European overview - electronic signatures and related services

European overview - electronic signatures and

related services

Viky MANAILA

Managing director

1

Nicosia, 1st November 2013

Policy context

2

• EU legal framework only for e-signatures – Directive 1999/93/EC

• No comprehensive EU cross-border and cross-sector framework for e-identification, authentication, signatures and related trust services

Commission’s "eIDAS" legislative proposal on 4.6.2012

electronic Identification, Authentication, Signature and related Trust services

Scope of eIDAS

3

1. Mutual recognition of electronic identification

2. Electronic trust services:

– Electronic signatures interoperability and usability

– Electronic seals interoperability and usability

– Cross-border dimension of: 1. Time stamping,

2. Electronic delivery service,

3. Electronic documents admissibility,

4. Website authentication.

eIDAS is on the top of EU political agenda

• European Council of 14-15 March 2013:

– The rapid conclusion of the work is an essential priority,

– eIDAS is a key file

• European Council of 24-25 October 2013:

– to accelerate work on the pending legislative proposals, in particular the proposals on e-identification and trust services

– The modernization of public administrations should continue through the swift implementation of services such as e-government, e-health, e-invoicing and e-procurement

• Better digital services for the citizens

• Cost savings in the public sectors

4

eIDAS: Indicative process

5

Parliament

+ Council

adoption

Standards

Commission Decisions

Commission

Proposal

4.6.2012

2012 2014

Legislative process

2016 2017 2015 2013 2011

Secondary legislation

Standardisation mandate m460

NB. Dates are indicative

Seminars on e-signature in the South Mediterranean Region

• Low regional integration of the South Mediterranean economies is a barrier to growth

Cross-border business could increase if more e-business

• European Commission is organizing two exploratory seminars to: – Identify common business needs for regional e-transactions – Find out how to leverage local e-signature resources at regional level – Assess feasibility of regional cross-border e-signature interoperability – 1st seminar: 11-12 Nov 2013, Amman, Jordan – Hosted by TRC, Jordan’s Regulator – OPEN TO ANY INTERESTED PARTY

• Expected outcome: recommendations for further actions

– Possible recommendations: set-up a regional Trusted List, large regional project, approximation to EU e-signature legislation, enhance cooperation in international fora (UN, ISO, ITU, …)

6

Trans Sped – about us

• Certificate Service Provider since 2004 – Authorized and accredited by Romanian Ministry of IT&C www.mcsi.ro – Trusted Service Provider – in the Trusted List at European level

• Managed PKI Solution – TC TustCenter, Verizon, Deutsche Sparkassen Verlag

• Certification Authorities – Trans Sped Qualified CA – Trans Sped SAFE-BioPharma CA

• Solutions portfolio – digital signature and encryption, timestamping – strong user authentication and single sign-on – training courses

• Business partners – TC TrustCenter, Symantec, Verizon – Gemalto, Future Card, Athena, Bit4ID

7

Trans Sped - FBCA cross-certified

8

SAFE:Verizon

Symantec

Fed Common

Policy Root CA

Entrust

CertiPath

Bridge CA

SAFE

Bridge CA

Federal

Bridge CA

Boeing

Northrop

Grumman SITA

Lockheed

Martin

CertiPath

Common

Policy

Root CA

Exostar

VDoT

GSA

MSO

VeriSign

SSP

DoT HUD

Verizon Bus

SSP

EOP

VA

HHS

US Treasury

SSP

NASA

SSA

State

of

Illinois

DoE

Dept. of

State

US PTO

GPO

DHS

DoJ

E-Commerce

DoJ

DEA

ARINC

DoD

SA SA

AZ

Merck

ORC

ACES

EADS

Raytheon

VeriSign

GPO

SSP

USPS

NRC DoD

Interoperability

Root

DoL

EPA

REBCA

Identrust

J&J

Verizon

Pharmas

GSK

9

- Unitary approach - Several Providers – each country has its

providers, with few exceptions - Similar Regulations based on EU

Directive on electronic signature - Trusted Lists with Certification Service

Providers

- Different meanings for electronic signatures than EU

- Different level of trust for electronic signature – the highest for “wet signature” which is the equivalent of handwritten signature

Europe USA

Trans Sped – compliant with EU and USA requirements

10

Organization Pilots and Implementations

Abbott ELNs

Amgen Global Infrastructure

AstraZeneca ELN; eSubmissions (US); Investigator Portal; Global infrastructure

BMS ELNs; Promotional material review (EU); alliances; Indian CRO

EMEA EudraVigilance; eCTDs, regulatory submissions

GSK eSubmissions, R&D docs; Global infrastructure; Indian IT support

J&J eSubs; External partners; Records; CRO contracts

Eli Lilly eSubmissions

National Notary Association Digital Notary Signature

Pfizer ELNs; eSubmissions; contracts/SOWs; investigator portal

Premier Contracts

Sanofi-Aventis ELN; eSubmissions; Clinical portal; Legal; pharmacovigilance; finance and purchasing

SNAP Diagnostics Physician signatures on sleep apnea diagnostic

Pilots & Implementations - SAFE-BioPharma

Products&services

11

eSignature package Secure Signature Creation Device Qualified digital certificate for electronic

signature Easy Sign – a signing&encrypting application

Provides alternatives to the end users, relying parties, stakeholders and owners

Time and money saving Local applications Cloud applications No card reader needed No installation Platform- and location independent Trustworthy and secure User-friendly

Cloud-based solutions

Usage of e-Signatures - Romania

12

e-Health, e-Prescriptions e-Tax declarations

e-Tendering e-Banking

National Registrar of Companies

Signing an e-mail - demo

13

Signing a document - demo

14

Q&A

Contact: [email protected]

Trans Sped "ANGELOS COURT", NICOLAIDES SHOPPING CITY, FL203,

SPYROS KYPRIANOY AVENUE 84, (former STRATIGOU TIMAYIA),

LARNACA

15