Seminar in “ICT Service Oriented Architectures” April 28 th 2009 Marino Di Nillo Advanced Interoperabilty Unit at the Italian National Agency for Digital Administration - CNIPA Advanced interoperability for Public Administration in Italy

Cnipa – call for tender for interoperability services Legislation : Art Financial Law 2005 art. 2, sub. 3, lett. b) and c) DPCM Law decree n.42, 2005 Cnipa defined two set of services and published in 2006 a call for tender based on the following pillars:  Services defined by CNIPA in terms of: Service technical specifications SLA dimensioning system price list based on dimensional parameters  Different providers required for lot 1 and lot 2

Interoperability services for public administrations on SPC Web sites hosting Web site design Web contents editing & publishing Workstation management Wan & Lan management System management Asset management Electronic mail Certified Unified messaging Domain Gateway (Porta di dominio) Applicative Cooperation Telecom Italia-Elsag- Datamat-Engineering EDS Italia -Almaviva

Advanced Interoperability services in SPC Set of services n.1 Web Hosting Web site design and implementation Technical support for content editing and publishing Web interface for existing applications Workstations management Wan and Lan Management System management Asset Management Performance Application Monitoring

Advanced Interoperability services in SPC Set of services n.2  Dedicated service  Certified service  Videocommunication and collaboration service  Application Cooperation service:  Domain Gateway  Support for Application integration  XML firewalling service  Identification, autentication, authorisation service

Buying and using services -Definition of service’s need (Administration) -Contract signing : in the case Public Administrations need services, they must sign a contract linked to the CNIPA’s framework contract (they don’t need to publish a call for tender) -Submission of Implementation Project (Provider) -Service implementation and provisioning (Provider) -Test (provider, CNIPA, Administrations) -Services running (Provider) -Using Services (administrations/citizens) Advanced Interoperability services in SPC

Service Data Center Either winner for set n.1 or winner for set n.2, implemented (as required by technical specifications) a Service Data Center dedicated to the Public Administration services Some Data Center requirements :  Two SPC link via two distinct SPC providers  Two Internet link via two distinct SPC providers  Hosting of help desk (first and second level)  SLA control and monitoring  Automatic Billing  Logging on Service usage by Administrations  Web publishing of SLA Report and logging  Security requirements  Training and consulting

Advanced Interoperability services in SPC Rules adopted for Service’s Price determination Set up, for each service, of dimensional parameters, in order to establish the price of the services Unit price defined depending on the set of quantity of service needed Set up of a price list, annexed to the framework contracts, defining unit price for each service

Advanced interoperability services in SPC The amount of money for the each service an Administration needs, is etablished depending on : 1)Amount of service the Administration include in his service’s needs document 2)The applicable price parameters for that quantity (included in the price list annexed to the framework contract)

Advanced Interoperability services in SPC Dimentional parameters Web hosting Number of users in an hour (the most used ) Number of pages “clicked” in the most used hour Mass memory needed Technical support for content editing and publishing Number of branches in the tree of contents Number of pages Percentage of content change needed Quickness in content change implementation

Advanced Interoperability services in SPC Web site design and implementation – dimensional parameters Number of branches in the tree of contents Number of pages Number of function points required Web interface for existing applications – dimensional parameters Number of Function points of the existing applications which are affected by the interface

Advanced Interoperability services in SPC Workstations management – dimensional parameters Number of workstations Number of sites with on-site service Number of workstations per site (for on site served sites) Wan & Lan management – dimensional parameters Number of network devices to be managed

Advanced Interoperability services in SPC System management– dimensional parameters Class of server (classification based on server complexity) Number of sites with on-site service Number of servers per site (for on site served sites)

Advanced Interoperability services in SPC Asset management – dimensional parameters Number of managed contracts Total number of items included in the contracts Application Monitoring Service - dimensional parameters Number of processes to be monitored Number of technological chains per process

Advanced Interoperability services in SPC Dedicated mail service - dimensional parameters Number of mailboxes (unit price depending on the amount of items) Service delivery type ( standard/on-site ) “archiving” features “unified messaging” features Certified mail service – dimensional parameters Number of mailboxes (unit price depending on the quantity of items) “archiving” features

Advanced Interoperability services in SPC Applicative co-operation services – dimensional parameters Domain Gateway type Domain gate throughput Number of phases included in the service ( Set up, composition, Coordination, integration and publication) Firewall XML Number Numero di firewall XML acquisiti (unit prices per class of throughput) Identification, Authentication, Authorization Number of users to be managed

Some numbers about set #1 and set #2 of services Service set # 1 Contracts25 Amount of money Service set # 2 Contracts19 Amount of money

Report

A service definition sample: Compliance with the following standard: SMTP (RFC 2821,RFC 822, RFC 1123, RFC2156) for text messages; MIME S/MIME (RFC 2045, RFC 2046, RFC 2047, RFC 2048, RFC 2049, RFC 2633) for encrypted messages and digitally signed messages; DSN (RFC 1891) delivery status notification support Service available only via User Identification; Service managed at the Service Centre; Level 1 and Level 2 help desk based on a trouble ticketing system for problem management Mailing list management Mailbox size: 300 MB for 90% of the total amount of mailboxes 1 GB for 10% of the total amount of mailboxes

A service definition sample: Mailboxe’s daily backup Availability via POP, SMTP, IMAP and via their secure versions (over TLS), HTTP, HTTPS Availability via PDA and via Smartphones Antivirus functionalities working on the following protocols: POP, SMTP, IMAP, HTTP Antispam mechanism 22

A service definition sample: Service mode:  Fully outsourced ( default )  On site (on demand and with additional charge ) Optional features:  Archiving (on demand and with additional charge)  Unified messaging features (on demand and with additional charge)  Unit price etablished per mailbox  Unit price established in a quantity dependent way  Additional charge for options

Different unit price for different brackets: 24 Price list for service Unit price for # mailboxes <=1000P1 Unit price for 1000 < # mailboxes <= 5000P2 Unit price for 5000 < # mailboxes <= P3 Unit price for # mailboxes <10.000P4 A service definition sample:

Service level agreement Service availability99,9% Archiving option availability99,5% Unified messaging option availability99,5% Incoming messages latency60 sec in 95% cases Outgoing messages latency60 sec in 95% cases Maximum delay for change implementation 30 min. in 95% cases 1 hour in 100% cases...

Thank you Marino Di Nillo