Digital Delivery Team Identity Assurance Service Description. Draft v0.6

Transcription

1 Digitl Delivery Tem Identity Assurnce Service Description Drft v0.6

2 Document Control Progrmme ID Assurnce Progrmme SRO Sponsors Issue Issue No: Dte: Comments /09/10 First drfts /09/10 Updted following review from workshops /10/10 Furr updtes from review with stkeholder groups nd Nov 10 Agreed by Executive Group /01/11 Updted for publiction Relted Documents Title Version Dte Deprtment Impct Assessment (Criteri Drft v0.5 23/09/10 nd Templtes) Technicl Infrstructure Options Drft Identity Assurnce Service Description v0.6d.docx Pge 2 29

3 1 Introduction 1.1 This document describes new service concept bsed on trust frmework in which citizen will be ble choose ir service provider. Identity ssurnce services will be delivered cusmers public services so tht y cn esily nd securely provide ir nd or personl informtion when using digitl public services. Once detiled design hs been greed n model will be mndted cross ll online public services provided by centrl Government Deprtments. 1.2 The proposl hs been developed under Cbinet Office s Digitl Delivery inititive by cross Government working group mde up ssurnce experts from centrl Government Deprtments. However, model depends upon collbortion between public nd privte secrs design services meet needs different cusmer types. This document provides high level description service model on which enggement with privte secr will be bsed. 2 Problem sttement 2.1 Digitl chnnels ( internet, mobile, kiosk, digitl TV et l) hve opportunity bring benefits ll prts society. However, convenience remote chnnels is countered by incresed risks from frud nd misuse personl dt. 2.2 Identity is fundmentl principle tht underpins delivery online trnsctionl services be it online bnking services or retil services. The Government is moving wrds public services tht re incresingly delivered online nd needs build n trust frmework tht enbles rr thn disbles digitl by defult. 2.3 To mitigte risks ssocited with trnscting online, lmost ll services require user go through some form initil registrtion nd subsequent login procedure. These procedures, if not designed correctly, cn deter use nd uptke digitl services. Furrmore, frudsters re developing incresingly sophisticted wys get round security procedures. 2.4 The cusmer generlly receives fll out: security procedures plce n incresing burden responsibility on cusmer remember psswords, crry kens, updte stwre nd ensure tht nothing is reveled n imposter. 2.5 A segment society hs become digitlly disenfrnchised : unble or unwilling engge in digitlly economy nd refore unble ttin benefits. 3 Objectives this document 3.1 The model described in this document ims ddress problem described in section 2 bove nd refore enble benefits public services delivered through digitl chnnels rech ll prts society. 3.2 The problems described bove re generl nd not specific public secr. Likewise model proposed in this document my be vlue beyond its core objective. It is intention this inititive crete commercil, legisltive nd regulry environment meet core objective but lso, if possible, enble digitl ssurnce services wider utility society be developed. Drft Identity Assurnce Service Description v0.6d.docx Pge 3 29

4 3.3 The objective this document is provide short, high level description service model tht public secr intends dopt. More detiled descriptions will be provided in subsequent documents. 4 Vision for ssurnce 4.1 It is proposed tht mrket develops ssurnce services for cusmers public services such tht those cusmers cn esily nd securely provide trustworthy nd or personl informtion when using digitl public services. 4.2 The Government will crete necessry commercil, legisltive nd regulry environment such tht n ctive mrket ssurnce services is creted nd sustined servicing ll segments society. 4.3 It is envisged tht public secr will ct s ctlyst cretion this environment by mndting tht centrl Government Deprtments ccept ssurnces from mrket ppropritely ccredited service suppliers. 4.4 An pproprite environment will be creted ensure tht n open, stndrds bsed mrket plce is creted in which ll types nd sizes service provider re ble collborte nd compete provide vriety different service ferings cusmers s per ir differing needs. 4.5 It is envisged tht mrket will evolve meet cusmer needs for privcy, security nd convenience nd should be structured round n greed set principles. These principles will be bsed on development n trust frmework. 4.6 It is lso ssumed tht significnt segment society will not choose use digitl public services or my require ssistnce when using digitl public services. It is envisged tht mrket will develop suitble fce--fce ssisted delivery services tht enble ll prts society ccess those public services. 4.7 The long term outcomes be chieved nd n initil set high level requirements re described in ppendices B nd C. 5 Identity s key 5.1 Furr investigtion will occur s wher my ct s key unlock dt held bout person. A person my be ble use his or her trustworthy fcilitte trnsction which requires personl dt ttributes, (e.g. residentil ddress, ntionlity) held by trustworthy orgnistions. 5.2 The cusmer my n be ble use this s trustworthy evidence when trnscting with Public Service Provider. If dt is received from n ppropritely trustworthy orgnistion n Public Service Provider might ccept informtion t fce vlue nd reduce number bck fice vlidtions it performs. Drft Identity Assurnce Service Description v0.6d.docx Pge 4 29

