1. Bulding blocks of e- government Ingmar Pappel

2. Bulding blocks of e-government  Personal Code  Digital Identity  Digital signature  X-Road  Organizations  Main registries

3. Personal Code  EV Standard 585-90) – uniquely identifies a person  The form is GYYMMDDSSSC, where G shows sex and century of birth (odd number male, even number female, 1-2 19th century, 3-4 20th century, 5-6 21st century), SSS is a serial number separating persons born on the same date and C a checksum.  Used everywhere and in every registry or database except publicly in Internet.

4. Personal Code  Personal code is „primary key“ in Population Registry and it is used as a „foreign key“ in almost every registry and database containing information about persons.  Most queries on X-road contain Personal Code because with help of that real persons can be uniquely identified. Code of Digital Identity.  Lessons to learn –  (1) coding information into National Identification Number (My Number) is not a good idea and may cause privacy problems,  (2) uniquely identifying number helps with interoperability between registries

5. Digital Identity  „Secure, authenticated identity is the birthright of every Estonian: before a newborn even arrives home, the hospital will have issued a digital birth certificate and his health insurance will have been started automatically. All residents of the small Baltic state aged 15 or over have electronic ID cards, which are used in health care, electronic banking and shopping, to sign contracts and encrypt e-mail, as tram tickets, and much more besides— even to vote.“ (The Economist: http://www.economist.com/news/international/21605923-national-identity-scheme-goes-global- estonia-takes-plunge http://www.economist.com/news/international/21605923-national-identity-scheme-goes-global- estonia-takes-plunge

6. Digital Identity  Almost every Estonian has ID-card and they are using cards actively:  Active cards: 1 222 632  Electronic authentications: 285 204 371  Estonian ID-card contains private keys for identification and signing, it can be used for identification, authentication and for encryption/decryption. ID-card can be used also in physical identification.  Digi-ID is only for digital identification and does not contain information for physical identification.

7. Digital Identity  Mobile-ID is used for digital identification and private keys are stored in SIM-card. All three mobile operators are providing Mobile ID for their customers.  In every authentication PIN is asked and validity of authentication certificate is checked.  ID-card is mandatory, Digi-ID and Mobile-ID are optional.  http://mobile.id.ee/ http://mobile.id.ee/  Certificates are generated by Certification Centre Ltd. – the only CA in Estonia, founded and owned by Swedbank, SEB Bank and Estonian Telecom. It is privately owned company. https://www.sk.ee/en and http://www.id.ee/?lang=enhttps://www.sk.ee/enhttp://www.id.ee/?lang=en  For enterprises SK provides digital stamping device and digital stamping software. Digital stamping is mostly used by banks and when stamping (signing) documents automatically. Digital stamp certifies authenticity of digital document.

8. Digital Signature  Introduced in 2000 – „Law of Digital Signature“  Count of digital signatures: 175 923 419  All public institutions in Estonia must accept digitally signed documents. It is in law.  Software for signing is provided by SK free of charge and it is constantly updated. Everyone (in Estonia) can give 10 signatures per month free.

9. Digital Signature  http://www.id.ee/?id=30608&read=36794 http://www.id.ee/?id=30608&read=36794  Digital signature is guaranteed without limits by Estonian Government.  So far there is no successful attempts of hacking digital signature, ID-card, Digi-ID or Mobile-ID.  New and much stronger encryption algoritms (RSA 2K, ECC) are introduced and signature format (BDOC 2.1) is changed this year to comply with new eIDAS (European Union) regulation.  Software is open source and free to use. It works on Windows, Linux and MacOSX.

10. X-Road  The data exchange layer X-Road is a technical and organisational environment, which enables secure Internet-based data exchange between the state’s information systems.  https://www.ria.ee/x-road/ https://www.ria.ee/x-road/  http://www.x-road.eu/ http://www.x-road.eu/

11. X-road

12. Organisations  State Information Systems Authority  Department of State Information Systems of the Ministry of Economic Affairs and Communications  SMIT – IT Centre of Ministry of Interior – www.smit.eewww.smit.ee  RIK – Centre of Registers and Information Systems – www.rik.eewww.rik.ee

13. State Information Systems Authority „Operational and tactical level of State Information System“  Data Exchange Layer X-Road  Public Key Infrastructure PKI  ID card  Document Exchange Centre DEC  Data Communication in Public Administration ASO  IT Infrastructure  State Portal eesti.ee  Raising Public Awareness about the Information Society  Critical Information Infrastructure Protection CIIP  CERT Estonia  IT Baseline Security System ISKE  Supervision  EU Structural Funds

14. Department of State Information Systems of the Ministry of Economic Affairs and Communications  Strategic and coordination level of State Information System  The tasks of the department include the coordination of state IT-policy actions and development plans in the field of state administrative information systems (IS):  state IT budgets  IT legislation  coordination of IT projects, IT audits, standardisation, IT procurement procedures  international cooperation in the field of state IS  http://www.riso.ee/en http://www.riso.ee/en

15. Some important Systems  Some important systems:  Citizen Portal https://www.eesti.ee/enghttps://www.eesti.ee/eng  Business Portal https://ariregister.rik.ee/index.py?lang=enghttps://ariregister.rik.ee/index.py?lang=eng  Land Register https://kinnistusraamat.rik.eehttps://kinnistusraamat.rik.ee  Population registy - http://www.andmevara.ee/?page_id=488&lang=en  Administration System for the State Information System RIHA  (currently in Estonian only)

16. Population Register  The Population Register is a single database of primary personal data of Estonian citizens and foreigners who have received the residence permit or right of residence in Estonia. The authorised processor of this database is the Ministry of Internal Affairs.Ministry of Internal Affairs

17. Administration System for the State Information System RIHA  RIHA gives information on the following subjects:  Which are the information systems and databases that make up the state’s information system;  Which data are collected and processed and in which information systems;  Which services, incl. X-Road services, are provided and who is using them;  Who are the responsible and authorised processors of the information systems and databases, and who are the contact persons;  On which legal basis are the databases operated and the data processed;  The reusable components that ensure the interoperability of information systems (XML assets, classifications, dictionaries and ontologies.  Example: https://riha.eesti.ee/riha/main/tee/rr57/4https://riha.eesti.ee/riha/main/tee/rr57/4

18. Thank you! Ingmar Pappel ingmar.pappel@ttu.ee +3725094046