AK IT-Security 1 E-Government Introduction, Motivation, Demonstration 705.052 (VO) 705.053 (KU), Andreas Fitzek, Christian Maierhofer Graz, 08.10.2014 Das E-Government Innovationszentrum ist eine gemeinsame Einrichtung des Bundeskanzleramtes und der TU Graz
» E-Government Innovation Center (E-Government InnovationsZentrum)» Since 2005 corporate initiative by the Federal Chancellery and Graz University of Technology» The Federal Chancellery is supported by EGIZ in the advancement of the federation s ICT-strategy» Research related to technical innovations in the field of E-Government Graz, 08.10.2014 2
Arne Tauber arne.tauber@egiz.gv.at bernd.zwattendorfer@egiz.gv.at Klaus Stranacher klaus.stranacher@egiz.gv.at Vesna Krnjic vesna.krnjic@egiz.gv.at Graz, 08.10.2014 3
Andreas Fitzek andreas.fitzek@egiz.gv.at Tobias Kellner tobias.kellner@egiz.gv.at Thomas Lenz thomas.lenz@egiz.gv.at Christian Maierhofer christian.maierhofer@egiz.gv.at Graz, 08.10.2014 4
Die Menschen Know-how dahinter at IAIK Prof. Dr. Reinhard Posch Head of Institute& Chief Information Officer (CIO) of the Federal Government of Austria Administration http://www.iaik.tugraz.at/content /about_iaik/people/ Graz, 08.10.2014 5
» Administrative Stuff» Lecture» Exercise Contents» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz, 08.10.2014 6
» Administrative Stuff» Lecture» Exercise Contents» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz, 08.10.2014 7
» Wednesday, 11:00 12:30 Seminarraum IAIK (IFEG042) Inffeldgasse 16a ground floor Lecture Hall» Attention: on 21.01.2015 ( EXAM!) HS i6, Inffeldgasse 25/D, first floor. Graz, 08.10.2014 8
Lecture - Schedule Date Topic Lecturer 08.10.2014 Course-Organization, Motivation and Demonstration E-Government Christian Maierhofer Andreas Fitzek 15.10.2014 Electronic Signatures Guest lecturer: Klaus Stranacher (Datentechnik Innovation) 22.10.2014 Austrian Citizen Card Concept and Infrastructure Tobias Kellner 29.10.2014 Identity Management 05.11.2014 Electronic Mandates and Electronic Delivery 12.11.2014 Current E-Government Research at the IAIK Graz, 08.10.2014 9 Andreas Fitzek Andreas Fitzek Thomas Lenz
Lecture - Schedule Date Topic Lecturer 19.11.2014 Legal Framework Guest lecturer: Bernhard Karning (Federal Chancellery) 26.11.2014 Open Government Guest lecturer: Johann Höchtl (Danube-University Krems) 03.12.2014 Mobile Government Guest lecturer: Thomas Zefferer (A-SIT) 10.12.2014 TBC Prof. Reinhard Posch Graz, 08.10.2014 10
Lecture - Schedule Date Topic Lecturer 17.12.2014 E-Government in Europe Guest lecturer: Peter Reichstädter (Federal Chancellery) 07.01.2015 No Lecture! KU delivery. 14.01.2015 Students presentations 21.01.2015 Exam HS i6! Graz, 08.10.2014 11
Exam» Next Exam 21.01.2015 HS i6, Inffeldgasse 25/D, first floor» Written exam» Three examination dates per semester» Less than four students possibly oral examination Graz, 08.10.2014 12
» Administrative Stuff Overview» Lecture» Practical Exercise (KU)» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz, 08.10.2014 13
Practical Exercise» Implementing a Mini e-government environment and infrastructre» Programming Excercise» Details later by Andreas Fitzek! Graz, 08.10.2014 14
» Administrative Stuff» Lecture» Exercise Overview» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz, 08.10.2014 15
Internet Usage 2012 Graz, 08.10.2014 16
Internet Usage 2013 Graz, 08.10.2014 17
Internet Usage 2013 80% of the Austrian citizens are using the Internet (2002: 37%) Graz, 08.10.2014 18
Reasons for using the Internet Graz, 08.10.2014 19
Reasons for not using an Internet connection at home Graz, 08.10.2014 20
Companies using Computers, Internet % and Websites 100 90 80 70 60 50 40 30 20 10 0 2003 2007 2010 2013 Year Using PC Internet Access Website Source: http://www.statistik.at/web_de/statistiken/informationsgesellschaft/ikt-einsatz_in_unternehmen/index.html Graz, 08.10.2014 21
HELP.gv.at and USP.gv.at in numbers» In April 2014 HELP.gv.at and USP.gv.at had 1.224.439 visits.» In April 2014 4.500.845 pages were accessed via HELP.gv.at and USP.gv.at had.» Average dwell time on website: 5.06 minutes» 180 Live situations (e.g. marriage, passport, )» 3.000 textual pages of content, 700 terms Graz, 08.10.2014 22
HELP.gv.at and USP.gv.at in numbers» In April 2014 HELP.gv.at and USP.gv.at had 1.224.439 visits.» In April 2014 HELP.gv.at and USP.gv.at had 4.500.845 page impressions.» Average dwell time on website: 5.06 minutes» 180 Live situations (e.g. marriage, passport, )» 3.000 textual pages of content, 700 terms Graz, 08.10.2014 23