5 FIRST TIME register A cusmer cusmer my my use use single single registrtion registrtion nd nd single, single, secure secure credentil credentil ccess ccess mny mny public public services. services. SUBSEQUENTLY use security ken log on Cusmer Identity Provider The hub (mnged service) Public Service Provider Service Service tht: tht: Checks Checks tht tht n n is is untic untic nd nd not not fbricted fbricted by by checking checking cusmer s cusmer s biogrphic biogrphic dt dt is is consistent consistent with with different different dt dt sources sources Verifies Verifies tht tht cusmer cusmer owns owns Binds Binds cusmer cusmer through through (secure) (secure) credentil credentil e.g. e.g. pssword, pssword, smrt smrt crd, crd, pho pho crd crd etc etc A cusmer cusmer will will be be ble ble choose choose n n Identity Identity Provider Provider from from mrket mrket suppliers suppliers ccredited ccredited s s meeting meeting Government Government stndrds. stndrds. Deprtments Deprtments will will connect connect mrket mrket Identity Identity Providers Providers through through single single interfce interfce hub hub through through which which ll ll cusmer cusmer identities identities re re verified. verified. The The Public Public Service Service Provider Provider is is responsible responsible for for ccess ccess control control nd nd must must be be ble ble mtch mtch trustworthy trustworthy correct correct cusmer cusmer ccount ccount securely securely nd nd with with high high level level confidence. confidence. Figure 1: The Cusmer Perspective The The model model llows llows for for migrtion migrtion mrket mrket privte privte secr secr services services tht tht support support differing differing needs needs different different cusmer cusmer segments. segments. The hub (mnged The hub service) Cusmer Identity Provider (mnged The hub service) (mnged service) Public Service Provider A cusmer cusmer will will use use one one (or (or more) more) Identity Identity Providers Providers tht tht re: re: ble ble verify verify cusmer s cusmer s Gov Gov stndrds stndrds ble ble supply supply secure secure mechnism mechnism for for log log on on ble ble support support cusmer cusmer trnsct trnsct online online Mrket Mrket public public & privte privte secr secr suppliers: suppliers: Specilist Specilist service service providers providers Bnks Bnks Mobile Mobile phone phone compnies compnies The The Post Post Office Office For For businesses businesses s s well well s s personl personl cusmers cusmers Directgov Directgov & Business Business Link Link DWP DWP HMRC HMRC DfT DfT DfE DfE HelthSpce HelthSpce Or Or public public services services Figure 2: The Mrket Perspective Drft Identity Assurnce Service Description v0.6d.docx Pge 5 29

6 6 Benefits proposed pproch 6.1 A cusmer will not hve verify t registrtion for ech digitl service tht cusmer chooses use, nor will cusmer hve remember seprte login detils for ech nd every digitl service. Insted single, secure solution cn be used in multiple contexts. 6.2 Digitl service providers will not hve invest in nd operte ssurnce services. They will not hve issue new cusmers with security devices nd psswords, or reset m for cusmers tht hve lost or forgotten m. Insted, y will llow cusmers use n ccredited provider service, s pproprite for trnsction. 6.3 Identity hijck (i.e. impersontion by steling person s dt) will become more difficult with digitl s informtion will be electroniclly vlidted by issuing orgnistion. There will be less dependence on insecure pper credentils. 6.4 Where n is discovered s frudulent it will be possible close it down t source nd sp it from being used commit frud in different context. 6.5 When cusmer s dt chnges it will be possible propgte chnge t lower cost nd with greter security. 6.6 A trustworthy digitl will enble cusmer unlock nd reuse personl dt held by orgnistions. Orgnistions with se vluble informtion ssets will focus ir resources on improving qulity personl dt tht y control nd mking it vilble for cusmers use s evidence in digitl trnsctions. 6.7 Recipient service providers will be refine ir policies on wht y consider be trustworthy dt for given service trnsction nd will be ble reduce time nd money spent vlidting dt when it is received from trustworthy sources. 6.8 A cusmer s personl dt will not need be centrlised in lrge dtbse but will become distributed cross specilist dt controllers (or Attribute Providers ). This will form protection ginst cyber ttcks tht probe for single points wekness. Drft Identity Assurnce Service Description v0.6d.docx Pge 6 29

