Emirates Identity Authority (EIDA), Abu Dhabi

Transcription

1 Emirates Identity Authority Strategic Initiatives National Vision... For Better Future Emirates Identity Authority (EIDA), Abu Dhabi هيي ة اتحادية Authority Federal Our Vision: To be a role model and reference point in proofing individual identity and build wealth informatics that guarantees innovative and sophisticated services for the benefit of UAE Emirates Identity Authority. All rights reserved

2 Presentation Outline 1 EIDA Strategy Overview 2 Key Projects of National Importance 3 Project Status and Roadmap 4 Conclusion Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية 2

3 EIDA Strategy Overview 3

4 EIDA s strategic direction has been defined and aims for national and individual security, simplification of transactions, facilitation of innovative e-services and overall organizational service excellence Mission EIDA STRATEGY To contribute to stability, security and national prosperity through the provision of personal identity, an accurate population register and innovative electronic services Vision To be the principal reference for establishing personal identity and providing population data in the United Arab Emirates Strategic Intents 1 Contribute to National and individual security as the primary identity provider in the UAE 2 Simplify government service delivery and facilitate transactions 3 Facilitate the delivery of innovative electronic services 4 Develop a world class service organization Strategic Objectives Enroll and maintain an accurate, comprehensive and up-to-date population register Develop a secure, and integrated infrastructure enabling data access and exchange Establish the ID card as the most valued card Ensure that all central administrative services are of high quality, efficient, transparent and timely Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية

5 UAE Citizen ID Card- Capabilities Identification Smart ID card - Government trusted identity verification infrastructure Authentication Smart Card Biometrics Digital Certificate PIN Confidentiality & Integrity Public key Infrastructure Digital Certificate Non-Repudiation Digital Signature Time-Stamping Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية 5

6 Key Projects of National Importance 6

7 EIDA Current ICT Project Portfolio EIDA Strategic Objective Health of Project Completed On schedule Feasibility Assessment Enroll and maintain an accurate, comprehensive and up-todate population register Establish ID Card as the Most Valued Card Develop a secure, and integrated infrastructure enabling data access and exchange Achieve administrative Service Excellence Completed On schedule Feasibility Assessment Enrollment ID Card as the Most Valued Card Integrated Infrastructure Emirates Service Identity Excellence Authority- Key Projects of National Importance 7

8 EIDA Current ICT Project Portfolio 8

9 Key Projects of National Importance Public Key Infrastructure & Federated Identity Management Integration Platform Implementation ID Card Integration Tool Kit/ SDK E-Services Implementation 9

10 Key Projects of National Importance Strategic Objectives Enroll and maintain an accurate, comprehensive and up-to-date population register Develop a secure, and integrated infrastructure enabling data access and exchange Establish the ID card as the most valued card Ensure that all central administrative services are of high quality, efficient, transparent and timely Key Strategic Projects Public Key Infrastructure & Federated Identity Management Integration Platform Implementation ID Card Integration Tool Kit/ SDK E-Services Implementation Public Key Infrastructure & Federated Identity Management serves all the four strategic objectives achievement 10

11 EIDA PKI & FIM PROJECT Strategic Objective Project Strategic Outcome Project Outline 1 Enroll and maintain an accurate, comprehensive and up-to-date population register Public Key Infrastructure & Federated Identity Management Provide secure Identity Verification, Validation and Authentication Services Enabling citizens and residents to carry out secure e-transactions Facilitate secure G2G communications and transactions online. Enabling multiple Government Services to be accessible securely by residents and citizens of the country using seamless ID Authentication and Verification. The Public Key Infrastructure (PKI) includes setting up the Root Certification Authority (CA), and a Population CA (enabling digital signatures and encrypted communications using the digital certificates provided to citizens and residents as a part of their Identity. ) Issue Digital Certificates to the individuals so that the ID card contains PKI and biometrics data The initiative Implements a full-fledged PKI system based on modern off-the-shelf products and technologies.. And also includes an Implementation of an Identity Provider infrastructure enabling EIDA to offer authentication as a service to government organizations. This Infrastructure supports PKI and biometric authentication and provides Federated Single-Sign-On to the government domain 11

12 EIDA= ROOT CA EIDA= POPULATION (SUB) CA PKI INFRASTRUCTURE= EIDA EIDA- Sub CA- Population CA Online EIDA PKI & FIM PROJECT EIDA- ROOT CA Offline EIDA- Sub CA Government CA Transactions 1. EIDA PKI verifies signature for transaction 2. Federated Identity provides access to services 3. Digital Signature Authority is at Application Level 4. G2C Transactions only enabled- Time Stamping Required for Legitimacy 5. EIDA is the OCSP for these transactions Residents with Personal Certificates on Cards EIDA- Sub CA Service 1. EIDA PKI establishes ID 2. Digital Signature enables transaction at personal level 3. Application level Authority for signing of transaction 4. s for communication with digital signatures- Can be provided with addition Certificate Server On Site Identification Physical Biometric PIN Digital Signature Uses SAM/HSM Federal Authority هيي ة اتحادية 2010 Emirates Identity Authority. All rights reserved 4/10/2012 ١٢.....

