AK IT-Security 1. E-Government Introduction, Motivation, Demonstration (VO) (KU)

Transcription

1 AK IT-Security 1 E-Government Introduction, Motivation, Demonstration (VO) (KU), Andreas Fitzek, Christian Maierhofer Graz, Das E-Government Innovationszentrum ist eine gemeinsame Einrichtung des Bundeskanzleramtes und der TU Graz

2 » E-Government Innovation Center (E-Government InnovationsZentrum)» Since 2005 corporate initiative by the Federal Chancellery and Graz University of Technology» The Federal Chancellery is supported by EGIZ in the advancement of the federation s ICT-strategy» Research related to technical innovations in the field of E-Government Graz,

3 Arne Tauber Klaus Stranacher Vesna Krnjic Graz,

4 Andreas Fitzek Tobias Kellner Thomas Lenz Christian Maierhofer Graz,

5 Die Menschen Know-how dahinter at IAIK Prof. Dr. Reinhard Posch Head of Institute& Chief Information Officer (CIO) of the Federal Government of Austria Administration /about_iaik/people/ Graz,

6 » Administrative Stuff» Lecture» Exercise Contents» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz,

7 » Administrative Stuff» Lecture» Exercise Contents» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz,

8 » Wednesday, 11:00 12:30 Seminarraum IAIK (IFEG042) Inffeldgasse 16a ground floor Lecture Hall» Attention: on ( EXAM!) HS i6, Inffeldgasse 25/D, first floor. Graz,

9 Lecture - Schedule Date Topic Lecturer Course-Organization, Motivation and Demonstration E-Government Christian Maierhofer Andreas Fitzek Electronic Signatures Guest lecturer: Klaus Stranacher (Datentechnik Innovation) Austrian Citizen Card Concept and Infrastructure Tobias Kellner Identity Management Electronic Mandates and Electronic Delivery Current E-Government Research at the IAIK Graz, Andreas Fitzek Andreas Fitzek Thomas Lenz

10 Lecture - Schedule Date Topic Lecturer Legal Framework Guest lecturer: Bernhard Karning (Federal Chancellery) Open Government Guest lecturer: Johann Höchtl (Danube-University Krems) Mobile Government Guest lecturer: Thomas Zefferer (A-SIT) TBC Prof. Reinhard Posch Graz,

11 Lecture - Schedule Date Topic Lecturer E-Government in Europe Guest lecturer: Peter Reichstädter (Federal Chancellery) No Lecture! KU delivery Students presentations Exam HS i6! Graz,

12 Exam» Next Exam HS i6, Inffeldgasse 25/D, first floor» Written exam» Three examination dates per semester» Less than four students possibly oral examination Graz,

13 » Administrative Stuff Overview» Lecture» Practical Exercise (KU)» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz,

14 Practical Exercise» Implementing a Mini e-government environment and infrastructre» Programming Excercise» Details later by Andreas Fitzek! Graz,

15 » Administrative Stuff» Lecture» Exercise Overview» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz,

16 Internet Usage 2012 Graz,

17 Internet Usage 2013 Graz,

18 Internet Usage % of the Austrian citizens are using the Internet (2002: 37%) Graz,

19 Reasons for using the Internet Graz,

20 Reasons for not using an Internet connection at home Graz,

21 Companies using Computers, Internet % and Websites Year Using PC Internet Access Website Source: Graz,

22 HELP.gv.at and USP.gv.at in numbers» In April 2014 HELP.gv.at and USP.gv.at had visits.» In April pages were accessed via HELP.gv.at and USP.gv.at had.» Average dwell time on website: 5.06 minutes» 180 Live situations (e.g. marriage, passport, )» textual pages of content, 700 terms Graz,

23 HELP.gv.at and USP.gv.at in numbers» In April 2014 HELP.gv.at and USP.gv.at had visits.» In April 2014 HELP.gv.at and USP.gv.at had page impressions.» Average dwell time on website: 5.06 minutes» 180 Live situations (e.g. marriage, passport, )» textual pages of content, 700 terms Graz,

24 Conclusions» 80% of the Austrian citizens are online» 99% of companies are online» Citizens are not using the public authorities online services only for information gathering but also for performing electronic processes provided by public authorities! Graz,

25 Overview» Administrative Stuff» Lecture» Exercise» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz,

26 Definition» Definition E-Government In general, it means the simplification of work routines and processes through the application of information and communication technologies (ICT) in the areas of information, communication and transaction within and between state institutions as well as between the government and citizens or businesses. (Source: )» Several similar definitions exist in the literature» These definitions have in common that e-government provides public sector services to» several stakeholders (e.g., citizens, businesses, other governments, or employees) by using» information and communication technologies (ICT) by» providing various benefits to its stakeholders at the same time. Graz,