7 A collbortive collbortive pproch pproch is is better better for for ll ll prties; prties; cusmer, cusmer, public public secr secr nd nd privte privte secr. secr. The hub (mnged The hub service) Cusmer Identity Provider (mnged The hub service) (mnged service) Attribute Provider Public Service Provider A cusmer cusmer cn cn choose choose wy wy sserting sserting tht tht best best meets meets cusmer s cusmer s needs needs The The cusmer cusmer is is cler cler on on who who contct contct for for support support when when credentils credentils re re lost, lost, is is hijcked hijcked etc etc A single single point point inform inform chnge chnge in in personl personl dt dt Incresed Incresed cusmer cusmer retention retention Encourges Encourges cusmers cusmers interct interct online online Cusmer Cusmer control control dt dt shring shring Trustworthy Trustworthy sources sources dt dt reduce reduce need need for for bck bck fice fice vlidtion vlidtion Single Single source source for for chnge chnge detils detils (e.g. (e.g. ddress) ddress) Lower Lower cost cost thn thn ech ech trnsction trnsction provider provider developing developing nd nd running running its its own own solution solution Able Able rech rech more more cusmers cusmers more more quickly quickly Higher Higher level level security security s s specilist specilist suppliers suppliers evolve evolve solutions solutions meet meet threts threts Figure 3: Benefits Approch 7 Adoption service model 7.1 Appendix A provides detils centrl Government Deprtments plns for doption service model. It lists plnned digitl public services tht will ssume ssurnce is provided by n ccredited third prty cusmer s choice. 7.2 It is not envisged tht service model will be developed in its entirety through one short term inititive. There re mny complex issues be considered nd resolved rrive t mture design rchitecture. Insted, it is proposed tht model will be implemented incrementlly through series Deprtment delivery projects. Three generic stges which my overlp some degree. Design stge: Development stge: Adoption stge: greement design core components nd interfces between m; Identity Provider, Distributed Hub, Attribute Provider nd Service Provider (described in ppendix C). development first instnce(s) distributed hub nd cusmer fcing services through projects described in Appendix A. during which services will be ccepted by wider rnge digitl public services. Following decision mndte pproch ll digitl public services provided by centrl Government Deprtments will be required ccept services from mrket ccredited providers. Drft Identity Assurnce Service Description v0.6d.docx Pge 7 29

8 7.3 The objectives roll out will be : minimise risks, so tht public confidence in digitl public services is enhnced mximise rech, so tht ll segments society citizens, businesses nd or orgnistions - hve ccess service provider tht enbles m ccess digitl public services when required secure sustinbility, by ensuring tht commercil, legisltive nd regulry frmeworks re flexible nd robust. 8 Stndrds nd ccredittion 8.1 A frmework for ssurnce policies nd stndrds will be published by Cbinet Office. An ccredittion nd udit regime will be developed through which mrket service suppliers will be pproved s pproprite for use when ccessing digitl public services. 9 Enggement nd consulttion 9.1 It is intended tht n open mrket will be creted inter-operble services operted from outside public secr. The design will refore be developed in n open mnner with wide collbortion from privte secr. This will enble extensive considertion nd discussion mny issues be ddressed. All design documents produced will be owned by Her Mjesty s Government nd drft designs will be published on website. 9.2 Furr detils on this process will be documented seprtely. 10 Governnce 10.1 The ssurnce progrmme will be cross Government collbortive ctivity led nd fcilitted by Cbinet Office. Furr detils on governnce will be documented seprtely. Drft Identity Assurnce Service Description v0.6d.docx Pge 8 29