13 EIDA INTEGRATION PLATFORM Strategic Objective Project Strategic Outcome Project Outline 2 Develop a secure, and integrated infrastructure enabling data access and exchange Integration Platform Implementation Allows authorized entities to have single authentic access to population information Provide Live Event Updates for registered population providing near real time information Provide data and information services to Government Authorities on personal profiles for G2C, G2G and G2B Provide Identity Verification Services Design and Implement a Secure Integration Platform to integrate different EIDA Stake holders at the data layer, network layer, business logic layer as well as UI layer Update data from identified data owners of personal data in real time Integrate identified stakeholders/ data owners with EIDA as part of implementation Deploy processes for on-boarding of service providers- Government and Private to integrate with EIDA to avail of data and information services. 13

14 EIDA Integration Platform MOI IMM Existing business logic loosely coupled with EIDA POLICE FNC SHJ GOV PORTAL ADSIC EIDA DUB GOV PORTAL CNIA CPC Generic Business Logic for Data Access- ID Verification, Validation, Authentication Coordination Process for message brokering FUJ GOV DUB GOV UAQ GOV SHJ GOV RAK GOV Web Based Interfaces for Transaction and Data Exchange Federal Authority هيي ة اتحادية 2010 Emirates Identity Authority. All rights reserved 4/10/2012 ١٤

15 EIDA INTEGRATION PLATFORM EIDA Stakeholders EIDA s Customers Ministry of Interior Ministry of presidential affairs Ports & Customs Financial Institutions Crown Prince Court Municipalities & Utilities Ministry of Justice Ministry of Higher Education & Scientific Research Other Institutions Government Entities Birth Nationality Education Name Qualifications Marriage Residency Health Record Marital Status Occupation Info Divorce Death Family Book Disability Passport Info Update Information Provide Verification Data Services EIDA Integration Platform The Electronic Integration Between the Government Entities ensures the independence of individual government entities and enable them to work together Federal Authority هيي ة اتحادية 2010 Emirates Identity Authority. All rights reserved 4/10/2012 ١٥

16 EIDA ID CARD TOOL KIT Strategic Objective Project Strategic Outcome 3 Establish the ID card as the most valued card ID Card Integration Tool Kit/ SDK Technical ability to integrate UAE National ID to be used across different services and entities Hassle free development of citizen ID centric applications through well defined set of APIs to access the card data and low level functions for Identity Verification, Validation, Authentication Availability of tools, samples, detailed manuals and step-by-step guides to catalyze the easy adoption of the National ID Card in Identity Verification applications by developers Project Outline Together with PKI project, this enables the rollout of the UAE ID card as the unified token for conducted secure online e-government transaction Development and distribution of a Tool Kit comprising the Software Development Kit that would enable Service Providers to integrated with the National ID card in their applications for delivering services. Free Distribution of the tool kit from EIDA Portal Promoting Developer s Community to enable problem sharing and setup a robust development environment for National ID 16

17 EIDA ID CARD TOOL KIT ID Card Tool Kit/ SDK Biometric Operations Read & Validate Cardholder Data PKI Functions Read Relevant Card Attributes Read BITs Capture Fingerprint Match on Card Verify card is genuine Read and validate public data Export Certificates Digital Signing Authenticate Read card # serial Read chip serial # Match off Card Certificate Validation Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية

18 EIDA ID CARD TOOL KIT Desktop- Client Server 3 Tier Architecture Java,.Net, C# Support Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية

19 EIDA E-SERVICES PROGRAM Strategic Objective Project Strategic Outcome 4 Ensure that all central administrative services are of high quality, efficient, transparent and timely E-Services Implementation A structured ID Services Framework and a well defined ID Services Catalog of EIDA Services - Service Delivery Strategy, including delivery model, operating model and revenue model - SLA with Service Level Targets for all the services - e-enablement of the services with detailed strategy and roadmap for the e-services Project Outline A prioritized detailed list of Identity based services ICT service delivery, aligned/ cross-referenced with current ICT strategy. Service Support Process Incident, Problem, Change, configuration and Service Level management processes. Define leading practices and benchmarking with industry accepted leading practices for ID Services and IT Services. Multi Channel delivery of 10 e-services in first phase Web, Kiosks, Mobile Phones, Social Networks, Call Centers Service enablement for: Registration and Renewal of Card Applications E-Scheduler for scheduling registration appointments PIN Reset Information Services like card tracking 19

20 EIDA ID Service Framework Remote Identification On Site Identification Transactions PKI Federated Identity Digital Signatures... Authentication Verification Validation PKI Federated Identity Digital Signatures... On Site Identification Transactions 1. Biometric 2. PIN 3. Digital Signature Physical Biometric PIN Digital Signature.... G2C, C2G G2B, B2G B2C, C2B G2G C2C, B2B 20