27 E-Government Stakeholders» Citizens (natural persons)» Businesses (legal or natural persons)» Governments (and all corresponding public entities)» Employees (public servants, etc.) Graz,

28 E-Government Differentiation» Internal E-Government» Using IT in the public sector without contacting the citizen directly e.g. electronic act (ELAK), internal applications, etc.» External E-Government» Web services and applications for citizens, companies and customers Graz,

29 E-Government Categories» G2C (Government-to-Citizen):» Interactions between the government and cititzens» Information services or fully-fledged transactional services» G2B (Government-to-Business):» Communication between governments and businesses» Tax services, services for renewing or obtaining permits, etc.» G2G (Government-to-Government):» E.g., the communication between local governments and federal or national governments» G2E (Government-to-Employee):» Internal or external e-government» Governments can offer their employees several applications facilitating access to internal services such as reviewing salary payment records or other services Graz,

30 E-Government Categories and Stakeholders Internal E-Government G2G G2E Public Authority Public Authority Employee G2C G2B External E-Government Citizen Business Graz,

31 E-Government Benefits» Improved and better service delivery» More effective and efficient processing (higher productivity)» Reduction of time need for all stakeholders» Reduction of costs for all stakeholders» Increased convenience Graz,

32 E-Government Challenges» Technical challenges/barriers» Heterogenous IT infrastructures» Security» Organizational challenges/barriers» Support and acceptance of the adoption of e- Government services» Weak collaboration and cooperation between involved stakeholders» Legal challenges/barriers» Governments need to provide their services to all social classes e.g., including elderly or disabled people.» Data protection (e.g., only a minimum amount of data should be processed in e-government services) Graz,

33 E-Government Usage by Citizens Citizens reasons for using e-government in 2013 Information seeking on public authority's websites Downloading governmental forms Sending electronic forms to public authorities and agencies % Source: Statistik Austria, 2013 Graz,

34 E-Government Usage by Companies Electronic submission of a bid for a public anouncement Carry out an electronic governmental process Sending back filled forms Information seeking Downloading forms Quelle: Statistik Austria, 2011 Graz,

35 Level of interactions - E-Government Transaction Number of on-line processes increases. They are accepted by the citizens. Communication is essential. Forms are provided on 82,9% of all web sites. Information Nearly 100% of the public authorities provide informational websites. Graz,

36 E-Government 2.0 Personalization Citizen s interest are pushed to the foreground Proactive services Transaction Continuous on-line procedures Communication e.g. , forms, etc. Information Office hours etc. Graz,

37 Target Continuous Processes e.g. HELP.gv.at, USP.gv.at, Wien.gv.at etc. e.g. ELAK, Register ( ZMR, GWR, Registers of addresses and of mandates), FinanzOnline, other special applications, etc. Portal Special Application / Backoffice Dual Delivery Graz,

38 Sample e-government Process: everywhere & every time Complete a form (XML) Signing with Citizen Card epayment (EPS) Internal process(elak) Electronic delivery delivery serivces Graz,

39 E-Government Services and Applications» Basic Services» e-documents» Electronic documents to be exchanged between stakeholders and the government» e-signature» Valuable means to ensure integrity, authenticity, and non-repudiation of e- Documents» eid» Allow for unique identification and secure authentication in electronic processes Graz,

40 E-Government Services and Applications» Application Domains» e-participation» Enables citizen involvement into political decision making processes e.g., by social networks, forums, wikis, etc.» e-voting» Electronic means are used to place votes or to count votes» e-delivery» Reliable and secure transfer of electronic data (or e-documents) between entities or stakeholders» e-procurement» Procurement of goods and services using ICT» e-justice» Facilitate administrative procedures of judicial systems by using ICT, e.g., the communication between courts and public authorities as well as professional representatives (lawyers, notaries, etc.), citizens, and businesses.» e-health» Electronic processes that support healthcare Graz,

42 General Objectives» Based on the vision and e-government strategy defined in 2000» Assure trust in provided services by appropriately informing citizen on the security-, privacy-, and transparency-preserving features of provided solutions.» Include all relevant authorities to avoid silo solutions, i.e. separated solutions of different authorities, which hinder interoperability between them.» Iteratively transform services to achieve complete transactional and integrated services without media breaks. Graz,

43 Main Pillars of the Austrian e-government» Organizational Framework» Efficient and collaborative organizational structures are required» Legal Framework» Relevant for successful and sustainable e- Government in Austria» Technical Framework» Implementation of the organizational and legal framework using ICT Graz,

44 Organizational Framework Federal Government Digital Austria Management CIO Speaker Bund, Länder, Städtebund, Gemeindebund, WKÖ, HV/SV, Freie Berufe Digital Austria IKT-Bund Digital Austria BLSG Ministries Bund, Länder, Städte, Gemeinden, Wirtschaft Graz,

