MAJOR SHIFTS DRIVEN BY HIGH-SPEED NETWORKS

Transcription

1 MAJOR SHIFTS DRIVEN BY HIGH-SPEED NETWORKS Prof. Dr. Reinhard Posch CIO Federal Government AUSTRIA

2 PILLARS FOR FUTURE COMMUNICATION mobility FUTURE ICT agility SECURITY AND IDENTITY JURISDICTION AWARENESS HIGH SPEED NETWORKS

3 HIGH SPEED MOBILE DEVICES DIGITAL:AUSTRIA Mobile and distributed computing is driving Big Data and bandwidth New paradigms open up a variety of business models ALLWAYS ON BLURRS DATA LOCATION CAUSING MASSIVE TRAFFIC

4 HIGH SPEED AND CLOUD DIGITAL:AUSTRIA application and data floating around to optimize cost and performance CLOUD ULTRA HIGH SPEED IS AND WILL BE INCREASINGLY A COMPETITIVE FACTOR DECISIVELY IMPORTANT FOR PROVIDERS SECURITY WILL ADD A FURTHER DIMENSION WITH NEED FOR SPEED

5 SECURITY : SPECIFIC ISSUES WITH CLOUD

6 PRESENT CLOUDS NOT LEGALLY FIT CLOUD o eidas regulation asks Member States to notify and control qualified electronic identities and other services o Member States have to take liabilities o Present mechanisms in the PUBLIC CLOUDs neither fulfil technological nor legal requirements

7 eid : SECURITY : MOBILE DEVICES The Cloud - the future - the challenge STORAGE DOCUMENT COLLABORATION WEB SERVICES SECURITY PROVIDER HOW TO ACCESS HOW TO SIGN HOW TO ENCRYPT Tablett Mobile Laptop PC...

8 RISK CHANGES WITH CLOUD DIGITAL:AUSTRIA ATTACK POTENTIAL CLOUD DAMAGE POTENTIAL * VALUE PROTECTION PROVISIONING USER

9 HIGH SPEED : SECURITY IN THE CLOUD DIGITAL:AUSTRIA ADMINISTRATION SMEs EDUCATION WEBSERVICES Open DATA (GOV) CLOUD BYOD = existing devices, PCs, laptops, tablets... HTML5 WEBAPPS SSO MINIMUM FOCUS ON DEVICE PROPERTIES AVOID LOCAL PROCESSING AND STORAGE STORAGE e.g: SAP DOCS MAIL/CAL... Specific APPS SECURITY SERVICES... COMMUNICATION AND PRIVACY A CONDITIO SINE QUA NON FOR THE PUBLIC SECTOR

10 CRYPTO AND THE CLOUD DIGITAL:AUSTRIA KEEPING USABILITY AND CONVENIENCE OBSERVING NATIONAL INTERSTS MANAGING THE COMPLEXITY RESEARCH TO CLOSE THE OPEN ISSUES CRYPTO FOR CLOUD CRYPTO UNDER NATIONAL CONTROL KEEPING CONTROL OF COST AND EFFICIENCY DATA PROTECTION AND SECURITY MIGHT ALLOW EUROPE TO APPROACH COMPETITIVENESS IN CLOUD COMPUTING.

11 CAN WE CLOSE THE SECURITY LOOP? DIGITAL:AUSTRIA o Service hopping to WEB, FACEBOOK to APP etc. transition from one service to another offers security gaps in may cases o o o Identity is still at a very low level most cloud and other services are still at a one factor static identity which can easily be phished User Awareness not up to the security needs experience shows that there is little chance to tune it Liabilities and contracts protect services rather than users IDENTITY AND LIABILITY ARE THE MOST PROMISING AREAS WHERE IMPROVEMENT MIGHT HAPPEN

12 SKYTRUST : SECURITY WITH CLOUD IS RERALITY Separation CLOUD - SECURITY BYOS enabling the user bring your own security

13 eid : THE BASIC INGREDIENT FOR SECURITY : We need to know who is who before we can secure interests o o o o o Multi factor Crypto based Replay resistant Simple Accepted

