STORK 2.0 - Secure idenTity acrOss boRders linKed 2.0 (STORK 2.0)

Published on: 09/01/2013
Document

STORK 2.0 (Secure idenTity acrOss boRders linKed 2.0) project builds on the success and results of STORK project which was implemented from June 2010 to December 2011. STORK 2.0 takes further steps to decisively push the lines for wider uptake of eID in Europe, aiming at realising a single European electronic identification & authentication area. Its highly innovative focus lies on the convergence of private and public sectors in an operational framework and infrastructure encompassing eID for secure electronic authentication of both legal and natural persons. It includes facilities for mandates, widely useable across the EU, providing strong data protection and secure ways of transferring attributes, all under user control.
STORK 2.0 Pilots, focused on strategic eLearning & Academic Qualifications, eBanking, Public Services for Business and eHealth areas, will demonstrate interoperable services in real-life settings and validate common specifications, standards and building blocks, convincingly addressing challenging legal and governance issues (across borders, application domains and different sectors). These applications will facilitate borderless digital living and mobility in the EU, enhancing the Digital Single Market for public and commercial services in alignment with the Services Directive.
STORK 2.0 is an EU co-funded project under the ICT Policy Support Programme (ICT PSP) of the Competitiveness and Innovation Framework Programme (CIP). STORK 2.0 will be a key-enabler to support the open, competitive digital economy envisaged in the Europe 2020 Strategy and is aligned with Key Actions in the Digital Agenda, thus contributing to Europe’s leadership role of the eID market. Finally, STORK 2.0 involves directly 19 countries in the Consortium (Austria, Belgium, Czech Republic, Estonia, France, Greece, Iceland, Italy, Lithuania, Luxembourg, Netherlands, Portugal, Slovenia, Slovakia, Spain, Sweden, Switzerland, Turkey and the United Kingdom) in which participate 58 partners in total.

Policy Context

Normal 0 false false false EN-US X-NONE X-NONE /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin-top:0in; mso-para-margin-right:0in; mso-para-margin-bottom:10.0pt; mso-para-margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:"Times New Roman"; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin;}

STORK 2.0 is aligned with Key Actions of the Digital Agenda and will be a key-enabler to support the open, competitive digital economy envisaged in the Europe 2020 Strategy. One of the flagship initiatives of the Europe 2020 is the Digital Agenda. The eGovernment Action Plan is an integral part of the Digital Agenda for Europe. The Digital Agenda and its eGovernment Action Plan both address the importance of electronic identities (eID) as a key enabler for eGovernment Services and both are the most relevant policy framework for STORK 2.0 project since they stress the importance of pan–European interoperability, the development and use of a pan-European infrastructure for eID for citizens and businesses. STORK 2.0 objectives are ideal for producing high impact and for contributing to the objectives of Digital Agenda and its eGovernment Action Plan 2011-2015.

STORK 2.0 buildings blocks and common elements will be the key to enable interoperability of the identification of natural and legal persons. STORK 2.0 will address a federated and trustworthy framework for cross-border eID services at European level facilitating borderless digital living and mobility in the EU. Thus, STORK 2.0 is related to the policy framework of Digital Single Market for public and commercial services and will contribute to its strengthening.

Furthermore, STORK 2.0 is of direct relevance to the European Directive on Electronic Signatures (199/93/EC) which is important in determining the future of eID. It is primarily focused on ensuring that electronic signatures carry the same legitimacy as hand-written signatures as opposed to defining the electronic signatures legal status and/or use.

Of particular relevance is ISA Action 1.5, STORK Sustainability, which from 2011 helps to the continuity of STORK interoperability beyond the official finalization date of that project and until mid-2013: it will update and maintain the Common Specifications (CS) and the QAA (Quality Authentication Assurance) model developed in STORK. It will upgrade and maintain software modules supporting common functionalities of the cross-border infrastructure as well as architectural issues. STORK 2.0 will ensure a continuous collaboration with the ISA team in charge of this to achieve the necessary complementarities and synergetic confluence of results (i.e. in a single software community, but also addressing other aspects related to longer-term sustainability). ISA is also responsible for the STORK/ECAS integration, a very valuable example of cross-border eID-enabled single sign-on to many EC applications accessed by large numbers of users.

Finally, STORK 2.0 is an EU co-funded project under the ICT Policy Support Programme (ICT PSP) of the Competitiveness and Innovation Framework Programme (CIP). The CIP ICT PSP is one of the main financial instruments of the i2010 initiative. Its support is one of the key enablers to develop cross border interoperable high impact service through the implementation of Large Scale Pilot (LSPs) projects. STORK 2.0 is fully aligned with the objectives stated in the Competitiveness and Innovation Framework Programme. By supporting innovation activities, provision of better access to finance and delivery of business support services in the regions, it strives to encourage a better take-up and use of Information and Communication Technologies (ICT).

