20160615 - e-SENS eP/PS, Towards Piloting Stage - Meeting minutes: Wednesday, June 15th 2016

Date

15 Jun 2016 12:00 CEST - 13:00 CEST

Duration: 30min

Agenda

1) Status Point of each MS

2) AOB

Attendees

• João Gonçalves (PT)
• João Marques (PT)
• François Wisniewski (LU)
• Athanasios Siachoudis (GR)
• George Pangalos (GR)

Invited Members

• João Gonçalves (PT)
• Licinio Kustra Mano (PT, Domain Pilot Architect)
• João Marques (PT)
• Raquel Vilas (PT)
• Celia Varela (ES)
• Juan Pablo Martinez (ES)
• Maria Jesús Macías (ES)
• Marcello Melgara (IT)
• Luca Pagliara (IT)
• Pierluigi Miglioli (IT)
• Robert Scharinger (AT)
• Massimiliano Massi (AT)
• François Wisniewski (LU)

• Younes Djaghloul (LU)

• Dimitrios Katehakis (e-SENS WP5.2 Contact Person)
• Ioannis Petrakis (e-SENS WP5.2 Contact Person - assistant)

• George Pangalos (GR)

• Zoi Kolitsi (GR)

• Christina Papakonstantinou (GR - New Pilot Contact Point for these meetings)

• Athanasios Siachoudis (GR)
  

Goals

• Overview on the progress of each MS towards the Piloting Stage. Special focus on the preparation for Lisbon's 2016 eHealth Summer Week demonstrations, namely 1) connect and exchange information with Portugal and 2) provide answers to the following set of questions:
  1. Which OpenNCP version are you running?
  2. What is your status regarding BB adoption?
  3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
  4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?
  5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?
  6. Have you performed NCP-2-NCP testing recently?
  7. Which services does your country provide (eP/PS A and B)?
  8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
• Discuss technical/non-technical issues identified by each MS
  
  

Related Documents

• e-SENS_WP5_2_PilotingRoadmap_V2.ppt
• eSENS_MS_ProgressReport_template_V2.xlsx
• 20150609 eP-PS Testing_Strategy V1.pptx

Discussion items

1) Status Point of each MS:

LEGEND:

• CONNECTIVITY
  • Y: Yes; 
  • W: Working on it. 
  • ?: We can assume yes due to other PN statement, but still missing PN statement
• SERVICES
  • YES: as planned;
  • maybe: if things work alright, but not part of the original plan.

Answers to questions listed in the Goals + description of current status and concerns:

PT:

1. Which OpenNCP version are you running?
   1. 2.4.0 - RC1 (except Portal). Currently in the process of upgrading to 2.4.1.
2. What is your status regarding BB adoption?
   1. Non-rep, eID level 1, SMP/SML upload
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
   1. Yes
4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?
   1. AT
5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?
   1. Yes. Yes. The notification about the new Portuguese TSL-file was circulated amongst the last OpenNCP Bi-weekly meeting minutes.
6. Have you performed NCP-2-NCP testing recently?
   1. Yes, with AT.
7. Which services does your country provide (eP/PS A and B)?
   1. PS-A, PS-B
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
   1. At least 2. Clinically meaningful for 1 of them, the other(s) needs to be checked.

Status / Concerns: Almost finished updating the customized portal, synchronizing it with the latest OpenNCP Portal. Expect to have PPT completely upgraded by the end of the week. Still waiting for IT, GR and LU to reestablish VPN and NCP-2-NCP connection. We are working with physicians in order to define guidelines that will establish the set of meaningful clinical data that should be provided by the Patient Summaries from other countries. The guidelines are not ready yet, they should be delivered to the MS in the meantime.

IT:

1. Which OpenNCP version are you running?
   1. OpenNCP V2.4.0, released before EXPAND-a-Thon, planning to install V2.4.1, but before we have to fix many local issues.
2. What is your status regarding BB adoption?
   