9 Appendix A: Centrl Government Deprtments plns for doption proposl The tble below describes digitl public services tht hve dependency on n ssurnce solution nd yer in which ech service is plnned be delivered. The responsible Deprtments re working closely develop n pproprite solution design. Dte Digitl public service Deprtment responsible 2011 One Click Registrtion for Business (through Government Gtewy initilly) Her Mjesty s Revenue & Cusms 2012 HelthSpce Deprtment for Helth 2013 Business Link Universl Credit Her Mjesty s Revenue & Cusms Deprtment for Work & Pensions 2014 Individul Elecrl Registrtion Cbinet Office Drft Identity Assurnce Service Description v0.6d.docx Pge 9 29

10 Appendix B: Outcomes, principles nd high level functionl requirements B.1 Outcomes This section describes long term outcomes tht re imed be chieved by doption this proposl. The project put in plce initil hub infrstructure by 2012 (see ppendix C) will not chieve tlity se outcomes, but will deliver public secr infrstructure tht will be first step ir relistion. These outcomes focus on desired chnges public secr opertions, i.e. Cost reductions from reduction or removl opertions nd de-dupliction ctivities Efficiency svings Ctlysts efficiencies in wider economy Desirble improvements for society Outcome 1. All personl nd business cusmers public services hve secure nd convenient mechnism tht llows m ccess ny public service online provided m through n ccredited Identity Provider ir choice such s bnk, telecoms provider, Post Office, etc. In this wy, public secr voids need supply such mechnisms cusmers nd voids costs support nd upgrde. Likewise, cusmers re ble choose convenient mechnisms for engging with public secr in mnner tht suits ir circumstnces. 2. Mny centrl Government public services re delivered electroniclly, eir directly cusmer or through n intermediry (who my choose deliver service by ny chnnel but provide ssurnce Fetures tht will llow this be chieved Clerly defined Government stndrds nd policies tht describe how ccess public services cn be chieved. A clerly defined commercil model tht incentivises ll prties develop n ecosystem trustworthy services tht re vilble nd used by ll sections society. Mechnisms tht llow cusmers ccess public services conveniently. A clerly defined commercil model tht incentivises privte secr orgnistions ct s intermediries. Drft Identity Assurnce Service Description v0.6d.docx Pge 10 29

11 Outcome sme stndrd through whichever chnnel). 3. Cusmers will be ble view nd control personl dt tht is held bout m by public secr orgnistions. 4. All cusmers re ble control shring trustworthy personl dt with ny public secr orgnistion such tht cusmer is sure how ir personl dt will be used nd receiving orgnistion is confident: source dt tht cusmer hs confirmed tht dt is vlid uthority given m by cusmer use dt. In this wy cusmer will be ble control electronic shring personl dt held by public secr orgnistion with mny or orgnistions. This will result in: greter trnsprency for individul on how his or her personl dt is sred nd how it is used incresed ccurcy dt held by orgnistions Fetures tht will llow this be chieved Cusmers re wre ir rights nd responsibilities when online with regrd uthorising trnsctions nd controlling personlly identifible informtion. In this wy cusmer trust in digitl services is incresed nd refore ir propensity use digitl chnnels. All cusmers re ble verify ir online level security such tht public service provider is ble perform Subject Access Request (s per Dt Protection Act) nd provide ccess cusmer s personl dt. A cler ccountbility model exists such tht ll prties know which prty is responsible when frud or error occurs nd wht redress y re entitled. Drft Identity Assurnce Service Description v0.6d.docx Pge 11 29

12 Outcome reduced costs ll prties reduced errors in trnsction processing. Fetures tht will llow this be chieved 5. All prties re incentivised ber down on possibilities frud nd error nd improve trustworthiness online environment. Drft Identity Assurnce Service Description v0.6d.docx Pge 12 29

13 B.2 Principles This section describes principles which system will be designed. Principles my be chnged fter ir rtionle hs been chllenged. Furrmore, it my not be possible develop workble solution tht meets 100% se principles. No Principle Rtionle 1 The citizen shll only provide minimum mount dt required for trnsction y wish conduct. 2 A common set terms nd conditions for ll Public Service Provider should be defined which citizen should gree when registering with n Identity Provider. 3 All Public Service Providers shll gree dopt sme policies nd set stndrds with regrd ssurnce. The citizen should only provide required nd proportionte mount dt for trnsction. Hving greed terms nd conditions with Identity Provider se should cscde ech instnce in which citizen uses Identity Provider ccess public service. This will void need for cusmer gree seprte terms nd conditions with ech orgnistion which, in prctice, cusmer currently signs without reding or understnding. An open mrket services will not be creted without cross Government doption stndrds Drft Identity Assurnce Service Description v0.6d.docx Pge 13 29

