EU-anchored Cloud Technological solution for the legal and political - PowerPoint PPT Presentation

EU-anchored Cloud Technological solution for the legal and political problem  Primarily for (semi-)governments and academia  Valer Mischenko (NLnet Foundation, Amsterdam) EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

Dark side Shiny side privacy is not guaranteed cost reduction   deletion of data is unthinkable scalability   (potential) abuse of data accessibility   vendor lock-in (private APIs) location independency   audit is not possible (closed APIs) reliability   intransparent security elasticity   intrusion of third parties / data capture ________________  unobservable CONVENIENCE +++ legal uncertainty in case of 'issues'  ________________ NO CONTROL – – – EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

Europe has problems with Cloud Report of Directorate-General for Internal Polices of the EP “Fighting cybercrime and protecting privacy in the cloud”: The challenges of privacy and data protection in a cloud context  are clearly underestimated, if not ignored American FISAA: ... has very strong implications on EU data  sovereignty and the protection of its citizens’ rights Data Protection offences should be recognized as a type of  Cybercrime EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

Usability of cloud Freedom of choice Social and legal responsibility Consumer Corporate Government and academia How to help the most disadvantaged? EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

How to approach ? Fair Cloud Data-Logistic Company: foundation  exclusively within the EU  bound exclusively to the EU laws Min 51% shares  data transport, storage and processing  transparent: open code and procedures  with the foundation on the top EU Data Logistic  unsellable Ltd  profit → to the foundation for mission assurance & technology improvement EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

Market proposition  Guarantee! Subject only to the EU laws  Guarantee! The company does not change course and continues to do what it promised  Processing of data strictly separated from storage EU Data Logistic  The company does not know what data Ltd is stored, only the (temporary) location of the data EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

Market place Volume: ~10 bln public services in the EU in 2013  Growth: with duble figures per year (18,5% in 2013)  Revenue sources:   data-logistic services  enabling “client side processing”  encryption EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

Use of open technological paradigms Encryption Unhosted HTML5 + NoScript transparent no lock-in open where possible EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

Encryption With end-to-end encryption some sharing functionality to be reviewed  Sharing and encryption still possible, but difficult for 'normal' user –  should really be simple Difficult to revoke access to data if keys were already issued  Possibly other problems that we can not overlook now  Even if encryption problems are resolved, European cloud is indispensable as other attacks possible besides those on data content Therefore you better keep your data within one legal zone! EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

There were legal ambiguities Is a purely European cloud legally possible? I.e. where only the EU  legislation applies? Is it possible for the EU governments to use such purely European  service provider in their procurement process? Is it possible for the EU governments to exclude non-EU suppliers  from the procurement process on the basis of non-compliance with the EU-laws? Research results of the University of Tilburg : Yes ! Yes ! Yes ! EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

Results of the University of Tilburg research: 3 x Yes under conditions that: All cloud computing services are being provided within the EU  The service providers and subcontractors have EU nationality  Operate only within the EU  In this case, the governments comply with the (European) conditions for procurement The way to building a genuine European cloud is free now EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

EU future in the Cloud ? One week ago on Dutch television, Judith Sargentini, member of the European Pariament: We, Europeans, can only guarantee our sovereignty with EuropaCloud. Meaning an ecosystem of rules, services and providers which embodies what we Europeans find important: data protection, privacy, freedom of expression, transparency, decentralized storage and energy efficiency. We can use these values as a unique selling point. EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

EU future in the Cloud ? The very last sentence of the report “Fighting cybercrime and protecting privacy in the cloud”: A target could be that by 2020, 50% of EU public services should be running on Cloud infrastructure solely under EU jurisdictional control . EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl

This is an invitation to NRENs : Let's build the EU-anchored Cloud What's needed: Participate in setting up the Fair Cloud Foundation  Development of a data logistics platform  EU-wide set up and testing  Commercially available storage and processing power  What you get: Usage of trully European cloud  Funds from the Fair Cloud Foundation  Sale of excessive storage and processing  Fame :-)  EU-anchored cloud email, SIP, XMPP: valer@nlnet.nl