20160622 - e-SENS eP/PS, Towards Piloting Stage - Meeting minutes: Wednesday, June 22nd 2016

Date

22 Jun 2016 12:00 CEST - 13:00 CEST

Duration: 50min

Agenda

1) Status Point of each MS

2) Guidelines for Patient Summaries

3) AOB

Attendees

• João Gonçalves (PT)
• Licinio Kustra Mano (PT, Domain Pilot Architect)
• Athanasios Siachoudis (GR)
• Massimiliano Massi (AT) 
• Younes Djaghloul (LU)
• Ioannis Petrakis (e-SENS WP5.2 Contact Person - assistant)
  

Invited Members

• João Gonçalves (PT)
• João Marques (PT)
• Raquel Vilas (PT)
• Celia Varela (ES)
• Juan Pablo Martinez (ES)
• Maria Jesús Macías (ES)
• Marcello Melgara (IT)
• Luca Pagliara (IT)
• Pierluigi Miglioli (IT)
• Robert Scharinger (AT)

• François Wisniewski (LU)

• Dimitrios Katehakis (e-SENS WP5.2 Contact Person)

• George Pangalos (GR)

• Zoi Kolitsi (GR)

• Christina Papakonstantinou (GR - New Pilot Contact Point for these meetings)
  

Goals

• Overview on the progress of each MS towards the Piloting Stage. Special focus on the preparation for Lisbon's 2016 eHealth Summer Week demonstrations, namely 1) connect and exchange information with Portugal and 2) provide answers to the following set of questions:
  1. Which OpenNCP version are you running?
  2. What is your status regarding BB adoption?
  3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
  4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?
  5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?
  6. Have you performed NCP-2-NCP testing recently?
  7. Which services does your country provide (eP/PS A and B)?
  8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
• Discuss technical/non-technical issues identified by each MS
  
  

Related Documents

• e-SENS_WP5_2_PilotingRoadmap_V2.ppt
• eSENS_MS_ProgressReport_template_V2.xlsx
• 20150609 eP-PS Testing_Strategy V1.pptx

Discussion items

1) Status Point of each MS:

LEGEND:

• CONNECTIVITY
  • Y: Yes; 
  • W: Working on it. 
  • ?: We can assume yes due to other PN statement, but still missing PN statement
• SERVICES
  • YES: as planned;
  • maybe: if things work alright, but not part of the original plan.

Answers to questions listed in the Goals + description of current status and concerns:

PT (08/06/2016):

1. Which OpenNCP version are you running?
   1. 2.4.0 - RC1 (except Portal). Currently in the process of upgrading to 2.4.1.
2. What is your status regarding BB adoption?
   1. Non-rep, eID level 1, SMP/SML upload
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
   1. Yes
4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?
   1. AT
5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?
   1. Yes. Yes. The notification about the new Portuguese TSL-file was circulated amongst the last OpenNCP Bi-weekly meeting minutes.
6. Have you performed NCP-2-NCP testing recently?
   1. Yes, with AT.
7. Which services does your country provide (eP/PS A and B)?
   1. PS-A, PS-B
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
   1. At least 2. Clinically meaningful for 1 of them, the other(s) needs to be checked.

Status / Concerns (15/06/2016): Almost finished updating the customized portal, synchronizing it with the latest OpenNCP Portal. Expect to have PPT completely upgraded by the end of the week. Still waiting for IT, GR and LU to reestablish VPN and NCP-2-NCP connection. We are working with physicians in order to define guidelines that will establish the set of meaningful clinical data that should be provided by the Patient Summaries from other countries. The guidelines are not ready yet, they should be delivered to the MS in the meantime.

Status / Concerns (22/06/2016): Updated PPT to release 2.4.1 (including the customized Portal). Still missing connectivity with LU and GR. We shared today the PS guidelines that MS should follow in order to create a PS with the clinical information therein provided, in order to be displayed and clinically interpreted during the demo. It's important that your PS follows one of the two documents provided: not both at the same time. Also, it's very important that the gender and age (date of birth) provided in each PS sample is kept, because that demographic information is related to the clinical information described. You are free to define the rest of the demographics (address, phone number, etc). Regarding preparations for the demos: we found some bugs in the implementation of non-repudiation, but we've managed to workaround them. For eID, things are going fine. Since Friday is holiday in Porto, the preparations tests will need to be performed today and tomorrow (22nd and 23rd).