Description of target users and groups

  • Public sector of Member State (MS) partner and non partners (public administrations (PAs), Ministries, public servants, policy makers, other MS, national registries)
  • European Commission (EC) – DG CONNECT (European Commission Directorate General for Communications Networks, Content and Technology) that supports innovation in Europe by fostering the development and use of Information and Communication Technologies (ICTs) for the benefit of all citizens.
  • Other DGs of the European Commission (EC) such as Internal Market and Services Directorate General (DG MARKT), Directorate General Enterprise and Industry (DG Enterprise and Industry) and Directorate-General for Informatics (DIGIT)
  • European Union and European Parliament since both these European institutions have a leadership position in the development of the eID market. STORK 2.0 has a positive impact on the development of eGovernment and eBusiness in the Member States and in a wider cross border context, as well as in the interaction between (sub)national levels and the EU-level. Also, legislative actions related to eID and eGovernment thematic fields are really important for STORK 2.0 project development and implementation.
  • IT experts, researchers, scientists focused on eID field and eGovernment thematic area are interested in the deployment and replication of STORK 2.0 developments and solution
  • Standardization bodies, legal experts
  •  Business associations, Small-Medium Enterprises (SMEs), health care providers
  • IT industry (ICT Industry service providers, identity providers, content and attribute providers, software companies, etc.) interested in the open source and STORK 2.0 scalable solution
  •  End users (citizens, consumers, patients, employees) who are mainly interested in the implementation of cross-border STORK 2.0 pilot services focused on strategic eLearning & Academic Qualifications, eBanking, Public Services for Business and eHealth areas
  •  Academia (the pilots raise interest among STORK 2.0 participating academic institutions but also among the academic world throughout Europe in  STORK 2.0 participating countries and not)
  • Other Large Scale Pilot (LSPs) projects such as epSOS, eCODEX, e-SENS, etc. given that eID concepts and solutions are also included in the mission and goals of other LSPs. So LSPs work together and establish synergies that ensure interoperability and long-term sustainability of the developed building blocks
  • Media, opinion leaders (pan-European, national, local media)


Description of the way to implement the initiative

Normal 0 false false false EN-US X-NONE X-NONE /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin-top:0in; mso-para-margin-right:0in; mso-para-margin-bottom:10.0pt; mso-para-margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-ansi-language:ES;}

STORK 2.0 will materialize the results of collaboration and convergence of key private and public sectors stakeholders in an operational open framework and infrastructure which uses eID for secure electronic authentication of both legal and natural persons.

So, STORK 2.0 project will:

-Accelerate the deployment of eID for public services, while ensuring co-ordination between national and EC initiatives in the field, and support a federated eID management architecture across Europe, by building on existing eID.

-Maximize the take-up of its scalable solutions throughout the EU, with a strong commitment to open specifications and longer-term sustainability around a strong vision of eID as a Service Offering (backed by participating European countries and industry) which contributes to Europe’s role of leadership of the eID market.

-Seek and showcase the convergence of private and public sectors in a fully operational framework and infrastructure which encompasses eID for secure and coherent electronic authentication of both legal and natural persons (including facility to mandate in different forms) widely useable across the EU, based on high level of data protection and secure ways to transfer attributes, all under user control.

-Test, in real life environments, secure and easy-to-use eID and attribute solutions in four relevant cross border and cross sector pilots.

Moreover, STORK 2.0 will apply the developed infrastructure and will test the services offered in four cross-sector and cross-border pilots in key areas such as eLearning and Academic Qualifications, eBanking, Public Services for Business and eHealth. These pilots explore possible ways to address real-life settings with major economic sectors and the potential to generate a federated and trustworthy framework for cross-border eID services at European level.

In addition, STORK 2.0 includes a mix of partners from Member States, private sector, academia and NGOs. It is a Member States driven project and it requires a very efficient, sound, well-organized, well-structured and flexible project management throughout its 3-year period of implementation. Therefore, distribution of responsibilities among parents, flow of information, reporting procedures, transparent decision-making processes and conflict management focusing on prevention rather than resolution are of major importance within the project and are defined by its early beginning. Moreover, the project is divided into a number of eight Work Packages (WPs) which are focused on specific implementation areas and undertake different but interrelated activities such as project management, common specifications and building blocks, pilots coordination, pilots evaluation, dissemination and communication, etc. to ensure a smooth and effective operation and the delivery of adequate scalable products for long-term, viable and sustainable impact across Europe. Marketing, communication and dissemination will leverage the learning experience by ensuring experiences exchange with partners in the value chain within and outside of the project, supported by the Member State Reference Group (MSRG), Industry Group and Community of interest, the three STORK 2.0 online groups that stakeholders can freely join.

