1 E-Courts: Toward Information Protection Management Structures Presentation to the RNSA Workshop “Social Implications of Security Measures” University of Wollongong 29 May 2006 Mark Burdon & Dr. Lauren May Information Security Institute (ISI) Queensland University of Technology

2 Introduction Electronic courts (e-courts) research Electronic courts (e-courts) research Relatively un-chartered territory Relatively un-chartered territory Background paper to raise potential IS issues Background paper to raise potential IS issues Lessons learnt - USA to Australia Lessons learnt - USA to Australia Develop IS management structures & standards Develop IS management structures & standards Specific to e-courts Specific to e-courts

3 Definitions Information protection is information security Information protection is information security Defining e-courts Defining e-courts The “paperless trial”, the web-based forum or the automated process? The “paperless trial”, the web-based forum or the automated process? “a body with an adjudicative function that makes use of ICTs to run proceedings.” “a body with an adjudicative function that makes use of ICTs to run proceedings.” Defining courtroom technology Defining courtroom technology …generic expression…numerous forms of technology…may or may not be present in a courtroom. (Lederer, 2005) …generic expression…numerous forms of technology…may or may not be present in a courtroom. (Lederer, 2005)

4 E-courts in Action Courtroom 21 - the “paperless court” Courtroom 21 - the “paperless court” e_45_2004.asp?pageid=666&co_pageid=2 e_45_2004.asp?pageid=666&co_pageid=2 e_45_2004.asp?pageid=666&co_pageid=2 e_45_2004.asp?pageid=666&co_pageid=2

5 Overview of Integrated E-courts

6 E-courts & IS – The US Experience National Center for State Courts (NCSC) National Center for State Courts (NCSC) E-courts Conference 2004 E-courts Conference 2004 Messing & Teppler Messing & Teppler Transparency and reliability challenges Transparency and reliability challenges Issues of trust and integrity of judicial orders Issues of trust and integrity of judicial orders Real-life Californian example Real-life Californian example “no longer can we presume courts have authoritative record … unless court computer security is technically assured” “no longer can we presume courts have authoritative record … unless court computer security is technically assured”

7 Implications for Australian E-courts QUT E-courts Conference - Caelli 2003 QUT E-courts Conference - Caelli 2003 SMH e-court layout SMH e-court layout Three potential issues Three potential issues End to end security End to end security Security of court archives Security of court archives Time/date stamping & electronic signatures Time/date stamping & electronic signatures Security issues to address Security issues to address

8 Preliminary Findings & Contentions Lack of formal research Lack of formal research Ad hoc development to process realignment Ad hoc development to process realignment Initially… limited ICT use – small risk Initially… limited ICT use – small risk Now…court systems re-aligning processes Now…court systems re-aligning processes Future…increasing risk Future…increasing risk Courts need total confidence in the integrity of their systems Courts need total confidence in the integrity of their systems Significant damage to court reputation Significant damage to court reputation Society trust in court decisions Society trust in court decisions Critical information infrastructure Critical information infrastructure

9 Next Steps ARC Linkage Grant ARC Linkage Grant Develop IS management structures Develop IS management structures Identify usage properties & match to IS techniques Identify usage properties & match to IS techniques “Lessons learnt” from the USA “Lessons learnt” from the USA Develop IS standards Develop IS standards Quality service of technology Quality service of technology Achieve fundamental security goals Achieve fundamental security goals A conceptual “set of standards” A conceptual “set of standards” Upper management to best practice checklist Upper management to best practice checklist

10 Summary ICT usage is increasing in courts ICT usage is increasing in courts National interest - integrity of E-court process National interest - integrity of E-court process System of certainty could become uncertain System of certainty could become uncertain Instability could weaken trust & confidence Instability could weaken trust & confidence IS framework vital to e-court development IS framework vital to e-court development While structures are constructed While structures are constructed Central and not afterthought Central and not afterthought Challenge automatic assumptions Challenge automatic assumptions Informed policy making about future of IS & e-courts Informed policy making about future of IS & e-courts

11 Thank You Questions? Questions?