14 B.3 High level functionl requirements This section describes high level functionl requirements for proposed ssurnce projects. The requirements hve been rticulted in terms overll system tht will be delivered s result proposed ssurnce projects. They hve been grouped ginst following stkeholders, s summrised in digrm below: The citizen, who requires convenient, secure nd trustworthy ccess public services The business cusmer, who requires efficient nd secure mechnisms meet his / her compny s obligtions The public service provider, who requires deliver public services efficiently nd in line with Government policies Government nd society, who wish public services be delivered in mnner tht meets society s requirements Government & Society The System Citizen Identity Provider The hub (mnged service) Public Service Provider Business Attribute Provider Drft Identity Assurnce Service Description v0.6d.docx Pge 14 29

15 Citizen No Requirement Rtionle SHRC001 SHRC002 SHRC003 SHRC004 SHRC005 SHRC006 SHRC007 The citizen shll be ble use single mechnism tht hs been ccredited defined level provide trustworthy dt ny digitl public service tht requires dt tht level trust or below. The citizen shll be ble use sme ssurnce mechnism through whichever supported, ccredited digitl chnnel citizen wishes use. The citizen shll hve choice suitbly ccredited orgnistions by which trustworthy dt cn be provided public service. The citizen shll be ble hve more thn one Identity Provider. The citizen shll be ble withdrw use n Identity Provider for ccessing services with prticulr public service provider. The citizen shll be ble trnsfer existing rrngements for secure ccess public services from current Identity Provider new Identity Provider if required. The citizen shll be ble cncel rrngements with n Identity Provider. This will lly some privcy concerns by llowing citizen choose which Identity Provider is used ccess which public service. Drft Identity Assurnce Service Description v0.6d.docx Pge 15 29

16 SHRC008 SHRC009 SHRC010 SHRC011 SHRC012 It shll be trnsprent citizen how dt used in trnsction will be used by counterprty or ny intermediry prties trnsction. The citizen shll hve ssurnce in Public Service Provider which personl dt is being pssed in trnsction. The citizen shll hve ccess service tht repirs nd recovers dt if it hs been compromised. A citizen shll be ble repir trnsctions conducted frudulently if security mechnism hs been compromised. A citizen shll be ble view n udit detils describing how dt hs been used in trnsctions. In this wy citizen will know wher trnsction might ffect or spects citizen s life, for exmple by ffecting credit rting. The citizen will refore be ble correct dt tht hs been chnged frudulently. If dt hs been pssed third prty without citizen s greement n citizen will be ble ensure dt is deleted. Business No Requirement Rtionle SHRB001 An ppropritely uthorised citizen representtive business entity shll be ble crete or remove uthority for nor citizen ct on its behlf. SHRB002 An ppropritely uthorised citizen representtive The Business will refore be in control Identity Drft Identity Assurnce Service Description v0.6d.docx Pge 16 29

17 business entity shll be ble determine mechnism by which its representtives cn be verified. Providers tht it permits its representtives use. SHRB003 SHRB004 SHRB005 Appropritely uthorised citizen representtives business entity shll be ble control relese business dt. An ppropritely uthorised citizen representtive business entity shll be ble select from choice suitbly ccredited orgnistions by which trustworthy dt cn be provided public service. Appropritely uthorised citizen representtives business entity shll be ble use more thn one Identity Provider represent business. SHRB006 SHRB007 SHRB008 An ppropritely uthorised citizen representtive business entity shll be ble withdrw use n Identity Provider for ccessing services with prticulr Public Service Provider on behlf business entity. An ppropritely uthorised citizen representtive business entity shll be ble trnsfer existing rrngements for secure ccess public services from current Identity Provider new Identity Provider on behlf business entity if required. An ppropritely uthorised citizen representtive business entity shll be ble cncel rrngements with n Identity Provider on behlf business entity. Drft Identity Assurnce Service Description v0.6d.docx Pge 17 29

