Transcript TESTA - Address

Turkey IDA Info-Day
PM Session, September 25, 2003
IDA Secure
Communications
Platforms :
TESTA and PKI
Gzim Ocakoglu
European Commission - DG Enterprise
Ankara, 25 September 2003
Turkey IDA Info-Day
PM Session, September 25, 2003
Outline
• TESTA at a glance
• Sectoral projects using TESTA
• What is TESTA? … How to connect ?
• TESTA today
• The PKI service
• The future of TESTA
2
Turkey IDA Info-Day
PM Session, September 25, 2003
TESTA at a glance
Vocabulary...
Sectoral applications
3
Turkey IDA Info-Day
PM Session, September 25, 2003
TESTA at a glance
Benefits, Contractors, budget
• Secured telecommunications services with
warranted Service Level Agreements (SLA)
• Network service and generic services
delivered by Equant
• Support services (advice, help desk)
provided by Unisys
• Duration of the contract until 2004
• Global potential value: € 28,5 million Euro
4
Turkey IDA Info-Day
PM Session, September 25, 2003
•
•
Sectoral Projects using
TESTA
Employment and Social
Affairs
•
– EURODAC
– EURES
– TESS
•
Agriculture
•
Transport
– Care II
•
Fisheries
– Fides
•
Regional Policy
– Structural funds (SFC)
•
Health and consumer
protection
Trade
– SIGL
– CATS/STATEL
•
Justice and Home Affairs
Statistics
– Datashop
– Statel
•
Financial Intelligence
– FIUNET
•
Humanitarian aid
– HOLIS (14 points)
•
General applications
– IntraComm
– Circa
– Eudra projects
• New users coming soon …..
– Euphin
- Justice and Home Affairs (VISA,SIS II)
- Environmental protection (PROCIV NET)
- Energy and Transport (SafeseaNet, TachoNet)
- ...
5
Turkey IDA Info-Day
PM Session, September 25, 2003
What is TESTA ?
. . . How to connect ?
6
Turkey IDA Info-Day
PM Session, September 25, 2003
TESTA principles
Trans European Services for Telematics between
Administrations
• IP protocol on MPLS
• Separation from the Internet
• Registered but non-Internet routable address
range
• Private domain-names (eu-admin.net)
7
Turkey IDA Info-Day
PM Session, September 25, 2003
TESTA: a domainbased approach
EU Agencies
EuroGate
EU Institutions
EuroGate
National Network
EuroGate
EuroDomain
EuroGate
EuroGate
External
Dial-up services
Direct connected
sectors
8
Turkey IDA Info-Day
PM Session, September 25, 2003
TESTA : a domainbased approach
EuroGate
EuroGate
EuroGate
EuroDomain
EuroGate
National Network
EuroGate
Direct connected
sectors
National agency
National agency
National agency
9
Turkey IDA Info-Day
PM Session, September 25, 2003
Generic services
EU Agencies
EuroGate
EU Institutions
PKI
DNS
Mail
relay
EuroGate
National Network
EuroDomain
EuroGate
NTP Portal Circa
EuroGate
EuroGate
External
Dial-up services
Direct connected
sectors
1
Turkey IDA Info-Day
PM Session, September 25, 2003
Architecture : 62.62
addressing & NAT
EU Agencies
62.62.80.0/24 62.62.83.0/24
62.62.69.0/24 62.62.70.0/24
EuroGate
Commission
EuroGate
Finland
EuroGate
EuroDomain
62.62.x.x
EuroGate
62.62.2.0/24 62.62.5.0/24
EuroGate
Spain
62.62.6.0/24 62.62.9.0/24
1
Turkey IDA Info-Day
PM Session, September 25, 2003
TESTA architecture :DNS
bxl-vpn.cec.eu-admin.net A 62.62.69.14
