20151105 - Meeting minutes, Thursday, November 5th, 2015 - OpenNCP integration with eID

20151105 - Meeting minutes, Thursday, November 5th, 2015 - OpenNCP integration with eID

OpenNCP integration with eID

Nov 5, 2015 

 

Estimated - 13:00 to 14:00 CET

Performed - 13:00 to 14:00 CET

AGENDA

a) Status of eID

b) Next Steps

 

 

LOCATION

- Wiki+ WorkBench + AdobeConnect

  • Development Board:  https://openncp.atlassian.net/secure/RapidBoard.jspa?rapidView=1

  • AdobeConnect: 

    •  http://ec-wacs.adobeconnect.com/openncp/

      Room Passcode:  ask @Rui Alves (Unlicensed) or @markus.kalliola

      ----------------

      If you have never attended an Adobe Connect meeting before:

      Test your connection: http://ec-wacs.adobeconnect.com/common/help/en/support/meeting_test.htm

      Get a quick overview: http://www.adobe.com/products/adobeconnect.html

      Adobe, the Adobe logo, Acrobat and Adobe Connect are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States and/or other countries.
      ----------------

PARTICIPANTS

Today's Meeting Participants:

@Rui Alves (Unlicensed)

@Alexandre Santos

@Joao Cunha

@Markus (Unlicensed)

@TE

@S

@Alice Vasilescu (DG-DIGIT - eID)

@Massimiliano Masi

@Ortwin Donak

@Stéphane Spahni

@Marcello Melgara

@Robert Scharinger

 

Invited Members List:

@michele.foucart

@Ioannis Petrakis

 

@Licinio Kustra Mano

@Soeren Bittins

@François

Daniele Crespi

@Tomé Vardasca 

@Kostas Karkaletsis

 

MEETING NOTES

0. Overview



1. Relevant Documentation (What's gathered so far)

The eID approach: The different levels

 

Level (Requirements)

Mode

Pilot

Action by Pat

Attributes

 

Level 0

Manual input in the portal.

epSOS

Minimum D3.6.2

 

 

Level 1

(disconnected mode possible)

LARMS

?? (eSENS eHeath OpenNCP 2.3.0 – floting  componento any portal

Pat gives card, does not type; 

Surname given name gender unique (health) identifier; Varies with each country*

RISK: not 100% sure individual ID

Level 3

(connection to internet and to Country A is needed/national PKIs via centraized service)

LAMb+Pat action

 

Patient confirms (mobile key; Pins of the card)

 

Allows “signed consent”

Authetication is possible

Level 4

(Does not use local functions of the card, uses online “information”; access to PEP)

DCA  Distributed CrossB Authentication

Stork II

Patient confirms (mobile key; Pins of the card) in a PC at the PoCare)

(atributes in the “assertion are the key issue”)

Confirms with National PKI everything;

Confirmes eIDAS.

Level 5

.Advanced Mobile APP solution  (AMAPP)

 

Use their mobile phone for full autentication without card need