OpenNCP Community: Weekly meeting

27th February

Estimated - 12:30 to 14:00 CET

Performed - 12:30 to 14:30 CET

AGENDA

a) BB Specification Progress;

b) Non-Repudiation BB development progress;

c) Non-Repudiation BB integration with OpenNCP;

d) Non-Repudiation BB test plans.

- Wiki+ WorkBench + GoToMeeting

PARTICIPANTS

Today's Meeting Participants:

Licínio kustra Mano <licinio.mano@spms.min-saude.pt>,

Rui Alves <rui.alves@spms.min-saude.pt>,

Rui Pinto <rui.pinto@spms.min-saude.pt>,

Massimiliano Masi <massimiliano.masi@tiani-spirit.com>,

Heiko Zimmermann <Heiko.Zimmermann@agence-esante.lu>,

Stéphane Spahni <stephane.spahni@hcuge.ch>,

Konstantin Hypponen <konstantin.hypponen@kela.fi>,

Markus Kalliola <markus.kalliola@ec.europa.eu>,

Yacoubou Waolany <yacoubou.waolany@ext.ec.europa.eu>,

Jerome Subiger <jerome.subiger@ext.ec.europa.eu>,

Ioannis Petrakis <petrakis@ics.forth.gr>, 

Marko Peric <marko.peric@hzzo.hr>,

(not able to attend) Kostas Karkaletsis <k.karkaletsis@gnomon.com.gr>,

(not able to attend) Jens Ferring <jens.ferring@list.lu>,

Invited Members List:

