17 March 2010 Workshop on Efficient and Effective eGovernment FASTeTEN : a Flexible Technology in Different European Administrative Contexts +32 (0)

17 March 2010 Workshop on Efficient and Effective eGovernment FAST Project FAST Platform

17 March 2010 Workshop on Efficient and Effective eGovernment EU supported project – pilot deployment of award-winning FAST trust infrastructure Contributes to Commission's defined European eGov objectives: providing tools that can be used flexibly and interoperably by European administrations Adaptation of French-developed bundle of services to Spanish and UK local/regional government contexts F.A.S.T. : Fully Automated Secured Transactions services

17 March 2010 Workshop on Efficient and Effective eGovernment FACTS Initial Deployment project, from 01/01/2007-to- 31/12/2009 years, funding 2.2M Trust and secure European platform for Data exchange between all levels of administration (European, Central, Regional and Local). Consortium will develop for the FP6 and Public Sector projects a playfield to help architecting, deploying, and testing robust and flexible trust and secure infrastructure solutions. Beneficiaries are The Industry sector for secured exchanges with administration (Spain) The Department of Education, pupils, teachers, parents and Administrative (UK), Where does it take place ? In the region of Valencia in the e-Procurement arena In the Department of Education (based in Sheffield) in UK Deployment plans are to extend this project in Belgium, Hungary, Italy, Bulgaria and Malta Member States involved : France, UK, Spain, Belgium, Italy, Hungary, Malta, Bulgaria, Fully Automated Secured Transactions services

department for education and skills creating opportunity, releasing potential, achieving excellence FASTeTEN Project partners

17 March 2010 Workshop on Efficient and Effective eGovernment FAST Project FAST Platform

17 March 2010 Workshop on Efficient and Effective eGovernment The FAST technologies Introduction What are the FAST technologies designed for? –Secure data exchange –Long-term electronic evidence What are the FAST technologies? –The FAST platform –The FAST APIs

17 March 2010 Workshop on Efficient and Effective eGovernment The FAST technologies Security Rationale –The FAST technologies process highly sensitive data, which require a high level of security Security mechanisms –Authentication and integrity –Confidentiality –Evidence –Availability

17 March 2010 Workshop on Efficient and Effective eGovernment The FAST technologies Interoperability Rationale –Standard formats and protocols are best suited for long-term conservation of electronic evidence Interoperable formats and protocols –Electronic signature –Encryption –Digital certificates –Revocation status –Time-stamping –Request format and transport

17 March 2010 Workshop on Efficient and Effective eGovernment The FAST platform Transmission process 1.Authentication and access control 2.Signature validation 3.Time-stamping 4.Transmission to the recipient 5.Creation of the proof 6.Archiving 7.Indexing

17 March 2010 Workshop on Efficient and Effective eGovernment The FAST platform Extensibility Time-stamping –Time-stamp authorities Validation –PKIX X.509 certificates Transmission –Web services, proprietary protocols Archiving –Archive authorities

17 March 2010 Workshop on Efficient and Effective eGovernment The FAST platform Infrastructure The Software as a Service (SaaS) version of the FAST platform is hosted by Informatique CDC Highly secure premises Highly available infrastructure Proficient personnel

17 March 2010 Workshop on Efficient and Effective eGovernment The FAST APIs : Overview Two major APIs –Signature API –Encryption API Common desktop and server environments are supported –Windows, UNIX/Linux, Mac OS X –Java, COM object, C API Validation requests are web service-based

17 March 2010 How does FAST create legal evidence? Sender FAST a) Preparation of outbound message b) Electronic signature c) Data encryption (optional) a) Preparation of outbound message b) Electronic signature c) Data encryption (optional) Transmission Origination check (authentication) Origination check (authentication) Global archiving Transmission to the authenticated receivers Decryption of the data Transmission to the authenticated receivers Decryption of the data Validation of the transmission (certificate / signature) Time stamping Receiver FAST creates evidence at each step of the transaction

17 March 2010 Workshop on Efficient and Effective eGovernment What can I use FAST for ? Legality check Public accounting Health Legal archiving Welfare Convocation of elected people Education Birth and death certificates Urbanism E-procurement

17 March 2010 FAST treatments : Several rules adapted to the exchanges considered Workflow engine XML Time stamping Validation Archiving Recuperation of a legal time-stamp or internal time stamping Extraction of the data included in the stamp for historical archiving Recuperation of a legal time-stamp or internal time stamping Extraction of the data included in the stamp for historical archiving Validation of the certificates used for the exchange / for signing documents Verification of the signatures and of the roles of the people signing (habilitations) Counter-signature FAST validating the exchange Validation of the certificates used for the exchange / for signing documents Verification of the signatures and of the roles of the people signing (habilitations) Counter-signature FAST validating the exchange Post-treatment data recuperation Addition of data for a historical purpose Archive sealing to guarantee integrity Conservation in a database or sending to a third-part archiveur Post-treatment data recuperation Addition of data for a historical purpose Archive sealing to guarantee integrity Conservation in a database or sending to a third-part archiveur Data reception Final sending

17 March 2010 A powerful rights management and authentication engine is embedded in FAST Users are being attributed X509v3 electronic certificates: Software or personal certificates depending on the profile Multi PKI interoperability Rights management By application By profileOr delegated to the client A single client entity can access several services corresponding to several applications A same user can have several profiles and several rights depending on the service he is using The e-services manager is responsible for managing the rights within his structure