THE GOVERNMENT GATEWAY

1. THE GOVERNMENT GATEWAY THE GOVERNMENT GATEWAY IN SUPPORT OF LOCAL GOVERNMENT OBJECTIVES

2. Agenda for the Day: 2 • Welcome and Introductions The Government Gateway • Brief History • What is Government Gateway now? • Identity Management • What are the Business Drivers? • The Vision • Strategic Imperatives • Other Services • Secure Data • Payment Engine / Alerts OnLine • A new Engagement Model?

3. Introductions: 3 David Thickett Client Services Manager Devolved and Local Government Shared Services IT, CIT Department for Work & Pensions 01925 845608 07795 801376 David.thickett@dwp.gsi.gov.uk

4. Agenda for the Day: Welcome and Introductions The Government Gateway Brief History What is Government Gateway now? Identity Management What are the Business Drivers? The Vision Strategic Imperatives Other Services Secure Data Payment Engine / Alerts OnLine A new Engagement Model? 4 4

5. The Government Gateway: 5 • Gateway was launched on 25th January 2001 to provide: • Cross-Government authentication and authorisation services – • The Government Gateway is the UK Government’s CIO Council Champion Asset for identity services. • The Government Gateway sits at the very heart of Transformational Government. • The core function is the Identity verification and authentication for citizens, businesses and Government employees. • Single user credentials – so that users can have one identity, geared to the security level required for access, for use with all public services, to ensure that users are who they claim to be and that they have the right to access a specific service • A common messaging infrastructure – to guarantee the reliable delivery of documents and messages between businesses, citizens, intermediaries and Government organisations

6. The Government Gateway: 6 Service Transformation - Seamless User Experience • Consistent user experience • Single sign on and privacy aware • Local Government’s own brand • Single identity credentials for central and local Government Central Government Consolidation

7. The Government Gateway: Scale of the UK Challenge To provide all suitable Government services online an estimated 4,500+ services with 24x7 availability To address multiple customers/demographics 60m citizens and 3m businesses To integrate at the point of delivery, services drawn from multiple Government organisations 20+ large central departments, 434 UK local authorities an estimated 1,800 backend line of business applications around 13,000 paper forms and more than 5 billion annual transactions If everyone built their own systems then the cost would be significant and interoperability would be unlikely 7

8. The Government Gateway: Scale of the UK Challenge To provide all suitable Government services online an estimated 4,500+ services with 24x7 availability To address multiple customers/demographics 60m citizens and 3m businesses To integrate at the point of delivery, services drawn from multiple Government organisations 20+ large central departments, 434 UK local authorities an estimated 1,800 backend line of business applications around 13,000 paper forms and more than 5 billion annual transactions If everyone built their own systems then the cost would be significant and interoperability would be unlikely 8

9. The GovernmentGateway: 9 Government Gateway Functionality Overview Single Set of Credentials- User ID and Password, Security Phrase, Digital Certificate, tokens etc. Single Sign On Portal- Provide a central authentication page to allow credentials to change without forcing departments to change. White labelled user Interface- Departments can simply re-brand the Gateway functionality Intermediaries - Support for the delegation of permissions from a citizen or a business to an agent Users and Assistants- For businesses allow the employee to create multiple users and define service permissions.

10. Agenda for the Day: Welcome and Introductions The Government Gateway Brief History What is Government Gateway ? Identity Management What are the Business Drivers? The Vision Strategic Imperatives Other Services Secure Data Payment Engine / Alerts OnLine A new Engagement Model? 10 10

11. What is Government Gateway ? 11 • Identity Management; • To provide citizens, employees, businesses and their agents with an electronic identity that can be used to prove that they are who they claim to be. • To broker the use of identity to prove right of access and entitlement to all relevant instances of information or services, between service providers, identity providers and citizens, Government employees, businesses and their agents.

12. Identity Management: 12 ACCREDITOR  SERVICE PROVIDER Concept - Identity Assurance Logical Model The Identity Provider assures the Authentication Broker of the Customer’s identity Authentication Broker Identity Provider The Customer uses the Identity Provider’s security mechanism to verify identity The Authentication Broker maps the verified identity to the appropriate Service Provider customer record  CUSTOMER The Service Provider requires assurance of the customer’s identity The Accreditor ensures trust by monitoring standards

13. Identity Provision: 13 The Shared RA - shared service model Common Trust Framework (rules & standards) LA SharedIdentityProviderService(IDP) AuthenticationBroker Quick and simple integration DCSF Applications LA DWP Applications OGD OGD Own IDPService Othercentral govt apps NHS Own IDPService

14. Authentication Broker: 14 Authentication Broker Citizens Identity Providers Attribute Stores Employees Government Gateway Business Identity and Passport Service Citizens OGD/LA Service Providers Public Services Educational Sector (Janet) Central Government Services Choice 3rd Party, Banks, Telcos etc Businesses Local Government Services EU Member State’s Employee Services Government Gateway Central Government Services Government Departments Government Employees Choice GWS Local Government Services Local Authorities