Conclusions» 80% of the Austrian citizens are online» 99% of companies are online» Citizens are not using the public authorities online services only for information gathering but also for performing electronic processes provided by public authorities! Graz, 08.10.2014 24
Overview» Administrative Stuff» Lecture» Exercise» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz, 08.10.2014 25
Definition» Definition E-Government In general, it means the simplification of work routines and processes through the application of information and communication technologies (ICT) in the areas of information, communication and transaction within and between state institutions as well as between the government and citizens or businesses. (Source: http://www.digitales.oesterreich.gv.at/site/6506/default.aspx )» Several similar definitions exist in the literature» These definitions have in common that e-government provides public sector services to» several stakeholders (e.g., citizens, businesses, other governments, or employees) by using» information and communication technologies (ICT) by» providing various benefits to its stakeholders at the same time. Graz, 08.10.2014 26
E-Government Stakeholders» Citizens (natural persons)» Businesses (legal or natural persons)» Governments (and all corresponding public entities)» Employees (public servants, etc.) Graz, 08.10.2014 27
E-Government Differentiation» Internal E-Government» Using IT in the public sector without contacting the citizen directly e.g. electronic act (ELAK), internal applications, etc.» External E-Government» Web services and applications for citizens, companies and customers Graz, 08.10.2014 28
E-Government Categories» G2C (Government-to-Citizen):» Interactions between the government and cititzens» Information services or fully-fledged transactional services» G2B (Government-to-Business):» Communication between governments and businesses» Tax services, services for renewing or obtaining permits, etc.» G2G (Government-to-Government):» E.g., the communication between local governments and federal or national governments» G2E (Government-to-Employee):» Internal or external e-government» Governments can offer their employees several applications facilitating access to internal services such as reviewing salary payment records or other services Graz, 08.10.2014 29
E-Government Categories and Stakeholders Internal E-Government G2G G2E Public Authority Public Authority Employee G2C G2B External E-Government Citizen Business Graz, 08.10.2014 30
E-Government Benefits» Improved and better service delivery» More effective and efficient processing (higher productivity)» Reduction of time need for all stakeholders» Reduction of costs for all stakeholders» Increased convenience Graz, 08.10.2014 31
E-Government Challenges» Technical challenges/barriers» Heterogenous IT infrastructures» Security» Organizational challenges/barriers» Support and acceptance of the adoption of e- Government services» Weak collaboration and cooperation between involved stakeholders» Legal challenges/barriers» Governments need to provide their services to all social classes e.g., including elderly or disabled people.» Data protection (e.g., only a minimum amount of data should be processed in e-government services) Graz, 08.10.2014 32
E-Government Usage by Citizens Citizens reasons for using e-government in 2013 Information seeking on public authority's websites Downloading governmental forms Sending electronic forms to public authorities and agencies 20 30 % 40 50 Source: Statistik Austria, 2013 Graz, 08.10.2014 33
E-Government Usage by Companies Electronic submission of a bid for a public anouncement Carry out an electronic governmental process Sending back filled forms Information seeking Downloading forms 0 20 40 60 80 100 Quelle: Statistik Austria, 2011 Graz, 08.10.2014 34
Level of interactions - E-Government Transaction Number of on-line processes increases. They are accepted by the citizens. Communication E-Mail is essential. Forms are provided on 82,9% of all web sites. Information Nearly 100% of the public authorities provide informational websites. Graz, 08.10.2014 35
E-Government 2.0 Personalization Citizen s interest are pushed to the foreground Proactive services Transaction Continuous on-line procedures Communication e.g. email, forms, etc. Information Office hours etc. Graz, 08.10.2014 36
