Developing interoperable e-government solutions in Hungary

•Download as PPT, PDF•

0 likes•413 views

In 2005 we presented the Hungarian Electronic Public Administration Interoperability Framework on the eGOV INTEROP'05 Conference. In this paper we show the activities leading toward the realization of this project. We describe the legal background, the cooperation between governmental, private and educational parties and a case study of an interoperability test between electronic signature applications. In the last part we explain the future possibilities in the field of e-governmental interoperability.

Technology

Contents ,[object Object],[object Object],[object Object]

Legal regulation ,[object Object],[object Object],[object Object],[object Object]

Act CXL of 2004 ,[object Object],[object Object],[object Object],[object Object],[object Object]

Governmental regulation 195/2005. (IX. 22.) ,[object Object],[object Object],[object Object],[object Object],[object Object]

Governmental regulation 195/2005. (IX. 22.) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Governmental regulation 195/2005. (IX. 22.) ,[object Object],[object Object],[object Object],[object Object]

Technical recommendations ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Cooperation between public and private actors ,[object Object],[object Object],[object Object],[object Object],[object Object]

Independent interoperability test ,[object Object],[object Object],[object Object],[object Object],[object Object]

The past few years... ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Interoperability test ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Interoperability test ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Interoperability test ,[object Object],[object Object],[object Object]

Interoperability test ,[object Object],[object Object],[object Object],[object Object]

Security audits ,[object Object],[object Object],[object Object],[object Object]

Thank you! ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Contacts

This B.Sc. project thesis is presented to the Department of Electrical Engineering and Information Sciences of the Ruhr-University of Bochum Chair of Network and Data Security of the Ruhr-University of Bochum, Horst-Görtz Institute, Prof. Jörg Schwenk Abstract: XML Advanced Electronic Signature (XAdES) provides basic authentication and integrity protection, and satisfies the legal requirements for advanced electronic signatures.There are several implementations of XAdES, but most of them are not OpenSource, or are partialy proprietary software. Great project concerned with Digital Electronic Signatures is the OpenSource Apache XML Security Project. For the developer and common user there is an implementation for the XMLDSIG specification, but still no one for XAdES. The free source code implemetations of XAdES threat this project as a separate one and there is no interface, which can explicit assemble them into the Apache XML Sec. That’s why, the scope of our project is to create a library, that implements XAdES into the OpenSource Apache XML Security- to extend its functionality and level of security, so using the Apache XML Sec, gives the opportunity to handle Advanced Electronic Signatures, which is a standard of security nowadays. The library is developed in Java, because shouldn’t be any kind of OS platform - dependencies, using it as a plug-in to the Security Project of Apache. More detailed, to validate the signing and verifying of signatures, and also test our code, we use the text- based test suite of JUnit.

Hungarian Electronic Public Administration Interoperability Framework (MEKIK)...

Csaba Krasznay

The huge project of the MEKIK (Hungarian Electronic Public Administration Interoperability Framework) has already been started; the next steps were the specification of the middleware and MEKIK portal and the pilot implementation of technical standards catalogue that would be accessible via this portal. These requirements affected the work in connection with the secure communication and the usage of electronic signature in the public administration. The project – correspondingly to the standards of the catalogue – also covered the general conception of security framework, requirements of certification service providers, signature creation application and devices, cryptographic protocols, legal aspects and secures mobile communication. This article introduces the actualities in connection with the interoperability of electronic public administration.

5 Thomas MagedanzFire Conference 2010

Integration of information systemsStevenSegaert

Heinz-Werner Schuelting - IPV6 Piloting

IPv6 Conference

Shibboleth Access Management Federations and Secure SDI: ESDIN Experience

EDINA, University of Edinburgh

Internet Engineering Task Force

Yatish Bathla

Towards a certification scheme for IoT security evaluation

Axel Rennoch

Many European and international standardization bodies and industrial organizations do provide more or less detailed specification catalogues addressing IoT product security requirements, test cases and evaluation methods. In this contribution, a dedicated set of relevant standards, guides and recommendations which recently have been recognized by the European Union Agency for Cybersecurity (ENISA) will be introduced. Special attention is given to their contribution for the security evaluation process and the product quality itself, including the level of details regarding their suitability for test definition and execution.

