HJP_ENISA_STORK_PRESS RELEASE_R1 ... - HJP Consulting

PRESS RELEASE
HJP Consulting and ENISA collaborated on the latest eID study initiated and
published by ENISA:
Mapping security services to authentication levels
Paderborn, 4. April 2011
The latest eID report published by the European Network and Information Security Agency
(ENISA) is a collaborative effort of ENISA and HJP Consulting (HJP). This is the second
collaboration between HJP and ENISA after the publication of the report titled “Security
Issues in Cross-border Electronic Authentication”.
The new report published in March is titled “Mapping security services to authentication
levels” was authored by HJP’s eID experts Stephan Körting and Diana Ombelli and
supervised by Slawomir Gorniak from Enisa’s Technical Competence Department.
The authors introduce the reader to the general topic of electronic identity management
and authentication, using real world examples. They explain the key concepts needed to
understand the necessity of having a European Union-wide common approach to quality
and security for the providers and users of electronic services. Services for instance
include electronic tax declarations or receiving benefits from health care services based on
identification using an eID card (smart card).
The applicability of a known quality model developed by European initiatives
(authentication levels) has been reviewed. The mappings are illustrated using everyday life
examples. The report explains encountered or potential issues with applying the model of
authentication levels to electronic services and provides recommendations for further
improvements of the model.
Moreover this report provides a general overview of recent European efforts, with particular
emphasis on the activities of European project STORK (Secure Identity Across Borders
Linked) in relation to the authentication levels and their mappings. STORK aims to
implement an EU wide eID interoperability platform that will allow citizens to establish new
e-relations with other countries in the EU by using means of cross border eID identification
and authentication.
After the authors, it can be said that the technological barriers to establish cross-border
interoperability of eGovernment solutions and services are on a good way to be overcome,
provided that authentication level definitions will be further clarified to remove any
ambiguity and room for interpretation. In the face of ever increasing computing power and
new technological innovations, no security measure can be considered to be valid
indefinitely. Therefore definitions and mappings need to be periodically re-evaluated in
order to increase the mutual levels of trust.
STORK project started the bases for the QAA levels, which has to be fine tuned with the
consent of the Member States, for example by the ISA programme. Current cooperation
between some Member States seems to provide sufficient grounds to begin providing basic
electronic services across European borders.
Page 1 of 3

Markus Hartmann, Managing Director of HJP Consulting states: “The European Union is
heading towards a common service market. Therefore citizens must be enabled to
authenticate themselves online cross border without any barriers. We are proud that
ENISA once again has used our expertise on designing large eID systems to promote this
mission to European politicians and opinion leaders”.
For further information, please review the report, which can be downloaded on the ENISA
website: http://www.enisa.europa.eu/act/it/library/deliverables/map-auth-lev.
About ENISA
The European Network and Information Security Agency (ENISA) is an EU agency created
as a response to security issues of the European Union. The Agency's Mission is essential
to achieve a high and effective level of Network and Information Security within the
European Union. Together with the EU-institutions and the Member States, ENISA seeks
to develop a culture of Network and Information Security for the benefit of citizens,
consumers, business and public sector organisations in the European Union.
ENISA is a centre of expertise for the European Member States and European institutions
in network and information security, giving advice and recommendations and acting as a
switchboard of information for good practices. Moreover, the agency facilitates contacts
between European institutions, the Member States and industry players.
For further information please contact:
Slawomir Gorniak
Technical Competence Department
ENISA - European Network and Information Security Agency
Vassilika Vouton
P.O. Box 1309
71001 Heraklion
Crete, Greece
Slawomir.Gorniak@enisa.europa.eu
http://www.enisa.europa.eu
About HJP Consulting
HJP Consulting, based in Borchen near Paderborn (Germany), is an internationally
operating firm of IT consultants specialising in the planning and testing of eID solutions with
a focus on eID and e-health applications.
The manufacturer-independent specialists at HJP Consulting supervise large-scale
projects for introducing e-passports and eID systems at both the technical and strategic
level. The firm’s consulting services encompass the areas of system architecture, software
specification, tenders, quality and security management, and project management. Both
governments and system integrators profit from HJP’s comprehensive expertise. At
present, the HJP team is working on the introduction of e-passport systems for the
ministries of the interior in the UAE, Sudan and the Sultanate of Oman as well as on
architecture projects for the introduction of the telematic infrastructure in the German health
sector.
Since 2008, Markus Hartmann, Managing Director of HJP Consulting, has also been a
member of the ICAO Implementation and Capacity Building Working Group (ICBWG), a
working group commissioned by the International Civil Aviation Organization (ICAO) to
support states with the introduction of machine-readable travel documents.
Page 2 of 3

Markus Hartmann
Managing Director
HJP Consulting GmbH
Hauptstraße 35
33178 Borchen (Germany)
Phone: + 49 5251 417760
markus.hartmann@hjp-consulting.com
https://www.hjp-consulting.com
http://www.globaltester.org
Anke Larkworthy
Consultant, Sales & Marketing
anke.larkworthy@hjp-consulting.com
About STORK
STORK is an ICT Policy Support Programme under the Competitiveness and Innovation
Framework Programme (CIP). It involves 17 EU Member States: Austria, Belgium,
Estonia, Finland, France, Germany, Italy, Lithuania, Luxembourg, Netherlands, Portugal,
Slovak Republic, Slovenia, Spain, Sweden, the UK and Iceland (as an EEA member). The
EU's Competitiveness and Innovation Framework Programme (CIP) aims to encourage the
competitiveness of European enterprises. Part of CIP, the ICT Policy Support Programme,
focuses on stimulating innovation and competitiveness through the wider uptake and
optimal use of ICT by citizens, businesses and governments. The timing and objectives of
STORK are ideal for producing high impact and contributing to the proposed objectives of
the Lisbon Ministerial Declaration (2007), that is to say interoperability among Member
States and reduction of administrative bureaucracy. In the i2010 eGovernment Action
Plan, EU Member States recognized the importance of electronic identification
management. By 2010, they aim to provide secure and convenient electronic systems for
European citizens and businesses accessing public services in any country of the
European Union. These should work at local, regional or national levels and comply with
data protection regulations.
For more information:
https://www.eid-stork.eu/
Editorial Contacts:
STORK Press Office
press@eid-stork.eu
Page 3 of 3