FIDIS Future of Identity in the Information Society Title: “D4.2: Set of requirements for interoperability of Identity Management Systems” Author: WP4 Editors: James Backhouse (LSE) Michael Vanfleteren (KU Leuven) Reviewers: Els Soenens (VUB, Belgium) Paolo Spagnoletti (Luiss University, Italy) Identifier: D4.2 Type: [Deliverable] Version: 1.1 Date: Tuesday, 20 December 2005 Status: [Final] Class: [Public] File: fidis-wp4-del4.2.Set_of_requirements.doc Summary This report highlights the spread of opinion amongst a group of European experts in application areas of identity management on the issue of interoperability of such systems. It builds from an earlier report that presented a literature review and an account of research in interoperability. It uses the three-part conceptual framework of technical, formal and informal dimensions through which to frame the questions posed and interpret the answers given. The 23 interviewees from 5 different European countries, while differing in detail, display a remarkable consensus on much of the issues. Application areas from which the experts are drawn cover egovernment, ehealth and ecommerce, and while, given their specific nature, there may be many points on which such areas diverge, the likelihood of interoperability is deemed to turn on a small number of key questions, mostly non-technical. Importance is given to building trust in the citizen and end-user through good communication, usability, compliance with data protection and privacy principles. Copyright © 2004-05 by the FIDIS consortium - EC Contract No. 507512 The FIDIS NoE receives research funding from the Community’s Sixth Framework Program FIDIS D4.2 Future of Identity in the Information Society (No. 507512) Copyright Notice: This document may not be copied, reproduced, or modified in whole or in part for any purpose without written permission from the FIDIS Consortium. In addition to such written permission to copy, reproduce, or modify this document in whole or part, an acknowledgement of the authors of the document and all applicable portions of the copyright notice must be clearly referenced. The circulation of this document is restricted to the staff of the FIDIS partner organisations and the European Commission. All information contained in this document is strictly confidential and may not be divulged to third parties without the express permission of the partners. All rights reserved. PLEASE NOTE: This document may change without notice – Updated versions of this document can be found at the FIDIS NoE website at www.fidis.net. [Final], Version: 1.1 Page 2 File: fidis-wp4-del4 2 set_of_requirements.doc FIDIS D4.2 Future of Identity in the Information Society (No. 507512) Members of the FIDIS consortium 1. Goethe University Frankfurt Germany 2. Joint Research Centre (JRC) Spain 3. Vrije Universiteit Brussel Belgium 4. Unabhängiges Landeszentrum für Datenschutz Germany 5. Institut Europeen D'Administration Des Affaires (INSEAD) France 6. University of Reading United Kingdom 7. Katholieke Universiteit Leuven Belgium 8. Tilburg University Netherlands 9. Karlstads University Sweden 10. Technische Universität Berlin Germany 11. Technische Universität Dresden Germany 12. Albert-Ludwig-University Freiburg Germany 13. Masarykova universita v Brne Czech Republic 14. VaF Bratislava Slovakia 15. London School of Economics and Political Science United Kingdom 16. Budapest University of Technology and Economics (ISTRI) Hungary 17. IBM Research GmbH Switzerland 18. Institut de recherche criminelle de la Gendarmerie Nationale France 19. Netherlands Forensic Institute Netherlands 20. Virtual Identity and Privacy Research Center Switzerland 21. Europäisches Microsoft Innovations Center GmbH Germany 22. Institute of Communication and Computer Systems (ICCS) Greece 23. AXSionics AG Switzerland 24. SIRRIX AG Security Technologies Germany [Final], Version: 1.1 Page 3 File: fidis-wp4-del4 2 set_of_requirements.doc FIDIS D4.2 Future of Identity in the Information Society (No. 507512) Versions Version Date Description (Editor) 0.1 25.09.05 • Initial release based on editorial meeting with Michaël Vanfleteren (John Baptista) 0.2 05.10.05 • Added edited interviews and agreed structure of document (John Baptista) 0.3 15.10.05 • Added ecommerce chapter (Michael Vanfleteren) 0.4 17.10.05 • Final draft (John Baptista) 0.5 25.10.05 • Revised draft for editorial review (James Backhouse 0.6 07.11.05 • Changes made based on reviews (John Baptista) 1.0 11.11.05 • Final version (James Backhouse) 1.1 20.12.05 • Final delivery version [Final], Version: 1.1 Page 4 File: fidis-wp4-del4 2 set_of_requirements.doc FIDIS D4.2 Future of Identity in the Information Society (No. 507512) Foreword FIDIS partners from various disciplines have contributed as authors to this