The presentation offers a detailed examination of network standard protocols, elucidating critical concepts such as the role of key standardization organizations like IEEE and ANSI, the functionalities of various application layer protocols such as SMTP, FTP, and DNS, the distinctions between TCP and UDP connections, the significance of port numbers in directing data traffic, the structure of TCP and UDP headers, the intricacies of SYN-ACK handshake mechanism for initiating TCP connections, the importance of sequence and acknowledgment numbers for reliable data transmission, the implementation of window sliding mechanism for flow control, and the graceful termination of TCP connections through a four-way handshake process.

Application Layer Security for IoT: The Case Study of a Smart Home

IRJET Journal

ECE 6570 Class01

Robert Daniel

KATS 4th Industrial Revolution Forum Seoul , Korea

Gabriela Ehrlich

ITU-T Study Group 11 Introduction

ITU

OCF/IoTivity for Healthcare/Fitness/Wearable

Jonathan Jeon

Towards design strong emergency and COVID-19 authentication scheme in VANET

nooriasukmaningtyas

The wide use of vehicular ad hoc networks (VANETs) in the last decade has led many researchers to find efficient and reliable methods to obtain the desired benefits and offer services, such as healthcare and traffic management. However, VANETs suffer from security issues represented by authentication and data integrity. In this paper, we propose a robust mutual authentication scheme based on elliptic curve cryptography (ECC), cryptography Hash Function, and a pseudonym. The proposed work was twofold in focus: first, on healthcare in emergency cars which use VANETs, and second, on overcoming security issues, such as resisting familiar attacks (e.g. insider attacks and reply attacks). Because of the serious situation generated by the worldwide outbreak of the Covid-19 epidemic, we also found this research valuable in supporting global efforts to combat the rapid spread of this virus, by finding the safest and fastest routes to epidemic treatment centres for medical staff, assistance teams in medical operations, fumigation control, and all work teams associated with disease control. This research attempts to contribute by proposing a special signal used to define epidemic teams. The best route, fast route can be chosen by using VANETs infrastructure. This scheme also deals with metric security features, such as key management, data integrity, and data privacy. In the communication and computation cost, we noticed that our proposed scheme achieved good results compared with the related works

lecture_5.pptx

sagar637395

Parcel track&trace - US FDA Request - Global tracing & serialization

Giuseppe Nocita

Parcel Track & Trace Solution – Pharma Serialization

Pipeline Srl

Parcel Track & Trace Solution – Pharma Serialization To accomplish the successful deployment of a global serialization program, flexibility is the key. Parcel is targeted and designed to provide building blocks of functionality, which can be applied differently to the same products shipped into many different regulatory environments around the globe. U.S.A. Standards & Generic Barcode configuration Parcel has a configurable system at item level and lot / serial number level that meet international and country specific standard. XML in & out mechanism Create a link between internal item code & government coding system both on item purchased & sold.

Parcel track&trace

Pipeline Srl

In Parcel, come potrete meglio verificare nelle slides allegate, è presente una serie di funzioni automatiche o semi-automatiche che consentono di recepire le diverse direttive, di automaticcare i processi di reperimento e memorizzazione dei dati seriali e di interfaccia verso i sistemi centrali “governativi” che determinano i processi di tracciatura del singolo farmaco. La gestione dei Bollini, così come viene chiamata nel mercato Italiano, è stato un primo tentativo di tracciatura con numerio seriale del farmaco. In base alle recenti normative, alcuni aspetti si sono evoluti.

