Brussels, 27 January 2006

eID and eGovernment in AustriaeGovernment Subgroup Meeting on eID

The E-Government Innovations Center is an initiative of the Austrian Federal Chancellery and the Graz University of Technology

Herbert LeitoldHerbert.Leitold@egiz.gv.at

Brussels, 27 January 2006 2

ContentsPart I: Basic Concepts

Laws and Bylaws

Official Signatures

Registers

Citizen Infrastructure

Server-side open source modules

Part II: In ActionDemonstration

Brussels, 27 January 2006 3

Major Laws and Bylaws

E-Government Act (into force March 2004)Citizen card, IDM concept (sourcePIN, ssPINs), authority to act as representative, official signature, administrative signature

Amendments to Delivery Act enables electronic delivery

Bylaws to E-Government Act

SourcePIN Register Regulation

E-Government Sectors Delimitation Regulation

Supplementary Register Regulation

Administrative Signature Regulation

Delivery Service Regulation

Brussels, 27 January 2006 4

Official Signaturee.g., legal acts needelectronic signature to get in force

Same approach for notifications, etc.

Maintain probative value even after media transitions

Brussels, 27 January 2006 5

Example of an official signature

Brussels, 27 January 2006 6

Probative value maintained on print outsreconstruction of XML document possible from the paper copy

Media independence

date and time CA and serial-numberLogo of issuing

authority

signature value

signing person

unique form identifier

Brussels, 27 January 2006 7

Registersfor natural persons

for legal persons

Supplementary registers

sourcePIN

Brussels, 27 January 2006 8

Unique identifiers

Various unique IDsNatural persons

Central Register of Residents (CRR; ZMR)

Legal personsRegister of Company Names (CNR)

Register of Associations (AR)

Supplementary Register (supR)For natural persons

e.g. expatriates, foreigners

For other parties

CRR supR CNR AR

123… CRR-number (ZMR)

Brussels, 27 January 2006 9

sourcePIN Register

Source PINsUnique IDs derived from unique IDs in Registers

strong encryption for physical persons

sourcePIN Register maintained by Data Protection Commission

SourcePIN stored in Citizen Card Environment

Data structure Identity LinkLinks Identity to Electronic Signature

CRR supR CNR AR

sourcePIN-Reg

4csabB2…

123…

Brussels, 27 January 2006 10

Citizen InfrastructureeID initiatives

Smartcards et.al.

IDM concept – data protection

Cross-border IDM concept

Integration of Technologies

Brussels, 27 January 2006 11

Major roll-outs

Bank cards (ATM cards)Each bank card issued since March 2005 is also an SSCD (as of 1999/93/EC)

Health insurance cards:Rollout Mai-Nov. 2005, ~70.000 cards/day100 % coverage (8 Mio.) reached end of Nov.

Mobile phones:each mobile phone (capable of receiving SMS)(since March 2004)

Further initiatives:• CSP signature cards• Student service cards, etc.

Brussels, 27 January 2006 12

Sector-specific IDM concept

4csabB2…

sourcePIN-Reg

sector-code

GH

Sector „health“

5cwu4N…

ssPIN „health“

No7b99t…

ssPIN „tax“

sector-code

SA

Sector „tax“

Brussels, 27 January 2006 13

Foreign-eID integration

Integration of foreign eIDBelgian, Estonian, Finish, Italian eID integrated into the

Uses Recurring identity conceptUnique identifier of foreign certificateused as “sourcePIN”

Service to be started 02/2006

Brussels, 27 January 2006 14

The integration of the various technologies ids provided by an open interface, its implementation is the Citizen Card Environment

Open Interface Security LayerOpen Interface Security Layer

Integration of technologiesCitzen

Card Environment

Brussels, 27 January 2006 15

Server SideMOA – Module for On-line

ApplicationsBasic modules

Open source

Brussels, 27 January 2006 16

The MOA species

MOA–ID/ID+, MOA-wID: Identification

MOA–SS: Server SignatureOfficial Signature

MOA–SP: Signature Verification

MOA–ZS: Electronic Deliverysubstitute registered letter

MOA–VV: Representation

further to come …

Brussels, 27 January 2006 17

In ActionFINANZOnline

Tax declarations

Register of convictions certificate” (clearance cert.)

eID plus ePayment

Electronic delivery

Web-ShopUsing the Citizen Card in the private sector

Brussels, 27 January 2006 18

Demo 1: FINANZOnlineCurrently ~70% of tax returns(employed citizens) filedonline

VAT declarations

etc.

DEMOSKIP

Brussels, 27 January 2006 19

Step 1: Select Citizen Card

Brussels, 27 January 2006 20

Step 2: Identification (ssPIN) and sign

Brussels, 27 January 2006 21

Step 3: Carry out your tax busieness

Brussels, 27 January 2006 22

Demo 2: Register of Convictions Certificate

Simple process

In the conventional case requirespersonal appearance eitherfor the application or pickup

Electronic identification gives improvement

Example of an intelligent form

Start

Identif.

Pay-ment

-

Appli-cation

SKIP

Brussels, 27 January 2006 23

Step 1: Fill in a form, …

Brussels, 27 January 2006 24

Step 2: control it, …

„Intelligent form“: Data Taken from identity-link in

the Citizen Card

Needed by the process(entered by citizen in step 1)

Data (home address) know to administration. Consent to

use given in step 1

Proceed with signature

Brussels, 27 January 2006 25

Step 3: sign it, …

Brussels, 27 January 2006 26

Step 4: pay it, …

Brussels, 27 January 2006 27

Step 5: Receive confirmation …

Brussels, 27 January 2006 28

Step 6: … and get it.

Brussels, 27 January 2006 29

Delivery Service

Authority

Für die elektronische Zustellung sind folgende Schnittstellen definiert:Empfänger/in – Zustelldienst[1]. Die Benutzerführung und Kommunikation erfolgen über Webseiten[2], die Signatur über die Bürgerkarte.Behörde – Zustelldienst[3].Zweistufige Schnittstelle zur Auswahl des Zustelldienstes und zur Übermittlung des Zustellstücks.

Für die elektronische Zustellung sind folgende Schnittstellen definiert:Empfänger/in – Zustelldienst[1]. Die Benutzerführung und Kommunikation erfolgen über Webseiten[2], die Signatur über die Bürgerkarte.Behörde – Zustelldienst[3].Zweistufige Schnittstelle zur Auswahl des Zustelldienstes und zur Übermittlung des Zustellstücks.

Notice1 4

Notification2

3Pickup/Signature

Delivery

The concluding „e“ in e-GovernmentAlso for registered mail

DEMOSKIP

Demo 3: electronic delivery

Brussels, 27 January 2006 30

Step 1: Select Citizen Card

Brussels, 27 January 2006 31

Step 2: Sign receipt

Brussels, 27 January 2006 32

Step 3: Incoming Mail-Box

Brussels, 27 January 2006 33

Citizen Card for private sector

Same concept, but additional data protection measuresPrivate sector-specific personal identifiers (pssPIN)

Created in citizen card environment

Private-sector ID (e.g. company’s registration number)acts as “sector ID”

Allows for eID to be used in e-commerce

Brussels, 27 January 2006

Thank you for your attention

Herbert.Leitold@egiz.gv.at