OECD Peer Review of E-Government in Denmark - ePractice.eu
OECD Peer Review of E-Government in Denmark - ePractice.eu
OECD Peer Review of E-Government in Denmark - ePractice.eu
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Figure 6.3 Attitudes towards protection <strong>of</strong> onl<strong>in</strong>e processes<br />
Security<br />
Privacy<br />
Consumer protection (e.g. appeal<br />
processes etc.)<br />
0% 20% 40% 60% 80% 100%<br />
Higher than <strong>of</strong>fl<strong>in</strong>e Same as <strong>of</strong>fl<strong>in</strong>e Less than <strong>of</strong>fl<strong>in</strong>e<br />
Source: <strong>OECD</strong> E-<strong>Government</strong> Survey: <strong>Denmark</strong>.<br />
While <strong>Denmark</strong> has made strong progress with implementation <strong>of</strong> PKI and uptake <strong>of</strong> digital<br />
signatures, the process has not been without challenges. One major issue that has arisen relates to the<br />
government’s decision to use the PKI proposed by TDC, rather than the system proposed by the<br />
consortium <strong>of</strong> Danish banks that was the other major party <strong>in</strong> the tender process. The consortium went<br />
on to develop its own PKI-based security and authentication system called Net-ID. Developed and<br />
provided by PBS (Payment Bus<strong>in</strong>ess Services, a bank<strong>in</strong>g sector ICT <strong>in</strong>frastructure supplier owned by<br />
most Danish banks and the Danish central bank), Net-ID is available to some 2.1 million customers <strong>of</strong><br />
Danish banks, and is also be<strong>in</strong>g made available to private sector organisations as part <strong>of</strong> PBS’s<br />
bus<strong>in</strong>ess <strong>in</strong> supply<strong>in</strong>g e-commerce payment systems. It is not, however, compatible with the public<br />
sector PKI.<br />
Arguments for adopt<strong>in</strong>g the Net-ID system proposed by the bank<strong>in</strong>g consortium largely revolved<br />
around projected economies <strong>of</strong> scale and scope, and the convenience for users <strong>of</strong> digital signature<br />
which would result from the public and private sectors us<strong>in</strong>g the same PKI solution. In the end,<br />
<strong>Denmark</strong> decided to develop a separate public sector PKI. There appears to have been two ma<strong>in</strong><br />
reasons for this. Although the digital signatures provided under the Net-ID system are based on the<br />
same broad PKI standard (i.e. the X.509 standard) codified <strong>in</strong> the OCES standard that governs public<br />
sector use <strong>of</strong> PKI <strong>in</strong> <strong>Denmark</strong>, there were concerns that the Net-ID implementation <strong>of</strong> the standard did<br />
not meet strict government requirements. There were also concerns about government use <strong>of</strong> what<br />
amounts to a proprietary PKI, particularly <strong>in</strong> relation to: 1) possible cross-border problems this could<br />
create <strong>in</strong> the future; 2) costs <strong>of</strong> government use <strong>of</strong> the system, which cont<strong>in</strong>ued to rise as discussions<br />
with the bank<strong>in</strong>g consortium proceeded; and 3) possible future loss <strong>of</strong> government sovereignty <strong>in</strong><br />
relation to a critical piece <strong>of</strong> ICT <strong>in</strong>frastructure underp<strong>in</strong>n<strong>in</strong>g the function<strong>in</strong>g <strong>of</strong> government<br />
organisations and public trust <strong>in</strong> (e-)government.<br />
Opt<strong>in</strong>g to build the TDC-provided PKI was clearly a difficult policy choice, and one that is still<br />
the subject <strong>of</strong> discussions between government and the bank<strong>in</strong>g sector regard<strong>in</strong>g long-term strategic<br />
issues and consumer <strong>in</strong>terests relat<strong>in</strong>g to alignment <strong>of</strong> public and private PKIs and digital signatures <strong>in</strong><br />
97