IJMER

In this paper we design the High-level Data Link Control to permit synchronous, code transparent data transmission. The control information is always in the same position and specific bit patterns which used for control differ dramatically from those representing data that reduces the errors chances. The transmission rate and data stream are controlled by the network node. This eliminates additional synchronization and buffering of the data at the network interface. Some common applications include terminal-to-terminal, terminal to CPU, satellite communication, packet switching and other high-speed data links. In system, which require expensive cabling, and interconnection hardware. So this core can be used to simplify interfacing by going serially, thereby reducing interconnects hardware cost. The HDLC Controller MEGACELL is a high performance module for the bit oriented, switched, non-switched packet transmission module. It supports half duplex and full duplex communication lines, point-to-point and multipoint channels.

Access Control in ESDIN: Shibboleth

EDINA, University of Edinburgh

Curriculum Vitaebutest

Open Cybersecurity Alliance Briefing at RSAC 2020

Carol Geyer

Chapter 2Mike Qaissaunee

SECURITY V/S QOS FOR LTE AUTHENTICATION AND KEY AGREEMENT PROTOCOL

IJNSA Journal

Protocol and technology convergence, the core of near future communication, will soon be forming the interoperating heterogeneous networks. Attaining a strict secure authentication without risking the QoS performance and call success rates is a major concern when it comes to wireless heterogeneous networks. In order to achieve this, a generic, fast and secure, Authentication and Key Agreement protocol is to be used; a version of which is to be implemented between each two technologies. In this research, different existing EPS-EPS AKA protocols will be compared with our proposed protocol EC-AKA (Ensure Confidentiality Authentication and Key Agreement) based on security, cost effectiveness, signaling overhead, delay and performance. It is proven that EC-AKA is the exclusive protocol satisfying the New Generation Network’s KPIs and it will be promoted as the target generic AKA protocol in heterogeneous networks.

A SURVEY ON AUTHENTICATION AND KEY AGREEMENT PROTOCOLS IN HETEROGENEOUS NETWORKS

IJNSA Journal

Unlike current closed systems such as 2nd and 3rd generations where the core network is controlled by a sole network operator, multiple network operators will coexist and manage the core network in Next Generation Networks (NGNs). This open architecture and the collaboration between different network operators will support ubiquitous connectivity and thus enhances users’ experience. However, this brings to the fore certain security issues which must be addressed, the most important of which is the initial Authentication and Key Agreement (AKA) to identify and authorize mobile nodes on these various networks. This paper looks at how existing research efforts the HOKEY WG, Mobile Ethernet and 3GPP frameworks respond to this new environment and provide security mechanisms. The analysis shows that most of the research had realized the openness of the core network and tried to deal with it using different methods. These methods will be extensively analysed in order to highlight their strengths and weaknesses.

The OMG UML Testing Profile in Use--An Industrial Case Study for the Future I...

Alessandra Bagnato

The EU funded FITTEST FP7 project aims to address the Future Internet (FI) testing challenges. FITTEST will be integrated in three pilot applications provided by three industrial partners, IBM, Sulake and Soft am. This paper presents the Modelio SaaS product and case study context selected by Soft am as FITTEST Project industrial application and the usage of the Object Management Group (OMG) UML Testing Profile module. In the paper, researchers present the advanced software engineering methods proposed by FITTEST and the usage of the OMG UML Testing Profile (UTP) in a real industrial environment within Softeam and Modelio SaaS.

A magyar elektronikus közigazgatási szolgáltatások komplex információvédelmi ...

Csaba Krasznay

Robot2009 krasznayCsaba Krasznay

Security of handheld computers (in Hungarian)

Csaba Krasznay

The security of handheld computers is getting more and more critical. We have to remember that every system and network is worth the same than its weakest link. In these days there are only a few people who consciously care for the security of their network or system. But all responsible system administrators have the duty to prepare to all intents and purposes. The mission of the experts and university lecturers is to give over their knowledge. This presentation was prepared with this purpose too.

Hacktivity2009 krasznayCsaba Krasznay

Phishing and spam in Hungary and worldwide (in Hungarian)

Csaba Krasznay

Bluetooth security (in Hungarian)

Csaba Krasznay

Information security from the other side: Hackers in Hungary (in Hungarian)

Csaba Krasznay

On the net night and day - security in the virtual space (in Hungarian)

Csaba Krasznay

More from Csaba Krasznay (20)

A magyar elektronikus közigazgatási szolgáltatások komplex információvédelmi ...

