the icelandic pki project
DESCRIPTION
The Icelandic PKI project. Jóhann Gunnarsson Head of Division, Ministry of Finance. Welcome to Iceland. Where are we?. The Mid-Atlantic Ridge. FARICE (2003/4). Land and population. Land size: 103 000 sq. km Population: 293 600 2.8 inhabitants per sq. km - PowerPoint PPT PresentationTRANSCRIPT
![Page 1: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/1.jpg)
The Icelandic PKI project
Jóhann Gunnarsson
Head of Division, Ministry of Finance
![Page 2: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/2.jpg)
Welcome to Iceland
![Page 3: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/3.jpg)
Where are we?
![Page 4: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/4.jpg)
The Mid-Atlantic Ridge
![Page 5: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/5.jpg)
FARICE (2003/4)
![Page 6: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/6.jpg)
Land and population
• Land size:– 103 000 sq. km
• Population:– 293 600– 2.8 inhabitants per sq. km
• Whereof in Reykjavík and suburbs:– 62%
![Page 7: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/7.jpg)
Foreign revenue 2003
Landbúnaður1%
Stóriðja14%
Iðnaðarvörur8%
Aðrar vörur2%
Samgöngur13%
Ferðaþjónusta13%
Þjónusta10%
Sjávarafurðir39%
Total value 284,457 million. kr.
Agricultural products
Heavy industry
Manufacturing
Other products
Transport
Tourism
Services
Marine products
![Page 8: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/8.jpg)
Payment card transactions -per capita in Europe
0 50 100 150 200 250
Denmak
Finland
Ireland
Germany
Sweden
Netherlands
United Kingdom
Norway
Iceland
Source : European Payment Cards / Litill Heimur Consultancy Ltd.
![Page 9: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/9.jpg)
Information Society Task Force
• Government strategy 1996• New strategy 2004
![Page 10: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/10.jpg)
World Economic Forum
7
8
WorldEconomicForum
![Page 11: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/11.jpg)
Capgemini survey
Only Austria and Belgium have grown faster46, 44 and 38%
![Page 12: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/12.jpg)
Capgemini survey
Only Austria and Sweden have grown faster57, 46, 39%
![Page 13: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/13.jpg)
Statistics
– Companies• 99% have computers• 97% have Internet connection• 81% have “broadband” Internet connection (ADSL or
faster) • 70% have own website
Figures from 2003
![Page 14: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/14.jpg)
Statistics
• Households– 86% own a computer– 80% have Internet connections– around 80% of Icelanders use the Internet– 63% use it once pr. day or more– around 82% of individuals submitted tax
declarations 2003 on-line
Figures from 2004
![Page 15: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/15.jpg)
The legal side
• Act No 28/2001 on electronic signature• Act No 30/2002 on Electronic Commerce and
other Electronic Services• Administrative Procedures Act no. 37/1993
– New section: ,,e-Procedures“• Administration decides whether to offer e-Procedures or
not• Qualified e-Signature always valid
![Page 16: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/16.jpg)
Public key infrastructure
• Task force 2001• Government policy 2002• Pilot project 2003
– First certificate issued May 27., 2003
![Page 17: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/17.jpg)
Digital certificate project 2003
• Digital certificates at the Directorate of Customs and the Directorate of Fisheries
• The pilot project– Led by the Ministry of Finance– Participants: Various institutions and directorates
![Page 18: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/18.jpg)
Aims of pilot project
• Expand the Customs solution to include:– Opportunity for other agencies– More stringent rules for identification
• Develop Certification policy and practice• Test interoperation of certificates from various
vendors• Introduce the concept to business and public• Gather experience to build on our future PKI
![Page 19: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/19.jpg)
The solution
• Certificates and supporting systems licensed from Verisign Corp. through Skýrr hf.
• Two types of certificates:– public for signing and encrypting e-mail etc.– private for accessing government systems like
customs and VAT
![Page 20: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/20.jpg)
CPR of cert. holderEmail of holder
CPR of employer
CPR of responsible executive
![Page 21: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/21.jpg)
Private root certificate
![Page 22: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/22.jpg)
Private root certificate
![Page 23: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/23.jpg)
Public root certificate
![Page 24: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/24.jpg)
Public root certificate
![Page 25: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/25.jpg)
Certificate policy
The Government of Iceland Certificate policy for official certificates in
eGovernment.
Requirements for Certification Authorities issuing public key
certificates.
![Page 26: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/26.jpg)
Basic premises of CP
• Certification and certificate production sevices in an open market
• Free competition for any market player• Certificates for the administration, the business
community and the public• Single certificate for access to multiple services
– Interaction with various government services– Interaction with various private businesses using the same
certificates
• Use of certificates in cross-border transactions
![Page 27: The Icelandic PKI project](https://reader036.vdocument.in/reader036/viewer/2022062408/56813bfa550346895da5451e/html5/thumbnails/27.jpg)
Reference documents
• ETSI TS 102 042 v 1.1.1 (2002-04): Policy requirements for certification authorities issuing public key certificates– The organization of a CP– Contents
• Certifikatpolitik for OECS-certifikater– The Danish government CP for 3 types of
certificates– Conforms to ETSI TS 102 042