18 SHRB009 SHRB010 SHRB011 SHRB012 SHRB013 It shll be trnsprent ppropritely uthorised citizen representtives business how dt used in trnsction will be used by counterprty or ny intermediry prties trnsction. The uthorised citizen representtive business entity shll be ble ccess convenient help fcilities when problems rise in ccessing public service. An ppropritely uthorised citizen representtive business entity shll be ble repir business dt where required. An ppropritely uthorised citizen representtive business entity shll be ble repir trnsctions conducted frudulently if security mechnism hs been compromised An ppropritely uthorised citizen representtive business entity shll be ble view n udit detils describing how dt hs been used in trnsctions for ll its representtives. In this wy business will know wher trnsction might ffect or spects business ctivities, for exmple by ffecting credit rting. Public Service Provider No Requirement Rtionle SHRPSP001 The Public Service Provider shll be ble request citizen (personl or business cusmer) provide dt t point in journey when Public Service Provider requires it. Drft Identity Assurnce Service Description v0.6d.docx Pge 18 29

19 SHRPSP002 SHRPSP003 The Public Service Provider shll be ble mtch dt provided by Identity Provider cusmer record which reltes securely nd with high degree confidence. The Identity Provider shll be ble determine provennce ech dt ttribute provided in trnsction. Society nd Government No Requirement Rtionle SHRS&G001 SHRS&G002 SHRS&G003 SHRS&G004 The citizen shll be ble hve ccess t lest one Identity Provider. The citizen shll hve full understnding how dt used or creted by trnsction will be sred by counterprty or ny intermediry prties trnsction. The citizen shll hve trnsprency in how personl dt provided in trnsction will be used nd sred. The Public Service Provider shll be ble trust ssertion provided by Identity Provider. All citizens must hve mechnism for ccessing digitl public services. Drft Identity Assurnce Service Description v0.6d.docx Pge 19 29

20 Appendix C: Service design requirements This ppendix describes proposed Service Model which will deliver first steps wrds outcomes nd requirements described in ppendix B. It is focused on stge 1 delivery in 2012 but is written so s be extensible meet or requirements t lter dtes through sme rchitecture. The ppendix describes: picril illustrtion typicl cusmer experience when ccessing public services in 2012 functionl description Service Model components non technicl description technicl services through which Service Model will be delivered. A seprte document will provide technicl descriptions technicl services nd proposed technicl rchitecture. C.1 The Cusmer Experience To be populted with high level rich picture digrm Drft Identity Assurnce Service Description v0.6d.docx Pge 20 29

21 C.2 The Service Model The tbles below provide high level description functionl components required within proposed Service Model. 12. Determintion Government Policies nd Stndrds Governnce Governnce 13. Accredittion nd Audit Cusmer Identity Provider The hub (mnged service) Public Service Provider 1. Cusmer services 5. Auntiction brokering Attribute Provider 9. Appliction Dept policies 2. Estblish existence 6. Identity mtching 10. Access mngement 3. Prove ownership 7. Dt mngement 11. Trnsction processing 4. Security mngement 8. Attribute provision Drft Identity Assurnce Service Description v0.6d.docx Pge 21 29

22 Identity Provider Functionl Component Cpbilities 1. Cusmer Services The cusmer service cpbilities tht enble cusmer register nd vlidte his or her nd personl dt (or or dt relevnt context, e.g. when cting on behlf n orgnistion or third prty). The cusmer service cpbilities tht enble cusmer securely nd convenient ccess digitl services provided by or orgnistions. The cusmer support cpbilities tht ssist cusmer when problems occur. 2. Estblish existence The set cpbilities tht enble orgnistion estblish, n greed stndrd, provennce cusmer s, i.e. tht hs not been fbricted for mlevolent purposes. 3. Prove ownership The set cpbilities tht enble orgnistion estblish, n greed stndrd, tht cusmer is vlid subject ( provennce which hs lredy been estblished). 4. Security mngement The mngement security systems tht enble cusmer ccess digitl services through n environment tht meets greed stndrds nd cn be refore deemed trustworthy by ll prties. The hub infrstructure Functionl Component Cpbilities 5. Auntiction Brokering The cpbilities tht ensure Deprtment policies nd stndrds with regrd ssurnce nd dt mngement re met in context trnsction. 6. Identity mtching The cpbilities tht ensure tht person ccessing digitl service is Drft Identity Assurnce Service Description v0.6d.docx Pge 22 29

