 |
Description of the participants

» Management (WP1)

|
|
Groupement
d'Intérêt Public Modernisation des Déclarations
Sociales (GIP-MDS)
The GIP-MDS [Public Interest Consortium for the Modernization
of Social Contribution Returns] is a guidance body set
up by the social welfare agencies with a view to enabling
companies to make their social contribution returns
as required by regulations and contract, using cheap,
effective and user-friendly means that are easy to install,
and based notably on Internet technologies. This is
the purpose of the www.net-entreprises.fr website which
has been on line since 25 September 2000.
The missions of the GIP-MDS are the following :
- Overall ownership of the process.
- Delegated ownership or assumption of role of prime
contractor for the development and operation of websites.
- Assistance to social welfare organizations in designing
websites for remote submission of statements and returns.
- Provision of services to those submitting returns.
- Provision of services to software and IT services firms.
- Proposals for simplification of regulations.
- Briefing of companies.
Direct contribution
GIP-MDS has lead an important activity
on PKI specification and design for their net-entreprises
project for social declaration management. As a neutral and
public organisation, GIP-MDS will also realize the management
of the project.
|


» Dissemination
and Exploitation (WP2)

|
|
ACTIMAGE
ACTIMAGE is a technology consulting company based in
Luxembourg, with offices in France, Germany and Switzerland.
ACTIMAGE provides blue-chip companies, small and medium
size businesses and institutions with auditing, development
and training services in the area of new technologies.
The company has four key areas of expertise: Software engineering;
Systems, networks and telecommunications; Multimedia; Training.
ACTIMAGE ranks among the top web agency and is recognised
as a major player in the adoption of new technology in the
region. Through sound expertise in new technology, ACTIMAGE
is also able to assist companies implement state-of-the-art
IT solutions.
Direct contribution
ACTIMAGE will lead the dissemination and
exploitation phase by providing EuropePKI with a professional
web portal and a team of technical project managers who has
significant experience in the review and publishing of technical
articles and industry standards.
Throughout the exploitation phase, ACTIMAGE will offer consulting
and integration services based on the EuropePKI solution. It will
promote the adoption of EuropePKI among its customers and look
for opportunities to position EuropePKI as an alternative to commercial
products in eCommerce solutions.
|


|
|
Salamandre
Salamandre is a European consultancy focusing on the
elaboration of business development strategies for both
public and private businesses and institutions. We concentrate
our development on areas with strong implications for
European sovereignty.
Salamandre combines experts in intelligence and business
development and is able to build up ad hoc Task Forces mustering
atypical profiles. Our teams act as confidential advisors
to general management and coaches to operational management.
In Europe, Salamandre has offices in Paris, Brussels, Bonn,
Munich, Zurich and Tel Aviv.
Direct contribution
In the field of secure systems, Salamandre has an extensive
knowledge of business strategies for technology providers
(PKI, cryptocards, encryption, biometrics etc.) and could
contribute to EuropePKI by supporting Actimage in the exploitation
stage of the project.
|


» Requirement (WP3)

|
|
Cap
Gemini Ernst & Young (CGEY)
The Cap Gemini Ernst & Young Group, one of the
world leaders in management consulting and IT services.
It was created when Cap Gemini Group merged with Ernst
& Young Consulting.
One effect of this merger has been to strengthen the Group's
worldwide positions. A further key benefit of the merger has
been to strengthen the Group in management consulting. The
company has a significant presence in the following geographies:
North America, Western Europe, Scandinavia, Poland, Singapore,
Hong-Kong, Australia, New Zealand, Japan, India and Mexico.
Cap Gemini Ernst & Young is established in three core
business areas: Management consulting, Systems Transformation
and Information Systems Management-Outsourcing.
Cap Gemini Ernst & Young has six global sector units:
Telecom Media Networks (TMN), Consumer Products / Retail /
Distribution (CPRD), Energy and Utilities, Financial Services,
High Technology and Automotive, and Life Sciences and Chemicals.
Direct contribution
We plan to deliver different deliverable for user requirement
and specification. we manage the user requirement brainstorming
meeting. The brainstorming meeting identify and express the
needs of the user within the area circumscribed by the project
definition.
|


