Transcript სათაური - PKI - FORUM УКРАЇНА 2013

Civil Registry Agency of the Ministry of Justice, Georgia
Georgian ID card
Mikheil Kapanadze
Why New ID Card?
Plastic card instead of laminated paper
Means of remote identification
Declaration of will in online space
E-document forgery protection
History of Georgian ID Card
1998-2005 – popularization of idea
2006 – preparation of draft law
2008 - adoption of the law
2009 – adoption of technical regulations
2010 – preparation of CRA project
2011 – issue of the first card
2012 – first digital signature
Dual Interface Chip
contact
contactless
Contact Interface
PKI
• Online Authentication
• Digital Signature
ICAO LDS
• Secured with BAC
Contactless Interface
MIFARE 1k Classic (Emulated)
• MIFARE Application Directory
• E-Wallet for Public Transportation
System (Will launch on Jun 1st, 2012)
• More applications are being
developed
ICAO LDS
• Secured with BAC
PKI Applet
Two 2048-Bit RSA Keys
• Secured by Different PIN codes (4 for AUTH, 6 for ES)
• E-Signature PIN Code is set by the citizen
SHA-256 Digest
• Support of off-card calculated digests, not limited to SHA-256
Certificates, issued by Civil Registry Agency
• Different CA’s for Authentication and Digital Signature
Single Root CA
• Root CA Certificate is not written in the applet
PKI Infrastructure
Instant Certificate Issuing
• Certificates are issued during card personalization
• Certificate Validity – 2.5 Years
• Support for certificate renew
OCSP and CRL Services
• CRA-Operated OCSP responder and CRL’s are available
Time-Stamping
• RFC 3161 Time-stamping is available
Load-balancing and DR Available
Why the Georgian government is so deeply involved in PKI?
Start-Up Costs
• Setting up and running the infrastructure is costly
• No immediate revenue is guaranteed
• So, we can’t wait for someone who will invest in PKI
No expertise in private sector
• The key players in Georgian private sectors are banks, insurance companies, oil importers, etc
• They do not have immediate expertise about PKI
• So, we are making a “Jump Start” of the system
Standards
• For the Government it’s easier to enforce nation-wide standards
• Establishing standards do not immediately mean that they will be implemented
• So, the establisher has to introduce at least a “reference implementation”
What we have now
Large number of ID Cards already issued
• Currently there are more than 200 000 ID cards issued
• This means that we already have 200K certificates issued for online authentication and the same
number for the digital signature
The number of services employing electronic functions of ID card is rising rapidly
• The public sector already started offering ID card based log in to citizens
• Introduction of digital signature services in Georgia got the immediate response from the private sector
• Some largest Georgian banks already working to get digitally signed documents from their customers
and provide services based on them
My.Gov.Ge – The citizen’s portal
Log in with your ID card
See what the government knows about you
Get health and social services
Pay taxes and fines online
Do not waste a time. Get everything in one, internet space!
My.Gov.Ge – The citizen’s portal
Public Service Hall – Everything in One Space
Driving License
License for
usage of
Natural
Resources
Certificate of
Property Right
Alimony
Public
Service Hall
Business
Registration
Activation of EDeclaration
Passport
and ID Cards
Power of
Attorney
Public Service Hall – May, 2011
Tbilisi Public Service Hall – Opening on Sep, 2012
New Service– Just Drive
JUST
DRIVE!
JUST
DRIVE!
Back Office
JUST
DRIVE!
Front Office
Even More – Just Caffe
Request
Request
Request
Back Office
Public Service Delivery of the Future
•The second annual international workshop
•Dedicated to Innovations in public service delivery
•Online Registration: www.justice.gov.ge/conferencetbilisi2012
•E-Mail: [email protected]
GRAPE – Share our Knowledge
•GRAPE – Georgia’s Reforms And Partnership Enterprise
•We are happy to share our knowledge and expertise to foreign
government agencies
Thank You
Thank you!