D4.3 TAS3 Implementation (Integrated secure repositories) v1.1 open for public review

June 2009 version (v1.2) of deliverable D4.3 (TAS3 Implementation (Integrated secure repositories)) is open to public comments, feedback and review !

All feedback welcome !

You could download it and publish comment from here:

http://www.tas3.eu/project/publications/download

 Executive Summary

The requirements assessment report (D1.2) has pointed out that

WP4 Information Protection has two central high-level requirements. The first refers to the possibility to demonstrate to lay users the complex security and trust features of the TAS3 system. The second refers to the ability of providers to prove that they processed the information and services in accordance to the required policies.

The present version of this deliverable introduces a system independent and protocol agnostic prototype of the TAS3 ecosystem which addresses the first requirement. Future versions will extend this prototype to address the other WP4 requirements.

This prototype is built using the demonstrator framework of K.U.Leuven that provides an ecosystem within which different actor types can be defined and instantiated. These actors provide dummy functionality by default, but can easily be linked to real life instances of genuine service providers. Each of these actors (e.g., an information repository, a medical doctor, a hospital, an employment agency…) is able to communicate through the framework with each other actor. The security level of this communication (insecure, authenticating all outbound traffic, encrypting all communication, or authenticating and encrypting all communication), is specific to the policy of the actor, i.e., whether the actors can effectively communicate with one another is subject to both actors’ respective policies. The demonstrator framework provides this communication policy enforcement by default.

The actors that have been specifically defined and instantiated for the TAS3 ecosystem (cf. section 5) are those necessary to illustrate the break-the-glass principle that has been elaborated on in D7. In addition to these actors, the TAS3 specific functionality has been developed and integrated in this framework.