Isabel Cruz <isabel.cruz@iuz.pt>,

Ljubi Igor <Igor.Ljubi@hzzo.hr>,

Alen Vrecko <Alen.Vrecko@nijz.si>,

Alexander Berler <a.berler@gnomon.com.gr>,

Marcello Melgara <Marcello.Melgara@cnt.lispa.it>,

Gwenaelle Quivy <Gwenaelle.QUIVY@ext.ec.europa.eu>

Marcelo Fonseca <marcelo.fonseca@iuz.pt>,

Michele Foucard <Michele.FOUCART@ext.ec.europa.eu>,

Gottfried Heider <gottfried.heider@ehealthcon.at>,

Ivo Pinheiro <ivo.pinheiro@iuz.pt>, 

Juergen Wehnert <juergen.wehnert@gematik.de>,

Dimitrios G. Katehakis <katehaki@ics.forth.gr>,

Olaf Rode <olaf.rode@fokus.fraunhofer.de>,

Thomas Fleischmann <thomas.fleischmann@bmg.gv.at>,

Robert Scharinger' <Robert.Scharinger@bmg.gv.at>,

Agius Muscat Hugo at MEH-IMU-Health <hugo.agius-muscat@gov.mt>,

Kenn Schultz Nielsen <KSN@ssi.dk>,

Sören Bittins <soeren.bittins@fokus.fraunhofer.de>,

Gareth Woodham <Gareth.Woodham@ehalsomyndigheten.se>,

Fredrik Linden <fredriklinden1@gmail.com>,

Karima Bourquard <karima.bourquard@ihe-europe.net>,

Samuel Danhardt <Samuel.Danhardt@agence-esante.lu>,

Giorgio Cangioli <giorgio.cangioli@gmail.com>,

Jussi Lemmetty <jussi.lemmetty@kela.fi>

Aarne Roosi <Aarne.Roosi@affecto.com>,

Arnaud Gaudinat <arnaud.gaudinat@hesge.ch>,

Belani Hrvoje <Hrvoje.Belani@hzzo.hr>,

Gergely Heja <heja.gergely@eski.hu>,

Oskari Kettinen <oskari.kettinen@kela.fi>,

Maarten Festen <maarten.festen@ihe-europe.net>

Mate Beštek <mate.bestek@gmail.com>,

Norbert Repas <norbert.repas@elga.gv.at>,

Patrick Ruch <Patrick.Ruch@unige.ch>,

Tomaz Cebular <Tomaz.Cebular@ivz-rs.si>,

Steen Manniche <steen@manniche.net>,

Catherine Chronaki<chronaki@gmail.com>,

Matic Meglic<matic.meglic@nijz.si>,

Mate Beštek <matebestekpro@gmail.com>,

Merik Seven <seven@nictiz.nl>,

João Francisco Marques <joaof.marques@spms.min-saude.pt>,

Gwenaelle Quivy <Gwenaelle.QUIVY@ext.ec.europa.eu>,

Philippe Loopuyt <Philippe.Loopuyt@ec.europa.eu>,

EXPAND Wp5 <expand-wp5@spms.min-saude.pt>,

Guido Bosch <guido.bosch@list.lu>,

Stathis Andronikos <stathis.andronikos@gmail.com>,

MEETING NOTES

a) BB specification progress

• OpenNCP specification Page - https://openncp.atlassian.net/wiki/x/i4DyAg
  • We are still trying to understand the evidences that we may provide and which are the disputes that we will work
• ETSI: Massimiliano Masi forwarded the use cases provided by OpenNCP
  • An answer may be coming on the 8th of March;
  • eSENS: don't define the kind of evidence, but the TYPE of evidence. 
  • Communication on eHealth is synchronous communication... Why are we trying to use ETSI REM:
    • Because it is parte of the CEF... but there are also some technical justifications for this...
      • In eSENS....
  • When we use ETSI REM we are using inline trusted third parties;
    • By law you're not allowed to have trusted third party...
    • Is and authority services in all the states...

New IHE ATNA Profile

> Moving from  RFC-3881 > DICOM ex supplement 95 (version 10 of the IHE ITI)

What we need to do?

b) BB development progress

Can we???

• Extend the ParticipantObjectIdentification, to see if we can add info about the content?

• 1) Massimiliano Masi: Talk to ETSI REM to find if they have a solution for eHealth Use cases (PS and eP);
• 2) Licinio Kustra Mano: EXPAND L&O: Decide what information MUST be stored on the audit logs (which are the disputes possible on eHealth).
• 3) Licinio Kustra Mano: EXPAND L&O: Check the legal implications of the proposed audit storage. (provided by the eSENS basecamp)
  
• 4) OpenNCP: Decide what schema should be used for transferring/storing the non-repudiation evidences. (e.g. ETSI REM and extend ATNA)
  • Study the standards;
  • Study how to store signatures;
  • Study the non-repudiation framework (source code) provided and check how to integrate it on the OpenNCP (based on facades) without having for now the legal basis that may come further.
    
• 5) OpenNCP: Decide what must be signed in the exchange and how to implement signatures.

• 6) OpenNCP: Prepare the change request and process (Design how to implement!)

• 7) EXPAND Spec: Process the change request in the specification maintenance shop

• 8) OpenNCP: IMPLEMENT
• 9) OpenNCP: Test at IHE 2015 CAT (20 April)

c) Non-Repudiation BB integration with OpenNCP

• ...

d) Non-Repudiation BB test plans

• Inputs/Related info from the Testing Main Shop, from last meeting:
  
  
  • "The idea is to test the new feature (specified in eSens) on non-repudiation based on ATNA profile. The actions are the following:
    1. Use the CP (joint file) to describe the feature that will be added to the openNCP specifications (Massi)
    2. Send ASAP the schematron, test assertions and any other test information in order to incorporate them in Gazelle (Massi/Eric)
    3. Check within the open NCP Community if some of them are able to implement this new feature for the projection in Luxembourg.
    (...) Note that other functional questions related to the non repudiation are not directly in the scope (for example storage of medical documents)."

ACTIONS NEEDED

Today's meeting actions:

• Massimiliano Masi: Talk to ESTI REM to find if they have a solution for eHealth Use cases (PS and eP);
• Licínio kustra Mano: EXPAND L&O: Decide what information MUST be stored on the audit logs (which are the disputes possible on eHealth).
• Licínio kustra Mano: EXPAND L&O: Check the legal implications of the proposed audit storage. (provided by the eSENS basecamp)
  
  

Previously identified actions - keep track:

• Licínio kustra Mano Write the story were the non repudiation is useful in the PS  use case
• Konstantin Hyppönen Write the story were the non repudiation is useful in the eP  use case
• Massimiliano Masi uses the stories to brainstorm with the BB architects
• Rui Alves (Unlicensed):include Test Maintenance Shop minutes and action from @Karima email.
• Rui Alves (Unlicensed) schedules the next meeting 27th 13:30 CET, provides today minutes, and assures actions are follow up;
• Rui Alves (Unlicensed) updates the Non Repudiation OpenNCP reference documentation, with the major links provided by Massi, and activates the "watchers" for this page, with the participants on today meeting;
• Rui Alves (Unlicensed) Point markus.kalliola to the D3.4.2_epSOS_Common_Components_Specification document