e-GOVERNMENT IN FINLAND - ePractice.eu

430. For both municipalities and KELA, the primary obstacle to adopting the FINEID card was the
difficulty of tailoring the card to their individual needs by adding information and/or services, such as the
ability to make electronic payments. The current social security card has printed information on rights to
certain free medication which it would not necessarily be appropriate to include on a citizen ID card.
KELA has raised the concern that sensitive health information on the card could be stolen or misused,
especially if carried in conjunction with other information and applications, for example, if the card were
also to serve as an official travel document in the countries covered by the Schengen Treaty. It is currently
developing direct access to pharmacies to allow them to receive this information directly.
431. In addition, there is also strong interest in having the card reflect the issuer’s identity.
Municipalities want to brand their cities as technologically advanced and to showcase their particular
services. KELA has had its own identification card for about 30 years. The MoI argues, however, that
service providers with smaller target populations, such as smaller municipalities, are much more likely to
adopt the FINEID card than to issue their own.
432. The crucial shift in attitude seems to be acceptance within the MoI that the FINEID card will
probably not be the only card providing authentication for e-government services. In fact, it now realises
that getting other smart cards to adopt its authentication standard may be the best way to spread its use in
both the public and private sector and eventually realise its objective of providing “universal”
authentication services.
6.2.5 Future plans
433. While the genesis of the FINEID may have largely been the result of an internal debate, by 1998
those working on the card realised that they would have to co-operate with others and begin “opening up”
if the card was to succeed. Today, there is consensus around the need to work with the private sector to
develop e-commerce applications, and co-operation agreements are ongoing, especially with banks, credit
card companies and mobile phone operators. For example, Okobank, the third largest bank in Finland,
agreed in 2002 to give customers an option to add the electronic citizen ID to its smart card when it is
issued. This will allow the authentication standard developed by the government to be licensed for use in
other smart cards or even mobile phones, increasing the user base. Partnerships would also encourage the
development of private-sector applications, such as allowing card holders to check information on their
bank account or even interactive services using digital television.
434. Many agencies and ministries, however, continue to look to the banking sector for a competing
authentication solution. This is the result of a widespread view within government that the FINEID card
has been a failure. While it is true that there are many fewer users than expected, especially in light of the
investment in financial resources and the opportunity cost, this view overlooks the technical strengths of
the card and the fact that a standard is now in place which can be adapted to current needs. That said, there
still does not seem to be a clear business case for the government’s delivery of authentication services.
435. A second-generation FINEID card is expected to be introduced in 2003. It will likely have two
new features: i) more storage capacity (32 KB instead of 16 KB); and ii) an expiration date of five years
instead of three. Changes in communication services may also be required to upgrade the certification
process to meet new technologies.
436. Less frequent renewals are a good step towards improving ease of use, and the other changes may
make the card more attractive to partners, but the move towards offering multiple services on each card
may raise new problems. Privacy and security issues may arise if sensitive information about health or
140