|
|
Electricité
De France (EDF)
Electricité de France (EDF) has the responsibility
for generating, transmitting and distributing electricity
in France. EDF has developed an international strategy
based on investment and sale of services. The company
relies on partnerships, and is present in a wide range
of foreign companies.
EDF R&D : the aim of the R&D Division is to
keep electricity costs competitive, prepare the generating
facilities of the future, enhance the quality of supply
while preserving the environment. The R&D Division
relies on other research organisations and is for instance
involved in more than 60 European projects.
EDF and Information Technologies : EDF has decided to
take the Internet bend. Therefore, three major programmes
have been launched: e-Commerce, e-Procurement, e-Employees.
Being one of the largest European computer centres,
the R&D division has devoted a specialised IT research
department called "Modelling and Information Technologies".
Direct contribution
As an "End-user" participant of the project, Electricité
de France intends to play an active role in the "Requirements"
and "Evaluation and Demonstration" phases. Regarding
the first point, EDF can bring in particular its visibility
on large scale information system, including customer relation
management and billing system. Moreover, EDF propose to bring
its expertise to the consortium, both for requirements and
evaluation/demonstration steps. Its position as a leading
energy supplier ensures an interesting potential for dissemination
activities.
|


|
|
France Télécom Recherche & Développement
(FTR&D)
France Télécom R&D, formerly CNET,
the Research and Development Centre for France Télécom,
currently employs 4000 people. Its annual budget amounts
to 3 billion francs. The activities of France Télécom
R&D are distributed among 7 R&D divisions units
focused on France Télécom's major strategic
targets and critical technical areas. With headquarters
in Issy-les-Moulineaux, France Télécom
R&D is comprised of eight others sites (Lannion,
Rennes, Grenoble, Caen, Bagneux, Belfort, Sophia-Antipolis
and La Turbie) and one laboratory recently established
in California.
France Télécom R&D is working with
numerous partners including academics and manufacturers
from all over Europe on over 100 co-operative research
projects which are partially financed by the European
Union.
Direct contribution
FTR&D proposes to participate on the following topics
:
- Workpackage "User requirements and needs" : identification
of users needs and requirements for a Open Source PKI.
- Workpackage "Demonstration and evaluation" : evaluation
tests and operational implementation of the Open Source PKI
within services. FTR&D proposes to evaluate the adequation
between the developped Open Source PKI and identified users
needs.
|


|
|
Finsiel
Finsiel, with yearly sales of over 2200 billion Lire
and 30 years experience, is the second-ranking Italian
group in the field of IT services and consultancy. The
Finsiel Group is part of the IT Services Business Unit
of Telecom Italia, which has gathered all the IT companies
and activities within the Telecom Italia Group.
With the Group companies located throughout Italy,
from Trieste to Palermo, Finsiel holds a leading position
in sectors which are vital for the efficiency and competitiveness
of the Italian economy. It works with the central government
through Finsiel S.p.A. and Sogei, in management consulting
with Consiel, in systems for local authorities with
Insiel, in transportation with Tele Sistemi Ferroviari,
while it is the national second player in banking and
finance through Banksiel. Finsiel takes part in large-scale
research and innovation projects promoted by the European
Union such as 'Eionet', 'Equal', 'Imagine', 'Aquarelle',
'Hypermuseum' or 'In-Emergencies'.
Direct contribution
Finsiel will bring into the project its experience in designing
and implementing secure smart card services involving large
groups of users (Healthcare and Identity cards). In particular,
Finsiel will participate to the Requirement and Specification
phase interpreting the needs ot the users of the PKI infrastructure.
In the Demonstration and Evaluation phase Finsiel will partecipate
to the deployment of the test bed. Finsiel will also contribute
to designing and implementing business scenarios and test
cases and will support the test execution.
|


|
|
Istituto Nazionale della Previdenza Social (INPS)
I.N.P.S. is the largest Italian public institution
in the social insurance field. I.N.P.S. has various
institutional tasks, including the management of personal
insurance contributions and positions, settlement, payment
and management of pension and other minor social benefit.
I.N.P.S. pensions are remitted to employees, self-employed,
as well as to domestic workers and other categories.
I.N.P.S. is heavily involved in the TESS Project for
European exchanges of E-forms and also participates
in various European Projects.
To provide a capillary distribution of services, I.N.P.S.
uses the INTERNET technologies. Services have been carried
out to on-line allow: sending the statement of contribution
account; receiving pension claim, consultation of statistical
codes and insurance positions, access to document and
statistical data banks and receiving telematic forms
for registration of companies.
Direct contribution
According to its role of national security organisation
involving millions of citizens, enterprises and institutions,
INPS will take part in the Requirements Analysys, Specification
and Demonstration & Evaluation phases. INPS will bring
its experience as a Service Provider currently involved in
delivering on-line services (B2C, B2A) through secure Smart-Card
based infrastructures. In particular INPS will cooperate in
the definition of business scenarios and test cases which
will integrate existing services with the new open source
PKI infrastructure.
|


» Design (WP4)

|
|
Giesecke
& Devrient
Giesecke & Devrient is an international technology
company specialized in the production of ank notes,
smart cards for payment and telecommunication, and production
achines and solutions in these fields. It was founded
in 1852 in Leipzig. he sales volume in 2000 was over
1000 million EURO, and the company mploys over 6000
people worldwide; it is present on all continents with
ver thirty subsidiaries.
Direct contribution
Giesecke and Devrient contributes its extensive knowledge
in the design, the implementation, and the operation of public
key infrastructure, in particular on solutions using smart
cards. Giesecke & Devrient's smart cards are secure signature
creating devices as defined by the relevant EU directive and
form a central means to realize secure public key infrastructures.
|


» Implementation (WP5)

|
|
Axetel
Axetel Consulting is a Romanian IT services and consulting
company. Our company's mission is to provide remote
project development and consulting services for international
clients.
Since its creation in 1997, Axetel Consulting has been
providing high value-added services in the field of
Libre software security for international clients. By
delivering IT security services (PKI architectures,
VPN, Intranet-Extranet security architecture, encryption,
digital signatures), our company has acquired solid
experience in remote project development for international
clients such as Sagem, La Poste, Sfac-Euler, etc.
Direct contribution
Axetel Consulting has initially contributed to the creation
of the EuropePKI project: initial developer and maintainer of
the project known as GnuPki; state-of-the-art expertise in
security, libre software and PKI; possibility to use the Libre
software PKI for acting as a certification authority operator
in Romania; as a Romanian software company, participating
in European projects is like "being" already in
Europe; by far the cheapest implementation solution for the
consortium.
Axetel proposes to continue the work already accomplished
by participating on the following topics:
- Leader of the Workpackage "Implementation" ;
- Production of the missing code necessary for a running PKI
software.
|


» Project Integration (WP6)

|
|
On-X
ON-X Group is providing consultancy and services in
the domain of network and IT security mostly to large
customers in such sectors as the Bank, Finance, Insurance,
Telecom and Industrial. The ON-X department involved
with the EU-PKI project is the "security consulting
and services" department which encompasses EdelWeb
specialised in both vulnerability and penetration testing
and in cryptography and certifications.
The "security department" provides a complete
set of services to its customers including high level
consultancy, technical assistance and expertise in such
domains as electronic signature, firewalls, intrusion
detection, vulnerability detection, technical audits
and penetration testing and services. On-X group devotes
significant resources to the standardization activities.
EdelWeb also possesses an advanced client implementation
to test time stamping authorities. ON-X Group "security
department" also has a long and in-depth expertise
with open source software both as a user and a contributor.
Direct contribution
ON-X will act as the leader of the integration WP6 workpackage
and will bring its experience in mostly three key domains:
Integration expertise; Certification, cryptography; Use and/or
development of OpenSource software and standardization work.
Already being a provider of PKI based solutions to its customers
ON-X will capitalize on the EU-PKI project results to improve
these solutions and to disseminate the project results.
|


