Ergebnisbericht

that are secured by a device. Each token may hold a credential, that is used by the IdP to authenticate the user’s identity based on possession and control of the corresponding token. An IdP-initiated or SPinitiated approach may be used.

1.5 Assets

Die Post weist bezüglich Table 1 darauf hin, dass die Beschreibungen so geschrieben seien, dass ausschliesslich smart card basierte Verfahren möglich sind. Wenn das nicht geändert werde, dann seien mTAN oder andere Mittel ohne smart card nicht möglich. Es wird gefordert, dass die Definitionen aus ISO 29115, Kapitel 3.3, übernommen werden. Zudem schreibt die Post folgendes bezüglich Ziffer 1.5:

- Public keys by definition are public and they need to protection. Es sei eigentlich klar, was gemeint ist, aber die Formulierung sei falsch. Antrag: Term to be used here is "private keys".

- The expectation in the example of "identification data" is not tenable. Using a combination of attributes to uniquely identify a user seems like a bad choice. Please note that GLN is an extremely dangerous example: GLN is unique for a person. Unfortunately in the health care system of Switzerland we have quite a number of health care providers that work in different organizations that may or may not be members of different communities. Depending on the context of the person, this person may have different users (at least one in each community). Das sei eine reine Frage der Terminologie. Antrag: use proper terminology. use good examples.

- Table 1: Assertion Data: SAML assertions are the only supported standard to transport claims about the authenticated identity. This is geared towards SOAP web services and not practical for HTTP based services. Falls dies nicht geändert werde entstünden mit der Integration von neuen FHIR IHE-Profilen und Mobilgeräten Probleme. Antrag: Support for HTTP based services should be included.

- There are several references in the document to the purpose of login to a web portal. This precludes purposes like authentication of web services, REST interfaces or mobile applications. Antrag: The purpose should be formulated openly. Further references should be avoided.

- Table 1: The following description is not an "English" sentence; “The IdP stores enough information about the authentication means of the user to validate the user”. The IdP must ensure that the information stored about the authentication means of the user cannot be used to recover the authentication means itself. Antrag: change the formulation.

1.6 External Entities and Subjects

Die Post schreibt folgendes bezüglich Table 2 in Ziffer 1.6: - The term "identification token" has not been used before. The term identification means of identification token should not be used. The purpose of this token is to be used in the authentication process and it should be called authentication means. The term means is more generic than token since a means just implies that it can be used for the purpose instead of token, which implies a physical presence.

- We are missing the HelpDesk. This role also requires privileged access to be able to support end users. The terms trusted and privileged should be aligned.

- IdP: This abbreviation is wrongly explained. Die Post führt in ihrer Stellungnahme die Wikipedia-Erläuterung von IdP auf.

Die Post weist darauf hin, dass die aufgeführten Punkte eine reine Frage der Terminologie seien. Sie beantragt für alle beschriebenen Elemente folgendes: Use properly defined terms that avoid confusion.

3 Security Problem Definition

Die Post schreibt bezüglich Table 3 folgendes: CredentialHandling: The wording is geared towards smart card use. Wenn das nicht geändert werde, dann sei mTAN nicht möglich. Sie beantragt, dass die Definitionen aus ISO 29115, Kapitel 3.3, übernommen werden. SCH weist bezüglich CredentialHandling darauf hin, dass im Fall, in welchem die Benutzerin / der Benutzer ihre / seine Credentials selbständig revozieren kann, keine Kommunikation mit dem Service Desk des IdPs notwendig sei. Der letzte Satz in Table 3 unter CredentialHandling sei folgendermassen am Schluss des letzten Satzes zu ergänzen: