01.01.2015 Views

OECD Peer Review of E-Government in Denmark - ePractice.eu

OECD Peer Review of E-Government in Denmark - ePractice.eu

OECD Peer Review of E-Government in Denmark - ePractice.eu

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Figure 6.3 Attitudes towards protection <strong>of</strong> onl<strong>in</strong>e processes<br />

Security<br />

Privacy<br />

Consumer protection (e.g. appeal<br />

processes etc.)<br />

0% 20% 40% 60% 80% 100%<br />

Higher than <strong>of</strong>fl<strong>in</strong>e Same as <strong>of</strong>fl<strong>in</strong>e Less than <strong>of</strong>fl<strong>in</strong>e<br />

Source: <strong>OECD</strong> E-<strong>Government</strong> Survey: <strong>Denmark</strong>.<br />

While <strong>Denmark</strong> has made strong progress with implementation <strong>of</strong> PKI and uptake <strong>of</strong> digital<br />

signatures, the process has not been without challenges. One major issue that has arisen relates to the<br />

government’s decision to use the PKI proposed by TDC, rather than the system proposed by the<br />

consortium <strong>of</strong> Danish banks that was the other major party <strong>in</strong> the tender process. The consortium went<br />

on to develop its own PKI-based security and authentication system called Net-ID. Developed and<br />

provided by PBS (Payment Bus<strong>in</strong>ess Services, a bank<strong>in</strong>g sector ICT <strong>in</strong>frastructure supplier owned by<br />

most Danish banks and the Danish central bank), Net-ID is available to some 2.1 million customers <strong>of</strong><br />

Danish banks, and is also be<strong>in</strong>g made available to private sector organisations as part <strong>of</strong> PBS’s<br />

bus<strong>in</strong>ess <strong>in</strong> supply<strong>in</strong>g e-commerce payment systems. It is not, however, compatible with the public<br />

sector PKI.<br />

Arguments for adopt<strong>in</strong>g the Net-ID system proposed by the bank<strong>in</strong>g consortium largely revolved<br />

around projected economies <strong>of</strong> scale and scope, and the convenience for users <strong>of</strong> digital signature<br />

which would result from the public and private sectors us<strong>in</strong>g the same PKI solution. In the end,<br />

<strong>Denmark</strong> decided to develop a separate public sector PKI. There appears to have been two ma<strong>in</strong><br />

reasons for this. Although the digital signatures provided under the Net-ID system are based on the<br />

same broad PKI standard (i.e. the X.509 standard) codified <strong>in</strong> the OCES standard that governs public<br />

sector use <strong>of</strong> PKI <strong>in</strong> <strong>Denmark</strong>, there were concerns that the Net-ID implementation <strong>of</strong> the standard did<br />

not meet strict government requirements. There were also concerns about government use <strong>of</strong> what<br />

amounts to a proprietary PKI, particularly <strong>in</strong> relation to: 1) possible cross-border problems this could<br />

create <strong>in</strong> the future; 2) costs <strong>of</strong> government use <strong>of</strong> the system, which cont<strong>in</strong>ued to rise as discussions<br />

with the bank<strong>in</strong>g consortium proceeded; and 3) possible future loss <strong>of</strong> government sovereignty <strong>in</strong><br />

relation to a critical piece <strong>of</strong> ICT <strong>in</strong>frastructure underp<strong>in</strong>n<strong>in</strong>g the function<strong>in</strong>g <strong>of</strong> government<br />

organisations and public trust <strong>in</strong> (e-)government.<br />

Opt<strong>in</strong>g to build the TDC-provided PKI was clearly a difficult policy choice, and one that is still<br />

the subject <strong>of</strong> discussions between government and the bank<strong>in</strong>g sector regard<strong>in</strong>g long-term strategic<br />

issues and consumer <strong>in</strong>terests relat<strong>in</strong>g to alignment <strong>of</strong> public and private PKIs and digital signatures <strong>in</strong><br />

97

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!