23 correctly mtched cusmer ccount within Deprtment Trnsction Provider systems, ccording greed stndrds, where cusmer hs lredy creted such n ccount. 7. (Personl or business) dt mngement The set cpbilities tht enble cusmer mnge nd control pssing trustworthy personl or business dt third prty orgnistions in mnner tht meets greed principles nd stndrds with regrd dt mngement nd privcy. Attribute Provider Functionl Component Cpbilities 8. Attribute provision The relese trusted third prty personl or business dt ccording policies Attribute Provider regrding mtching, ccess control nd dt protection. Public Service Provider Functionl Component 9. Appliction Deprtment policies Cpbilities The cpbilities tht enble Deprtment meet its policies, including cusmer confirmtions, trnsction moniring, udit nd frud reporting. 10. Access mngement The cpbilities tht ensure ccess cusmer ccount nd personl or business informtion is only vilble ppropritely uthorised individuls. 11. Trnsction processing The cpbilities tht enble Deprtment process trnsction. Drft Identity Assurnce Service Description v0.6d.docx Pge 23 29

24 Governnce Functionl Component 12. Determintion Government Policies nd Stndrds Cpbilities The cpbilities through which Government, through enggement with privte secr nd society, estblishes nd modifies its policies nd stndrds with regrd ssurnce nd personl dt mngement. 13. Accredittion nd udit The cpbilities through which Government policies nd stndrds re implemented nd monired within ll relevnt orgnistions in public or privte secr. Drft Identity Assurnce Service Description v0.6d.docx Pge 24 29

25 C.3 Technicl Infrstructure Service Descriptions A seprte Technicl Infrstructure Service Description document will provide insight on technicl infrstructure through which proposed pproch for ccess public services will be delivered. This document will be mde vilble through sme mechnisms s this document. The tble below provides high level overview technicl services tht will be required. They re composed form one three rchitecturl models for hub. All hub models shre common technicl services. In ll models hub orchestrtes flows from Public Service Provider (Access Mnger) selected Identity Provider (IdP) nd returns ttributes ssocited with specific trnsction from one or more Attribute Providers (AtP). The federtion reltionships re estblished by persistent nme identifiers issued by Identity Provider, persisted nd shred with Public Service Provider (PSP) nd Attribute Provider(s). The federted is mtched t Attribute Providers nd Public Service Providers bsed on ttributes provided by Identity Provider. Trusted Centrl Hub: Centrl instnce, hosted in secure government environment; holds ll key mteril; routes ll trffic; consumes kens nd signs ll ssertions; ll Identity Providers, Attribute Providers nd Public Service Providers trust hub. Trusted Distributed Hub: Multiple instnces bove; ech with seprte key mteril; hosted in secure environment; g-cloud or privte secure environment; routing nd trffic hndling my be dynmic; umtic distribution policy cross instnces. Un-Trusted Highly Distributed User Agent Hub: untrusted user deployed stwre gent / pp (in public or g-cloud, browser, device); does not hold govt key mteril, routes trffic, including kens signed for trget SPs, pltform for innovtion whilst providing bsic service. The high level description ech service in tbles below will be nnotted with vritions for ech rchitecturl model, where pplicble. Identity Provider Technicl Service Description 1. Policy Mngement Mechnisms tht ensure tht Identity Provider meets pproprite policies nd stndrds within digitl trnsction. Approprite policies re defined within Trust Frmework which ll prties engging in digitl trnsction dhere. Drft Identity Assurnce Service Description v0.6d.docx Pge 25 29

26 2. Session Mnger Ensures tht pproprite procols re pplied for digitl trnsction in line with Trust Frmework s policies nd stndrds. 3. Trust Mnger Provides ssurnce tht cusmer trnscts only with prties which re provbly one Public Service Providers, nd tht Identity Provider communictes only with provbly trusted infrstructure components. 4. Identifier Mpping Service Cretes single, seprte identifier for ech Public Service Provider (or group Public Service Providers) tht citizen chooses ccess using Identity Provider. 5. Audit nd Mngement Informtion Mnges record trnsction informtion in ccordnce with Trust Frmework policies (including privcy policies). Attribute Provider Technicl Service Description 6. Attribute Provider An orgnistion, eir inside or outside jurisdiction Identity Provider, tht releses personl or business dt describing citizen 7. Policy Mngement Mechnisms tht ensure tht Attribute Provider meets pproprite policies nd stndrds within digitl trnsction. Approprite policies re defined within Trust Frmework which ll prties engging in digitl trnsction dhere. 8. Identity Mtching Service Determines which record dt trustworthy described by Identity Provider reltes. This my require citizen provide dditionl informtion on first occsion. Therefter link is mde nd recorded through Identifier Mpping Service (below). Identity mtching must tke plce greed stndrds before dt cn be relesed. 9. Identifier Mpping Service Assocites unique identifier provided by Identity Provider Attribute Provider s Drft Identity Assurnce Service Description v0.6d.docx Pge 26 29

