Presentacin de PowerPoint

1
eGovernment in Estonia
Gijón, Asturias November 29, 2007 technimap
2007 Uuno Vallner, PhD. Ministry of Economic
Affairs and Communications Head of eGovernment
Division
2
Background

• 65 of population uses Internet
• 48 householders have Internet
• connections (typically broadband)
• 100 of public employees have
• computerized workplace with
• Internet connection
• All public sector institutions have web pages
• Very high level of Internet-banking (98 of
  transactions by Internet)
• All citizens have ID-cards (smart cards)
• 86 tax declarations were filled and handled
  online (2007)
• (whole population 1,356 mil.)

3
History of eGovernment

• 1993 - government web page
• 1995 - first public sector database in internet
• 1998 state portal www.riik.ee (single point)
• 1999 registry of registies
• 2001 X-road
• 2002 PKI, ID-card
• 2002 www.eesti.ee portal for citizens
• 2005 e-voting
• 2007 mobile ID
• 2007 - reo

4
Institutions of information society

• Ministry of Economic Affairs and Communications
  (coordinating ministry). Department of state
  information systems (RISO)
• Estonian Informatics Centre implementing body
  under Ministry of Economic Affairs and
  Communications
• State Chancellery (document management rules)
• Data Protection Inspectorate
• Communications Board (regulator)
• Ministry of the Interior (regional and local
  government issues)

5
Government
County governments
Local governments
Ministries
IT managers
Representative
Local government associations
IT councils of counties
Subordinate agencies
Council representative
IT managers
Representative
IT councils of ministries
Councils directors
Informatics Council
ICT work groups of counties
ICT work groups of ministries
Department of State Information Systems (RISO)
MINISTRY OF ECONOMIC AFFAIRS AND COMMUNICATIONS
Informatics Centre
6
Coordination

• Open method of coordination
• Legislation (if appropriate)
• Money (if available)
• Central solutions (if reasonable)

7
ICT legislation (1)

• Personal Data Protection Act (1996)
• Protects individuals fundamental rights and
  freedoms
• States that all citizens have a right to see the
  data that the public sector maintains about them
• Databases Act (1997)
• Sets out rules for the creation and maintenance
  of public sector databases
• Does not deal with the front office (use and
  services of databases)
• New law currently elaborated (merged to Public
  Information act)

8
ICT legislation (2)

• Public Information Act (2001)
• Ensures the opportunity for all to access
  information intended for public use
• Imposes an obligation for public authorities to
  maintain a website and a document register
• States that everybody must have free access to
  the internet at public libraries
• Identity Documents Act (2000)
• Establishes the national ID card as the primary
  personal identification document
• Digital Signatures Act (2000)
• States that digital signature is equal to the
  handwritten one
• Imposes an obligation on public sector
  institutions to accept digitally signed documents
• Regulates the activities of Certification and
  Time-Stamping Service providers

9
ICT legislation (3). Government acts

• Registry of registries(1998) ? RIHA (2007)
• Classification system (2003)
• Data exchange layer (X-road) (2003)
• System of security measures (2004)
• The system of address details (2003)
• The geodetic reference system (2002)

10
Policy

• Principles of Estonian Information Policy
  (1998...)
• Action Plan of Estonian Information Policy
  (1998,...)
• Information Society Development Plan 2013
• The strategy focuses on three major dimensions
  (social, economic and institutional) with three
  main goals
•  
• Every member of the society will have the
  possibility to use all benefits of the
  Information Society
• Wide use of ICT is the engine of economic growth
  of Estonia
• Public sector is citizen-centric, transparent
  and effectively functioning.

11
Case 1. PKI Infrastructure
Contains two certificates 1) one for
authentication 2) for giving digital signature

• Types of eID instruments
• ID card (of citizens in age 16-75 have ID card)
• mobile-ID (2007)
• Internet banking (citizens only)
• Roll of Banks authentication and e-payment
• Soft Certificate (officials only) strongly not
  recommended

12
Case 1. PKI. Fields of applications

• As a regular ID
• As an authentication tool for e-services both in
  the public and the private sector
• For giving digital signature
• Signing and encrypting e-mail
• Standard e-mail address like Uuno.Vallner_at_eesti.e
  e
• As an ID-ticket for public transport
• For transfer money in Internet Bank
• As a loyal customer card
• As a door card
• eVoting

13
Case 2. Trust environment X-road (2002)

• The common data exchange environment as well as
  the common set of interfaces and common
  authentication system.
• Saves money and considerably increases the
  efficiency of data exchange among state agencies
  and in communications between the local residents
  and the state.
• Number of queries made via the X-Road in 2006 -
  30 million

14

15
Case 2. Trust environment X-road (2002)

• All police vehicles (350) have been equipped
  with positioning devices and with mobile
  workstations which enable integrated queries over
  X-road in the databases of Police and
• Citizen and Migration Board
• Estonian Motor Vehicle Registration Centre
• Estonian Traffic Insurance Fund
• Control centre knows where is patrol car
• Patrolling police officer has
• computerized map
• Ca 17 000 queries per day
• Each query lasts ca 10 seconds

16
Databases
Users
Citizen Portal
Pension Insurance Register of Social Insurance
Board
Citizen
Population Register
X-Road
IS of Health Insurance Fund
MISP
Civil servant
IS of Tax Customs Board
Parental benefit Family benefits in
Internet
Students Register
17
Case 3. Interoperability of document management
systems (2007)

• No more scanners
• No more ordinary post
• Cases must be transferred from one systems to
  other without additional entry
• All document management systems need to have an
  interface with the central document exchange point

18
Lessons learnt

• We protect data not channels - Data is King, not
  road
• PKI infrastructure - everywhere
• Evidentiary value of data data preserve legal
  status we sign, sertificate, log and encrypt
  data.
• High availability level of public Internet
• Confidentiality encrypted data
• Transparent usage of web services no special
  protocols (SOAP, WSDL)
• Multilateral approach. Asynchronous mode in
  synchronous mode
• Easy to add databases and services. Today it
  takes only several days (in some cases only
  several hours) and limited budgets (from 1000 to
  10000 EUR average) to develop new e-service.

19
Thank you for your attention!Uuno.Vallner_at_eesti
.ee