Search

The digital identity (or electronic identity) of a person is about being able to prove upon authentication who one is on the Internet, with a certain level of assurance, such as by means of some attributes obtained from a trustworthy Identity Provider. In Europe, the eIDAS Network allows the citizens to authenticate securely with their national credentials and to provide such personal attributes when getting access to Service Providers in a different European country. Although the eIDAS Network is more and more known, its integration with real operational services is still at an initial phase. This paper presents two eIDAS-enabled services, Login with eIDAS and Wi-Fi access with eIDAS, that we have designed, implemented, deployed, and validated at the Politecnico di Torino in Italy. The validation study involved several undergraduate students, who have run the above services with their authentication credentials and platforms and with minimal indications on their usage. The results indicate that the services were beneficial. Several advantages exist both for the users and for the Service Providers, such as resistance to some security attacks and the possibility to adopt the service without prior user registration (e.g. for short meetings, or in public places). However, some students expressed doubts about exploiting their national eID for Wi-Fi access, mainly in connection with usability and privacy issues. We discuss also these concerns, along with advantages and disadvantages of the proposed services.

In this article, we present a list of 51 technical requirements for a new Peru’s national electronic identity (eID) card, grouped on four categories: general, card, hardware (subdivided into the antenna, chip, and memory), and software (subdivided into the operating system, applications, middleware, and complements). Their definition was based on features of the current eID card, the existing international standards, and the current state of technology. Their relevance was validated by RENIEC specialist personnel, and their usefulness was validated in practice, being the base of an international public tender for the acquisition of three million cards.

The EU Regulation 910/2014 on electronic identification and trusted services for electronic transactions in the internal market, known also as eIDAS Regulation, will become effective on 29 September 2018. By that date, each EU Member State is required to recognize the electronic identities of other EU Member States that have notified their electronic identification (eID) schemes. From the technical point of view, intensive efforts are being spent to effectively connect the various national eID schemes in a unified interoperability architecture, the eIDAS infrastructure.This paper describes our proposal to integrate academic attributes into the eIDAS infrastructure, as part of the ’’eID for University’’ project (in short eID4U). This project aims to support the practical implementation of the eIDAS Regulation in a selected set of academic services at the universities participating in the project. The objective is to enhance the eIDAS infrastructure with support for academic attributes and to design and implement a set of eIDAS-enabled academic e-services, like the Registration in some study programmes (e.g. Erasmus student exchange programme) or the Login facility (with national eIDs) on a foreign university’s web portal.

Electronic identity (eID) systems enable electronic services and applications to identify users reliably. In an eID system, unique data, i.e. an eID, is assigned to each user. The eID unambiguously identifies the user within the eID system. In most cases, the user's eID is extended by additional attributes such as name, address, or date of birth. The assigned eID and associated attributes are used by electronic services and applications to identify users unambiguously and to obtain required information about these users. In practice, required user attributes potentially need to be exchanged between different eID systems. Unfortunately, each eID system uses its own ontology to represent and organize eIDs and associated attributes. This diversity of ontology definitions prevents an easy exchange of eIDs and attributes between eID systems. To address this issue, we propose an ontology-alignment solution that provides interoperability between eID systems. We show the feasibility of the proposed solution through a web service (WS) based implementation. This WS enables eID-based applications to retrieve eID attributes from different eID systems. Experiments conducted show that the proposed solution and the resulting WS works with arbitrary ontologies and hence provides interoperability between eID systems.

The use of electronic documents is constantly growing and the necessity to implement an ad-hoc eCertificate which manages access to private information is not only required but also necessary. This paper presents a protocol for the management of electronic identities (eIDs), meant as a substitute for the paper-based IDs, in a mobile environment with a user-centric approach. Mobile devices have been chosen because they provide mobility, personal use and high computational complexity. The inherent user-centricity also allows the user to personally manage the ID information and to display only what is required. The chosen path to develop the protocol is to migrate the existing eCert technologies implemented by the Learning Societies Laboratory in Southampton. By comparing this protocol with the analysis of the eID problem domain, a new solution has been derived which is compatible with both systems without loss of features.

In the Project “Semantic Product Memory” we exploit the lessons learned so far for the general design of a Digital Product Memory (DPM). DPMs can be used along their product's life cycle to collect data by different instances. In case of the individualized weekly medicament blister for patients from 7×4 Pharma not only the collected data but even the product itself is private. If we equip such a product with a DPM the collected data should be accessible -individually or role-based- only by authorized persons. This authorized access can be accomplished via a roles and rights management system and a secure identification provided by the new German electronic identity card. With our demonstrator we will present a system, which allows an authorized access on a DPM. Depending on the rights and roles of a user different data and different views will be available and displayed accordingly.

The contemporary e-commerce is still missing a widely available and acceptable electronic cash (e-cash) system for the masses. This problem is due to the conflict of interests between banks, governments and community. In this paper we first describe the problems faced by past e-cash systems. Then we focus on the so-called success factors, which are essentially required for a highly accepted e-cash system. Based on these success factors, we will present a new system called fairCASH. fairCASH is a multi-purpose, multihop, pre-paid and anonymous electronic payment system. It makes use of a secured chip (CASTOR), which is completely under user's control. The chip uses a new identification technology called Electronic Identity Mutation (EIM) to fabricate uniquely electronic identities.