1. eCertification European Union approach and policy
Philippe LOOPUYT
DG SANTE - Head of Unit G5
Alerts, Traceability & Committees
TRACES WG
05 February 2018

2. SPS certification flow today
EU TRACES
The Official document is the paper
NonEU System
TRACES EO
CA origin
CA EU borders
SPS
Certificate
SPS
Certificate
EU entry
Document
SPS
Certificate
create
validate
checks

3. Impact of New EU Official Control Regulation on SPS certification
ANIMALS
PLANTS
GMOs
PLANT PROTECTION PRODUCTS (PPP)
HEALTH
WELFARE
ENVIRONMENT
MARKETING
STANDARDS
(only for fraud)
New scope means more room for exchanges
Check whether your services are capable of covering all these topics, because you might receive a request from another MSs service which does have these competencies
Be ready to know who is dealing with these topics in your MS

4. New EU Official Control Regulation:
IMSOC (Integrated Management System for Official Controls)
Certification (Animal, Animal products, Organic, Plants, Timber, Fish Catches …) including eCertification (IMSOC)
Identification (e.g. bovine)
Diseases Notification (Plant, Animal)
All Certification transactions for EU should end-up in IMSOC

5. How to: IMSOC Step by Step
EUROPHYT
ADNS
TRACES
EUROPHYT
BOVEX
iRASFF
AAC
TRACES
iRASFF
IMSOC
ADNS
BOVEX
AAC
Align legal acts to achieve same standards
Align datasets and data dictionaries
Establish communication protocols EU-MS & non-EU
Paperless & Streamline functions
TRACES
BOVEX
iRASFF
AAC FF

6. IMSOC Principles Evolution and no revolution
Worldwide applicable standards for interoperability
Integration at all levels (including MS National systems)
eIDAS EU regulation principles as basis for paperless
Legal deadline December 2019

7. EU Paperless eCertification

8. The official control’s digital strategy : a new vision of exchanges
Full paperless flow for documents:
veterinary and phytosanitary certificates for imports, exports and for intra EU trade,
EU entry documents (CVED, CED, CHEDPP -> CHED),
organics certificates (COI),
timber licences (FLEGT)
fish catch certificates
Dematerialisation of the border clearance process: Data exchange with EU Customs Single Window
Objective: Digital becomes the Original Document, Paper is then only a working copy

9. How to sign
Since 2005: Regulation on TRACES to make it compulsory for intra EU movements and import of animals and products of animal origin
Since July 2016 : Regulation eIDAS gave a legal value to the e-sanitary certificate without imposing it
Council directive 2000/29 on plants, article 13 and possibility of e-Certification (will be implemented in 2018)
From December 2019 :New Official Control Regulation (2017/625) will provide e-Certification on all SPS domain

10. eIDAS: the 4 levels of signature
SIMPLE
SIGNATURE
Level 2
ADVANCED SIGNATURE
Level 3
ADVANCED + SIGNATURE
Level 4
QUALIFIED SIGNATURE
ETSI NORM
Without registration
ETSI
ETSI
ETSI +
SSCD
IDENTITY
No certificate or
certificate on the fly
Simple european certificate
Virtual smart card (authentication code )
On-line identity control
Qualified european certificate
Face to face identity control
Physical means (USB key, SSCD smartcard)
INTEGRITY
Qualified timestamp
Qualified timestamp
TRACABILITY
Electronic evidence
Login + password
Login + password + identity control
LEGAL VALUE
≤ 25%
≤ 50 %
≤ 75%
100%

11. Electronic seal VS server certificate
SERVER AUTHENTICATION CERTIFICATE
SSL CERTIFICATE
COMPLIANT WITH EIDAS REGULATION √ -
BEHALF OF THE LEGAL ENTITY
LEGAL VALUE TO THE DOCUMENT
√* (it depends on the regulation)
INTEGRITY OF THE DOCUMENT
AUDIT
ROLE OF TSP
GUARANTEE OF THE EXISTENCE OF THE ORGANIZATION
ORIGIN OF THE DOCUMENT
ACKNOWLEDGEMENT OF RECEIPT OF A DOCUMENT
AUTHENTICATION OF THE APPLICATIONS TO OTHER SERVERS
SECURE SESSIONS TO BE ESTABLISHED FOR EXCHANGING DATA BETWEEN SERVERS
AUTHENTICATION PROTOCOL
COMMUNICATION PROTOCOL

12. IMSOC SPS eCertificate : a regulated offer
A digital signature process in compliance with the eIDAS regulation (R (EU) N°910/2014)
a document […] writing in electronic form is admitted as evidence in the same way that written it on paper, subject to properly identify the person lodging it and that it be prepared and kept in conditions such as to ensure the integrity
a document signed with a digital signature technology in accordance with this regulation has a legal value
means of electronic identification of the physical and legal signatories 12

13. Digital is the original Document: How to for IMSOC interactive users?
Qualified Electronic signature in IMSOC:
Associate safely and individualy each eCertificate signatory agent with a qualified electronic signature capacity to be used in IMSOC,
Associate safely each SPS certification body (Competent Authority) with a dedicated electronic Stamp to be used in IMSOC,
Each agent previously enrolled for eSignature will produce electronic SPS eCertification document conform to EU paperless rules in eIDAS regulation

14. Electronic signature service for IMSOC-TRACES Users14

15. Digital is the original Document: How to do for Data exchanges between IMSOC and other systems?
Establish data exchange between the Non-EU country system and EU IMSOC
UNCEFACT eCERT based XML exchanges + Validation rules
Qualified Electronic signature & stamp in data exchanges:
Non-EU system sign the XML transaction with a qualified eStamp:
Enrolled by their own Trust Service provider
Enrolled by IMSOC Trust Service Providers,
Signed XML is the original document
IMSOC reconstructs and guarantees the human-readable eCertificate (copy conform to original)

16. Electronic signature for exchanges with IMSOC-TRACES16

17. IMSOC-TRACES Digital signature Draft implementation plan
Non-EU countries interactive users IMSOC-TRACES
Morocco (ONSSA), December 2017
Senegal (DITP), Côte d'Ivoire (DSV)
Ecuador (INP), Peru (SANIPES)
Any other volunteer is welcome
Non-EU countries exchanging XML data
New Zealand and Australia, Q1/Q2 2018
Member states
Spain & France on Morocco implementation
France with their remote territories, Q1/Q2 2018
EU Baltic states
EU airport platforms

18. Paperless SPS certification flow within IMSOC
The Official document is the digital one
TRACES
TRACES EO
CA origin
CA EU borders
create
validate & eSign
Checks, clone & eSign EU entry doc
copy

19. Paperless SPS certification flow with non-EU system
The Official document is the digital one
NonEU System
TRACES EO
CA origin
CA EU borders
create
validate & eSign
Checks, clone & eSign EU entry doc
copy

20. Benefits of the paperless food chain
Optimize the management of the sanitary certificate
Simplify trade - Reliable information at each stages of food chain - Reduce multiple copies & duplicates - Avoid loss
Reduce processing times
Pre-notification - Replacement - Anticipation of the receipt
Simplify & modernise the relations within EU MS and between EU MS and non EU countries
An online certification single window
Ensure integrity, traceability and legal value of the digital documents
Fight against fraud
Reduce costs

21. THANKS FOR YOUR ATTENTION