care.eu-admin.net A 62.62.70.22
curia.webmail.eu-admin.net A 62.62.71.250
emcdda.eu-admin.net A 62.62.81.166
emea.eu-admin.net A 62.62.13.83
europaplus.eu-admin.net A 62.62.70.12
Spain
europarl-ns.eu-admin.net
A 62.62.72.96
nap01.dac.lu.eu-admin.net MX 62.62.0.17
1
Architecture :
DNS how it works
Turkey IDA Info-Day
PM Session, September 25, 2003
EuroGate
S
e
r
v
e
r
S
e
r
v
e
r
EuroGate
S
e
r
v
e
r
EuroGate
Internet
EU
S
e
r
v
e
r
DNS
EuroDomain
DNS
EuroGate
EuroGate
Local domain A
LDA
Client
S
e
r
v
e
r
www.ai.mit.edu
DNS
1
Architecture : DNS
how it works
Turkey IDA Info-Day
PM Session, September 25, 2003
EuroGate
S
e
r
v
e
r
S
e
r
v
e
r
EuroGate
S
e
r
v
e
r
EuroGate
Internet
EU
S
e
r
v
e
r
DNS
EuroDomain
DNS
EuroGate
EuroGate
Local domain A
LDA
Client
S
e
r
v
e
r
testa.eu-admin.net
Local DNS
Slave of eu-admin.net DNS
1
Turkey IDA Info-Day
PM Session, September 25, 2003
Connected Countries
•  Belgium
•  Luxembourg
•  Denmark
•  Netherlands
•  Germany
•  Austria
•  Greece
•  Portugal
•  Spain
•  Finland
•  Ireland
•  France : in the process
•  United Kingdom
•  Sweden : in the process
•  Italy
+
•  Iceland
•  Norway
1
Turkey IDA Info-Day
PM Session, September 25, 2003
Connected Acceding
Countries
 Czech Republic - 05 06 2003
 Estonia - 30 06 2003
 Malta 25 08 2003
 Poland 27 06 2003
 Slovenia 24 04 2003
 Cyprus to be connected end of Sept 2003
 Slovakia : in the process
 Hungary : in the process
1
Turkey IDA Info-Day
PM Session, September 25, 2003
Connected EU
institutions
•  Council of the
European Union
•  Committee of the
regions
•  European Parliament
•  European Commission
•  Court of auditors
Expected :
•  European Investment
Bank
•  Court of Justice
•  European Economic
and Social Committee
1
Turkey IDA Info-Day
PM Session, September 25, 2003
Connected EU
agencies
•
 CEDEFOP
•
 EUROFOUND European Foundation for the Improvement of Living and Working
Conditions
•
 EEA
European Environment Agency
•
 ETF
European Training Foundation
•
 EMCDDA
European Monitoring Centre for Drugs and Drug Addiction
•
 EMEA
European Agency for the Evaluation of Medicinal Products
•
 OHIM
Designs)
Office for Harmonisation in the Internal Market (Trade Marks and
•
 EU-OSHA
European Agency for Safety and Health at Work
•
 CPVO
Community Plant Variety Office
•
 CdT
Translation Centre for the Bodies of the European Union
•
 EUMC
European Monitoring Centre on Racism and Xenophobia
•
 EAR
European Agency for Reconstruction
•
 EUROJUST
European Centre for the Development of Vocational Training
1
Turkey IDA Info-Day
PM Session, September 25, 2003
Euro-Domain
PE
Initial
Architecture
Site install
CE
Local domain A
1
Turkey IDA Info-Day
PM Session, September 25, 2003
Euro-Domain
PE
CE
Architecture
Site install
Phase 2
IPSEC TUNNEL
EC20M
CE
EC20M
NAT
Local domain A
2
Turkey IDA Info-Day
PM Session, September 25, 2003
Site location
• Concentration point for national agencies
• Security (physical protection, site security officer)
• SLA (availability, helpdesk)
• In function of projects of immediate interest
– Sectoral projects
– ...