21 EIDA E-Services # Services Service Delivery Channels 1 2 Call Center IVR Kiosk Mobile Internet E-scheduler- Re-Schedule the appointments for enrollment at Service Centres Locate the Service Point- Graphical interface with maps 3 Update non critical data ( like address ) 4 Application submission for Lost Card Replacement, Card Freeze ٥ Submission of request to Change the card collecting place before printing ٦ Suggestions and complaints system ٧ Change service point ٨ ID card Tracking System ٩ PIN Reset ١٠ RefundME

22 ICT Strategic Projects Status Key Projects Jan Feb Mar Apr May 2012 Jun Jul Aug Sep Oct Nov Dec PKI Implementation Wave I Live with ADSIC FIM Digital Sign Service Integration Platform Implementation RFP for Implementation Select Implementer Pilot On-boarding Of entities Live & Operation Toolkit Enhancement- V2 ToolKit V2 Ready R3 Testing Completion Identity Services and e-services Service Identify Key Framework Services Service Design Complete Service Delivery Implementation 10 e-service Ready on 5 Channels EIDA Customer Services Kiosk POC Complete Deployment PIN Reset Additional E-Services Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية ٢٢

23 EIDA- ICT Roadmap Organizational Maturity National ID Provider ID & ID Services Provider ID + ID Services + Transaction Facilitator Organizational Transformation Strategic ID Services Consultant- Information Intelligence Objectives Initiatives Projects Target: 8 Million Registrations Target: ICAM Framework, SOA, PKI & Basic ID Services Target: SOA, National ID Portal and full ID Management Services Target: Mature ID Services for External Government Tie-Ups 23

24 Q&A / Discussion Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية

25 EIDA Projects of National Importance CONCLUSION

26 UAE Citizen ID Card: Government Sector Applications Secured Access to Networks & Applications Confidentiality, Integrity and nonrepudiation of transactions Secured Single Sign On (SSO) Internal Employees Citizens Online e- Governance interactions Benefits and Subsidies Delegations Registrations Filing (Fees Payments, etc ) Permits & Licenses Businesses Other Government Agencies Secure File and/or Data exchange Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية

27 UAE Citizen ID Card: Banking and Financial Sector Application Secured Access to Networks & Applications Confidentiality, Integrity and nonrepudiation of transactions Secured Single Sign On (SSO) Mobile Banking Internal Employees Customers Over The Counter (OTC) transactions Internet Banking Government/ Secured File and/or Data exchange Businesses/ Government Agencies Other Banks Secure File and/or Data Exchange Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية

28 UAE Citizen ID Card: Education Sector Applications Secured Access to Networks & Applications Confidentiality, Integrity and nonrepudiation of transactions Secured Single Sign On (SSO) Internal Employees (Administrative Staff) Teaching Staff Access to e- Learning portals Examinations & Results Registrations Scholarships Examinations Access to e- Learning portals Library Students Government Agencies Secure File and/or Data Exchange Online applications for grants, etc Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية

29 UAE Citizen ID Card: Health Sector Applications Secured Access to Networks & Applications Confidentiality, Integrity and nonrepudiation of transactions Secured Single Sign On (SSO) Internal Employees (Administrative Staff) Citizens/Patients Registrations Health Benefits and Subsidies Health Records Medical Benefits status and monitoring Government Doctors & Nurses Access Patients databases Medical Certificates Medical Research Portals Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية

30 UAE Citizen ID Card: Insurance Sector Applications Secured Access to Networks & Applications Confidentiality, Integrity and nonrepudiation of transactions Secured Single Sign On (SSO) Internal Employees (Administrative Staff) Citizens/businesses Online Claims Policy Applications Secure data exchange Government Insurance Agents Online Policy delivery Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية

31 UAE National ID Card A National level Infrastructure and an Authentication vehicle Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية

32 UAE Citizen ID Card Integrated Identity and Access Management Platform

33 UAE Citizen ID Card: Core IAM Platform Certificate Authority (CA) -EIDA Identity & Role Management Policy Management PKI & Time Stamping Services Monitoring Service UAE Citizen ID card Hot-List DB Access Management Single Sign-On Audit & Reporting Workflow Management Identity Repository Audit Logs Hot-List Database Policy Repository Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية National ID Card as the enabler for e-government

34 Regulatory Compliance Logs, alerts and centralized audit management Separation of duties Support of Digital Signing & Time Stamping Approvals Records every action performed on IAM by critical users Supports Multi- Factor Authentication Regulatory Compliance Secure cryptographic key management Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية National ID Card as the enabler for e-government

35 UAE National ID Card Usage Internal Governance of Organisations Convenience Of Businesses Enforcement And Legal Coverage Citizen Services & Benefits Federal Authority 2010 Emirates Identity Authority. All rights reserved هيي ة اتحادية National ID Card as the enabler for e-government