Finally, STORK 2.0 offers the opportunity to non-partner European states and industry, and other LSPs, to contribute and take advantage of project results through information sharing channels including targeted and open workshops, focus groups and dissemination initiatives. This approach contributes to scalability of STORK 2.0 results and creates a basis for future take-up above and beyond the current partnership within the project’s duration.

Technology solution

Normal 0 false false false EN-US X-NONE X-NONE /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin-top:0in; mso-para-margin-right:0in; mso-para-margin-bottom:10.0pt; mso-para-margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-ansi-language:ES;}

STORK 2.0 project will offer an innovative, technological solution that will be fully operational, scalable and viable for long-term, and will have sustainable impact allowing its wider take-up across Europe. STORK 2.0 foresees to bring new functionalities to the eID interoperable table boosting SMEs and private sector innovation taking further steps towards the creation of a fully operational framework and infrastructure for electronic identities in EU, thereby achieving a single European electronic identification area.

 To enable the STORK 2.0 infrastructure and pilot applications/services, a number of building blocks will be delivered in STORK 2.0. Building blocks are understood to be the technical elements (common code) supporting the cross border interoperability of national solutions.

Further steps will be made in software development such as programming, testing and documenting the resulting building blocks. Within this development, the project team will take measures to allow for parallel development and integration of the building blocks required by each of the STORK 2.0 participating Member States. The packaged software will be distributed to all partners, and any support required by these partners for their personalisation and integration will be offered by the developers.

Finally, the common specifications of STORK 2.0 are a crucial element of the project meaning specifications for interoperable architectures and components for connecting dedicated eID systems, taking also into account prevailing eIDM systems to maximize suitability for integration. All results (i.e. specifications of interfaces, protocols, architecture, open source reference implementations of necessary components and building blocks for interoperability) will be freely available after the project’s end.

Technology choice: Standards-based technology, Mainly (or only) open standards, Accessibility-compliant (minimum WAI AA), Open source software

Main results, benefits and impacts

Normal 0 false false false EN-US X-NONE X-NONE /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin-top:0in; mso-para-margin-right:0in; mso-para-margin-bottom:10.0pt; mso-para-margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-ansi-language:ES;}

Starting on April 2012, STORK 2.0 project is currently under implementation which means that it is still premature to extract final results. However, the expected benefits and impact for the STORK 2.0 participating countries and the interested stakeholders will be very important based on STORK experience, knowledge and lessons learnt.

So, the project will build the basis for a future widespread use of eID solutions with exchange of attributes for legal and natural persons’ identification across borders, contributing to Europe’s leadership in eID market. To enable the STORK 2.0 infrastructure and pilots, a number of building blocks will be delivered in STORK 2.0. These building blocks are understood to be the technical elements (common code) supporting the cross-border interoperability of national solutions and will be key to enable interoperable identification of natural and legal persons.

From a technical perspective, STORK 2.0 will establish mechanisms for cross-border, cross-sector identification and authentication within the pilots chosen and possible semantical, technical, legal, organisational and political obstacles will be addressed in the most appropriate way. The technical solution will be based on open standards and the implementation on open source code. Both things will allow the easy integration of the common modules for interoperability of eID with any type of technology that can be found in the market, favouring therefore the scalability of the solution and the extension of it to any European Member States. The architectures and models for interoperability of eIDs that will be chosen will be based on those developed in STORK project, and any enhancement or amendment of them will continue preserving the principle of scalability, defining solutions that can be easily and efficiently extended to other EU countries.

Thus, it will facilitate digital living and mobility in the European Union, enhancing the Digital Single Market for public and commercial services with a vision of eID as a Service Offering, seeking to maximize take-up of its scalable solutions by European public and private sectors, with a strong commitment to open specifications and long-term sustainability. Moreover, STORK 2.0 will not only have a positive impact on the development of eGovernment and eBusiness in the Member States and in a wider cross border context, but also in the interaction between (sub)national levels and the EU-level.

Under the Digital Agenda continued importance is given to interoperability, especially including the interoperability of electronic identities, mentioned as one of the key enablers to the further development of eGovernment. The STORK 2.0 solution will enable the cross-border and cross-sector interoperable electronic identities and authentication, to take a step further and thus its long-term impact cannot be underestimated. By including the possibility to identify and authenticate legal entities and to mandate, the business world can start profiting from this infrastructure enabling huge cost savings and offering better and in the end cheaper services to their customers.

