Digital Identity and Access management for cloud based services
Until now, identity and access management – as part of Security and Privacy for Cloud-based Services with person-related data – has not been comprehensively well defined by the EC. Actions and Pan-European regulations are still missing. Two-factor authentications of all users, according to the pan European framework for electronic identification, authentication and signature, are recommended when it comes to gaining access to person-related data, databank and data management systems. A European guideline and regulation in the near future could foster the internal market in Europe and instill more trust among citizens, as well as for enterprises and the public sector with regard to data protection and privacy. We believe this could be an important element of the Digital Agenda for Europe as well as Europe for cloud ready. This approach could avoid national specific policies and guidelines in 27 Member States, which foster non-interoperability on security, privacy and data protection in Europe.
Eurosmart will publish on 20 June 2012 a comprehensive paper on Digital Identity and Access management for cloud based services, with policy recommendations. Detlef Houdeau, convenor of Eurosmart eID Working Group, will make a presentation at the event “Security and Privacy for the Digital World – Solutions from the Smart Security Industry” on the same day: http://www.eurosmart.com/index.php/component/content/article/184.html.








Comments
It would be really
It would be really interesting to get more on information on your proposal but i guess this cannot happen before 20 of June.
Until then, what should a European guideline and regulation contain or regard to foster the internal market in Europe and instil more trust among citizens?
Only problem is that this
Only problem is that this will not secure cloud (as you cannot trust any key controlled in cloud) and it will be non-interoperable as it prevents pseudonymous use of cloud which is the only way know to secure data in cloud.
EUROsmart likes to claim security, but in reality is always pushing outdated perometer security and surveillance instead of security. And Eurosmart have so far not presenting anything that can support or enable privacy.