document. The following list names the main contributors for the chapters of this document: Chapter Contributor(s) Introduction James Backhouse (UK, LSE) Background, methods and panel of interviewees John Baptista (UK, LSE) Themes addressed in the interviews John Baptista (UK, LSE) ecommerce Michael Vanfleteren (KUL, Belgium) egovernment John Baptista (UK, LSE) ehealth John Baptista (UK, LSE) Towards a set of requirements James Backhouse (UK, LSE) Conclusion James Backhouse (UK, LSE) Report 1: Marc Sel, ecommerce Els Kindt (KUL, Belgium) Report 2: Oliver Libon, egovernment Michael Vanfleteren (KUL, Belgium) Report 3: Paul Timmers, egovernment Michael Vanfleteren (KUL, Belgium) Report 4: Frank Robben, ehealth Xavier Huysmans (KUL, Belgium) Report 5: Bernd Burkert, ecommerce Martin Meints (ICPP, Germany) Report 6: Bettina Neke, ehealth/egovernment Martin Meints (ICPP,Germany) Report 7: Hannes Federrath, ecommerce Andreas Westfeld and Sandra Steinbrecher (TUD, Germany) Report 8: Gerhard Weck, ecommerce Andreas Westfeld and Sandra Steinbrecher, (TUD, Germany) Report 9: Bettina Müller, ehealth Andreas Westfeld and Sandra Steinbrecher, (TUD, Germany) Report 10: Rüdiger Dierstein, ehealth Andreas Westfeld and Sandra Steinbrecher (TUD, Germany) Report 19: Herbert Leitold, ecommerce Stephan Freh (LSE, Austria) Report 20: Arno Hollosi and Bernd Martin, Stephan Freh (LSE, Austria) egovernment Report 21: Heinz Otter, ehealth Stephan Freh (LSE, Austria) Summary of key contributors: LSE: James Backhouse, John Baptista, Stephan Freh and Christopher Lovold K.U.Leuven R&D: Els Kindt, Michaël Vanfleteren and Xavier Huysmans ICPP: Martin Meints and Martin Rost TUD: Andreas Westfeld and Sandra Steinbrecher [Final], Version: 1.1 Page 5 File: fidis-wp4-del4 2 set_of_requirements.doc FIDIS D4.2 Future of Identity in the Information Society (No. 507512) Table of contents 1 EXECUTIVE SUMMARY .................................................................................................................8 2 INTRODUCTION ...............................................................................................................................9 2.1 THIS DELIVERABLE..........................................................................................................................9 2.2 STRUCTURE OF THIS DOCUMENT ...................................................................................................10 3 METHODS AND PANEL OF INTERVIEWS ..............................................................................11 3.1 METHODOLOGY ............................................................................................................................11 3.2 PANEL OF EXPERTS........................................................................................................................12 4 MAIN THEMES ADDRESSED IN THE INTERVIEWS .............................................................18 5 ECOMMERCE..................................................................................................................................20 5.1 MAIN IDENTITY ISSUES..................................................................................................................20 5.2 IMPORTANCE OF INTEROPERABILITY .............................................................................................21 5.3 DEFINITION AND WHAT IS ENABLED ..............................................................................................21 5.4 IDEAL SCENARIO OF FULL INTEROPERABILITY...............................................................................22 5.5 REQUIREMENTS FOR USERS, GOVERNMENTS AND MERCHANTS .....................................................23 5.6 BENEFITS FOR USERS, GOVERNMENT AND MERCHANTS.................................................................25 5.7 BARRIERS FOR INTEROPERABILITY................................................................................................25 5.8 ACTIONS AND RELATIVE IMPORTANCE AT THE TECHNICAL, LEGAL AND CULTURAL LEVELS .........27 5.9 ROLE OF GOVERNMENT, MERCHANTS AND USERS TO FOSTER INTEROPERABILITY.........................29 6 EGOVERNMENT.............................................................................................................................31 6.1 MAIN IDENTITY ISSUES..................................................................................................................31 6.2 IMPORTANCE OF INTEROPERABILITY .............................................................................................31 6.3 DEFINITION AND WHAT IS ENABLED ..............................................................................................32 6.4 IDEAL SCENARIO OF FULL INTEROPERABILITY...............................................................................32