In general, the outcomes of STORK 2.0 are in line with the overall aim of the project and contribute towards reaching this aim. They are the result of the outputs of the individual tasks and team collaboration in the Work Packages.

Return on investment

Return on investment: Not applicable / Not available

Track record of sharing

Normal 0 false false false EN-US X-NONE X-NONE /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin-top:0in; mso-para-margin-right:0in; mso-para-margin-bottom:10.0pt; mso-para-margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-ansi-language:ES;}

STORK 2.0 project’s solution and developments will be successful whether the developed building blocks (software, knowledge, experience, etc.) will be shared and re-used by as many actors and stakeholders related to electronic identification and authentication sector as possible, mainly public administrations and private sector. Throughout its lifetime, the project strives to develop an open-source, marketable, sustainable solution and tools which will be scalable and widely applicable. So using the STORK 2.0 results, business processes can benefit from the cross-border and cross-sector possibilities offered to identify safely a user at an appropriate level of security and with respect for privacy and data protection.

STORK 2.0 functionalities and available standards should be transparent as this is vital to ensure market take-up after the project’s end. Therefore STORK 2.0 supports the free availability of common results such as specifications of interfaces, protocols, architecture, etc. and -where appropriate- open source reference implementations of necessary components and building blocks for interoperability. To further stimulate market take-up of STORK 2.0 tools, the necessary documentation will be produced throughout the project.

To achieve the wider sharing and take-up of the STORK 2.0 solution, the results will be communicated to the public and private sector following a marketing strategy developed throughout the project. Member States will have the leading role in dissemination and marketing campaigns that will target to various relevant public (administration) sectors and industries.

Finally, STORK 2.0 aims to achieve its scalability as a successful EU-wide eID solution by:

-Upscaling to more users during the implementation of the STORK 2.0 four pilot services and will be checked the potential for broader use of a tested service solution after the project’s end;

-Upscaling to more services: aiming at a single EU-wide interoperable eID framework, STORK 2.0 aims to facilitate a broader range of pan-European public and private services. In the choice and definition of the standards for the infrastructures to be used in the pilots this issue will be taken into account while future services by public and private sectors will be examined;

-Upscaling to more technical platforms: future technologies (like mobile phone technology) have to be compatible with the defined technical platforms in the project. STORK 2.0 will look into this issue during the definition of the common specifications of the pilots. The use of open standards will be a key aspect;

-Upscaling to other LSPs which could re-use the STORK 2.0 technological solution like STORK solution that was used also in SPOCS LSP project;

-Upscaling to more countries and business: STORK 2.0 will disseminate and promote its work in relevant events, and information sources, leading to a wide exposure of the solution in order to attract new Member States that do not participate in the project, industry stakeholders, businesses, etc to take-up its solution. Given the leading position of EU in the eID field of activity, STORK 2.0 solution will not be limited only in EU. It can have a global impact in line with the global importance of eID in the society of information and communications.

 

Lessons learnt

Normal 0 false false false EN-US X-NONE X-NONE /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin-top:0in; mso-para-margin-right:0in; mso-para-margin-bottom:10.0pt; mso-para-margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-ansi-language:ES;}

The STORK 2.0 project is in its early beginning and it would be quite premature to extract lessons learnt. Nevertheless, it is certain that STORK project has been a success, having created an effective cross-border ID authentication framework and shown that the same solution can be scaled-up to cover a growing range of online public services.

In this context, STORK 2.0 is a three-year European Large Scale Pilot project that will be implemented by a large consortium of 58 participating partners including 19 European countries which will face the challenge to collaborate and overcome any organizational, legal, semantic and technical issues, manage to extend eID interoperability and ensure a real convergence of public and private sector efforts on eID, the secure transfer of extended identity attributes, and the opening of eID-based operations to authorized legal representatives.

Finally, STORK 2.0 will offer a sustainable and scalable, open source solution fully aligned with the European Interoperability Framework and Strategy that can be adopted by public and private sector across Europe. It will majorly contribute to the accelerated deployment of eServices across EU improving European competitiveness in the global knowledge economy. It is important to mention as well that the new e-SENS (Electronic Simple European Networked Services) pilot will consolidate the building blocks of the existing Large Scale Pilots (LSPs), focusing strongly on the core building blocks such as eID, eDocuments, e-Delivery, semantics and e-Signatures. The building blocks of the existing Large Scale Pilots will be consolidated, improved and their usage extended.

Scope: Cross-border, Pan-European