Why eIDAS? eID under eIDAS compliance Alice Vasilescu, European Commission 16-11-2017, JenV informatiemarkt, Den Haag

Agenda 1 Benefits of eIDAS eID 2 What is the status in Europe 3 What is the status in The Netherlands 4 What is the status in The Netherlands

Benefits of eIDAS

Europe has worked hard to make physical borders transparent… Europe Union stands for freedom, freedom for citizens and their right to move and reside freely within the Union. Therefore a lot of work has done in removing the physical borders. And yet, in the digital world we still encounter some barriers. … but digital borders still exist.

eIDAS for Citizens One obstacle that the European Union is working on is for example the access of citizens to online services wherever they are in Europe in a secure, cost efficienct and user friendly way. Access online services in any Member State with their national eID with required security, ease of use, and cost efficient

What does this mean concretely What does this mean concretely? Let's have a look at the story of Karen and Francois.

The eID ecosystem NODE OPERATORS SERVICE PROVIDERS Member States IDENTITY/ATTRIBUTE PROVIDERS CITIZENS Before going into the benefits, it is important to have a high level picture of the ecosystem. Here you can notice that besides the usual IDPs SPs and User we have the MS, because it is about a service delivered by the MS for the MS and their citizens. Cross border authentication mutual recognition

eIDAS Interoperability Architecture Member State A Relying Party Member State B eIDAS-Node eIDAS-Node Citizen Member State B 3 Proxy-Service SAML Proxy-Service 1 2 4 Connector Identity Provider Connector Without going into technical details, this is a high level picture of how the technical solution looks like. What it means? Each MS has to deploy a node and connect their services to them so that citizens can access them and have cross-border transactions. 6 5 Service Provider MDS

The Tallin Declaration, October 6, 2017 Why should we consider eIDAS? The EU has strongly endorsed it and vote to: Speed up the implementation of the eIDAS regulation, including the notification of electronic identity schemes Making digital public services secure and identifiable by using the eIDAS framework for qualified electronic trust services © Arno Mikkor / EU2017EE The Tallin Declaration, October 6, 2017 EU to implement electronic ID for residents to accelarate adoption of e-government services

The benefits of eIDAS eID User centric SECURE CROSS- BORDER AUTHENTICATION What are the key features of eIDAS eID service ? 0. It has a legal framework , delivered by MS for the MS It is about a secure cross-border authentication service It is designed to be user centric – to make citizens life easier and more secure It is flexible because it is designed to work in different domains (it is not domain specific) It has a governance under the eIDAS Regulation (Cooperation Network) and also under Connecting Europe Facility And it can generate cost saving – reuse of existing solutions and potential CEF funding. Flexible Cost saving CEF Governance and operations

The benefits of CEF eID for different actors Cross-border online services Ease of use Cost saving Increased assurance Citizen Use eID Public administration Cost saving Compliance Increased assurance Financial support National eIDAS Node Set up New areas of application Increase value for users Drive national adoption Identity/Attribute providers What are the key messages? eIDAS eID helps European project to have a cross border solution for authentication and removes some of the digital barriers – access to online services Each actor from the eID ecosystem has benefits, from the citizen (as mentioned before) to the IDPs and SPs. You can see them in slides. While we talk about cross-border transactions (perhaps 10% of all online ones) , we must not forget that all these activities push the national solutions to increase their security, user experience and overall their quality. As a result  Drive national adoption and increase user value. Provide identity/attributes Cost saving Legal compliance Increased security/assurance Increase potential user base Financial support Service providers Offer services using eID

What is the status What is the status in Member States?

EU MS and associated countries implementing an eIDAS-Node Pictures speak for themselves. Most MS implementing and testing EU MS and associated countries implementing an eIDAS-Node EU MS and associated countries with nationally- issued eID schemes Currently setting up 74% Planning stage 26% Currently with 90% Currently setting up 10% * Please note that these maps reflect information published on the CEF Digital country page, based on information publically available (eg. INEA grants, governmental websites) and updates provided by the Member States experts of the Cooperation Network.

eID schemes notified Germany 20 February 2017: first pre- notification 26 September 2017: official notification A milestone towards establishing eID and trust services in Europe achieved! Germany National ID card 40.000.000 registered users 26.09.2017 …. and 2 more countries are intending to pre-notify their schemes by the end of 2017 ! The only thing missing is the notification. So far we have DE that has completed the notification process.

Other encouraging achievements DE In December 2016, The Netherlands, Austria and Germany have managed to connect their identification and authentication systems via their (technically compliant) eIDAS nodes in production AT NL Other great achievements. By November 2017, ten countries have used the CEF eID testing service, a service provided by the European Commission's Directorate General for Informatics (DIGIT). AT HR NL SK EE IT NO ES MT PL

Status in the Netherlands

eIDAS in the Netherlands Current State of Play 16 November 2017

Dutch government initiatives Connecting Dutch governmental service providers to NL-PEPS / eIDAS node 2015-NL-IA-0078 December 2017 Testing and piloting the NL eID ecosystem, including connection to the Municipal Personal Records Database 2017-NL-IA-0014 September 2018 Dutch government initiatives The Action's objective is to connect Dutch governmental service providers (CIBG Agency, Dutch ministry of Security and Justice, RVO) to the NL- eIDAS node by eRecognition brokers, as a prelude to the connection through the Dutch framework for Electronic Access Services (EAS). To reach this objective, this action will: • Create an interface in cooperation between the Identity Providers (IDP) brokers (KPN, Digidentity and Connectis), the governmental service providers and the owner of the NL-eIDAS node, which will prove the technical and operational ability to grant access to citizens and businesses from other EU member states to services of Dutch governmental service providers, using their own national eID method. The interface is composed of 3 components: - The eIDAS node – broker interface (the eIDAS message service); - An eIDAS / EAS compatible broker; - A Broker – Service Provider interface; - Connect 3 government service providers.   The Action will support the Netherlands in meeting the requirements of the eIDAS Regulation and will facilitate access to Dutch public e-services for all EU citizens and businesses using their national eID, and thus ensure cross-border mobility and support and strengthen the Single Market. This Action will also allow government service providers and brokers to acquire knowledge and experience on how to connect to the NL-eIDAS node, facilitating further adaptations and reducing the costs.

Justice Federation Broker Citizens & companies Justice Ministries

Q&A Thank you for your attention

Find out more about eID on CEF Digital Directorate-General for Informatics DG CONNECT Directorate-General for Communications Networks, Content and Technology Contact us CEF-EID-SUPPORT@ec.europa.eu © European Union, 2017. All rights reserved. Certain parts are licensed under conditions to the EU. Reproduction is authorized provided the source is acknowledged. ec.europa.eu/cefdigital