15. Identity Management: 15 • The Government Gateway can currently handle the following credential authentication mechanisms:- • User ID & Password – level 1 • User ID & Password plus parts of 2nd password – enhanced level 1. • Knowledge Based Authentication – level 2 • OATH Tokens – level 2 • Digital Certificates – level 2 • Chip & Pin – level 2

16. Agenda for the Day: Welcome and Introductions The Government Gateway Brief History What is Government Gateway now? Identity Management What are the Business Drivers? The Vision Strategic Imperatives Other Services Secure Data Payment Engine / Alerts OnLine A new Engagement Model? 16 16

17. To enable as many transactions as feasible to be undertaken through self-serve channels To reduce the amount of needless and avoidable contact To enable organisations to share information across boundaries, to improve the services provided, to the benefit of the citizen To reduce the cost of service provision To position Local Government as the ‘front line contact point’ for Government interactions with the citizen Business Drivers 17

18. Strategic Imperatives? 18 • Maximise Self Service • Drive down costs • Reduce avoidable contact (NI 14) • Release resources • Partnership working • Local to local • Local to central • Local to 3rd sector • Data sharing • Entitlement to share? • Who are we talking about? • Data transfer security • Sharing Service Provision

19. Strategic Imperatives? 19 • Social Inclusion • Concentrate efforts on those with greatest need • Support roll out of technology to key need groups • National initiatives • Tell Us Once • In & Out of Work • Customer Insight

20. Agenda for the Day: Welcome and Introductions The Government Gateway Brief History What is Government Gateway now? Identity Management What are the Business Drivers? The Vision Strategic Imperatives Other Services Secure Data Payment Engine / Alerts OnLine A new Engagement Model? 20 20

21. Other Services 21 • Secure Data; • To facilitate reliable and secure messaging and transaction facilities for: • Citizen-to-Government (C2G) • Intermediary-to-Government (I2G) • Business-to-Government (B2G) • Government-to-Government (G2G) • To enable secure sharing of data between partners and across government boundaries.

22. Transaction Engine: 22 TransactionManagement;

23. Secure Data Transfer; 23 • SDT Solution Principles; • Offers Secure Data Transfer over the Internet and GSI for data classified up to HMG Impact Level 3 (Restricted) • Designed to replace the current use of external media and couriers • Gateway SDT is essentially the middleman for data transfers between sender and recipient • Can be accessed through a web browser for example, Internet Explorer • The data transfer to and from the SDT service uses secure internet protocols • The data transfer process involves notifications generated by SDT to ensure users of the service are kept informed.

24. Payment Engine: 24 • 16 Local Government customers. • Current service (DataCash) – cost prohibitive to reflect administrative and legislative change requirements (3DSecure; PCIDSS etc). • Doesn’t match new customer requirements and expectations. • Potential major Government customer – necessitated re-visiting the market place. • Recent Tender process to provide alternative system, better able to reflect and adapt to change. • Significantly reduced costs. • Simplified operating mechanism (industry standard API’s). • Final stages of contractual relationship.

25. Alerts OnLine: 25 • Toolkit to facilitate simple, convenient and cost effective communication with customers • Utilise e-Mail, SMS Text or Fax • Uses Government Gateway to allow customers to register for service • Secure service, available 24 x 7 • Examples • Appointment Reminders • Licence Renewal • Flood Alerts • Education Alerts

26. Agenda for the Day: Welcome and Introductions The Government Gateway Brief History What is Government Gateway now? Identity Management What are the Business Drivers? The Vision Strategic Imperatives Other Services Secure Data Payment Engine / Alerts OnLine A new Engagement Model? 26 26

27. Traditional Engagement Model: 27 Project Lifecycle for bringing new services on to the Government Gateway Define Requirements Implementation(Build and Test) Support Engagement Go-live

28. Working with Local Government 28 • 353 English LAs - too many to get consistent approach • Working together with the RIEPS and regional groups • Provide governance and direction regionally • Potential funding streams? • National direction from CLG, Delivery Councils, CIO / CTO Councils? • Involvement of LeGSB – consistency of language

29. Local Government Partners 29 • Partner / Vendor Forum • Work with vendors in LG marketplace • Strong customer base • Strong sales mechanism • Technical skills to integrate • Accreditation process • Links to Government Innovation initiative - • Showcase innovative solutions • Influence commercials – what local government can afford

30. A Timely Warning? 30 • Local Government needs to be Pro-active • Set the agenda • Use expertise and knowledge of citizen • Feed results into Comprehensive Area Assessment • Maximise Investment • E-Government • Government Connect (GCSx) • Business Transformation • Social Change programmes • “Do or be done unto!”

31. The Government Gateway: 31 QUESTIONS or BRICKBATS? David Thickett Client Services Manager IT Shared Services, CIT Department for Work & Pensions 01925 845608 07795 801376 David.thickett@dwp.gsi.gov.uk