45 Legal Framework» E-Government Act ( E-Government Gesetz )» Signature Act ( Signaturgesetz )» General Administrative Procedures Act ( Allgemeines Verwaltungsverfahrensgesetz )» Service of Documents Act ( Zustellgesetz ) Graz,

46 Technical Framework» Electronic Signatures» Citizen Signatures» Official Signatures» Signature Verification» Electronic Acts (ELAK)» Identification and Authentication» Austrian citizen card» Portalverbund» Electronic Mandates» Encryption» Electronic Delivery» etc. Graz,

47 Technical Framework - Big Picture Graz,

48 Technical Framework - Big Picture Graz,

49 Central Elements of E-Government Register Citizen Card eid Official - Signature Special Applications ELAK Central Elements of E-Government Electronic Delivery Portal verbund Security E- Inclusion Graz,

50 Core Applications for Citizens» Digital public authorities helper HELP.gv.at» First source of information regarding e-government services» One-Stop-Principle» Electronic signatures» Citizen signature (Qualified electronic signature )» Signature verification» Electronic identification and authentication» Austrian Citizen Card» Smart card (e.g. ecard) Bürgerkarte» Mobile phone signature Handy-Signatur» Encryption» Electronic mandates» Electronic payments» Electronic delivery Graz,

51 E-Government Applications for Citizens in Austria» HELP.gv.at» FinanzOnline Registration certificate» Extract from police records» E-scholarship RIS The Rechtsinformationssystem des Bundes» etc. Graz,

52 One-Stop-Principle via Portals Alphabetical list of terms Search window HELP Live situations Login to the personalized HELP-Portal Newsletter / RSS-Feed Graz,

53 E-Government Applications for Companies in Austria» Unternehmensserviceportal (USP) Citizen Card as entrepreneurial card» Sales tax-, income tax-, corporate tax statement» Electronic mandates» Authorized representative (Prokurist), general manager, lawyers, etc.» Electronic payment» Electronic delivery Graz,

54 Example: FinanzOnline» Income tax, sales tax, corporate tax Graz,

55 E-Government across EU borders» eid interoperability» e-health» e-justice» Services Directive» e-procurement Graz,

56 Current E-Government EU Projects Secure identity across borders linked 2.0 will contribute to the realization of a single European electronic identification and authentication area. It does so by building on the results of STORK, establishing interoperability of different approaches at national and EU level, eid for persons, eid for legal entities and the facility to mandate. The e-sens ( Electronic Simple European Networked Services ) The aim of the project is to develop an infrastructure for interoperable public services in Europe. It will support the creation of a Digital Single Market by facilitating the delivery and usage of electronic public services. Graz,

58 » Buergerkarte.at Demo» /public» PDF-Over Graz,

60 KU Presentation» Implementing a Mini egovernment environment» Four parts:» Person-Register (PR)» Certification Authority (CA)» Citizen Card Environment (CCE)» Identity Provider (IdP)» Interfaces are specified: pdf Graz,

61 Practical Exercise» Person Register» Holding personal data» ID number (baseid)» Family name» Given name» Birth date» Generate identity links» Structured representation of personal data» Signed by the Person Register Graz,

62 Practical Exercise» Certification Authority» Issues citizen certificates» Uses PR s token service to generate a Citizen Card (CC)» Has to be a PKCS12 container» Includes private key and» Public key certificate» Enable revocation of certificates Graz,

63 Practical Exercise» Citizen Card Environment» Middleware implementing security layer(sl)» Receives sl-commands from IdP» Sends commands to citizen card» In this exercise a virtual CC represented by the PKCS12 container has to be implemented Graz,

64 Practical Exercise» Identity Provider (Mini MOA-ID)» Protocol to web apps: OpenID Connect» Performs authentication process with citizen» Implements security layer commands» Create CMS signature» Read identity link» Process-Flow next Slide Graz,

65 Practical Exercise Graz,

66 Practical Exercise» Registration until » Send mail with group members and component you want to implement to We want all components to be implemented once so first come first serve.» Coding exercise» 3 to 4 people per group Graz,

67 Practical Exercise - Details» Implementation Delivery» Git Repo TAG: delivery» Delivery date: :59» Presentation date: » Important: Talk to other groups! Your implementation has to work with the other groups components at the presentation! Graz,

68 Practical Exercise» Additional information» Reference implementation: Newsgroup: tu-graz.lv.egov» CryptoLibraries (NOT mandatory): Graz,

69 Grading» Practical» 80% Implementation» 20% Presentation» Every group has to prepare a presentation» A few slides regarding implementation details» Present working implementation using the other group s components» All participants have to join the presentations Graz,

70 Follow us on Twitter Thanks for your attention! Slides have been created supported by the Federal Chancellery of Austria. Andreas Fitzek Christian Maierhofer