Security and privacy requirements and secure storage architecture

Privacy and security are fundamental concepts that must be built into BBMRI-ERIC IT services by
design, as trust and transparency are the key element of each medical research infrastructure.
This document focuses on providing a comprehensive list of requirements for implementing IT
services of BBMRI-ERIC as well as for interacting with other infrastructures which will provide
services to BBMRI-ERIC. It also provides risk analysis of the most important services and pays
particular attention to authentication and authorization, as these are supposed to be built jointly
with other infrastructures. Last but not least, it summarizes cloud-based architecture for
processing of privacy-sensitive data related to biobanking and architecture for their secure
storage. This document is written by the BBMRI Competence Centre of the EGI-ENGAGE project,
building upon internal document of BBMRI-ERIC on “Security and Privacy Requirements”.