IT (08/06/2016):

1. Which OpenNCP version are you running?
   1. OpenNCP V2.4.0, released before EXPAND-a-Thon, planning to install V2.4.1, but before we have to fix many local issues.
2. What is your status regarding BB adoption?
   
   1. Non-rep, SMP/SML upload, eID level 1 (included in Lombardy Portal) but we want to extend to other levels (but not yet implemented).
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
   1. YES
4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?

   1. In the past we were connected to: PT, LU, MT, GR, CH. We have new certificates to be installed.

5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?

   1. YES updated, not uploaded, yet. Luca was able to download the key today, in the past was not possible. We should now be in a position to use TSL-sync/editor with the new EC Central Services. In the past we could work with the TSL-file from MT and GR, but we had issues with the other files. Now: we're focusing on generating the new configuration file and synchronizing.

6. Have you performed NCP-2-NCP testing recently?
   1. NO
7. Which services does your country provide (eP/PS A and B)?
   1. PS/A, PS/B, eP/A (currently not available for pharma-db issues). Let's concentrate on PS for the moment.
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
   1. Real data, but needs to be revised. We have 1 PS that is 100% real (from Marcello). The others we'll try to make them as reasonable as possible. We still have the issue of the coded data for medicinal, still not operational. Our PS will be fine.

For Lisbon, we're not sure if we could to fetch IT PS with eID level 3. We can try with Marcello's card.

Status / Concerns (15/06/2016): Italy didn't participate in the meeting. After the meeting, João received an e-mail confirming that Italy has successfully uploaded their TSL-file to the Central Services.

Status / Concerns (22/06/2016): Italy didn't participate in the meeting.

LU (08/06/2016):

1. Which OpenNCP version are you running?

   1. Planning to install V2.4.1

2. What is your status regarding BB adoption?
   1. Non-repudiation
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)

   1. No

4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?

   1. PT, CH. We may need to install new certificates retrieved from ICA. What happens due to the missing adoption of the new central services ?

5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?

   1. No not yet updated, not uploaded, yet

6. Have you performed NCP-2-NCP testing recently?
   1. NO
7. Which services does your country provide (eP/PS A and B)?
   1. PS/A, PS/B
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
   1. Dummy test data

Status / Concerns (15/06/2016): We had a discussion on what we can do. We'll participate as MS-A. We cannot participate for eID level 3 (Should we participate in the demo?). Now we have OpenNCP 2.4.0 (João will confirm if we should update). We need to reinstall certificates. François will not be present in the next 2 weeks, Younes will be the contact point.

Status / Concerns (22/06/2016): Heiko will update PPT to 2.4.1. Will be done today and checked during the next 2 days. For now nothing is uploaded. Tomorrow we have day off in LU, we take back Friday. We'll have the environment as planned by the end of the week. Regarding François' question about whether MS without cards or with not-supported cards should participate in the demo: João provided clarification on usability levels of eID (countries without card should participate, to show the different levels of usability).

AT (08/06/2016):

1. Which OpenNCP version are you running?
   1. 2.4.0
2. What is your status regarding BB adoption?
   1. SMP/SML upload, Non-rep, eID level 3. Comment from Massi: Non-rep implementation has a bug. The message received by OpenNCP and passed to the REM evidence emitter is changing. Massi hopes to check what to do, so a new version of the util package is expected: UT-19 - Getting issue details... STATUS
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
   1. YES
4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?
   1. PT. Will begin testing with IT in the next days.
5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?
   1. Certificates were created before EXPANDathon. Already uploaded.
6. Have you performed NCP-2-NCP testing recently?
   1. PT. Will begin testing with IT in the next days.
7. Which services does your country provide (eP/PS A and B)?
   1. PS/eP A and B. For Lisbon we should concentrate on PS.
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
   1. 3 PS. Meaningful for the last epSOS projectathon (2012), but not valid anymore after changes made by EXPAND, so it's dummy.

Feels confident about demonstration of PS workflow in Lisbon with eID level 3.

Status / Concerns (15/06/2016): Austria didn't participate in the meeting. João later received confirmation from Austria that VPN and NCP-2-NCP connection to Italy has been established.

Status / Concerns (22/06/2016): OpenNCP version installed in PPT is still 2.4.0, we'll not update to 2.4.1. Massi implemented something for non-repudiation demo. Regarding the PS guidelines provided: the mail was forwarded to technicians and let's see if they can provide (60% confident they can). For eID we have 2 cards working (Massi's cards). We can test 2 scenarios: Massi is an Austrian person and using his e-card to use eID level 2 (just using public information; as Austrian I cannot sign TRC). Otherwise Massi is Italian citizen and has IT card. We know that both are working. If we go for the 2 scenarios, we have 2 different IDs so we have 2 PS (complete PS workflow).

ES (08/06/2016):

1. Which OpenNCP version are you running?
2. What is your status regarding BB adoption?
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?
5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?
6. Have you performed NCP-2-NCP testing recently?
7. Which services does your country provide (eP/PS A and B)?
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?

Status / Concerns: we didn't have Spain representatives in the meeting. Spain will not participate in this first piloting moment (June).

GR (08/06/2016):

1. Which OpenNCP version are you running?
   1. Latest version of OpenNCP v2.4.1
2. What is your status regarding BB adoption?
   1. Non-repudiation (included in the latest OpenNCP release)
      
3. Can eID level 3 identify a patient from your country? (i.e., can we demonstrate eID level 3 using a card from your country?)
   1. No Card based National Infrastructure, however we are prepared to pilot using the HARICA eID framework, as  a minimum.  HARICA is a Trusted Services Provider and can issue Qualified Certificates and Qualified Certificates created at an SSCD according to the eIDAS regulation. Furthermore, the necessary infrastructure for a pilot already exists. I.e. our participating health professionals will be staff of academic clinical departments,  provided with the AcademicID, an SSCD that can create private keys and store certificates from HARICA. In the future, this scheme may be extended to include provisioning of qualified digital certificates at an SSCD for other health professionals that do not belong to the academic community. 
      We would therefore appreciate if the pilot planning discussion includes also a track on piloting (possibly with Austria?) outside the technology bound route.
   2. Alternative solution related to certificates and smartcard that will identify some ehealth staff of the academic world with this smartcards. We're trying to use this approach to identify health professionals. We're not using cards. In the piloting we're going to go for the formal eIDAS environment, we're going to pilot not with the group of countries using cards as identification methods but with Austria (which is also using eIDAS). We're fully prepared for that. Certificates will come from service provider HARICA. I wanted to be clear that in the piloting we'll have 2 subgroups (e-SENS smartcards and eIDAS procedures/reference implementations).
      
4. To which countries are you VPN-connected (special focus on connectivity to Portugal)?
   1. PT, IT, but there are several countries that may have updated the certificates.
      
5. Have you updated your endpoints and/or certificates recently? If so, have you uploaded the new configurations to the Central Services hosted by EC?
   1. Only GR certificates have been recently updated (no GR endpoints which are still the same).
      Upload to the EC-hosted central services is planned in the following days. We need to initiate connectivity to Central Services. We have a delay, only recently we got the access and we didn't have time to upload the certificates.
      
6. Have you performed NCP-2-NCP testing recently?
   1. Not recently, a month ago. Last month we're concentrating on updating the NCP to the latest version and fixing various issues.
      
7. Which services does your country provide (eP/PS A and B)?
   1. Services currently working are: eP-B, PS-B, PS-A (only for piloting).
      
8. For those providing PS-A: How many samples? Is their data clinically meaningful or completely dummy?
   1. Data will be dummy. We cannot say now how many samples we have. We can prepare some patients but they'll be dummy. Only a couple of patients for testing eP.
      

Status / Concerns (15/06/2016): In view of the pilot we need to know which connection (to which MS) will be activated to see if it works. How many samples will we need for Lisbon? Do you have any date for making the tests to prepare for the event? (João: maybe during the second half of this week and in the next week).

Status / Concerns (22/06/2016): We have the latest OpenNCP, but we have a problem the last 7 days, we have a major issue, later today we'll manage to start up again the system, we're delayed due to this problem (issue on servers). Today or tomorrow we'll have to finish. Then I can say if we can connect to PT. The last experience I have I think we won't have an issue. Also, after receiving mail with VPN settings, but we'll only confirm by testing. I'll send an email to inform you about the situation, today or tomorrow, and I think it's not that the systems are broke but we have to check everything (other systems are affected). We didn't have time to prepare PS, I have informed Kostas Kartalesis (Gnomon), we'll do it as soon as the systems are up.

