[Token-all] [token] IMT questions on Notorization service...

[Carlo Harpes]

Thanks Jorge for today's e presentation related to the notarization services, etc.

Form the Innovation Management Team perspective,  I have the following questions.

I did not find this tool in the innovation radar. Could you add it (ideally directly in Xls downloaded, not on the Google platform)?
Deadline. Mid of August).

As I understood, it is current a product, not yet a service. I hope that will be a service at the end of Token. For that we need to answer the following question (ideally for the September delivery already!):

  1.  Who is/will be the legal entity offering this service?
  2.  A customer wants to timestamp a SW he created (as evidence of his IPR). How much time it takes him to create an account, enroles, Pay, and get a confirmation that his hash has been stored (securely).
  3.  What is the price model (price per "Upload", pay for verification by him, by any other users?
  4.  Where is a technical description (of the format of the result : a piece of legal binding (timestamped) information confirming that I submitted this info at a given time).
  5.  What is the (estimated) effort (in person day) to transform your product into a (secure) service, and additional cost (contracting/hosting a blockchain). Will this be assessed as part of WP6.2?


I would like to as this also as an innovation SERVICE to the innovation radar.
(to be submitted to EU in September)

Obviously, these questions apply mutatis mutandis to all token services... (Please update the innovation radar in this spirit)

Regards,
Carlo

PS: In LUX, we have a law on (digitization and) Archiving service, which covers (in my opinion) notarization service.
The Service operator must follow:

  1.  https://portail-qualite.public.lu/fr/documentations/confiance-numerique/surveillance-psdc.html
https://data.legilux.public.lu/file/eli-etat-leg-rgd-2017-09-21-a865-jo-fr-pdf.pdf
This doc is an extension of ISO 27001 is is currently under review, and there is also an EN translated of the content.
We may help you to assess the complexity to implement these requirements. We have audit/risk management template and may tailor then to Blockchain technology in Token.

2) He must be certified (according to ISO 17021 and 27006): Certi-trust (ie, Interdigicert Europe S.A.<https://portail-qualite.public.lu/fr/accreditation-notification/organismes-accredites/certification/icts-17021.html>) performed several such certification (which are independent on the underlying technology), but your internal doc, audit, and risk management shall show that the technology is secure enough.
3) He must get an agreement by the national authority (i.e. be listed here: https://portail-qualite.public.lu/fr/confiance-numerique/archivage-electronique/liste-psdc.html
Then documents produced by the entities listed there must be considered as "equivalent to originals" by LU courts.

Regards,
Carlo
___________________________________________
Carlo Harpes
Managing Director
itrust consulting s.à r.l.

Office building: 55, rue Gabriel Lippmann L-6947 Niederanven
Phone: +352 2617 6212 (Reception)
mobile: +352 621  45 19 45
Headquarter: 18, Steekaul;  L-6831 Berbourg
Web:     www.itrust.lu<http://www.itrust.lu/>
mailto:  harpes at itrust.lu<mailto:harpes at itrust.lu>
r.c. lux B123183 - VAT: LU 21534655
___________________________________________
This message is restricted and may contain personal data; any unauthorized disclosure, use or dissemination, either whole or partial, is prohibited.
If you are not the intended recipient of the message, please notify the sender immediately.
itrust consulting s.à r.l. does not accept liability for any errors, omissions or even commitment in the contents of this message, except where supported by a written agreement with the receiver.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/token-all/attachments/20210720/c1312c15/attachment.html>