EAP’s Sponsored and in Partnership with Single Registration of Social Candidate Tenants – Access to Crossroads Bank for Social Security Peter BulckaertPeter Janssens IT managerApplication Architect VHMCronos Microsoft and e-ID Early Adopter Program 2005

EAP’s Sponsored and in Partnership with Business Needs Social housing in Flanders in social houses to rent divided over 97 local social housing companies (SHMs) 2004: candidate tenants have files (waiting list) 1 candidate can have different files in different SHMs VHM finances SHM’s – supports building activity of SHM’s – some legal controls/auditing – other support

EAP’s Sponsored and in Partnership with Business Needs New candidate  SHM wants correct identification of the person (national registration number - NRN) Problems SHM: Not every candidate knows this number (NRN). Just as getting a correct name, address, family composition and birthdate aren’t that obvious. Lots of mistakes – data entry 1 SHM = 1 file multiple SHMs = multiple files

EAP’s Sponsored and in Partnership with Business Needs For every file, the candidate has to deliver a series of certificates: income, child allowance, disability, social income (OCMW) Problem candidate: lots of work/time every time again. Eg.: Antwerp: 6 SHM’s = 6 times the same documents All this information is important because priority (and rent payed) depends on it

EAP’s Sponsored and in Partnership with Business Needs Every 2 years SHMs have to make, by law, a new inventory of their candidates  over letters posted!! Problem: candidates who have moved mostly don’t give their new address to the SHM  SHMs must search, by law, for the new address and send a new letter  lots of time wasted

EAP’s Sponsored and in Partnership with Business Needs If the candidate wants to be a candidate for different SHMs; all of the necessary data will be sent to the other SHMs  Single Registration of the candidate tenant

EAP’s Sponsored and in Partnership with Business Needs Information to the candidates about their place on the waiting list: Through the Internet Other organisations are also interested in this information (OCMW’s, other administrations, etc…) But correct identification of the person is necessary without extra password.

EAP’s Sponsored and in Partnership with Business Needs Solution  eID + CBSS Correct identification of the candidate Use of the national registration number to get most of the certificates automatically (possible through DB social security – CBSS) 2 eID’s eID of the candidate Strong Authentication (!!) of the employee of the SHM for the access to the CBSS. SHM’s are very small and ICT-support is not obvious! VHM is responsable for security!!!!

EAP’s Sponsored and in Partnership with Business Needs Which data is available immediately? Correct identification of a person Correct composition of the family History of addresses Earned income known by treasury Immediately means: now already available

EAP’s Sponsored and in Partnership with Business Needs Other certificates will be available later. Depending on the subject it can be realized in the near future (2006) or later (OCMW)

EAP’s Sponsored and in Partnership with Solution: concept

EAP’s Sponsored and in Partnership with Solution SHM 1 Woonnet KSZ 1a: data capture & authenticatie SHM 2 Centraal Reper- torium Rijks- Register Fin Geg. Beleids- Statistiek Internet A. Raadpleging dossier via internet (authenticatie EID) 1b: authenticatie

EAP’s Sponsored and in Partnership with Solution The solution will also be used for other business needs!!

EAP’s Sponsored and in Partnership with Technical Solution Authentication via eID Use Internet Information Server and ASP.NET Data capture - client side using IE 6.0 ActiveX control in ASP.net

EAP’s Sponsored and in Partnership with Authentication via eID Internet Information Server – Logon using eID Setup SSL for site Export Root & intermediate CA of eID Install certificates in Local Computer store

EAP’s Sponsored and in Partnership with Authentication via eID (2) Enable and add Certificate Trust List (CTL) Select the newly installed root certificate Not whole site needs to be SSL secured

EAP’s Sponsored and in Partnership with Authentication via eID (3) Accept client certificates

EAP’s Sponsored and in Partnership with Authentication via eID (4) Custom Identity Mapping Extract information from certificate and map to User account Registration Process Register eID authentication certificate in application

EAP’s Sponsored and in Partnership with Authentication via eID (5) Capture certificate data on server Dim cert As HttpClientCertificate cert = Request.ClientCertificate If cert.IsPresent Then End If

EAP’s Sponsored and in Partnership with Authentication via eID (6)

EAP’s Sponsored and in Partnership with Data Capture Capture eID data client side Convert eID data to XML using.NET framework and client side java script Use Native C++ ActiveX Control – Easy setup

EAP’s Sponsored and in Partnership with Data Capture (2)

EAP’s Sponsored and in Partnership with Lessons Learned Business.....Technical CRL is huge IIS configuration can be difficult.Net development time is very short!!

EAP’s Sponsored and in Partnership with Project Name Elevator Project Pitch

EAP’s Sponsored and in Partnership with © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.