Brief discussion about the demos in the eHealth Summer Week 2016:

Licínio will send to the MS an update to the agenda of the event, and work closely with Massi, Soeren, Zoi and João to work out details and structure of discussion. There might be the need to do more than the demo (e.g., talk about eID NI and national experience). This will be sent by email during this afternoon. If we can have the demo to work, we'll have good discussions.

Massi: we need to provide evidences of the transactions performed. We may need to reorganise how the demo is going to be performed. eID maybe short 30secs, non-rep maybe 2 minutes.

Licínio: I've been following the evidences discussions, I hope to work with João tomorrow. If we could have a video...accessing Gazelle is hard in such a short time. I still need to understand. Let's keep the demo simple. We want to have some critical interaction to speak about the technology, the clinical encounter. There's so much to talk on what is happening behind the scenes, it'll take longer than that. Tomorrow I'll join with João to think about this.

Massi: I think it's very important to include the physician. We've to take care on which evidences we want to provide, to identify what we want to provide in e-SENS.

Licínio: we'll build on top of what we have.

Ioannis: I have a request from Dimitrios, after the event, to prepare a report for piloting based on the template of e-Confirmation pilot (wiki). Massi: I'd not use it due to different way of testing and providing evidences (Gazelle and CAT). We should look at something else. (Ioannis will communicate that to Dimitrios)

Massi: non-rep pilot: imagine we have some physician and we left a physician introduce Massi's card in PT portal, portal will read card and perform PS workflow. Then me and João will look at REM evidences and see that everything is OK. Then we simulate an attack and check that something went wrong. If we loose time collecting evidences at the time, we'll loose the logs. Is this scenario real?

Licínio: the scenario is what I was expecting, I was not expecting to provide Gazelle evidences. The evidences uploaded manually off the right time will not be valid. Workflow and authN will be performed by a physician. Highlight possible disputes that we could solve with our evidences, to foster discussion with the audience. Demo will be first, then we'll have the discussion. Let's keep it open. The open discussion will be the third moment of the session.

Massi: that means that eID demo will be the same without showing the evidences. It's aimed at being easy. Then we have space for discussion.

Licínio: we are using PPT environment so we need to use a card that connects to a patient that really exists.

Massi: we're not sure if the new generation of cards are working.

Licínio: let's fine tune this offline and by email.

e-SENS Y4 Perspective

GR: Y4 FOCUS: Establish connectivity in PPT and test the NCP.  Implement what will be agreed in the eHN to be adopted at NCP tech layer;

• What is the benefit of piloting with "Real Patient Data"? Are we DEMANDED to reach 
• What is the value of reach "Technology Operation Readiness" level?
• Recommended approach to eID in Y4:
• • Brainstorm and consolidate technical solutions for eID, matching eIDAS requirements, and technology each PN is able to pilot;
  • Align and gather inputs from JAseHN eID task, regarding how to fulfil the need and requirements towards eID for Patient Identification.
  • Use April 19th Workshop: to be bring the right people together to think and plan eID for Patient Identification approach during e-SENS Y4

LU: Y4 FOCUS: 

• Understand which other BB from e-SENS may enhance the NCPeH and be experimented, to be used in CEF;

IT: Y4 FOCUS:  

• 1st: Will we have "Real Patient Data"? If yes, need to have a consolidated process for legal agreement (e.g. TLA is or not enough);
  • Who MS will go live with real patient data.
• 2nd: Keep NCPeH updated. Are there specific BB that allow to solve IT national challenges (e.g. eID for Physicians)? To facilitate the alignement with the future CEF DSI.

PT: Y4 FOCUS: 

• Finnish the SMP/SML integration (namely by adopting EC server);
• Complete integration of eID Level 2 and Level 3 (using Countries Accreditation Servers instead of the current Fraunhofer test server)
• Integrate, test and adopt eIDLevel 4 & 5.
• Have all the MS piloting exchanging PS and eP, data on Pre-Operation environment;

2) AOB & Next Meeting

• Joao Cunha: Prepare and disseminate today minutes
• Joao Cunha: Progress and Issues report to e-SENS WP5.2.1 Management