"ARIES – trust and ethics" Dave Fortune, ARIES project - Cyberwatching webinar

1. ARIES – trust and ethics
WEBINAR :Cyberwatching.eu - The European watch on Cybersecurity
and Privacy
aries-project.eu
This project has received funding from the European Union’s Horizon 2020
research and innovation programme under grant agreement No 700085
reliAble euRopean Identity EcoSystem
David Fortune
Saher (UK) Ltd

2. 2aries-project.eu
Consortium
Industry
Research
SME
Service provider
Law enforcement

3. 3aries-project.eu
Acronym ARIES
Duration 30 months
Start month September 2016
End month February 2019
Project coordinator Atos
Technical coordinator UMU
TOPIC Law Enforcement
capabilities topic 5:
Identity Management
Grant agreement 700085
Project at a glance
“to develop and test secure
technologies contributing to further
establish a European electronic ID
ecosystem trustworthy for the
citizens. For that purpose, we will
design easy to-use and privacy-
preserving tools dedicated to identity
management”
Ambition:
reliAble euRopean Identity EcoSystem

4. 4aries-project.eu
o FCT-09-2015 Law Enforcement
capabilities topic 5:
Identity Management
o Reconcile e-ID ecosystem with Privacy and Ethics
o Security
o Efficiency
o User friendliness
oTrust
oPrivacy & Ethics
o Data protection
Objectives
reliAble euRopean Identity EcoSystem
Feb 2019
28
o EMBED Legal, ethical and
societal steps
o Link virtual and physical
o Biometrics
o Identity and fraud
o Build upon results

5. 5aries-project.eu
o Set up technologies, processes and security features for physical and virtual
identity management contributing to further establish a European electronic ID
ecosystem trustworthy for the citizens that supports the law enforcement identity
management capabilities and address the new threats in cybersecurity.
o Strengthen the link between physical and digital identities by using high assurance
elements, including biometric verification and tamper-proof certified checks with
breeder documents.
o Validate the ARIES approach in two realistic citizen-oriented
scenarios: eCommerce and at the airport.
o Address key legal, ethical and societal aspects of eID adoption and identity-
related crimes to augment confidence in eID use.
Objectives

6. 6aries-project.eu
o Definition of legal, ethical and societal requirements and use cases for
both demonstrators
o Design of the ARIES system architecture. Open and modular
o Two implementations of the eCommerce demonstrator, supporting the
derivation of virtual identities from national and trusted identities
(ePassport and eDNI) offering a high level of security against identity-
related crimes
o The app is installed in mobile devices and enables authentication through
the virtual ids stored in the phone (secure wallet)
Project results

7. 7aries-project.eu
o Review of ethics codes and barriers to adoption
o Origins of biometrics (not a panacea)
o Meld technical and non-technical mix
o Practical reflection in two pilots (eCommerce and e-Airport)
o Horizontal Approach –Golden Thread
o Persuasion – all company NOT one person centred adoption of EIA as part
of genuine PIA audits and practice
o Sustainable future proofing
Focus on Ethics & Trust
How we approached it - summary

8. 8aries-project.eu
o Build on PIA to embed ethical practice
o Reconcile two potentially
incompatible business goals
(commodifying ID and maximising
linkability as a business model) with
o Privacy (maximising protecting ID,
with non-linkability without explicit
consent)
Starting point – ethics codes
reviewed
1.Technical – can be fixed
o Secure vault to store confidential
info
o Partial Identities
2. Social – Legal – harder to fix
ETHICS – from PIA to EIA

9. 9aries-project.eu
2. Strengthen link between physical and virtual
worlds – privacy & security in balance

10. Contact : Dave Fortune / Juliet Lodge
Saher (UK) Ltd
dave@saher-uk.com / juliet@saher-uk.com
This project has received funding from the European Union’s Horizon 2020
research and innovation programme under grant agreement No 700085
aries-project.eu