National architecture fordigital services - BuildingSuomi.fi PlatformPetteri Kivimäki, Information Systems Manager

Population Register Centre

16.9.2016 Nordic Business Register Conference

• The National Architecture for Digital Services programme (Ministryof Finance)

º Building a uniform, national service architectureº National solutions – not just for Government

• Government: various ministries and authorities• Municipalities• Private sector companies

º Programme period 2014-2017º Programme budget € 120 millionº Major role: Legislation

• Operating unit Finnish Population Register Centre / Unit for NationalArchitecture for Digital Services

Background

• Several projects producing Suomi.fi Services for organizationsº Suomi.fi Service Views

• Shared service views for citizens, companies and officials (Suomi.fi and Yrityssuomi.fi)• Beta.Suomi.fi opened in December 2015• Includes national messaging service for citizens and companies, and a national map

service for public sector (location based services)º Suomi.fi Service Data Repositoryº Suomi.fi e-Identificationº Suomi.fi Digital Authorizationsº Suomi.fi Data Exchange Layer (”X-Road Finland”)

• Including an API-catalogue / Integration Catalogue (liityntakatalogi.suomi.fi) providesinformation on services already connected to Data Exchange Layer

Background

Suomi.fi Services

For serviceproviders:

For Citizens / Companies / Officials Otherperson

Company

- Single identity, many roles- Strong authentication- Services based on life events- Authorizations- Interaction and messaging

Suom

i.fi

My data

Publicservices

As a citizen

Representing a company

As an official

Me

My messages

Privateservices

Digital SingleMarket

User experience / User interfaceConnectors / APIs / data

Event logs and analytics engineData registers

Users (user groups)

E.g. parents

Service providers

Service market on a certainfield, e.g. social services

Authority

CompanyOrgani-zation

E.g. the unemployed

Digital Service Platform … creates norms and enables transactions between serviceproviders and users

Digital service – Suomi.fi / Yrityssuomi.fi

Electronicsignature

Electronicletter ofattorney

Service DataRepository

MessagingDigital

Authori-zations

Timebookingservice

e-Identifi-cation

Avoindata.fi

Integration Catalogue

DataExchange

Layer

Suomi.fiDigital Authorizations

Enables acting on behalf of another person or a company.

Suomi.fi Digital Authorizations in Short

Enabling onlinechecking of a person’sauthority for makingtransactions on behalfof other persons ororganizations, andgiving theseauthorizations.

Right to maketransactions onbehalf of another

Katri 66 years

Accountant

Ossi 70 years Martta 72 Aarno 75

LiisaKumpulainen

35

MattiKumpulainen37

Anni 7 Onni 2 Elias 16

Accountingbureau

Ex-wife

Entrepreneur

MaijaMatikainen40

Maija’sCompany

Gra

ndpa

rent

sCh

ildre

n

Companies

1. Registry basedchecking of aperson’s authorityfor makingtransactions onbehalf of otherpersons or

organizations2. Requesting and/or

creating digitalauthorizations

Suomi.fi DigitalAuthorizations

Registry

Authorizations

APPROVAL

REQUEST

?

Suomi.fi Service ViewsCitizen’s and company’s window to public services.

1. Digital Services easily accessible

2. Information about all service channels

3. Own data in public services

4. Messages and interaction with publicauthorities

Suomi.fi Service Views in Short

Services

My Data

Messages

Suomi.fiService Views

Suomi.fi Service Data RepositoryService Views =Suomi.fi + Yrityssuomi.fi

Service Views = National service for citizens,entrepreneurs and officials = Suomi.fi+yrityssuomi.fi

ROLECitizenEntrepreneurOfficial

TARGET GROUPEmployer, employeeStudentUnemployedEtc.

1

2

My data Services

Service guides

Digital services,single sign-on

Local service view(municipality's

services)

Service points andservice map

Service DataRepository

MessagingCMS and

publishingprocesses

Support andguidance Analytics, statistics

The user can:• in different roles, easily find public

services (based on Service DataRepository)

• see their own data in several baseregisters

• receive push services, messages anddocuments (Messaging) fromauthorities according to their uniquesituation (life events) and official(register-based) digital profile

• authorize another person to act ontheir behalf.

DigitalAuthorizations

Suomi.fiService Data RepositoryAll necessary service data in one place.

Suomi.fi ServiceData Repository

• A new base register withstandardized metadata of

• Digital services• Local service points• Telephone services• Includes open API for all

information

• A new law has made itmandatory for all publicservice producers to managethe metadata descriptions oftheir services in thisrepository

• A critical component ofSuomi.fi Service Views = aninteroperable resource forservice metadata

Suomi.fiService Views

Owndigitalservice

Otherdigital

services

Suomi.fi ServiceData Repository

Suomi.fi Service Data Repository

Suomi.fi Service DataRepository makes dataeasily accessible andmakes it possible toproduce service data atone go, as a part of thenormal service production.

• Services and theirchannels defined in auniform way

• Possible to utilizedata in any digitalservice

Otherservice

data

Ownservice

data

Suomi.fiData Exchange Layer

Unifying digital services and securely exchanging data.

Suomi.fi Data Exchange Layer in Short

A standardized way toexchange data betweenorganizations and thepossibility to createsecure servicecollections.

Suomi.fiData Exchange Layer

IntegrationCatalogue

Environ-ment

Data exchange

Suomi.fi Data Exchange Layer

Private sector servicesMunicipalities servicesGovernment servicesBase registers

National service architecture for digital services

Municipalities networks

Internet

ESB

Government network

ESB

e-Identification AuthorizationsX-Road Admin

Logs, reports,security

API-catalogue

Suomi.fi Data Exchange Layer (“X-Road in Finland”)

Service Views

Citizens Companies Officials

Service DataRepository

Suomi.fi e-IdentificationReplacement for Tunnistus.fi and Vetuma services.

Suomi.fie-Identification

• Strong identification to publicservices

• Replaces current Vetuma andTunnistus.fi services, incl.Centralized contracts andfinancing

• Provides Single Sign-on to allpublic services (SAML 2.0)

• Supports strong authenticationusing bank authentication(Tupas), mobile certificate andcard authentication (HST)

• Eidas federation between EU-countries

Browser based, scalable,secure, responsive andaccessible (WCAG AA

level audited)

IT provider

Public organization

Suomi.fie-Identification

Admin view

Management Technical

How does it work?

Main user

DigitalService

Redirection forauthentication

Uses the selectedauthentication tools

Provides digital service

Usermanagementetc.

Servicemanagement andconfiguration

Suomi.fi e-Identification

More information and support material:http://esuomi.fi

Beta version:http://beta.suomi.fi