A European Best Practice · 25.03.2009 · Innovation Forum 2009, Milano, 25.3.2009. Herbert Leitold. The Austrian Citizen Card. A European Best Practice . The E-Government Innovation

Innovation Forum 2009, Milano, 25.3.2009

Herbert Leitold

The Austrian Citizen CardA European Best Practice

The E-Government Innovation Centre is a joint initiative of the Federal Chancellery and the Graz University of Technology

About EGIZ

E-Government Innovation Centre Established September 2005

Joint initiative the Austrian Federal Chancellery and the Graz University of Technology

Think-Tank tokeep pace with rapid technological development

assist in preparing the eGovernment strategy

develop, prototype, and pilot innovative approaches

Innovation Forum 2009, Milano, 25.3.2009Herbert Leitold 2


Presentation Outline

The Citizen Card ConceptMilestones

Current Status

Key Aspects

Applications What is it good for ...

... for Citizens

... for Businesses

... for Public Administration

Lessons learned and next steps


Citizen Card - Major Milestones

November 2000: Austrian Cabinet Council decision… to employ chip-card technology to improve citizen’s access to public services; to supplement the planned health insurance card with electronic signatures

February 2003: 1st Citizen Card Austrian Computer Society membership card

March 2004: E-Government ActLegal basis of the Identity Management System

2005 - 2009Several private-sector and public-sector borne Citizen Card initiatives


Citizen Card – Key Decisions

Data protection build in by designAvoid added privacy risks due to electronic processes

Cross-border build in by design Enable EU citizens to use their home eID (cf. Services Directive)

Voluntary use Provide the infrastructure

Citizen has the choice to take it up

Not limited to government – open for private sector Can be issuer of citizen cards

Can be user of citizen cards – enable eBusiness


Major initiatives – Citizen Cards

Bank cards (ATM cards)Each bank card issued since March 2005 is also an SSCD (as of 1999/93/EC) – about 6.5 mio. cards

Health insurance cards:Rollout Mai-Nov. 2005, 100 % coverage reached end of Nov. 2005 (~9 mio.)

Further initiatives:• some credit cards• official’s service card• CSP signature cards• student service cards, etc.

so far, no eID with chip

http://www.a-trust.at/default.asp?node=345

The Austrian Citizen Card is a concept, not a specific technology

The Citizen Card combinesqualified electronic signatureAuthentication

electronic identity Identification

data on representation, mandatesRepresentation

Citizen Card - Basic functions


Data Protection Principle – sector-specific PINs

SOURCENOT

STORED

ssPINAREA A

(e.g. health)

ssPINAREA B(e.g. tax)

DO NOT ADD FURTHER RISK BY eID AND AUTOMATION !!!


Open Interface Security Layer

Citizen C

ard Environment

Client-side integration of technologies


Server-side Integration – Open Source

• MOA – Module for On-line Applications

Basic modulesIdentification (MOA-ID)

Signature validation / creation (MOA-SS/SP)

Electronic delivery (MOA-ZS)

Representation (MOA-VV)

Official signatures (MOA-AS)

Open source

10Innovation Forum 2009, Milano, 25.3.2009Herbert Leitold

The Big Picture

11Innovation Forum 2009, Milano, 25.3.2009Herbert Leitold


Applications – a few examples

For the citizens Tax declarations online

eDocuments

For businessesas service provider: eBusiness

as user: eGovernment, eDocuments

For administrationsSecure access to eDossiers

…. in Action: Tax Declarations online

FinanzOnline1 Mio. users (04/2006)

Tax returns, VAT declaration, etc.


…. in Action: Private Sector Use

System open for take-up by private sector

e.g. Internet banking

e.g. Online Shops


Tools: Securing sensitive data

Citizen Card has encryption functions

Tools to encrypt sensitive data, e.g.

password safe

access data to Internet bank

private documents

classified data

etc.


Document-Signatures

Tools to sign PDF

Word 2007

OpenOffice


Official signatures resistant againstmedia breaks

…. in Action: Criminal Record Certificate

Frequently needed, e.g. in public procurement

Fully electronic process


…. in Action: Electronic dossier system

All federal ministries

Secure access using theofficial‘s service card



The future

Enhance user convenience

Cross-border aspects

Recent developments


User convenience Minimum footprint –no local installation

Demonstrator Mobile signature

Open-Source Citizen Card Environment


EU Large Scale Pilot eID „STORK“

Austria

Belgium

Estonia

France

Germany

Italy

Luxembourg

Netherlands

Portugal

Slovenia

Spain

Sweden

United Kingdom

Plus - Iceland

Innovation Forum 2009, Milano, 25.3.2009

Herbert Leitold

Thank you for your attention!

[email protected]

mailto:[email protected]