1. Matters of Conceptualization and Security in the Building of One-stop-shop e-Government Solutions in Europe: Experiences from the European OneStopGov project Marios Chatzidimitriou, Adamantios Koumpis ALTEC S.A. Research Division Greece

2. OneStopGov project Aims to specify, develop and evaluate a life- event oriented, integrated, interoperable platform for online one-stop government Life-event: a specific situation or event in the life of a citizen or a life cycle of an organization that requires a set of public services to be performed One-stop government: the integration of public services from a citizen’s point of view

3. Security in research projects Research projects do not take into account full and exact real world parameters, sometimes even the – most important one - security But customers do not risk investing in something they cannot see working Not taking into account the aspect of security in scope of the OneStopGov project, will  result in problem in designing the exploitation plan as OneStopGov project will be unable to be applied in real life situation  Create problems in convincing possible customers to invest

4. OneStopGov legislation aspects The European Union has prepared a number of Acts, Directives and Regulations  EU members have to follow and adapt them in their legislation OneStopGov will provide online government services, thus it is essential to  Be compliant with the legislation of the Public Authority’s country where it will be adopted  Be able to ensure data privacy and safety issues for the citizen

5. Data protection Data protection principles aim to establish conditions under which it is legitimate and lawful to process personal data Protection of personal data comprises organizational, technical, and logical- technical procedures and measures to  Protect personal data  Prevent accidental or deliberate unauthorized destruction, modification or loss of data  Prevent unauthorized processing of data

6. Personal data protection measures (1/2) Protecting premises, equipment and systems software, including input-output units Protecting software applications used to process personal data Preventing unauthorized access to personal data during transmission thereof, including transmission via telecommunications means and networks

7. Personal data protection measures (2/2) Ensuring effective methods of  Blocking  Destruction, erasure  Anonymisation of personal data Enabling subsequent determination of  when individual personal data were entered into a filing system, used or otherwise processed and  who did so

8. Data protection in OneStopGov A life-event comprises of many public services that have to be executed in a transparent way for the user The user should provide all data needed at once, and just wait for the result He should also be given the chance to store data he provides, or data that are resulted from previous life-events’ execution

9. Legal and security considerations Can data be stored in the e-Government portal for later use?  Yes, with permission of the person concerned for non-sensitive data  Personal data are considered sensitive if they refer to one’s: ethnic origin, national or ethnic minority, political choice or opinion, religious or other sorts of ideology, membership in unions, state of health, pathological addictions, sexual life, criminal records

10. Legal and security considerations What if user does not want any data stored?  Then according to legislation, the portal may store temporarily all the data until they are not needed any more  Data are discarded after the end of the life-event User should be able to view, verify the authenticity and accuracy of his or her own personal data

11. And after the software is ready… The computer on which the e-Government portal will be installed, must follow security measures:  Steady: uninterruptible power supply system, restricting user rights in computer systems, safe server rooms with alarm and access control  Temporal: periodic password exchange, archiving, antivirus control, computer stuff control, control of data storage for archives

12. Thank you