2
Turkey IDA Info-Day
PM Session, September 25, 2003
Cost sharing
• All costs covered by IDA for
– National administrative networks
– EU institutions and EU agencies
• Cost sharing for
– Direct to TESTA connected local administrations
• Back-bone costs are covered by IDA
• Local loop costs not covered by IDA (Leased line, router,
monitoring, installation)
2
Turkey IDA Info-Day
PM Session, September 25, 2003
TESTA how to connect
Request connection
Request contacts
Send contact info
Site info
Request installation
Send technical data
( Unisys assist)
Send technical
questionnaire
+ start installation
Site configuration
+ test
Request acceptance
Invoice
Acceptance
Payment
2
Turkey IDA Info-Day
PM Session, September 25, 2003
Sectoral request for direct
TESTA link
Request connection
Request for
possible integration
national network
+ request price
connection
Inform sector
+ assistance
Inform sector
Order direct link
Price Offer
YES
NO
2
Turkey IDA Info-Day
PM Session, September 25, 2003
TESTA today
2
Turkey IDA Info-Day
PM Session, September 25, 2003
Activities on Network :
Extension
• Connect national networks in all Member
States
– France
– Sweden
• Connect Acceding and Candidate Countries
• Integrate new users
- Environmental protection (PROCIV NET)
- Energy and Transport (SafeseaNet, TachoNet)
2
Bulgaria Info-Day
PM Session, April 15, 2003
Activities on Security:
Enhancements
• On the Eurodomain
– Add line-encryption
– Prepare for TESTA security accreditation
• For the border to local domains
– Formulation of general security framework
– Prepare for accreditation of the TESTA LDCPs (Local Domain
Connection Points)
Turkey IDA Info-Day
PM Session, September 25, 2003
Activities on Quality:
Enhancements
• On TESTA services and TESTA
environment
– Enhance resiliency of generic services
– Portal and newsletter
– Workbook and applications guidelines
• With end to end approach
– Promote SLAs in local domains through TESTA
MoU
3
Turkey IDA Info-Day
PM Session, September 25, 2003
3
Turkey IDA Info-Day
PM Session, September 25, 2003
The PKI Service
3
Turkey IDA Info-Day
PM Session, September 25, 2003
The IDA PKI project
• Objectives of the Public Key Infrastructure (PKI)
– ready to use by all networks of the IDA programme
– adaptable or extensible to the specific requirements of some
networks
– enable the members of a user community to access other IDA
networks with the same certificate (subject to access rights
control)
• Set-up steps for each user community
– requirements analysis
– definition of organisation and services
– service set-up
– routine management of the infrastructure
3
Turkey IDA Info-Day
PM Session, September 25, 2003
Where can networks
use the IDA PKI ?
• Web-based applications:
– protection of web-based information repositories and
client/server communications
• Secure messaging:
– secure e-mail
– electronic signatures
– authentication
– integrity
– confidentiality
Message
Secret
(session) key
Encryption
Encrypted
message
3
Turkey IDA Info-Day
PM Session, September 25, 2003
TESTA the future
3
Turkey IDA Info-Day
PM Session, September 25, 2003
TESTA post 2004 Objective
• To define what TESTA will become after 2004 as an
“IDA communication platform”
• To define the needs of communication at the
European level
– the growing need for the exchange of information between
European administrations
– the growing need of a secure and resilient platform
3
Turkey IDA Info-Day
PM Session, September 25, 2003
TESTA post 2004
Working method
• TESTA Steering Committee
– Participants : IDA, EC DI, Major Sectors (DG JAI,
DG TAXUD), the Council, …
• TESTA Expert Group Meetings
– The group will meet 2 or 3 times and will give
regular feedback to the TAC WHAM and the TAC
• previous meetings held on 10/12/2002,
09/09/2003
• next meeting foreseen on 01/10/2003
• An Info-Day with private sector in 4Q2003
3
Turkey IDA Info-Day
PM Session, September 25, 2003
Further information
• TESTA web site
– http://testa.eu-admin.net (via TESTA access)
• IDA web site
– http://europa.eu.int/ISPO/ida/
• TESTA CIRCA interest group
– http://forum.europa.eu.int/Members/irc/ida/testa/home
(restricted access)
• IDA project management
– European Commission, DG Enterprise D.2
– [email protected]
4