WebServicesforeGovernmentinGermany.pptVIP

Web-Services for eGovernment in Germany Brussels, Feb. 19, 2009 OASIS eGov Member Section At a glance Security as a key requirement for eGovernment Web Services Paperless processes ? Electronic Forms with electronic Signatures Encryption for confidentiality, PKI for authentification Development of OSCI-Transport 1.2 in 2002 Secure message exchange based on XML-Technologies Implementing a Registry for OSCI-Transport bases Web-Services Interconnecting the Registries of Residents as Killer-application Standardization at the application level (OSCI-XMeld) Nation-wide in use since Jan. 1, 2007 Other applications followed (e. g. Interior, Justice, Finance) Next steps Adopting international “web service security” in OSCI-Transport 2 New Projects at the European level Agenda Web Services Security: 1st Approach, OSCI-Transport 1.2 Standardization at the Application Level Next Steps OSCI Transport Version 1.2 Open Standard, developed in 2001 … 2002 Experts from Government and Industry Based on W3C Standards XML digital signature and XML encryption No WS* - Stack at this time Profiled to meet German and European Laws (digital signature act) Double-Envelope (Container) schema Application independent Sharing resources without loss of confidentiality Uses Internet (http) Allows economic Implementation at the local Government Level Successfully checked against ITSEC Communication levels Reliable One-Way Scenario User 2 acts as a service provider Intermediary acts as mandatory controller unable to decrypt message content Delivery is recorded, can be retraced and confirmed Service result can be sent back in a independent transmission Processing of the message is done behind the scenes Implementation of OSCI-Transport 1.2 Described in terms of XML-Schema Data structures for atomic messages (e. g. forward delivery request) Problem with schema definition (Early version of XML-DSIG XML-ENC) Client components available free of charge and open source OSCI-Transport library Supplied b