PUBLIC SECTOR INTEROPERABILITY Peter Strickx March 19, 2012 Poland Agenda Focus will be on practical aspects and experiences in interoperability • E-Government context • FSB as interoperability implementation • (European) Interoperability framework E-Government • “E-government focuses on better services for citizens and businesses and more effective use of the Government’s information resources. It sets a strategic direction for the way the public sector will transform itself by implementing business models which exploit the possibilities of new technology” Office of the e-Envoy (UK - 2002) E-Government © Fedict 2009. All rights reserved | p. 5 e-gov guiding principles Total Solution (integrated services) “I will say it only once” – Authoritative [Data] Source (even between governments) – limit admin. formalities Customer focus / User friendly Transparent & Respect for Privacy No digital divide (channel neutral) Minimal cost / reliable / available / performance Architecture & building blocks Introducing FSB Introducing FSB Fedict’s answer: Service Oriented Architecture (SOA); the Federal Service Bus Supplier Supplier Consumer Supplier FSB approach : Open Approach WEB Application WEB Application security + trust Federal Service Bus Regional or Local SB FEDMAN Federal Authentic sources Local or Regional Authentic sources FSB concept : Fedict facilitates access to Authentic sources via web services and FSB Notary FSB • Federal Service Bus • One unique connection to different back-ends • Secured access RN XML Web XML RBis FSB Governance Catalogue of FSB Services Service Architects Service Managers Service Providers & Consumers Identify reusable services Apply common data model Support service lifecycle SOA governance and management applications Taxonomy & information management Service lifecycle management Service discovery SOA conformance Service publication / advertising / promotion Service connection guidance Policy establishment & management Reporting Change & impact analysis Service / usage reporting Service Registry / Repository Service due diligence Service request & registration FSB Governance : FSB Platform Registry Service Bus Shows content FSB to Customer Supports services development Runs Services Repository Describes FSB Services Stores RFCs, FSB service designs, Test reports, Provider SLAs Manages Consumption Contracts Audits SOAP Services @ designtime DEVELOPMENT TEST & ACCEPTANCE Service development & testing beta testing INTEGRATION PRODUCTION Load & Integration testing production Policies, Enforcement, Monitoring Report Engine FSB Management Operation Poller Authentication / Autorization Monitoring tool Verifies WSDLs Access Control List Access Windows FSB Service availability Calls Management operations Checks services availability Content based defense Message throttling Duplicate protecting Message Logging Stores SNMP messages Trigger alerts Sends alerts FSB Services Reusable services Person Services Enterprise Services Get information from different registers (National register and Social Security) Combine these into a useful business service ConsultKBO Different specialized services Application specific services E-depot 4th way E-birth … Advantages of this SOA approach One-stop shopping Standardize services Reduce connection points (and points of failure) Standard security, logging, monitoring Common data model Standardized behavior Governance Release management Staging Loose coupling Europe : proposed service taxonomy Apply these concepts to some of our use cases in next slides FSB use cases : PersonService Task services Entity services Utility services Rijksregister Get Person service Search Person service NREntity service NR access service Manage Person service Social Security Consumers Person Legacy service SSREntity service SSR access service FSB use cases : PersonService Task services Entity services Utility services Rijksregister Get Person service Search Person service NREntity service NR access service Manage Person service Social Security Consumers Person Legacy service Composed public service SSREntity service Basic logic service SSR access service Basic data service FSB use cases : eDepot Objective : Create a Company in 3 days (1 day for eDepot) PersonServices Access Authentic Sources Enterprise Services Notary fills a digital deed using data coming from the authentic sources Maximum 1 day Create & Activate Entreprise eDepot The notary electronically signs the document, and securely submits it to the eDepot services Deposit digital deed to Justice Workflow Send Abstracts to Monitor for publication Few Minutes later, the notary receives a company number > The client can use this number to start his activities FSB use cases : eDepot Objective : Create a Company in 3 days (1 day for eDepot) PersonServices Access Authentic Sources Life event Enterprise Services Notary fills a digital deed using data coming from the authentic sources Maximum 1 day Create & Activate Entreprise eDepot The notary electronically signs the document, and securely submits it to the eDepot services Deposit digital deed to Justice Workflow Few Minutes later, the notary receives a company number > The client can use this number to start his activities Process Public Service Send Abstracts to Monitor for publication Basic logic service FSB use cases : Police-on-Web FSB use cases : eBirth RRN eLoket Police Back end FSB use cases : Police-on-Web FSB use cases : eBirth RRN Basic logic service eLoket Police Back end FSB use cases : eBirth Hospital eHealth National Register Munipality of residence Social Security Munipality place of birth FSB use cases : eBirth Basic logic service Hospital Life event eHealth National Register Munipality of residence Process Public Service Social Security Munipality place of birth FSB use cases : 4th Way Requestor Applications Making / receiving messages “Notice 1” “acknowledgment 1” “Notification per party” “Acknowledgment notification” per party FSB “Notice 2” per notification and/or per party “Acknowledgment 2” WSreq WSresp “Notice 1” “Notice 2” per notificationor “Acknowledgment 1” per party “Acknowledgment 2” CCFF WSreq WSresp “Notice 