5th September, 2000 University of Canberra Restructuring Business Practices ‘Helping make today’s ideas tomorrow’s Customs’ Garry Grant Director E-Commerce Australian Customs

Topics Current Access The Brave New World - Customs Gateway Client Registration & ‘Security’ Law Enforcement Customs - Quo Vadis? Questions

The Customs Scene Cleared 4 million import & export entries - 98% lodged electronically 90% cargo reported electronically Close to 30 million EDI messages annually 15 million international air passengers - 35% electronic pre-clearance $3.7 billion duty/sales tax & $262 million in other charges - electronic funds transfer $13 billion GST

Customs Conundrum Facilitate Trade Collect Revenue Protect the Border

Government Agencies Other Government Agencies Industry Current Electronic Commerce Model (for EDI & Interactive Access) Carriers Customs Data Stores Importers/ Exporters Brokers/ Freight Forwarders Network Service Providers Channels Internal CustomsExternal Tradegate Hub Customs Interfaces (including “Registration”) Tradegate Hub ACS Business Applications Internet Connections

Tradegate Customs Cargo Management Systems Data Control Point Ethernet Backbone EDI Gateway Air Cargo Sea Cargo Exit EDIFICE Pass Jems Bureau (TEDIS) Silicon Crafts COTI Cargo Automators AT&T Translation Services Client Current Customs Client Interface Air Cargo Compile /Clear Trace EDIFICE EXIT Sea Cargo TAPIN Eg. Bigpond Oz Other VAN (Telstra) (GEIS) (IBM) EDI COMPILE EDI AT&T MVS Clearinghouse AT&T 3725 COMPILE ISP (AT&T) ISP EDI AT&T GMS Clearinghouse NOTE : COTI - COMPILE (Customs OnLine Interactive Entries) Over The Internet; some Internet to EDI via connect.com as well.. COMPILE

Why Re-engineer? Commitment of the Australian Government to Online service delivery Globalisation of trade Industry trend towards integrated supply chain management Need to avoid the duplication of data Rapid expansion in Internet usage by business

Cargo Management Re- engineering (CMR) Single window Pre-arrival identification of high risk cargo Intervention by exception Periodic declarations & deferred payments Flexible online payments systems

Government Requirements Government Online Strategy Internet 2001 Electronic Transactions Act e-procurement/purchasing Australian Business Number - Digital Signature Certificate

Government Agencies Other Government Agencies Industry Value Added Services Value Added Networks Small Businesses & Individuals Customs/ Quarantine Staff Integrated Cargo System “Reception” Registration & X.500 Directory Services Database Internet Interactive Voice Recognition Web Site Customs Connect Facility (CCF) - The Concept Carriers Customs Data Store Importers/ Exporters Brokers Security “Firewall” Direct Connect Other Customs’ Agencies Communities of Interest Networks Communication Service Providers Security “Firewall” Channels Internal CustomsExternal Business Entry Point

CCF Functions Customs Connect Facility EDI Message Services Translation, Syntax & validation checking Customs Interactive Services Status Enquiry, Create Import/Export Entry Govt Agency Services Interactive, Messages (FTP), ) IVR Services Payment Services CCF Management Services Security x.500 Directory - Public Key Authentication Clients Government Agencies Customs Staff Payment Facilities Customs Integrated Cargo Business System Applications IVR Interactive Messages

Authentication Signing Session Management Security Services Encryption Signature Validation Key Management Entitlements/ Authorisations MESSAGE HANDLER Receipt/ Response Syntax & validation Checking Content Checking Transformation Routing MESSAGESECURITYLAYERMESSAGESECURITYLAYER IVR WEB SERVER BATCH INTERFACES INTERACTIVE Other Platforms Security Services Enabling Application Modules Business Application Modules Host & Mainframe, Midrange & PC Data Modules Common Business Routines Transfer Module Housekeeping Modules Applications Framework RDBMS Access Methods to the applications framework PSTN WAP Network (future) ? Browser/ HTTP HTML Browser/ HTTP Applet ACS TCP/IP Internal Eg. Online forms, value-added Outbound Inbound EDI Outbound - Bulk EDI Outbound - Individual EDI Inbound - Bulk EDI Inbound - Individual Fat Client

CCF - Features Range of connectivity - Internet, direct connects, dial up & mobile Flexible and scalable Variety of EDI message formats Security (firewall/digital signatures) Industry concerns

What Does Industry Say? No surprises - more information sooner Transition phase - what’s happening? Internet - the way to go! Security and Authentication Use Commercial data where possible Single Window to Government

Client Registration Who are Customs clients? Government and business sectors Current authentication process Legislative requirements Future connections and changes

Security Architecture Model Security Management Users Resources Policies Status Audit Log SMIB * Authentication AuthorisationPrivacy Encryption IntegrityMonitoring Non- Repudiation AntivirusPKI*IDS* Security Services Security Functions

Customs & PKI Mandate ABN-DSC Authentication –Customs Client Registration Database –ABR –CRL –Other Data Sources Attribute Certificate (“Cookie”)

Digital Certificates - Issues ? Lack of knowledge about PKI Need for practical business solutions Departments to issue own certificates or market driven process? Base level robust Gatekeeper Certificate - need an outcome!

Law Enforcement E-commerce needs a secure foundation Hackers and professional crackers Your site is a target Liaison between Government and business Risk based analysis of systems and processes - layered defence with access control by PKI

International E-commerce Developments G7/8 APEC World Customs Organisation (WCO) Trans-Tasman Data standards and technology

Quo Vadis? One Stop Shop - International Port Lodgement? Use of Commercial Data Internet/Web EDI Cross Recognition of PKI

Garry Grant Director Electronic Commerce Australian Customs Service