NeDAP eSecurity Action Line

SOIS meeting 7.04.2006, Riga

Jaak Tepandi, Estonia

Action Line 2: A Secure Information Infrastructure. Focus areas 2005-6

Trustworthy network and information infrastructures with an emphasis on emerging technologies Secure European electronic signature infrastructure and the roll-out of applicationsLegal and technical interoperability, deployment of e-servicesA ‘culture of security’ in the design and implementation of information and communication products Security-related standards and best practices for organisations, services, and systems

Three main activity areas

Investigation and exchange of best practices in the network and information infrastructure security area

Research oriented activities: security of e-voting, digital signature interoperability

Project oriented activities: Secure exchange of data between national population registers

Investigation and exchange of best

practices (1) • Good practices at www.egov-goodpractice.org:

– A Population-Wide ID card– Special citizens web portal with Standard DB-

services• Development of the Estonian information

security policy. Presentation on the Finnish-Estonian Joint Seminar on the Protection of Critical Information Infrastructure, Tallinn, 22.04.2005

Investigation and exchange of best

practices (2) Information systems auditing workshop in Tallinn

Best practices on the information security policies and strategies, development of the Estonian information security policy and strategy

Proposals for Nordic Council of Ministers, IT Committee (EK-IT)

European Network & Information Security Agency

Reports on the SOIS meetings and the Baltic IT&T workshops

Digital signature interoperability

Analysis of cryptographic protocols to improve the digital signature interoperability

Digital signature interoperability related seminars, presentations, articles, project proposals

Idea for and co-operation in the digital signature interoperability project

A workshop on digital signature interoperability

Digital signatures in interoperable electronic services. Baltic IT&T Review

E-voting, I-voting

• International seminar on e-voting (September 2005)

• Principles of eVoting System Security Evaluation - a paper and presentation on the eChallenges2005 conference

• Managing security risks in e-voting over the internet - a paper and presentation on the eChallenges2005 conference

Secure exchange of data between national population registers

Secure exchange of data between the Estonian and Finnish population registers in implementation

Changes in legislation in progress concerning exchange of data between the population registers

Presentations on the SOIS meetings, the Baltic IT&T workshops, the AL meetings and other events

Meeting on Swedish and Estonian Population Registers

Authentication into registers via national ID cards, exchange of data

Thank you!