200 likes | 306 Vues
DRV e-services for Individuals and Institutions. ISSA European Network Technical Seminar on efficient e-services in Social Security. Warsaw, 24 th of May 2012 Dr. Jens Bruhn Deutsche Rentenversicherung Bund Datenstelle der Rentenversicherungsträger Coordinator for A1 Data Exchange.
E N D
DRV e-services for Individuals and Institutions ISSA European Network Technical Seminar on efficient e-services in Social Security Warsaw, 24th of May 2012 Dr. Jens Bruhn Deutsche Rentenversicherung Bund Datenstelle der Rentenversicherungsträger Coordinator for A1 Data Exchange
DRV e-services Overview Overview • Introduction • Requirements on e-services for Individuals • e-services for Individuals • Services for Institutions • Summary Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 2
1. Introduction DRV e-services 1. Introduction The demand for e-services for individuals and institutions at Deutsche Rentenversicherung (DRV) arises from the high number of customers and the deep integration into the German social security system. • Approx. 57 million customers (2012) • Various relationships with national and international partner institutions • Advantages of e-services for • Customers: Time saving, convenience, availability • Institutions: Quality improvement, runtime- and cost reduction • DRV: Quality improvement, runtime- and cost reduction Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 3
2. Requirements on e-Serivces DRV e-services 2. Requirements on e-Serivces for Individuals Success factors of e-services for individuals must be addressed in order to reach acceptance and usage by customers. • Security • Understandability & Usability • Barrier-free Implementation • Trust • Convenience • Access & Participation Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 4
Security DRV e-services 2. Requirements on e-Serivces Security Security is a critical success criteria which needs to be fulfilled as necessary requirement first. • Confidentiality • Integrity • Availability • Trust • Trust • Acceptance • Confidentiality requires user authentication as precondition! • Legal regulations and guidelines must be fulfilled! Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 5
The German nPA DRV e-services 3.The German nPA German personal identity card supports digital authentication. • Available since Nov. 2010 • 6 to 8 million issues per year • Valid for 10 years 2020 complete replacement of former PA • Electronic elements • Digital biometric information • Photo • Fingerprints (optional) • Qualified electronic signature Prepared, but not yet available • Electronic identity (eID) Deactivation possible Accessible by dedicated German institutions Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 6
Authentication with eID DRV e-services 3.The German nPA Authentication with eID Core aspects of eID-application. • Requirements • Activation of eID on nPA • Availability of card reader • AusweisApp (Win, Linux, OSX) • Browser with internet access • Authentication functionality • Provision of personal information • Service provider-specific pseudonym • Basic principle: Possession and Knowledge Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 7
Authentication with eID (2) DRV e-services 3.The German nPA Authentication with eID Overview of eID-based authentication process. eID-Service User Service Provider TLS-based communication 1 2 TLS-based communication 3 4 5 6 AusweisApp Browser Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 8
4. DRV e-Services for Individuals DRV e-services 4. DRV e-Services for Individuals DRV provides a set of e-services as part of its website. • No electronic authentication • Appointment scheduling • eID-based authentication • Information services • Signature-based authentication • Information services • Application services Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 9
Appointment Scheduling (eTermin) DRV e-services 4. DRV e-Services for Individuals Information Services Appointment scheduling service provided without any authentication requirements. • Electronic request for appointment • Agreement on date and time • Personal information requested by service • Authentication during appointment • Available as mobile application • No security risks regarding personal data • No demand for digital authentication Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 10
Information Services DRV e-services 4. DRV e-Services for Individuals Information Services Information services require user authentication as they provide read access to personal information. • Information on retirement account • State and forecast • Information provided in PDF • Renteninformation • Rentenauskunft • … • Access to personal information • Confidentiality must be guaranteed • eID- or signature-based authentication supported • No data manipulation Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 11
Application Services (eAntrag) DRV e-services 4. DRV e-Services for Individuals Application Services Application services require authentication and declarations of intent as their usage will have legal impact (e.g., application for a pension). • Various types of applications supported • Legal impact of application submission • Declaration of intent required • Declaration of intent through signature • Currently not possible with nPA • Support for third-party signature cards Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 12
Personal Data DRV e-services 4. DRV e-Services for Individuals Personal Data Personal data services require user authentication. Additionally, a signature could be required. • Change of residence information • eID required • Change of bank account information • Direct debit • eID required • Pension payment • Signature required Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 13
5. Services for Institutions DRV e-services 5. Services for Institutions DRV provides various types of services to different partner institutions. • Advantages • Time- and cost efficiency • Process automation • Enhanced data quality through avoidance of media disruption • General policy • Access through German governmental networks or other secure networks • Account management by master user at partner institution • Selected service examples • Infrastructure services: DSRV-Web-Postfach • Generic information services for multiple institutions: eSolution • Special information services for multiple institutions: E101-/A1-database • Dedicated services: Familiengerichte Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 14
Infrastructure Services DRV e-services 5. Services for Institutions Infrastructure Services Infrastructure services are provided in order to enable the collaboration of institutions, e.g., through the support for file transfer. • Example: DSRV-Web-Postfach • File transfer service • Web-based user interface • Foundation for higher-level services • Usage on national and international level Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 15
Generic Information Services DRV e-services 5. Services for Institutions Generic Information Services Generic information services provide information on insured persons to authorized institutions. • Example: eSolution • Directory service for basic information on insured persons • Insurance number • Name • Address • Responsible pension insurance institute • Accessible for German administration • Available since Sep. 2010 • Approx. 90k lookups per month, upward trend Subject of lookups Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 16
Special Information Services DRV e-services 5. Services for Institutions Special Information Services Special information services fulfill information demands in a specific context or application domains. • Example: E101-/A1-database • Storage of information on E101-/A1-forms • where German legislation is not applicable • Goals • avoid and disclose abuse of social benefits • fight illegal employment • Access limited to dedicated institutions • Web-based user interface • Information transfer by European partners • through DSRV-Web-Postfach possible Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 17
Dedicated Services DRV e-services 5. Services for Institutions Dedicated Services Dedicated services are realized and provided to address individual needs of collaborations with partner institutions. • Example: Interface for family court • Pension rights adjustment in case of divorce • Information need of court during divorce proceeding • Provision of programmatic interface to DRV for • Submission of information requests • Transfer of information • Deep integration into court software • Outlook: Transfer of court decision to DRV Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 18
6. Summary DRV e-services 6. Summary • High potential of e-services due to high number of individual customers • and collaborations with partner institutions • Requirements on e-services for individuals Critical factor: Security • Authentication through eID and qualified digital signature • Declaration of intent through qualified digital signature • DRV e-services for individuals • DRV e-services for institutions Dr. Jens Bruhn – DRV e-services for Individuals and Institutions – ISSA European Network Technical Seminar on efficient e-services in Social Security – Warsaw , 24th of May 2012 19