Robot2009 krasznay

The possibilities and limitations of the spreading of digital signature (in H...

Security analysis and development opportunities of Hungarian e-government (in...

Security analysis of the Hungarian e-government system (in Hungarian)

Authentic long-term archiving with electronic signature (in Hungarian)

Security of the Hungarian electronic government systems (in Hungarian)

Countermeasures on the internet (in Hungarian)

Possibilities and results of the usage of electronic signatures in the busine...

Security of mobile devices (in Hungarian)

Possibilities of IT security evaluations based on Common Criteria in Hungary ...

The ISO 27000 family (in Hungarian)

Development of information systems - Common Criteria (in Hungarian)

Evaluation laboratories in the Hungarian Information Security Evaluation and ...

Security of handheld computers (in Hungarian)

Hacktivity2009 krasznay

Phishing and spam in Hungary and worldwide (in Hungarian)

Bluetooth security (in Hungarian)

Information security from the other side: Hackers in Hungary (in Hungarian)

On the net night and day - security in the virtual space (in Hungarian)

Recently uploaded

FIDO Alliance Osaka Seminar: Overview.pdf

FIDO Alliance

FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf

FIDO Alliance

AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...

Product School

The Future of Platform Engineering

Jemma Hussein Allen

ODC, Data Fabric and Architecture User Group

CatarinaPereira64715

Search and Society: Reimagining Information Access for Radical Futures

Bhaskar Mitra

The field of Information retrieval (IR) is currently undergoing a transformative shift, at least partly due to the emerging applications of generative AI to information access. In this talk, we will deliberate on the sociotechnical implications of generative AI for information access. We will argue that there is both a critical necessity and an exciting opportunity for the IR community to re-center our research agendas on societal needs while dismantling the artificial separation between the work on fairness, accountability, transparency, and ethics in IR and the rest of IR research. Instead of adopting a reactionary strategy of trying to mitigate potential social harms from emerging technologies, the community should aim to proactively set the research agenda for the kinds of systems we should build inspired by diverse explicitly stated sociotechnical imaginaries. The sociotechnical imaginaries that underpin the design and development of information access technologies needs to be explicitly articulated, and we need to develop theories of change in context of these diverse perspectives. Our guiding future imaginaries must be informed by other academic fields, such as democratic theory and critical theory, and should be co-developed with social science scholars, legal scholars, civil rights and social justice activists, and artists, among others.

Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024

Tobias Schneck

As AI technology is pushing into IT I was wondering myself, as an “infrastructure container kubernetes guy”, how get this fancy AI technology get managed from an infrastructure operational view? Is it possible to apply our lovely cloud native principals as well? What benefit’s both technologies could bring to each other? Let me take this questions and provide you a short journey through existing deployment models and use cases for AI software. On practical examples, we discuss what cloud/on-premise strategy we may need for applying it to our own infrastructure to get it to work from an enterprise perspective. I want to give an overview about infrastructure requirements and technologies, what could be beneficial or limiting your AI use cases in an enterprise environment. An interactive Demo will give you some insides, what approaches I got already working for real.

Slack (or Teams) Automation for Bonterra Impact Management (fka Social Soluti...

Jeffrey Haguewood

Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows. We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases. This video focuses on the notifications, alerts, and approval requests using Slack for Bonterra Impact Management. The solutions covered in this webinar can also be deployed for Microsoft Teams. Interested in deploying notification automations for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.

Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf

91mobiles

The Art of the Pitch: WordPress Relationships and Sales

Laura Byrne

Clients don’t know what they don’t know. What web solutions are right for them? How does WordPress come into the picture? How do you make sure you understand scope and timeline? What do you do if sometime changes? All these questions and more will be explored as we talk about matching clients’ needs with what your agency offers without pulling teeth or pulling your hair out. Practical tips, and strategies for successful relationship building that leads to closing the deal.

Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...

Product School

State of ICS and IoT Cyber Threat Landscape Report 2024 preview

Prayukth K V

The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development. The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers: State of global ICS asset and network exposure Sectoral targets and attacks as well as the cost of ransom Global APT activity, AI usage, actor and tactic profiles, and implications Rise in volumes of AI-powered cyberattacks Major cyber events in 2024 Malware and malicious payload trends Cyberattack types and targets Vulnerability exploit attempts on CVEs Attacks on counties – USA Expansion of bot farms – how, where, and why In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East Why are attacks on smart factories rising? Cyber risk predictions Axis of attacks – Europe Systemic attacks in the Middle East Download the full report from here: https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/

Neuro-symbolic is not enough, we need neuro-*semantic*

Frank van Harmelen

Neuro-symbolic (NeSy) AI is on the rise. However, simply machine learning on just any symbolic structure is not sufficient to really harvest the gains of NeSy. These will only be gained when the symbolic structures have an actual semantics. I give an operational definition of semantics as “predictable inference”. All of this illustrated with link prediction over knowledge graphs, but the argument is general.

Assuring Contact Center Experiences for Your Customers With ThousandEyes

ThousandEyes

LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...

DanBrown980551

Do you want to learn how to model and simulate an electrical network from scratch in under an hour? Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)! During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook. PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides: - A fully editable and extendable library for grid component modelling; - Visualization tools to display your network; - Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses; The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well. What you will learn during the webinar: - For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills; - For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.

Designing Great Products: The Power of Design and Leadership by Chief Designe...

Product School

Essentials of Automations: Optimizing FME Workflows with Parameters

Safe Software

Are you looking to streamline your workflows and boost your projects’ efficiency? Do you find yourself searching for ways to add flexibility and control over your FME workflows? If so, you’re in the right place. Join us for an insightful dive into the world of FME parameters, a critical element in optimizing workflow efficiency. This webinar marks the beginning of our three-part “Essentials of Automation” series. This first webinar is designed to equip you with the knowledge and skills to utilize parameters effectively: enhancing the flexibility, maintainability, and user control of your FME projects. Here’s what you’ll gain: - Essentials of FME Parameters: Understand the pivotal role of parameters, including Reader/Writer, Transformer, User, and FME Flow categories. Discover how they are the key to unlocking automation and optimization within your workflows. - Practical Applications in FME Form: Delve into key user parameter types including choice, connections, and file URLs. Allow users to control how a workflow runs, making your workflows more reusable. Learn to import values and deliver the best user experience for your workflows while enhancing accuracy. - Optimization Strategies in FME Flow: Explore the creation and strategic deployment of parameters in FME Flow, including the use of deployment and geometry parameters, to maximize workflow efficiency. - Pro Tips for Success: Gain insights on parameterizing connections and leveraging new features like Conditional Visibility for clarity and simplicity. We’ll wrap up with a glimpse into future webinars, followed by a Q&A session to address your specific questions surrounding this topic. Don’t miss this opportunity to elevate your FME expertise and drive your projects to new heights of efficiency.

From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...

Product School

De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...

Product School

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...

James Anderson

Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management. The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM). Speakers: Bob Boule Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle. Gopinath Rebala Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.

Recently uploaded (20)

FIDO Alliance Osaka Seminar: Overview.pdf

FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf

AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...

The Future of Platform Engineering

ODC, Data Fabric and Architecture User Group

Search and Society: Reimagining Information Access for Radical Futures

Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024

Slack (or Teams) Automation for Bonterra Impact Management (fka Social Soluti...

Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf

The Art of the Pitch: WordPress Relationships and Sales

Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...

State of ICS and IoT Cyber Threat Landscape Report 2024 preview

Neuro-symbolic is not enough, we need neuro-*semantic*

Assuring Contact Center Experiences for Your Customers With ThousandEyes

LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...

Designing Great Products: The Power of Design and Leadership by Chief Designe...

Essentials of Automations: Optimizing FME Workflows with Parameters

From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...

De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...