1” per party “Acknowledgment 1” per party “Acknowledgment notification” per party “notification” per party “Notice 2” per party “Acknowledgment 2” per party “Notification KSZ WSreq “Notice 1” “Notice 2” per notification or per party per party” WSresp “Acknowledgment 1” per party “notification” per party “Acknowledgment 1” per party “Acknowledgment 2” per party “notification” per party “Acknowledgment 2” per party Finances WSreq RSZ “notification” per party WSresp Backoffice WSreq RSVZ WSresp Local offices FSB use cases : 4th Way Life event Requestor Applications Making / receiving messages “Notice 1” “acknowledgment 1” “Notification per party” “Acknowledgment notification” per party FSB “Notice 2” per notification and/or per party “Acknowledgment 2” WSreq WSresp Process Public Service “Notice 1” “Notice 2” per notificationor “Acknowledgment 1” per party “Acknowledgment 2” CCFF WSreq WSresp “Notice 1” per party “Acknowledgment 1” per party “Acknowledgment notification” per party “notification” per party “Acknowledgment 2” per party “Notice 2” per party “Notification KSZ WSreq “Notice 1” “Notice 2” per notification or per party WSresp “Acknowledgment 1” per party “notification” per party Basic logic service per party” “Acknowledgment 1” per party “Acknowledgment 2” per party “notification” per party “Acknowledgment 2” per party Finances WSreq RSZ “notification” per party WSresp Backoffice WSreq Basic data service RSVZ WSresp Local offices Conclusion : the taxonomy works for us Life event Process Public Service Composed public service Basic data service Basic logic service Middleware: consumers, platforms and providers Interoperable identity and access management Interoperable identity and access management Gain Access user Identification & authentication Application Interoperable identity and access management Gain Access NRN Notary Enterprises … user Identification & authentication Application Attributes Interoperable identity and access management Gain Access NRN Notary Enterprises … user Identification & authentication Attributes Permissions Application Roles Interoperable identity and access management Gain Access NRN Notary Enterprises … user Identification & authentication Attributes Application Permissions Workflow Grant access Access manager Security Manager Legal representative KBO © Fedict 2009. All rights reserved | p. 34 Roles Interoperable identity and access management Gain Access NRN Notary Enterprises … user Identification & authentication Federal Authentication Service (FAS) Attributes Application Permissions Roles Attribute Service Role Mgmt Service Interoperable identity and access management Gain Access NRN Notary Enterprises … user Identification & authentication Attributes Permissions Application Roles IDABC EIF • European Interoperability Framework • 3 dimensions : – Organisational Interoperability – Semantic Interoperability – Technical Interoperability EU pilots that work on cross-border interoperability © fedict 2011. All rights reserved Web services actually available on FSB (1/3): EnterpriseServices (13 re-usable webservices) PersonServices (4 re-usable webservices) Service providers: Rijksregister (IBZ) & BisRegister (KSZ) Service consumers: eLoket, KFBN, eBirth, KBO, CS&CitizenAdmin, Securex, Zenito, Nationale Loterij WS: GetPersonService, IGValidationService, SearchPersonService, ManagePersonService, (PersonLegacyService) 4thWayServices (3 specific webservices) Service provider: KBO (FOD Economie) / Service consumers: eDepot, eLoket, KFBN, MagMa, eHuissier WS: WSConsultAgentEnterpriseService, WSConsultATService, WSConsultAttestService, WSConsultKBOService, WSConsultTAPService, WSReportKBOService, WSReportTAPService, WSStatusKBOService, WSUpdateATService, WSUpdateAttestService, WSUpdateKBOService, WSUpdateTAPService, WSErvoService, (CMPELegacyService), (CheckEnterpriseLegacyService) Service providers: KSZ, FOD Financiën (& Vlaamse Belastingsdienst) Service consumers: notarissen, (aankoopcomités & gerechtsdeurwaarders) WS: FourthWayDebtProviderService, FourthWayNoticeRequesterService, FourthWayPushErrorService UME3Services (1 specific webservice with 16 underlying flows still active) Legacy of old UME2 flows, all remaining flows will be migrated before the end of 2011 Web services actually available on FSB (2/3): eLoketServices (4 specific webservices) eBirthServices (5 specific webservices) Service provider: Fedict, eHealth / Service consumers: eHealth, eBirth (application), gemeenten WS: CityService, CodageService, HospitalService, InternalService, ManageService, eDepotServices (5 specific webservices) Service provider: Politie, IBZ / Aline, FOD Econ / Service consumers: eLoket / PoW WS: PoliceBackOfficeService, PoliceReferenceTableUpdateService, AlinePublicBackEndService, CitizenStatusService Service providers: KFBN, KBO, FOD Justitie, Belgisch Staatsblad / Service consumers: KFBN WS: CredocNotificationService, EdepotCreateService, EdepotUpdateService, JusticeProxyService, MoniteurProxyService NBBServices (2 re-usable webservices) Service provider: Nationale Bank van België (NBB) WS: NationalBankServices, AnnualAccountService Web services actually available on FSB (3/3): EDRLServices (5 specific webservices) EurtransbelServices (1 specific webservice) Service providers: FOD Fin, RSZ, KBO WS: AttestService / Service consumer: Digiflow IAMServices (2 specific webservices) Service provider: FOD BuZa / Service consumer: European Union WS: NationalExecutionMeasureNotificationService DigiflowServices (1 specific webservice) Service provider: DAV / Service consumers: Portaal, Partena WS: ActivityService, AddressService, ProcedureService, ProductService, SectorService Service provider: KSZ / Service consumers: IAM-KSZRoleCollector, IAM TUM WS: SocialSecurityUserManagmentService, TripletIdentityCheckService UtilityServices (2 re-usable webservices) WS: EchoService, SecuredEchoService (only for testing connectivity with FSB) Overview of LSP’s Collaborations Transport Infrastructure Company ID Citizen ID Transport Infrastructure Company Dossier Citizen ID Transport Infrastructure Citizen ID Company ID Company Dossier Citizen ID Privacy Privacy