27 unique identifier for dt record. 10. Audit nd Mngement Informtion Mnges record trnsction informtion in ccordnce with Trust Frmework policies (including privcy policies). The hub infrstructure Technicl Service Notes: Description As described bove, re re three rchitecturl options for hub: Trusted Centrl Hub: Centrl instnce, hosted in secure government environment; holds ll key mteril; routes ll trffic; consumes kens nd signs ll ssertions; ll Identity Providers, Attribute Providers nd Public Service Providers trust hub. Trusted Distributed Hub: Multiple instnces bove; ech with seprte key mteril; hosted in secure environment; g-cloud or privte secure environment; routing nd trffic hndling my be dynmic; umtic distribution policy cross instnces. Un-Trusted Highly Distributed User Agent Hub: untrusted user deployed stwre gent / pp (in public or g-cloud, browser, device); does not hold govt key mteril, routes trffic, including kens signed for trget SPs, pltform for innovtion whilst providing bsic service. 11. Frud Priler Applies following rchitecturl options: Trusted Centrl Hub; Trusted Distributed Hub. Mnges interprettion context informtion provided by Identity Provider ensure tht Public Service Providers policies with regrd frud re met. For exmple, this service my prevent ccess public services bsed on loction. 12. Procol Mnger Mnges trnsltion where Identity Provider, Attribute Provider nd / or Public Service Drft Identity Assurnce Service Description v0.6d.docx Pge 27 29

28 Provider use different technicl procols. 13. Policy Mngement Ensures dherence Public Service Provider ssurnce policies. Such policies my determine level ssurnce required, types Identity Provider tht my be used, sources for trustworthy ttributes, etc. In cse distributed hub this component will umticlly updte ll distributed instnces policy. In cse User Hub this component will be provided seprtely s trusted service be ccessed from User Hub. 14. Identity Selecr Mnges selection n Identity Provider by citizen in coordintion with Policy Mngement service. 15. Re-mtching Service Mnges collection dditionl dt where n hs not been mtched Public Service Provider or Attribute Provider record pproprite stndrd. 16. Identifier Mpping Service Mnges ssocition unique identifiers between Identity Provider nd Public Service Providers so s meet privcy requirements nd minimise recording personl identifiers. 17. Audit nd Mngement Informtion Mnges record trnsction informtion in ccordnce with Trust Frmework policies (including privcy policies). Public Service Provider Functionl Component Cpbilities 18. Trust Mnger Provides ssurnce tht Public Service Provider trnscts with citizens bsed on vlid ssurnces nd vlid sources ttributes relting those citizens. 19. Policy Mngement Mechnisms tht ensure tht Public Service Provider meets pproprite policies nd stndrds within digitl trnsction. Approprite policies re defined within Trust Drft Identity Assurnce Service Description v0.6d.docx Pge 28 29

29 Frmework which ll prties engging in digitl trnsction dhere. 20. Identity Mtching Service Determines which record personl or business dt trustworthy described by Identity Provider reltes. This my require citizen provide dditionl informtion on first occsion. Therefter link is mde nd recorded through Identifier Mpping Service (below). Identity mtching must tke plce greed stndrds before dt cn be relesed. 21. Identifier Mpping Service Assocites unique identifier provided by Identity Provider Public Service Provider s unique identifier for dt record. 22. Audit nd Mngement Informtion Mnges record trnsction informtion in ccordnce with Trust Frmework policies (including privcy policies). Governnce Functionl Component 23. Determintion Government Policies nd Stndrds Cpbilities The cpbilities through which Government, through enggement with privte secr nd society, estblishes nd modifies its policies nd stndrds with regrd ssurnce nd personl dt mngement. 24. Accredittion nd udit The cpbilities through which Government policies nd stndrds re implemented nd monired within ll relevnt orgnistions in public or privte secr. Drft Identity Assurnce Service Description v0.6d.docx Pge 29 29