Target Continuous Processes 1 2 3 e.g. HELP.gv.at, USP.gv.at, Wien.gv.at etc. e.g. ELAK, Register ( ZMR, GWR, Registers of addresses and of mandates), FinanzOnline, other special applications, etc. Portal Special Application / Backoffice Dual Delivery Graz, 08.10.2014 37
Sample e-government Process: everywhere & every time Complete a form (XML) Signing with Citizen Card epayment (EPS) Internal process(elak) Electronic delivery www.help.gv.at www.buergerkarte.at www.elak.gv.at www.bka.gv.at/ delivery serivces Graz, 08.10.2014 38
E-Government Services and Applications» Basic Services» e-documents» Electronic documents to be exchanged between stakeholders and the government» e-signature» Valuable means to ensure integrity, authenticity, and non-repudiation of e- Documents» eid» Allow for unique identification and secure authentication in electronic processes Graz, 08.10.2014 39
E-Government Services and Applications» Application Domains» e-participation» Enables citizen involvement into political decision making processes e.g., by social networks, forums, wikis, etc.» e-voting» Electronic means are used to place votes or to count votes» e-delivery» Reliable and secure transfer of electronic data (or e-documents) between entities or stakeholders» e-procurement» Procurement of goods and services using ICT» e-justice» Facilitate administrative procedures of judicial systems by using ICT, e.g., the communication between courts and public authorities as well as professional representatives (lawyers, notaries, etc.), citizens, and businesses.» e-health» Electronic processes that support healthcare Graz, 08.10.2014 40
Overview» Administrative Stuff» Lecture» Exercise» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz, 08.10.2014 41
General Objectives» Based on the vision and e-government strategy defined in 2000» Assure trust in provided services by appropriately informing citizen on the security-, privacy-, and transparency-preserving features of provided solutions.» Include all relevant authorities to avoid silo solutions, i.e. separated solutions of different authorities, which hinder interoperability between them.» Iteratively transform services to achieve complete transactional and integrated services without media breaks. Graz, 08.10.2014 42
Main Pillars of the Austrian e-government» Organizational Framework» Efficient and collaborative organizational structures are required» Legal Framework» Relevant for successful and sustainable e- Government in Austria» Technical Framework» Implementation of the organizational and legal framework using ICT Graz, 08.10.2014 43
Organizational Framework Federal Government Digital Austria Management CIO Speaker Bund, Länder, Städtebund, Gemeindebund, WKÖ, HV/SV, Freie Berufe Digital Austria IKT-Bund Digital Austria BLSG Ministries Bund, Länder, Städte, Gemeinden, Wirtschaft Graz, 08.10.2014 44
Legal Framework» E-Government Act ( E-Government Gesetz )» Signature Act ( Signaturgesetz )» General Administrative Procedures Act ( Allgemeines Verwaltungsverfahrensgesetz )» Service of Documents Act ( Zustellgesetz ) Graz, 08.10.2014 45
Technical Framework» Electronic Signatures» Citizen Signatures» Official Signatures» Signature Verification» Electronic Acts (ELAK)» Identification and Authentication» Austrian citizen card» Portalverbund» Electronic Mandates» Encryption» Electronic Delivery» etc. Graz, 08.10.2014 46
Technical Framework - Big Picture Graz, 08.10.2014 47
Technical Framework - Big Picture Graz, 08.10.2014 48
Central Elements of E-Government Register Citizen Card eid Official - Signature Special Applications ELAK Central Elements of E-Government Electronic Delivery Portal verbund Security E- Inclusion Graz, 08.10.2014 49
Core Applications for Citizens» Digital public authorities helper HELP.gv.at» First source of information regarding e-government services» One-Stop-Principle» Electronic signatures» Citizen signature (Qualified electronic signature )» Signature verification» Electronic identification and authentication» Austrian Citizen Card» Smart card (e.g. ecard) Bürgerkarte» Mobile phone signature Handy-Signatur» Encryption» Electronic mandates» Electronic payments» Electronic delivery Graz, 08.10.2014 50
E-Government Applications for Citizens in Austria» HELP.gv.at» FinanzOnline https://finanzonline.bmf.gv.at/» Registration certificate» Extract from police records» E-scholarship http://www.stipendium.at/» RIS The Rechtsinformationssystem des Bundes» etc. Graz, 08.10.2014 51
One-Stop-Principle via Portals Alphabetical list of terms Search window HELP Live situations Login to the personalized HELP-Portal Newsletter / RSS-Feed Graz, 08.10.2014 52
