e-SENS Electronic Simple European Networked Services

eID and eSignature,

Herbert Leitold, Elif Ustundag Soykan, and friends

Luxemburg, 7 November 2014

eID and eSignatures

Are two related animals where

eID starts a business process …

• The user enters an authenticated session

… eSignature often concludes it

• By signing a transaction

e-SENS eID and esignatures

eIDAS

Is the common legal basis on the horizon

e-SENS eID and esignatures

eID predecessor/ongoing work

STORK

• Has piloted natural person authentication

• Handed over to EC DIGIT for advancing to a product

STORK 2.0

• Advances on attributes and representation / mandates

eSENS

• Takes them up as BBs (components, protocols)

eIDAS prepares legal basis and mutual recognition

e-SENS eID and esignatures

eID predecessor/ongoing work

STORK

• Has piloted natural person authentication

• Handed over to EC DIGIT for advancing to a product

STORK 2.0

• Advances on attributes and representation / mandates

eSENS

• Takes them up as BBs (components, protocols)

eIDAS prepares legal basis and mutual recognition

e-SENS eID and esignatures

Questions to the panel

Having a distinguished panel on eProcurement, eHealth, and Business Lifecycle

• What is your most burning need on eID?

• What does the eSENS eID BB solve / not solve? • Within your pilot

• Back home in your MS

• Where can it fail?

• And what can the other sectors reuse?

And do the audience …

• Where would your sector benefit from it?

e-SENS eID and esignatures

e-SENS on e-Signature

Creating basis for deployment

Consolidate what the LSPs brought

Relies on core services/platforms

• TLs, CSPs

• Trusted source of Timestamping

• Revocation services

e-SENS eID and esignatures

e-Signature and related services

Creation Services

• Signing transactions, documents, containers

• Signing evidences

• Security tokens

Verification Services

• Trust Services

• Revocation Services

Timestamping

• Trusted or not?

• Service provisioning

Archiving e-SENS eID and esignatures

e-Signature Creation Services

eSignature CoreTrust Services

e-Signature Verification Services

e-Signature Standarts Framework

Mobile e-Signature

SAT: e-Signature Architecture

Web Services Trust Model

Trust-service Status List

Trust Network

e-Delivery

e-Documents

CC 6.1

CC 6.2

e-Signature Standards

EU Rationalized Standards Framework

eIDAS sets legal basis for trust services: e-signatures, e-seals, timestamps, e-registered delivery,...

e-SENS eID and esignatures

e-Signature solutions

Not aiming at «one size fits all» but convergance • Sign locally

• Sign at SP (sd-dss, @firma, mocca..)

• Signing servers (stork, ...)

• verify locally (SD-DSS, ...)

• validation service (PEPPOL), token (e-Codex)

Adherence to standards

e-SENS eID and esignatures

e-SENS Electronic Simple European Networked Services

Thank You 7 November 2014