What is the strategy to consistently implement eDelivery in the Norwegian Public Sector? André Hoddevik Head of e-procurement unit, Department for public procurement, Agency for Public Management and eGovernment (Difi), Norway Secretary General, OpenPEPPOL AISBL, Belgium

This is Difi Agency for Public Management and eGovernment 280 employees in Oslo and Leikanger Our mission is to modernise and make the public sector more efficient user oriented coordinated Core areas of expertise Management and organisation Public procurement Digitalisation Shared digital services – national building blocks Authority for the universal design of ICT

Connecting Norway to the EU digitally «Norway shall participate in the EU’s digital single market» Norwegian Government in Digital Agenda 2.0

National building blocks ID Gateway National Population Register Contact and Reservation Register Land register Overseen by other agencies Digital Mailbox for citizens Legal Entities Register e-Signature Service portal Electronic Public Records (OEP) eInvoicing

Use of CEF eDelivery DSI (PEPPOL profile) Current Planned eInvoicing eProcurement eCatalogues eOrdering eSubmission of tenders ISO 20022-based payments Electronic Public Records (OEP) Digital Mailbox for citizens Structured messaging between public sector entities National strategy for eDelivery in progress – to be finalised spring 2017 PEPPOL profile of CEF eDelivery DSI as a national building block?

eDelivery setup Operational level Legislative level PEPPOL profile of CEF eDelivery – AS2 Message Exchange Protocol (ordinary/enhanced) Dynamic Discovery Model – centralised Service Metadata Publisher (ELMA) by Difi Security Model – PEPPOL PKI, transport layer encryption or end-to-end security Distributed service delivery – 57 private sector Access Point providers Centralised service provider accreditation and support provided by Difi eDelivery specifications (PEPPOL) and sample software (Oxalis) provided by Difi Legislative level Use of PEPPOL profile of CEF eDelivery is currently recommended for eInvoicing to central government entities Will become mandatory to use in central government if defined as national building block PEPPOL Transport Infrastructure Agreement as legal basis for eDelivery usage

eDelivery setup Sender Receiver 1 4 PKI Secure transport 2 3 46 Service Providers offering more than 60 solutions for sending of EHF/PEPPOL BIS 46 Service Providers offering more than 60 solutions for receiving of EHF/PEPPOL BIS Corner Corner 1 4 Service Metadata Locator Document validation Hosted by EC PKI PEPPOL Service Metadata Publisher (ELMA) Hosted by Difi in Norway Secure transport 57 service providers offering Access Point Services PKI (PEPPOL) AS2 – MDN with timestamp AS2 TLS 2 3 HTTP Corner Corner

eInvoicing Existing use of CEF eDelivery DSI (PEPPOL profile)

The eInvoicing use case Registered eInvoicing recipients: 61.198 Public sector recipients: 99,7% of all entities Number of eInvoices handled in October: 3,3 million Number of eInvoices handled last 12 months: 32 million 70% of central government invoices received electronic Number of eInvoices handled since 2012: 61 million Estimated socio-economic savings: 5,1 billion NOK 5,1 milliarder NOK er ca €562 million

Key enablers for eInvoicing Legislative measures – mandating central government usage Standardisation of business processes and information flow in the invoicing process European based: CEN BII / CEN TC434 and PEPPOL BIS Provision and use of shared services / building blocks PEPPOL profile of CEF eDelivery DSI, national shared services / building blocks Capacity building among public sector buyers, their suppliers, ICT industry and decision makers Increased digital maturity and focus on realisation of benefits Cooperation with public and private stakeholders

ISO 20022-based payments Planned use of CEF eDelivery DSI (Enhanced PEPPOL profile)

Background for the use case Banks and ERP vendors need one approach to enable ISO 20022 compliance for public and private sector Covers off-line payments in the customer to bank interface Reuse of open source software Based on open standards Little need for additional SW development

eDelivery setup Sender Receiver 1 4 PKI Secure transport 2 3 Public key service Version 1 hosted by Difi Corner Corner 1 Service Metadata Locator 4 Hosted by EC PKI PEPPOL Service Metadata Publisher (ELMA) Hosted by Difi in Norway Document validation ASiC-e ASiC-e Decrypting - PKI Encrypting - PKI Secure transport Government Agency for Financial Management Responsible for a new bank service framework agreement for central government from 2018 Requires support for ISO 20022-based secure filing and secure file transport Requires use of enhanced PEPPOL profile of CEF eDelivery and ASiC archive Connector – vefa.SRest ASiC-e REM evidence REM evidence REM – Sign evidence PKI (PEPPOL) AS2 – MDN with timestamp AS2 TLS 2 3 HTTP Corner Corner

Partners in the ISO 20022 project ERP vendors Unit4 Daldata Tripletex Nets Visma UniMicro Logiq Pagero Bank sector Sparebank1 Nordea Eika bankene Swedish Bankers' Association DNB Danske bank Bits KMD (Denmark) Public sector NAV (Norwegian Labour and Welfare Organisation) Skatteetaten (Inland Revenue Service) DFØ (Agency for Financial Management) Difi Lånekassen (Norwegian State Educational Loan Fund) Others Access point forum (Norway) EHF user forum (Norway)

Conclusions

Towards consistent implementation of eDelivery in Norway CEF eDelivery DSI (ordinary and enhanced PEPPOL profile) is under consideration as a national building block Mandatory use in central government entities Significant usage of eDelivery is already achieved in eInvoicing and eProcurement domain – spillover to payment and other domains Planned usage in additional Difi operated shared services / building blocks Cooperation with public and private stakeholders is the key to success Possibility to re-use eDelivery-based services B2B in addition to B2G and G2G Well functioning market for eDelivery-based solutions and services

Summary Potential and expected benefits – eDelivery as enabler Joint infrastructure for cross domain and cross border secure messaging – avoid duplication Socio economic benefits for invoicing and procurement domains: €850 million annually Financing model Government funding of facilitation and centralized services provided by Difi Public and private sector users pay for their set-up or buying of access point as a service On-boarding strategy Consolidate and increase use of eDelivery in existing domains – utilise synergies Use of eDelivery in national building blocks and shared services provided by Difi Support for multiple exchange message protocols to enable transition Process for establishing eDelivery as a separate national building block – mandatory use in central government entities

andre.hoddevik@difi.no www.difi.no