E-Government Applications for Companies in Austria» Unternehmensserviceportal (USP) www.usp.gv.at» Citizen Card as entrepreneurial card» Sales tax-, income tax-, corporate tax statement» Electronic mandates» Authorized representative (Prokurist), general manager, lawyers, etc.» Electronic payment» Electronic delivery Graz, 08.10.2014 53
Example: FinanzOnline» Income tax, sales tax, corporate tax Graz, 08.10.2014 54
E-Government across EU borders» eid interoperability» e-health» e-justice» Services Directive» e-procurement Graz, 08.10.2014 55
Current E-Government EU Projects Secure identity across borders linked 2.0 will contribute to the realization of a single European electronic identification and authentication area. It does so by building on the results of STORK, establishing interoperability of different approaches at national and EU level, eid for persons, eid for legal entities and the facility to mandate. The e-sens ( Electronic Simple European Networked Services ) The aim of the project is to develop an infrastructure for interoperable public services in Europe. It will support the creation of a Digital Single Market by facilitating the delivery and usage of electronic public services. Graz, 08.10.2014 56
Overview» Administrative Stuff» Lecture» Exercise» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz, 08.10.2014 57
» Buergerkarte.at Demo» https://www.egiz.gv.at/de/testportal» https://pruefung.signatur.rtr.at/» https://vollmachten.egiz.gv.at/mms-test/» https://www.help.gv.at/portal.node/hlpd /public» http://meinbrief.at» https://www.e-tresor.at/1/» PDF-Over Graz, 08.10.2014 58
Overview» Administrative Stuff» Lecture» Exercise» Motivation & Demonstration» Social Changes» Definition & Fundamental Terms» E-Government in Austria» Demo» Break» KU Presentation Graz, 08.10.2014 59
KU Presentation» Implementing a Mini egovernment environment» Four parts:» Person-Register (PR)» Certification Authority (CA)» Citizen Card Environment (CCE)» Identity Provider (IdP)» Interfaces are specified: https://refegov.student.iaik.tugraz.at/spezifikation. pdf Graz, 08.10.2014 60
Practical Exercise» Person Register» Holding personal data» ID number (baseid)» Family name» Given name» Birth date» Generate identity links» Structured representation of personal data» Signed by the Person Register Graz, 08.10.2014 61
Practical Exercise» Certification Authority» Issues citizen certificates» Uses PR s token service to generate a Citizen Card (CC)» Has to be a PKCS12 container» Includes private key and» Public key certificate» Enable revocation of certificates Graz, 08.10.2014 62
Practical Exercise» Citizen Card Environment» Middleware implementing security layer(sl)» Receives sl-commands from IdP» Sends commands to citizen card» In this exercise a virtual CC represented by the PKCS12 container has to be implemented Graz, 08.10.2014 63
Practical Exercise» Identity Provider (Mini MOA-ID)» Protocol to web apps: OpenID Connect» Performs authentication process with citizen» Implements security layer commands» Create CMS signature» Read identity link» Process-Flow next Slide Graz, 08.10.2014 64
Practical Exercise Graz, 08.10.2014 65
Practical Exercise» Registration until 16.10.2014» Send mail with group members and component you want to implement to andreas.fitzek@iaik.tugraz.at» We want all components to be implemented once so first come first serve.» Coding exercise» 3 to 4 people per group Graz, 08.10.2014 66
Practical Exercise - Details» Implementation Delivery» Git Repo TAG: delivery» Delivery date: 7.1.2015 23:59» Presentation date: 14.1.2015» Important: Talk to other groups! Your implementation has to work with the other groups components at the presentation! Graz, 08.10.2014 67
Practical Exercise» Additional information» Reference implementation: http://refegov.student.iaik.tugraz.at/» Newsgroup: tu-graz.lv.egov» CryptoLibraries (NOT mandatory): https://jce.iaik.tugraz.at/sic/download Graz, 08.10.2014 68
Grading» Practical» 80% Implementation» 20% Presentation» Every group has to prepare a presentation» A few slides regarding implementation details» Present working implementation using the other group s components» All participants have to join the presentations Graz, 08.10.2014 69
Follow us on Twitter https://twitter.com/egov_egiz Thanks for your attention! Slides have been created supported by the Federal Chancellery of Austria. bernd.zwattendorfer@egiz.gv.at Andreas Fitzek andreas.fitzek@egiz.gv.at Christian Maierhofer christian.maierhofer@egiz.gv.at www.egiz.gv.at