   1. Non-rep, SMP/SML upload, eID level 1 (included in Lombardy Portal) but we want to extend to other levels (but not yet implemented).
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
   1. YES
4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?

   1. In the past we were connected to: PT, LU, MT, GR, CH. We have new certificates to be installed.

5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?

   1. YES updated, not uploaded, yet. Luca was able to download the key today, in the past was not possible. We should now be in a position to use TSL-sync/editor with the new EC Central Services. In the past we could work with the TSL-file from MT and GR, but we had issues with the other files. Now: we're focusing on generating the new configuration file and synchronizing.

6. Have you performed NCP-2-NCP testing recently?
   1. NO
7. Which services does your country provide (eP/PS A and B)?
   1. PS/A, PS/B, eP/A (currently not available for pharma-db issues). Let's concentrate on PS for the moment.
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
   1. Real data, but needs to be revised. We have 1 PS that is 100% real (from Marcello). The others we'll try to make them as reasonable as possible. We still have the issue of the coded data for medicinal, still not operational. Our PS will be fine.

For Lisbon, we're not sure if we could to fetch IT PS with eID level 3. We can try with Marcello's card.

Status / Concerns: Italy didn't participate in the meeting. After the meeting, João received an e-mail confirming that Italy has successfully uploaded their TSL-file to the Central Services.

LU:

1. Which OpenNCP version are you running?

   1. Planning to install V2.4.1

2. What is your status regarding BB adoption?
   1. Non-repudiation
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)

   1. No

4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?

   1. PT, CH. We may need to install new certificates retrieved from ICA. What happens due to the missing adoption of the new central services ?

5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?

   1. No not yet updated, not uploaded, yet

6. Have you performed NCP-2-NCP testing recently?
   1. NO
7. Which services does your country provide (eP/PS A and B)?
   1. PS/A, PS/B
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
   1. Dummy test data

Status / Concerns: We had a discussion on what we can do. We'll participate as MS-A. We cannot participate for eID level 3 (Should we participate in the demo?). Now we have OpenNCP 2.4.0 (João will confirm if we should update). We need to reinstall certificates. François will not be present in the next 2 weeks, Younes will be the contact point.

AT:

1. Which OpenNCP version are you running?
   1. 2.4.0
2. What is your status regarding BB adoption?
   1. SMP/SML upload, Non-rep, eID level 3. Comment from Massi: Non-rep implementation has a bug. The message received by OpenNCP and passed to the REM evidence emitter is changing. Massi hopes to check what to do, so a new version of the util package is expected: UT-19 - Getting issue details... STATUS
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
   1. YES
4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?
   1. PT. Will begin testing with IT in the next days.
5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?
   1. Certificates were created before EXPANDathon. Already uploaded.
6. Have you performed NCP-2-NCP testing recently?
   1. PT. Will begin testing with IT in the next days.
7. Which services does your country provide (eP/PS A and B)?
   1. PS/eP A and B. For Lisbon we should concentrate on PS.
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
   1. 3 PS. Meaningful for the last epSOS projectathon (2012), but not valid anymore after changes made by EXPAND, so it's dummy.

Feels confident about demonstration of PS workflow in Lisbon with eID level 3.

Status / Concerns: Austria didn't participate in the meeting. João later received confirmation from Austria that VPN and NCP-2-NCP connection to Italy has been established.

ES:

1. Which OpenNCP version are you running?
2. What is your status regarding BB adoption?
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?
5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?
6. Have you performed NCP-2-NCP testing recently?
7. Which services does your country provide (eP/PS A and B)?
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?

Status / Concerns: we didn't have Spain representatives in the meeting. Spain will not participate in this first piloting moment (June).

