Title: DAY

09h00-10h00    Welcome    Martin Meints (ICPP)

    Presentation, Martin Meints (ICPP)

Timetable and structure of D3.6 “Study on ID Documents” 

The participants agreed in principle on the suggested, preliminary timetable and extended it by a few topics. 

Planned table of content: 

1. Executive Summary 

2. Introduction 

3. Basic Technologies for ID Documents 

   1. Chipcard Technology (such as Operating Systems, Readers etc.) ‑ AXSionics? 

   2. RFID ‑ IBM, Reading? 

   3. Electronic Signatures and Biometrics (Summary of D3.2) ‑ ICPP 

   4. Back-Office Systems (such as Databases, PKI, Golden Reader Tool) ‑ KULeuven, ICPP and others 

   5. Interoperability / Compatibility ‑ LSE? 

   6. … 

4. Legal Grounds in Europe (in co-ordination with WP5, VUB) 

   1. Overview on the Differences; Link to the Database on Id Law 

   2. UK / Belgium 

   3. History and Tradition? 

5. Leading Concepts, Prototypes and Implementations 

   1. European Passport 

   2. Finnish ID Card 

   3. Austrian “Bürgerkarte” 

   4. Belgian ID Card ‑ KULeuven 

   5. German E-Health Card ‑ ICPP 

   6. … 

6. Overview on Concepts, Prototypes and Implementations in EU+ (26 Countries) 

   1. Table, reference to ADAPID ‑ KULeuven 

7. Security and Privacy Aspects ‑ TUD, KULeuven 

8. Socio-Economic Aspects ‑ LSE 

   1. Critical Economic Factors and Suggestions for Implementation 

9. Summary, Conclusions and Outlook 

Volunteer to do an internal review: Jozef Vyskoc, VAF 

To be asked: Bert-Jaap Koops, TILT 

10h00-10h30    Presentation, Xavier Huysmans (KULeuven)

Co-Operation with the MODINIS Identity Management project (lot 3) (http://www.egov-goodpractice.org)

Questions, Discussion and Answers: 

There appears to be a clear interest to create synergy with MODINIS, at least in the field of the identity management project of MODINIS (as this was the subject of Mr. Huysmans’ presentation). 

The collaboration could be carried out in practice through attending the MODINIS / FIDIS workshops and/or organising joint workshops) and by having some FIDIS members becoming a part of the MODINIS’ working group that analyses case studies and identifies good practices of identity management.  

It was noted that the questions with regard to practical FIDIS involvement in the activities of MODINIS should be expressed more concretely and directly addressed to the Work Package leaders. If needed, FIDIS can provide experts for certain areas of knowledge and give answers. 

10h30-10h45Presentation, Claudia Diaz (KULeuven):    

Content and Possible Input Provided by ADAPID 

This project, funded by the Flemish Government, puts forward a framework for advanced applications (secure, privacy-enhanced) of the eID card in the field of e-Government, e-Health and Trusted Archiving. It started in July 2005. 

Central research topics are:  

1. 1. 1. 1. Privacy enhancing technologies for the eID,  

         2. Pseudonyms, unlinkability of unique identifiers, anonymous communication, anonymous credentials,…    

         3. Biometrics,     

         4. Trusted modules and     

         5. Formal Methods. 

Possible input from the ADAPID project was integrated in the table of content for D3.6. 

10h45-11h00    Coffee break

11h00-12h00     Presentation by Martin Meints (ICPP)

The eCard Strategy of the German Government

Mr. Meints presented the status of the 3 German government projects being part of the e-card strategy of the German government.. The first one is in the field of e-health (“Gesundheitskarte”), the second one in the field of employment (“JobCard”) and the third one about the implementation of an electronic tax declaration. Detailed information on the planned German eID card was not available at that time.  

An advanced prototype of the e-health card contains several kinds of information (from blood group type to allergy data and emergency data), where  

1. No medical data is stored elsewhere than on the card and  

2. Depending on the requirements to access the data on the card is stored in separate and secured sections of the card.  

The current concept of the JobCard raises severe privacy issues, for instance:  

1. Possible interconnection of data, due to the central storage (whereas the same data were stored in a decentralised manner before). 

2. No clear definition of the purpose of storage and processing of the data (who needs them, when and what for?). 

3. Duration and content of the stored data is not sufficiently defined (data minimisation principle is violated). 

4. Inappropriately defined organisational and security requirements: vulnerability of the system concept of access to these data may result. 

Questions, Discussion and Answers: 

The discussion focused on the e-health card, especially ways to store the planned data and to access them in various discussed scenarios such as a prescription or a case of emergency. It was not clear whether any access on data of the card would be logged. 

12h00-12h30Discussion and conclusion of the workshop