1. 5th September, 2000 University of Canberra Restructuring Business Practices ‘Helping make today’s ideas tomorrow’s Customs’ Garry Grant Director E-Commerce Australian Customs garry.grant@customs.gov.au

2. Topics Current Access The Brave New World - Customs Gateway Client Registration & ‘Security’ Law Enforcement Customs - Quo Vadis? Questions

3. The Customs Scene Cleared 4 million import & export entries - 98% lodged electronically 90% cargo reported electronically Close to 30 million EDI messages annually 15 million international air passengers - 35% electronic pre-clearance $3.7 billion duty/sales tax & $262 million in other charges - electronic funds transfer $13 billion GST

4. Customs Conundrum Facilitate Trade Collect Revenue Protect the Border

5. Government Agencies Other Government Agencies Industry Current Electronic Commerce Model (for EDI & Interactive Access) Carriers Customs Data Stores Importers/ Exporters Brokers/ Freight Forwarders Network Service Providers Channels Internal CustomsExternal Tradegate Hub Customs Interfaces (including “Registration”) Tradegate Hub ACS Business Applications Internet Connections

6. Tradegate Customs Cargo Management Systems Data Control Point Ethernet Backbone EDI Gateway Air Cargo Sea Cargo Exit EDIFICE Pass Jems Bureau (TEDIS) Silicon Crafts COTI Cargo Automators AT&T Translation Services Client Current Customs Client Interface Air Cargo Compile /Clear Trace EDIFICE EXIT Sea Cargo TAPIN Eg. Bigpond Ozemail Other VAN (Telstra) (GEIS) (IBM) EDI COMPILE EDI AT&T MVS Clearinghouse AT&T 3725 COMPILE ISP (AT&T) ISP EDI AT&T GMS Clearinghouse NOTE : COTI - COMPILE (Customs OnLine Interactive Entries) Over The Internet; some Internet to EDI via connect.com as well.. COMPILE

7. Why Re-engineer? Commitment of the Australian Government to Online service delivery Globalisation of trade Industry trend towards integrated supply chain management Need to avoid the duplication of data Rapid expansion in Internet usage by business

8. Cargo Management Re- engineering (CMR) Single window Pre-arrival identification of high risk cargo Intervention by exception Periodic declarations & deferred payments Flexible online payments systems

9. Government Requirements Government Online Strategy Internet 2001 Electronic Transactions Act e-procurement/purchasing Australian Business Number - Digital Signature Certificate

10. Government Agencies Other Government Agencies Industry Value Added Services Value Added Networks Small Businesses & Individuals Customs/ Quarantine Staff Integrated Cargo System “Reception” Registration & X.500 Directory Services Database Internet Interactive Voice Recognition Web Site Customs Connect Facility (CCF) - The Concept Carriers Customs Data Store Importers/ Exporters Brokers Security “Firewall” Direct Connect Other Customs’ Agencies Communities of Interest Networks Communication Service Providers Security “Firewall” Channels Internal CustomsExternal Business Entry Point

11. CCF Functions Customs Connect Facility EDI Message Services Translation, Syntax & validation checking Customs Interactive Services Status Enquiry, Create Import/Export Entry Govt Agency Services Interactive, Messages (FTP), e-mail) IVR Services Payment Services CCF Management Services Security x.500 Directory - Public Key Authentication Clients Government Agencies Customs Staff Payment Facilities Customs Integrated Cargo Business System Applications IVR Interactive Messages

12. Authentication Signing Session Management Security Services Encryption Signature Validation Key Management Entitlements/ Authorisations MESSAGE HANDLER Receipt/ Response Syntax & validation Checking Content Checking Transformation Routing MESSAGESECURITYLAYERMESSAGESECURITYLAYER IVR WEB SERVER BATCH INTERFACES INTERACTIVE Other Platforms Security Services Enabling Application Modules Business Application Modules Host & Mainframe, Midrange & PC Data Modules Common Business Routines Transfer Module Housekeeping Modules Applications Framework RDBMS Access Methods to the applications framework PSTN WAP Network (future) ? Browser/ HTTP HTML Browser/ HTTP Applet ACS TCP/IP Internal Eg. Online forms, value-added E-mail Outbound E-mail Inbound EDI Outbound - Bulk EDI Outbound - Individual EDI Inbound - Bulk EDI Inbound - Individual Fat Client

13. CCF - Features Range of connectivity - Internet, direct connects, dial up & mobile Flexible and scalable Variety of EDI message formats Security (firewall/digital signatures) Industry concerns

14. What Does Industry Say? No surprises - more information sooner Transition phase - what’s happening? Internet - the way to go! Security and Authentication Use Commercial data where possible Single Window to Government

15. Client Registration Who are Customs clients? Government and business sectors Current authentication process Legislative requirements Future connections and changes

16. Security Architecture Model Security Management Users Resources Policies Status Audit Log SMIB * Authentication AuthorisationPrivacy Encryption IntegrityMonitoring Non- Repudiation AntivirusPKI*IDS* Security Services Security Functions

17. Customs & PKI Mandate ABN-DSC Authentication –Customs Client Registration Database –ABR –CRL –Other Data Sources Attribute Certificate (“Cookie”)

18. Digital Certificates - Issues ? Lack of knowledge about PKI Need for practical business solutions Departments to issue own certificates or market driven process? Base level robust Gatekeeper Certificate - need an outcome!

19. Law Enforcement E-commerce needs a secure foundation Hackers and professional crackers Your site is a target Liaison between Government and business Risk based analysis of systems and processes - layered defence with access control by PKI

20. International E-commerce Developments G7/8 APEC World Customs Organisation (WCO) Trans-Tasman Data standards and technology

21. Quo Vadis? One Stop Shop - International Port Lodgement? Use of Commercial Data Internet/Web EDI Cross Recognition of PKI

22. Garry Grant Director Electronic Commerce Australian Customs Service garry.grant@customs.gov.au www.customs.gov.au