EOSC-ENTRUST D13.1 - Draft Roadmap for EOSC-ENTRUST Blueprint

EOSC-ENTRUST aims to create a European network of Trusted Research Environments (TREs) for sensitive data and drive European interoperability between TREs by development of a common blueprint for federated data access and analysis – the EOSC-ENTRUST Blueprint & Interoperability Framework (Blueprint, for short). This document is the first version of the EOSC-ENTRUST Blueprint Roadmap (Roadmap, for short), presenting the steps needed to arrive at the Blueprint, the architecture modelling framework chosen for the work, and the Blueprint’s initial set of main requirements.

The Roadmap is divided into three phases, consisting of (Phase 1, 2024) identifying Blueprint requirements and mapping these to existing TRE capabilities, (Phase 2, 2025) developing and validating key components of the Blueprint, and (Phase 3, 2026) releasing the final Blueprint. Along with the Blueprint, we will develop and release training material for the Blueprint and a TRE Provider Catalogue describing the interoperability capabilities. Updated versions of the Blueprint, training package, and provider catalogue are scheduled for November each year. To support this work and ensure alignment with use cases (Drivers) and TRE providers, we will arrange yearly workshops focused on requirements and capabilities (May) and evaluation and adoption (September). We will revise the Roadmap (May ‘25 and ‘26) based on the workshop outcomes.

The Blueprint’s initial set of main requirements is primarily based on the outcomes of the First EOSC-ENTRUST Requirements and Capabilities Workshop, held on May 7-8, 2024. The workshop identified the following five main categories of requirements for the Blueprint: 1) Data transfer between environments, 2) User identity and access management, 3) Governance and compliance, 4) Data lifecycle management, and 5) User training and certification. The requirements, along with the workshop presentations and discussions, emphasised the need for a diverse portfolio of TRE solutions, each providing specific technical solutions and security measures that collectively cover the needs of diverse scientific domains and private actors. Consequently, the Blueprint should focus on the services and architecture needed for TRE interoperability instead of on specific technologies and technical details.