GR:

1. Which OpenNCP version are you running?
   1. Latest version of OpenNCP v2.4.1
2. What is your status regarding BB adoption?
   1. Non-repudiation (included in the latest OpenNCP release)
      
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
   1. No Card based National Infrastructure, however we are prepared to pilot using the HARICA eID framework, as  a minimum.  HARICA is a Trusted Services Provider and can issue Qualified Certificates and Qualified Certificates created at an SSCD according to the eIDAS regulation. Furthermore, the necessary infrastructure for a pilot already exists. I.e. our participating health professionals will be staff of academic clinical departments,  provided with the AcademicID, an SSCD that can create private keys and store certificates from HARICA. In the future, this scheme may be extended to include provisioning of qualified digital certificates at an SSCD for other health professionals that do not belong to the academic community. 
      We would therefore appreciate if the pilot planning discussion includes also a track on piloting (possibly with Austria?) outside the technology bound route.
   2. Alternative solution related to certificates and smartcard that will identify some ehealth staff of the academic world with this smartcards. We're trying to use this approach to identify health professionals. We're not using cards. In the piloting we're going to go for the formal eIDAS environment, we're going to pilot not with the group of countries using cards as identification methods but with Austria (which is also using eIDAS). We're fully prepared for that. Certificates will come from service provider HARICA. I wanted to be clear that in the piloting we'll have 2 subgroups (e-SENS smartcards and eIDAS procedures/reference implementations).
      
4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?
   1. PT, IT, but there are several countries that may have updated the certificates.
      
5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?
   1. Only GR certificates have been recently updated (no GR endpoints which are still the same).
      Upload to the EC-hosted central services is planned in the following days. We need to initiate connectivity to Central Services. We have a delay, only recently we got the access and we didn't have time to upload the certificates.
      
6. Have you performed NCP-2-NCP testing recently?
   1. Not recently, a month ago. Last month we're concentrating on updating the NCP to the latest version and fixing various issues.
      
7. Which services does your country provide (eP/PS A and B)?
   1. Services currently working are: eP-B, PS-B, PS-A (only for piloting).
      
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
   1. Data will be dummy. We cannot say now how many samples we have. We can prepare some patients but they'll be dummy. Only a couple of patients for testing eP.
      

Status / Concerns: In view of the pilot we need to know which connection (to which MS) will be activated to see if it works. How many samples will we need for Lisbon? Do you have any date for making the tests to prepare for the event? (João: maybe during the second half of this week and in the next week).

e-SENS Y4 Perspective

GR: Y4 FOCUS: Establish connectivity in PPT and test the NCP.  Implement what will be agreed in the eHN to be adopted at NCP tech layer;

• What is the benefit of piloting with "Real Patient Data"? Are we DEMANDED to reach 
• What is the value of reach "Technology Operation Readiness" level?
• Recommended approach to eID in Y4:
• • Brainstorm and consolidate technical solutions for eID, matching eIDAS requirements, and technology each PN is able to pilot;
  • Align and gather inputs from JAseHN eID task, regarding how to fulfil the need and requirements towards eID for Patient Identification.
  • Use April 19th Workshop: to be bring the right people together to think and plan eID for Patient Identification approach during e-SENS Y4

LU: Y4 FOCUS: 

• Understand which other BB from e-SENS may enhance the NCPeH and be experimented, to be used in CEF;

IT: Y4 FOCUS:  

• 1st: Will we have "Real Patient Data"? If yes, need to have a consolidated process for legal agreement (e.g. TLA is or not enough);
  • Who MS will go live with real patient data.
• 2nd: Keep NCPeH updated. Are there specific BB that allow to solve IT national challenges (e.g. eID for Physicians)? To facilitate the alignement with the future CEF DSI.

PT: Y4 FOCUS: 

• Finnish the SMP/SML integration (namely by adopting EC server);
• Complete integration of eID Level 2 and Level 3 (using Countries Accreditation Servers instead of the current Fraunhofer test server)
• Integrate, test and adopt eIDLevel 4 & 5.
• Have all the MS piloting exchanging PS and eP, data on Pre-Operation environment;

2) AOB & Next Meeting

• Joao Cunha: Prepare and disseminate today minutes, Schedule e-SENS Piloting MS Meeting by 22 Jun 2016 12:00 CET
• Joao Cunha: Progress and Issues report to e-SENS WP5.2.1 Management