Belgian proposal of an organization model for an electronic identity card Frank Robben General Manager Crossroads Bank for Social Security Sint-Pieterssteenweg 375 B-1040 Brussels

2 Crossroads Bank for Social Security What is E-government ? n E-government is a continuous optimization of service delivery and governance by transforming internal and external relationships through technology, internet and new media n internal relationships -government to government -government to employees n external relationships -government to citizen -government to business user of public services provider of services

3 Crossroads Bank for Social Security Why E-government ? n provision of better service to the customer (citizens and companies) and service providers n modernization of the public sector -example and catalyst for the adoption of new technologies -improvement of cost efficiency -more challenging work environment for government employees

4 Crossroads Bank for Social Security  reduce burdens (travel, queuing, paperwork, …)  realtime feedback  permanent access from any location  easy to find information  personalized service  unique data collection  proactive governance  more participation in decisions  direct contact with competent public agency  access to personal data Better service

5 Crossroads Bank for Social Security E-government: a structural reform process n E-government requires -re-engineering of processes -re-organization -change of mindsets (customer centric) -changes of legal environment -cooperation between several government levels

6 Crossroads Bank for Social Security Back office integration is the key n unique data collection n integrated data management (principle of the authentic source) n electronic data exchange and work flow n architecture & horizontal services: -unique identification keys (electronic identity card) -PKI -messaging and transaction services -portal architecture -content management system n standards (XML, IP, etc) n global but decentralized approach

7 Crossroads Bank for Social Security Customer centric n portal interaction triggered on -life events (birth, marriage, etc.) -life styles (sport, culture, etc.) -life status (unemployed, retired, etc.) n p-channels and e-channels must co-exist n multi device access (PC, TV, WAP GSM, PDA, …) n integrated services -information -interaction -transaction

8 Crossroads Bank for Social Security Customer centric n critical reflection on principles of data collection and creation of new added value -readable and understandable text -analysis of the requirement of data collection -harmonization of basic concepts -first data verification, then data collection -default values based on previously entered data -on-line help -simulation environments

9 Crossroads Bank for Social Security Levels of service maturity of E-government Level 1 Information Government agencies publish information on the web Level 2 Interaction Users can communicate electronically with single government agencies, but agencies don’t necessarily communicate electronically with the user Level 3 Transaction User can communicate electronically with single government agencies, and applications of the agencies respond electronically to the user Level 4 Integration Cross-agency information and transactions are available via intention based portals Back offices are integrated and business processes are re-engineered Complexity / Costs Constituency Value

10 Crossroads Bank for Social Security Electronic identity card n possible functions -identification of the holder -authentification of the holder -generation of electronic signature -electronic proof of characteristics of the holder -execution of programs -electronic data storage -electronic purse

11 Crossroads Bank for Social Security Electronic identity card n retained functions -visual and electronic identification of the holder -authentification of the holder via the technique of the digital signature -generation of electronic signature via the technique of the digital signature -proof of characteristics of the holder via the technique of the digital signature on the initiative of the holder -only identification data storage -no electronic purse -no biometry

12 Crossroads Bank for Social Security Identification n visual -basic identification data: name, first names, place and date of birth, sex, nationality, unique identification number – no address -photograph n electronic -cfr. visual basic identification data (+ address ?) -digital photograph

13 Crossroads Bank for Social Security Digital versus electronic signature n digital signature -technique based on asymmetric cryptography -permitting to determine the origin and the integrity of electronic data n certificate -confirmation that a pair of keys proves something (e.g. identity, characteristic, …) n electronic signature -use of a certain technique, e.g. the technique of the digital signature -as an electronic and legally valid alternative of a manual signature

14 Crossroads Bank for Social Security Scheme digital signatureelectronic signature electronic signature by means of the technique of a digital signature

15 Crossroads Bank for Social Security Technique of the digital signature CA public key CA public key digital signature

16 Crossroads Bank for Social Security Some concepts n identity certificate: proof of identity n attribute certificate: proof of characteristics (e.g. function, quality, mandate) n function of registration authority (RA): -‘counter’ where the certificate is requested and that verifies if communicated identity or characteristic is correct -if so, approves the request and reports it to the certification authority n function of certification authority (CA): -produces on the base of the information from the RA a certificate which is linked with a pair of keys -manages that certificate

17 Crossroads Bank for Social Security Use of the technique of the digital signature n 3 applications -electronic storage private key with related identity certificate for electronic authentification -electronic storage private key with related identity certificate for the generation of an electronic signature -electronic storage of one or more private keys with related attribute certificates in order to proof characteristics

18 Crossroads Bank for Social Security Use of the digital signature n model -private keys with related identity certificates automatically stored on the card unless opposition of the holder (opting- out) delivered by CA chosen by the government as a result of a public call for tenders -private keys with related attribute certificates storage place available on the card free choice of the holder (opting-in) delivered by CA chosen by the holder

19 Crossroads Bank for Social Security Law on electronic signature n article 1322, paragraph 2 Civil Code “For the purpose of this article can meet the requirement of a signature, a set of electronic data that can be attributed to a particular person and that proves that the content of the act has been maintained”.

20 Crossroads Bank for Social Security Law certification service providers n implementation European Directive into Belgian law -provision that qualified electronic signature meets the requirements of article 1322, paragraph 2 Civil Code -scheme of minimal missions (issuance, management, revocation of certificates) and liability of certification-service- providers -rules at suspension of activities by certification-service- provider -voluntary accreditation scheme -rules regarding liability of certificate holder -supervision and sanctions -possibility to make the use of electronic signatures in the public sector subject to additional requirements

21 Crossroads Bank for Social Security Goals n promote rapid availability of identity certificates n guarantee quality of identity certificates n promote multifunctional and free use of identity certificates n guarantee open market of independent evolving certification authorities n guarantee interoperability between certification authorities n guarantee conformity with evolving technical standards n conformity with the European Directive

22 Crossroads Bank for Social Security Organization model n government chooses card producer and CA issuing the identity certificates as a result of a public call for tenders n the municipality calls the holder for the issuing of the electronic identity card n the holder can choose to have or not 2 private keys associated to identity certificates, on his identity card; if so, the municipality acts as registration authority for the identity certificates

23 Crossroads Bank for Social Security Organization model n electronic identity card contains necessary space to store other private keys associated to attribute certificates that holder can obtain at CA of his choice n private key associated to identity certificate on electronic identity card can be used to generate electronic signature within the scope of E-government applications which require an electronic signature

24 Crossroads Bank for Social Security Organization model CM/CP/CI (7) (8)(9) Matti ERA Face to face identification De Gemeenten (1) RCRC (3) Bull Meikäläinen PIN & PUK1 (10b) (10a1) (11) (13) - (10a2) (2), (12) VRK (4) CA (5) (6) -code

25 Crossroads Bank for Social Security No storage of electronic data n why not ? -preventing perception of the card as a big brother -preventing loss of data, when the card is lost -preventing frequent updates of the card n stimulation of the controlled access to data over networks, using the card as an access tool, rather than storage of data on the card n thus, no integration of SIS-card and electronic identity card

26 Crossroads Bank for Social Security Advantages n to the user -faster communicaton / service delivery -better quality of service -more personalized approach -reduction of administration cost -higher availability of services (24/7) -more transparancy

27 Crossroads Bank for Social Security Advantages n to the government -higher work satisfaction for employees by avoiding useless work -better control of administration cost -better image of public agencies -more direct relation with target groups -more efficient policy support -more efficient fraud detection

you ! Crossroads Bank for Social Security