger.dean@eema.org Stork is an EU co-funded project INFSO-ICT-PSP-224993