14 STORK : where the EU ID story began. : Minimum security : Mutual recognition : Single protocol : Public and private Model for eidas

15 CLOUD : THE PRIMARY KEY QUALIFIED eid BIRTH ROLES CONTRACT CONTRACT SCHOOL MANDATES DELIVER DELIVER HEALTH NON NATURAL PERSONS WARRANTY WARRANTY DEATH PUBLIC SECTOR UNIQUENESS EiDaS EU-WIDE CERTAINTY AND LEGAL BASIS COOPERATE COOPERATE PRIVATE SECTOR NO NEED FOR UNIQUENESS

16 A COLLABORATIVE MOBILE INFRASTRUCTURE NEED FOR EUROPEAN APPROACH MEMBER STATE MEMBER STATE MEMBER COMPONENT COMPONENT STATE eid REGISTE RBASE MEMBER COMPONENT MS STATE X eid REGISTE RBASE COMPONENT eid REGISTE MS RBASE Y eid REGISTE MX RBASE Z????? eservices eidb eids COMMON eid COMPONENT SC HSM PRIVATE SECTOR COMPONENT PRIVATE SECTOR CERTIFICATES, COMPONENT PRIVATE SMS SECTOR CERTIFICATES, CA COMPONENT MS PRIVATE A SMSSECTOR CERTIFICATES, CA MS COMPONENT PRIVATE B SMS SECTOR CERTIFICATES, CA COMPONENT MS C SMS CERTIFICATES, CA MS D SMS?????? public or private anywhere oauth2 STANDARD INTERFACE S USER PC or. TABLET (nowledge) USER MOBILE (second factor

17 JURISDICTION AWARENESS DIGITAL:AUSTRIA : keeping control over intellectual properties : meeting national requirements : empowering the user : allowing secure reliable models

18 BASIC NEEDS ALSO TO BE ENSURED WITH CLOUD o user and service need to know which jurisdiction the partner is following and which jurisdiction for the transactions they agree IN PRACTICE THIS IS MOSTLY UNKNOWN AT PRESENT o user and service need to be able to make sure that they are the only ones able to access content and communications AS WE HAVE SEEN IN THE RECENT MICROSOFT CASE JURISDICTION MATTERS o lawful access might be needed STILL AN OPEN ISSUE WITH GOVERNMENT DATA AND CLOUD

19 CLOUD : LAW ENFORCEMENT GOV DATA How can CAs proof that they have NOT been forced to issue a "second" certificate with given parameters.

20 LIABILITY THIS IS WHERE JURISDICTION MATTERS o empowering users giving the user the choice o helping net neutrality to happen o allowing proof juridical origin at the point in time of communication o availability for all services o ensure liabilities

21 ENHANCING LOW LEVEL PROTOCOLS DIGITAL:AUSTRIA A B Jurisdiction awareness SCENARIO B C e.g. general Government Data E-Health SCENARIO A e.g. sensitive Government Data SCENARIO C e.g. E-Commerce PROVIDER LIABLE TO DELIVER CORRECT INFORMATION: COMMUNICATION LEFT TRACES IN A, B, C, UNKNOWN

22 CLOUD : LAW ENFORCEMENT GOVERNMENT DATA As yet there is no framework or agreement on how to handle law enforcement where needed in a mixed public / private sector data center OUTSIDE ONES OWN JURISDICTION The Snowden / NSA situation told us that written and unwritten agreement lack efficiency The problem cannot be solved on a self regulatory basis as the companies do not have the decisive influence WE STILL NEED MODELS AND TOOLS TO ENSURE TRUST AND TRUSTWORTHYNESS

23 FUTURE CHALLENGE : DOCUMENT COLLABORATION DOC-EDIT In the WEB bandwith bandwidth to to enable convenience and and acceptance SECURITY TO ALLOW TAKE-UP

24 CLOUD AND USER CONTROLLED CRYPTO CLOUD USER SPHERE SKYTRUST DOC-EDIT In the WEB SKYTRUST CLOUD TO PDF & SIGN

25 THANK YOU FOR LISTENING