...
Today's Meeting Participants:
Invited Members List:
Rui Alves (Unlicensed)Markus (Unlicensed)
@Alice Vasilescu (DG-DIGIT - eID)
Daniele Crespi
[holidays] Markus (Unlicensed)
Invited Members List:
Daniele Crespi
@Robert Scharinger
@Tomé Vardasca
MEETING NOTES
...
| Level (Requirements) | Mode | Pilot | Action by Pat | Attributes | |
|---|---|---|---|---|---|
| Level 0 | Manual input in the portal. | epSOS | Minimum D3.6.2 | ||
Level 1 (disconnected mode possible) | LARMS | ?? (eSENS eHeath OpenNCP 2.3.0 – floting componento any portal | Pat gives card, does not type; | Surname given name gender unique (health) identifier; Varies with each country* | RISK: not 100% sure individual ID |
Level 3 (connection to internet and to Country A is needed/national PKIs via centraized service) | LAMb+Pat action | Patient confirms (mobile key; Pins of the card) | Allows “signed consent” Authetication is possible | ||
Level 4 (Does not use local functions of the card, uses online “information”; access to PEP) | DCA Distributed CrossB Authentication | Stork II | Patient confirms (mobile key; Pins of the card) in a PC at the PoCare) | (atributes in the “assertion are the key issue”) | Confirms with National PKI everything; Confirmes eIDAS. |
Level 5 | .Advanced Mobile APP solution (AMAPP) | Use their mobile phone for full autentication without card need |
2. Meeting Minutes:
...
:
...
- Overview from eID Sub-Group Meeting (e-SENS) - Aug 2015 - Berlin.
- Waiting for availability from this new components, looking for source of Portal.
...
- New developments: eID L2 is ready for all PNs.
- We're working on satisfying the legal aspects
- Mail sent with needed info.
- Planning to deliver the components of beggining of next week.
Markus (Unlicensed): Legal aspects?
Soeren Bittins: Real cards not have been particulary used for testing. We need to comply with restrictions of use... L2 is making use of those signatures (card bearers) - but for now we are in a pilot environment.
legal questions:
- real card certificate material
- patient must be in accordance to document (treatment and retrieve of data should not be coherced)
Rui Alves (Unlicensed): So we can only begin to predict the effort needed to integrate these new components next week, right?
Alexandre Santos: Yes.
Rui Alves (Unlicensed): Is there any pending question?
Alexandre Santos: We have Tomé Vardasca in PT as eID expert and it is needed to share this info (from Soeren) to partners to deal with partners.
Soeren Bittins: Those components to be automatically deployed need to be signed (Downside of deployment new components)
As soon as we have CS supporting...
Patient Information Notification (PIN)
jar includes templates for each country
- in the future, integrate with central services for pulling information
Soeren Bittins: We can now start to aprroach STORK 2.0 eHealth Integration (HP authN in their own countries)
Germany is not running STORK 2.0 - Fraunhofer will not have access to a proper testing position
I antecipate 2 weeks for having components ready for it
Request for IT and PT - accept request from GR -
- Rui Alves (Unlicensed) check this with PT Team
- Rui Alves (Unlicensed) check this with PT Team
...
@Alice: eIDAS about Ger - pilot under e-SENS between Germany and Netherlands going to eIDAS - suggests Soeren to search for this.
Soeren Bittins: Marcello alerted about file structure of CS - we would need to change the structure of CS - without SMP/SML - not possible to have 2 files for same country. Question for Ortwin about Luxembourg - French
Markus (Unlicensed) - testing strategy, continuous integration, what is the plan?
Massimiliano Masi: There will be test assertions converted into tests in gazelle. In e-SENS the test-cases are defined.
Markus (Unlicensed): any documentation? What components need to be modified?
Soeren Bittins: There is a long document in 5.2 with some kind of this information. Justification of Components, business... sequence diagrams.
Markus (Unlicensed): Does it take into consideration eHealth requirements?
Soeren Bittins: 100% following eHealth requirements. We need to ask to make the components more generalized to other domains (within e-SENS), but primary focus is eHealth.
Markus (Unlicensed): Link to Minutes?
Soeren Bittins: would like the OpenNCP to be considered stakeholders in e-SENS, to facilitate information exchange.
Massimiliano Masi: Relation from SMP and eID
LAM need configs that cannot be hardcoded in the jar
Joao Cunha: Will we be able to use eID L2 without SMP/SML?
Massimiliano Masi: It is not mandatory, but helpful.
...
Unforeseen delay with components. Not related to the L2 components itself.
DSig Module used in STORK 2. Breaking the auto-deployment process.
Use in the meantime the Fraunhofer DSig. Not sure about CH or Turkey but should work on all countries.
We are sorry for the delay, Hopefully this week we will have new developments (tomorrow maybe).
Soeren Bittins: We will provide local configuration just for deployment.
TRC issuer - is now a L3 problem and not L2 - distributed cross-border authentication.
Soeren Bittins: Time for testing.
Alexandre Santos: change TRC-STS to "talk" to LAM.
Soeren Bittins: There might be a change in NCP-A. L3 there will be changes in both NCP-A and B.
TO DO's:
- Meeting in Brussels - eID DSI - 15th Oct 2015. STORK 2.0 to be included in e-SENS. Important decisions are to be made. OpenNCP Team should follow this, and also they are also a Stakeholder, so perhaps some questions / ideas are needed.
- Being organized by EC eID DSI (@Alice is one of the members organizing).
...
- Rui Alves (Unlicensed): Internally check if wether the OpenNCP has a position about this and are willing to participate or simply the PN's presence.
- OpenNCP Team will receive new components in the next week and analyze the possible integration to discuss in the next meeting.
3. AOB
NEXT MEETING -
- Rui Alves (Unlicensed): Follow-Up + Schedule Next Meeting.
- Rui Alves (Unlicensed): Include Natasha Carl and Alice (DIGIT) in the mailing list.
- Rui Alves (Unlicensed) check GR request with PT Team (include Tomé for translations needed - Soeren's e-mail)
...
- )
...
- Rui Alves (Unlicensed): SCHEDULE NEXT MEETING: 7th Oct 13:00 CEST.
- To be handled by Alexandre Santos.
- Rui Alves (Unlicensed): SCHEDULE NEXT MEETING: 7th Oct 13:00 CEST.
...