1. Identity and Access Mgmt and electronic Identities Belgian Federal Government Walter Van Assche January 16 th, 2012 Chisinau

2. ELECTRONIC IDENTITY (CARD)

3. Goal eID project To give Belgian citizens an electronic identity card enabling them to authenticate themselves towards diverse applications and to put digital signatures Proof of identity Signature tool

4. eID partners

5. The eID as an e-gov. building block

6. Belgian eID Project Time line 22 Sept 2000: Council of Ministers approves eID card concept study 2000 19 July 2001: Council of Ministers approves basic concepts (smart card, citizen- certificates, no integration with SIS card, is responsible for RRN’s infrastructure, pilot municipalities, helpdesk, card production, legal framework,… for certification services 19 July 2001: Council of Ministers approves basic concepts (smart card, citizen- certificates, no integration with SIS card, Ministry of Internal Affairs is responsible for RRN’s infrastructure, pilot municipalities, helpdesk, card production, legal framework,… Fedict for certification services 2001 Start of 2009: an eID card Start of 2009: all citizens have an eID card 2009 13 Dec 1999: European Directive 1999/93/EC on Electronic Signatures 1999 3 Jan 2002: Council of Ministers assigns RRN’s infrastructure to 3 Jan 2002: Council of Ministers assigns RRN’s infrastructure to NV Steria 2002 27 Sept 2002: Council of Ministers assigns card production to, certificate services to 27 Sept 2002: Council of Ministers assigns card production to NV Zetes, certificate services to NV Belgacom 2002 9 May 2003: starts issuing eID cards 9 May 2003: first pilot municipality starts issuing eID cards 25 July 2003: started 25 July 2003: eleventh pilot municipality started 31 March 2003: issued to civil servants 31 March 2003: first 4 eID cards issued to civil servants 20032004 25 January 2004: start of 25 January 2004: start of pilot phase evaluation September 2005: September 2005: all newly issued ID cards are eID cards 2005 27 September 2004: start of 27 September 2004: start of nation-wide roll-out

7. The eID “product family”  Kids-ID  Foreigner-ID  eID

8. 8 The eID: results eID: –More than 8.6 Million cards issued (2nd wave) Kids-ID: –Potential: 1,3 Million cards –More than 100.000 cards issued since March 2009 Foreigner-ID: – Potential: 1,5 Million cards –More than 150.000 cards issued since 2008

9. How does it work?

10. Alternatives with different security levels Different security levels : –level 0 : Public access –level 1 : User name + Password –level 2 : User name + Password + Token –level 3 : Electronic identity card Future evolutions (based on eID) : –Mobile Identity –One Time Password Generators ? Level 0 Level 1 Level 2 Level 3

11. IDENTITY AND ACCESS MANAGEMENT IN EGOV

12. User Application Getting access © Fedict 2009. All rights reserved | p. 12 What is IAM? A simple story…

13. User Application Identification & authentication Getting access © Fedict 2009. All rights reserved | p. 13 What is IAM? A simple story…

14. User Application Identification & authentication Attributes (Name, Company,…) NRN KBO Notarissen … … Getting access What is IAM? A simple story…

15. User Applications Identification & authentication Attributes (Name, company,…) NRN KBO Notarissen … … Getting access What is IAM? A simple story… Permissions Roles

16. Chief Security Mgr User Application Identification & authentication Attributes (Name, Company,…) NRN KBO Notarissen … … Getting access Legal Representative KBO Granting access © Fedict 2009. All rights reserved | p. 16 What is IAM? A simple story… Permissions Workflow Security Manager Roles

17. © Fedict 2009. All rights reserved | p. 17 IAM …. In a complex reality Manage Identity Manage Virtual Identity Attestation Reporting Risk Definition Relying Party Management Auditing Manage Organizationa l Membership Manage Role Definition Manage Permission Mandate Management Manage Domains Manage Contexts Request Permission Authenticate Process overview

18. © Fedict 2009. All rights reserved | p. 18 Relevance of IAM within eGovernment context Transparance: Granting of transparant access to different applications and information sources of the Belgian government Security: Avoid unauthorized access to information sources and applications of the federal government Trust and trustworthy: Decent service provider Autonomy: Ensure the “uniqueness” of each of the partners Governance structure: The rules and agreements within an IAM context

19. © Fedict 2009. All rights reserved | p. 19 Security management >> An historical agreement  An agreement is being defined between Belgian government partners, providing a basis for an integrated security management  A joint security management platform will be offered as a managed service  All partners can participate in the steering group of the joint platform …..

20. Federated context >> co-existance

21. Context of OCMWContext of Federale governmentContext of local governments © Fedict 2009. All rights reserved | p. 21 Federated context: Example >> Digiflow User Digiflow Identification & authentication Attributes (Name, Company,…) NRN KBO Notarissen … … Permissions Getting access

22. User Tax on web Identification & authentication Attributes (Name, Company,…) NRN KBO … … Getting access Legal represetative Head Security Mgr Permissions Security Mgr Roles Workflo w KBO Granting access © Fedict 2009. All rights reserved | p. 22 Federated context: Example >> Tax on Web for accountants Mandate Mgt

23. Fedict IAM offering Trusted Third Party Authentic sources Circle of Trust FAS Role Admin Application A Application X RR BIS KBO User Relying Party Admin … …

24. Fedict IAM evolution Current building blocks Optimized building blocks

25. EU pilots that work on cross-border interoperability © fedict 2011. All rights reserved

26. eDelivery eSafe Company Dossier Citizen ID Company ID eSignature Privacy Transport Infrastructure Transport Infrastructure eDoc Containers eDoc Containers eID legal entities eID legal entities Visible Digital Signatures Syndication, eDirectories Syndication, eDirectories Transport Infrastructure Overview of LSP’s Collaborations

27. Thank you Fedict Maria-Theresiastraat 1/3 Rue Marie-Thérèse Brussel 1000 Bruxelles TEL. +32 2 212 96 00 | FAX +32 2 212 96 99 info@fedict.belgium.be | www.fedict.belgium.be