Cross border eservices STORK 2.0

Size: px

Start display at page:

Download "Cross border eservices STORK 2.0"

Quentin Wood
5 years ago
Views:

1 Cross border eservices STORK 2.0 Frank LEYMAN EEMA / BCS Thought Leadership Seminar December 2nd, 2014, London Stork 2.0 is an EU co funded project INFSO ICT PSP

STORK Phase 1 Key facts Project ran from 2008 2011 National eid federation between 18 MS 100+ national eid token types 6 pilots in production systems Resulted in Open

2 STORK Phase 1 Key facts Project ran from National eid federation between 18 MS 100+ national eid token types 6 pilots in production systems Resulted in Open specifications (SAML 2 + QAA) Open source reference implementations Lessons learned as basis for EU legislation (eidas) Stork 2.0 is an EU co funded project INFSO ICT PSP

3 Any need of cross border citizen services? Source: EC Study on Analysis of the Needs for Cross Border Services (2013) Stork 2.0 is an EU co funded project INFSO ICT PSP

4 Any need of cross border business services? Source: EC Study on Analysis of the Needs for Cross Border Services (2013) Stork 2.0 is an EU co funded project INFSO ICT PSP

5 Architecture Overview PEPS PEPS Cross border eid Federation Decouples MS specific eid through a common protocol (SAML 2.0 profile) V IDP PEPS V IDP Stork 2.0 is an EU co funded project INFSO ICT PSP

6 STORK Phase 1 Pilot Applications Six pilot applications on cross border services Cross border Authentication for electronic services SaferChat Student Mobility edelivery Change of Address ECAS Integration Stork 2.0 is an EU co funded project INFSO ICT PSP

7 European Commission Authentication Service Authentication gateway providing SSO to some 700+ EC applications Linked to STORK via an EC PEPS Stork 2.0 is an EU co funded project INFSO ICT PSP

8 Stork 2.0 is an EU co funded project INFSO ICT PSP

9 What hasn t been achieved so far Representation and mandates; attribute provision STORK 1 limited to natural persons on their own behalf Limited to the basic person attributes (name, DoB, ) High attack potentials or access to sensitive data Security addressed, but STORK 1 pilots no valuable targets Private sector services and service providers STORK 1 was egov services. Not by design, but in fact Liability and recognition STORK 1 had no provisions, if something goes wrong Standardization and business models STORK 1 did specifications, but no standards Stork 2.0 is an EU co funded project INFSO ICT PSP

10 is addressed by Representation and mandates; attribute provision Core of STORK 2.0 common specifications and all pilots Representation of a legal person; mandate of another High attack potentials or access to sensitive data STORK 2.0 ehealth and Internet banking pilot Private sector service providers Company services and Internet banking pilot Liability and recognition eidas Regulation! Standardization and business models EC ISA, CEF and dedicated WP on eid service offerings Stork 2.0 is an EU co funded project INFSO ICT PSP

11 New function: Attribute provision Legal person identification Authentication => Authentication on behalf Derives mandates from authoritative source E.g. query Business Registers for legal representatives Assigns attribute quality assurance (AQAA) Domain specific attributes e.g. in ehealth to identify health care providers e.g. in eacademia isstudent, hasdegree, Stork 2.0 is an EU co funded project INFSO ICT PSP

12 New Function: esignatures STORK in touch with most SSCDs widely deployed in Europe. Technical integration and governance in the country issuing ( knowing ) the tokens Implementation allows for common solutions or keeping proven national ones Stork 2.0 is an EU co funded project INFSO ICT PSP

Alternative: Signature Federation Use STORK to authenticate at a national signature service (e.g. in SE) Gives homogeneous situation of national signature formats Stork 2.

13 Alternative: Signature Federation Use STORK to authenticate at a national signature service (e.g. in SE) Gives homogeneous situation of national signature formats Stork 2.0 is an EU co funded project INFSO ICT PSP

14 The STORK 2.0 Pilots Stork 2.0 is an EU co funded project INFSO ICT PSP

15 Join the single European electronic identification and authentication area QAA level for authentication AQAA level for attributes Security Self Assurance Agreements MS PEPS Service Provider Joinup for software

16 PREPARATION OF THE GO TO MARKET eidas legal framework Collaboration agreement with 28MS Building Block DSI s: Digital Service Infrastructure Definition of the 4 P s Several bilateral cross border activities ongoing 2 Industry group meetings (London & Marseille) 1 st EU Industry meeting: "eid: a key to business growth and innovation Brussels 19/11/2014 Stork 2.0 is an EU co funded project INFSO ICT PSP

17 Visit STORK 2.0 website stork2.eu! Subscribe to STORK 2.0 Newsletter! HOW TO GET INVOLVED Participate & like Stork eid Facebook page! Follow us on Connect to Stork 2.0 EID LinkedIn page! Register in STORK 2.0 online groups! Contact us at stork2.eu! Wikipedia at Stork 2.0 is an EU co funded project INFSO ICT PSP

STORK PRESENTATION 07/04/2009. Frank LEYMAN. Manager International Relations. Stork is an EU co-funded project INFSO-ICT-PSP

STORK PRESENTATION 07/04/2009. Frank LEYMAN. Manager International Relations. Stork is an EU co-funded project INFSO-ICT-PSP STORK PRESENTATION Frank LEYMAN Manager International Relations 07/04/2009 Stork is an EU co-funded project INFSO-ICT-PSP-224993 egovernment objectives (ICT-PSP call 2007) STORK To simplify administrative