REFERENCES

SEALED’s references span the public and private sectors, in Europe and beyond. Selected engagements, most recent first:

EUROPEAN COMMISSION AND EU AGENCIES

  • European Commission, DG DIGIT (2022–present): security expert for the once-only technical system (OOTS) of the Single Digital Gateway, within the security sub-group set up by Commission Implementing Regulation (EU) 2022/1463.
  • European Commission, DG CONNECT and DG DIGIT (2014–present): policy and technical support on the implementation and revision of the eIDAS Regulation, adopted in 2024, and on the eSignature and eDelivery building blocks.
  • ENISA (2016–2023): as leader of a consortium, main editor of guidelines on the initiation, supervision and termination of qualified trust services, security frameworks for trust service providers, and assessment of standards for eIDAS implementing acts.
  • European Commission, DG CONNECT and DG DIGIT (2019–2020): trust framework of the European Blockchain Services Infrastructure (EBSI).
  • General Secretariat of the Council of the EU (2014–2017): as subcontractor, set-up of its PKI, including CA key ceremonies, certificate policies and practice statements.
  • European Commission studies (2007–2015): support to the eIDAS secondary legislation (IAS-2), feasibility of an EU framework for electronic identification and signatures (IAS-1), Trusted Lists and the related TL Manager and DSS software, cross-border interoperability of eSignatures (CROBIES), the Commission’s Electronic Signature Services Infrastructure (ESSI), standardisation aspects of eSignatures, and authentication methods in e-payments.

GOVERNMENTS

  • Governments in the EU, Africa and the Middle East (2005–present): RFPs for trust services, identity proofing, eID means and EU Digital Identity Wallets; design and follow-up of national PKIs for identity cards and passports; national licensing, recognition and supervision schemes for trust services and eID means.
  • Flemish government (2015–2019): design of electronic signature solutions (creation, validation and preservation).
  • Grand-Duchy of Luxembourg and LuxTrust: LuxTrust PKI RFP, including the ICAO ePassport PKI, and certification practices.

PRIVATE SECTOR AND PROFESSIONAL BODIES

  • A major Belgian bank (2015–present): set-up of a remote signature creation service; support for conformity assessment under eIDAS.
  • A French chamber of commerce providing PKI services (2016–2018): update of its PKI to pass its eIDAS conformity assessment.
  • Adobe (2016–2017): revision of the Adobe Approved Trust List (AATL) programme.
  • A major insurance company (2015–2016): dematerialisation of workflows requiring qualified co-signatures.
  • Belgian French- and German-speaking lawyers’ bars (2014–2017): selection of a professional signing and authentication card.
  • EUROCONTROL: PKI requirements, RFP and supplier selection.
  • Belgian Federation of Notaries: compliance audit of the notaries’ signature application.

STANDARDISATION

  • ETSI (2005–present): leadership of Special Task Forces STF 588 on identity proofing (ETSI TS 119 461), STF 524 on signature validation, and STF 425 and STF 457 on the rationalised framework for electronic signature standards; rapporteur of ETSI EN 319 411-1 and EN 319 411-2 (until 2024) and TS 119 441; co-editor of ETSI EN 319 401, TS 119 101 and TS 119 300; editor of ETSI TS 119 612 and TS 119 615 (Trusted Lists), TS 119 172 (signature policies) and TS 119 403-3 (conformity assessment of qualified trust service providers); contributor to ETSI TS 119 478 (interfaces to authentic sources).
  • CEN: editor of CEN/TR 419040 and CEN/TR 419030, guidelines on electronic signatures for citizens and SMEs.

BEFORE SEALED

  • Belgian electronic identity card: PKI and certification services for the Belgian eID, and customised certification services for the Brussels Bar, the Belgian notaries and the European Commission, as part of the E-Trust services.