ESSnet workshop Eurostat Vision infrastructure project SICON Secured

ESSnet workshop Eurostat Vision infrastructure project : SICON - Secured Infrastructure or CONfidential data access and sharing Jean-Marc Museux Eurostat Unit B 2 – Methodology and research 1

VIP SICON (1) n The overall aim of the project is to develop and establish a pilot of infrastructure, services and documentation for accessing EU confidential datasets held in Eurostat by external partners, mainly NSIs in view of integrating MS and Eurostat processes. n Technological and security dimension 2

VIP SICON (2) – project dependencies n Main related projects for pilot phase • EGR Euro Group Register • DASP Decentralised Access for Scientific Purposes n Other possible uses • Transport Statistics Information System • Webservice for SAS based production system (GSAT) • Service for EU data validation (Eurostat Editing Building Block, National Account production system) • Teleworking in Eurostat 3

VIP SICON (3) – projects constraints n Clients requirements - Analysis starts with detailed review of user needs and functional specifications n Legal constraints n Use of coorporate tools and service at Commission level n Outsourcing IT technical expertise and service 4

Commission corporate service ETAT SEC Commission SEC

VIP SICON (4) – project status n Kick-off meeting in July 2011 n Users Need analysis (mainly EGR technical requirements) n Proposed model and schema for the secure infrastructure provides n January 2012 : first test with EGR n April 2012 : test with DASP 6

Proposed Model & Schema for SICON

Proposed Model & Schema for SICON PRO & CONS n PROS – Mains security needs are satisfied – Use only existing commission software n CONS – – Triple Identification No Web services Opening outgoing channels is not recommended Maintance costs

Change of business process for confidential data access for research

NEW BUSINESS PROCESS n MS collect and send micro data to Eurostat n Eurostat and MS prepare micro data for research use -----------------------------------n Eurostat receive and process request (MS custodians) n Eurostat configure researcher environment on secured server n MS RDC establishes connection with Eurostat server n Researcher performs statistical analysis n MS RDC staff check output 10

Issues n Projects dependencies (EGR, DASP, …) n Dependence on local infrastructure n Coupling technology and business development through pilot n Information infrastructure still to be improved (-> role research projects DWB n Extension toward distributed architecture (the vision) 11