Estonian information system - X-road and X-GIS Hannes Lehemets Tartu

Preface Estonian information system X-ROAD X-GIS Discussion

ESTONIAN IS = DISTRIBUTED SYSTEM

– Id-card trainings

Support systems Data exchange layer (X-Road) the classifications system the system of address details the system of security measures geodetic system (X-GIS) administration system for the state information system (RIHA)

X-ROAD

X-ROAD Data exchange layer Objective: change LATEST data between organizations Since 2001

X-ROAD standards and acronyms WSDL SOAP XMLRPC XSD SOA

Internet ? X-Road Internet X-Road There are various databases and information systems in different platforms with need to co-operate... Population Register (Progress) Business Register (Oracle) Land Register (MSSQL) Motor Vehicle Register (Oracle) Citizen Portal Information System of Company A Citizen Officers more than 100 Databases... Information System of Company B Officers more than 1000 Information Systems... Security Server SOAP client SOAP client SOAP client SOAP server SOAP server SOAP server SOAP server Extra interface from every database to every information system would have been expensive... X-Road is a platform-independent secure standard interface between databases and information systems Database is adapted to X-Road by setting up Adapter Server, which contains: SOAP or XMLRPC server + X-Road rules Information systems need: SOAP or XMLRPC client + understanding of X-Road rules To secure the system, each party accesses X-Road via it’s Security Server X-Road Security Server is a standard software solution that encrypts/decrypts outgoing/ingoing messages, filters ingoing messages as a firewall, and logs messages it receives CA Traffic between Security Servers is encrypted with PKI. Security Servers have to be certified by X-Road Certification Authority Certificates are available for verification from X-Road Central Servers. Central Servers are duplicated Central Servers No redundant centralization: Security Servers create connections directly to each other Data from Central Servers is cached in Security Servers by use of DNSSEC

X-ROAD technical info

X-ROAD services Data services ◦ are services specific to a particular database and usually created individually for that database. ◦ To give access to these services is the main goal of X-tee. Meta services ◦ are auxiliary services for obtaining information necessary to perform data services. ◦ The input, output and semantics of meta services are standardized.

X-GIS

X-GIS Two different meanings X-GIS means standardized GIS data exchange layer with software and hardware Second meaning the first one + application X-GIS ◦

X-GIS standards openGIS OGC WMS (Open Geospatial Consortium Web Map Service) ◦ Free to use! OGC WFS - Web Feature Service Interface Standard GML – Geography Markup Language

X-GIS public services Application WMS service for: ◦ Base map ◦ Main map ◦ Ortophotos

X-GIS architecture Main service providers - servers Cache service providers - servers ◦ Uses main service data ◦ Also called “Satellite servers”

RIHA

RIHA administration system for the state information system Objective: real integral information system that would give a clear view of the state’s IT resources administrates and provides access to the information systems and databases of the state and local governments, and the metadata of data services offered by them

RIHA Databases and service descriptions Service info - WSDL Semantic info – OWL

Other support systems the classifications system the system of address details the system of security measures ◦ ISKE

Solutions Document exchange center Citizen’s Portal eesti.ee Lots of e-services ◦ E-maksuamet ◦ E-PRIA ◦ etc

Future and now Rescue 112 analysis ◦ X-ROAD ◦ X-GIS ◦ Address details ◦ ISKE ◦ E-CALL Commercial firms and science institutions can use the x-road and x-gis for their benefit

Some ideas and questions Government has lots of hardware ◦ 8-17 work time, science time ◦ Can it be used for scientific research? ◦ Can we use X-ROAD? ◦ Can we build S(cience)-ROAD? For example ARIB ◦ 10 servers x 2 processor x Intel 4-core Xeon x64 2Gh ◦ 4 servers x 4 processor x Intel 6-core Xeon x64 2,66 GHz

More info ◦ Cartoon ◦ RIHA – about ID-card

Used material