|
|
EADS
An EADS Group company, EADS Telecom is a worldwide
supplier of secured telecommunications networks for
Defence, Public Safety and civil secure applications,
based on civilian technologies.
The activities are based around EADS Defence and Security
Networks, spearhead of the Group, reinforced by EADS
subsidiaries: EADS Defence and Security Networks ; SYCOMORE;
MATRANET; Cogent and two subsidiary companies of Nortel
Networks (Matra Nortel Communications France and Nortel
Networks Germany).
The target clients of EADS Telecom are : Ministries
of the Interior, national or regional police forces,
civil security, military infrastructures, companies,
and any organisation which has a need for secure telecommunications.
Direct contribution
EADS Telecom strongly believes that one of the key points
for the deployment of large e-business applications is strong
user authentication. This authentication will be made available
to different products through compliance with PKI standards
and the use of devices like Smart Cards or tokens.
EADS Telecom proposes to participate on the Workpackage "Integration".
Indeed, the company, who has a strong experience in PKI architecture
since 5 years, will benefit from EuropePKI project to bring its
expertise in the global architectural aspects of the libre
software Public Key Infrastructure during the whole project.
|


» Demonstration (WP7)

|
|
Certinomis
CERTINOMIS is a subsidiary of La Poste and SAGEM. It
is a service provider company whose mission is to set
up and manage a range of on-line services. It has completed
the setup of its own PKI infrastructure, based on SAGEM
technology, and all the related implementation activities.
As the first French Certification Authority, CERTINOMIS
is providing certificate services to those companies
involved in the frame of their relationship with French
Administration as well as consumers requiring confidence
for on-line applications. CERTINOMIS is also participating
to the True-Vote IST Program. As a trusted services
provider, CERTINOMIS operates PKI platforms on behalf
of third-parties acting as Cas.
CERTINOMIS strategy being based on partnership, many
actors have now joined CERTINOMIS for certificate distribution
and promotion, such as Credit Mutuel or Worms banks,
La Poste, Cap Gemini Ernst & Young.
Direct contribution
With regards to the EuropePKI project, CERTINOMIS will be involved
at the top-level of the development process:
- Requirement and specification (CERTINOMIS will make available
his valuable expertise in the following domains: security
architecture, distributed architecture, open architecture)
- Demonstration
|


|
|
Intesa
Intesa is an Italian company, part of the IBM group,
which has already developed the software to exploit
the digital signature in the private sector and that
has been certified by the Italian Authority, AIPA, as
a Certification Authority for the Public Administration.
INTESA S.p.A. (219 employees year 2000, 71 billion
liras year 2000 revenue) is present in the IT market
since 1987 providing e-business services to around 4000
enterprises from its Server Farm.
INTESA strengthened its presence in the Business Process
Integration solutions offering.
The main offerings of INTESA are:
- EDI and EBI (Electronic Business Integration);
- Application in the Electronic Procurement Services;
- The Public Key Infrastructure (PKI) developed to become
one of the Italian Certification Authorities;
- Corporate Banking (CBK) services for all payment systems;
- Outsourcing for Internet Service Providers (ISP), Application
Service Providers (ASP) and Telecommunication Companies.
Direct contribution
As a key partner of CERT
- provide certification services demonstration to Italian Administration
and othe private companies
- demonstrate the ability of EuropePKI to operate with another
PKI operated by CERTINOMIS in France.
|


» Guideline for
security and homologation activities (WP8)

|
|
AQL
AQL is a French software Company subsidiary of Silicomp
Group. AQL grew in the core of the Rennes Atalante Technopole.
AQL provides Information Technology (IT) services and
solutions, based on its skills in four major areas:
technical software engineering, information systems
engineering, quality and project management, information
systems security.It is well known as Information Technology
Security Evaluation Facility (ITSEF) for its activities
in IT Security: consulting, expertise, evaluation on
the base of ITSEC and Common Criteria standards. AQL
Security laboratory is officially agreed by French authorities.<
AQL has been involved in several European R&D projects
such as: EDID, CABSINET, WINE, SMART-EC, EDIDON, IMPACT,
MKBEEM
Direct contribution
QL will bring all its knowledge to support partners involved
in the tasks of specification, implementation and integration
to take into account the Evaluation approach. Furthermore,
AQL has a strong expertise in the field of information technology
security with a specialized team of around forty experts.
We will also bring our skills on developing software material
for security components like a lightweight PKI for internal
use and a token system for mutual identication on different
web sites, software component soon released on open source
package.
|

|
|
 |