Showing posts with label Project STORK. Show all posts
Showing posts with label Project STORK. Show all posts

Thursday, 31 May 2012

Some food for the thoughts of Jon Ungoed-Thomas and Philip Johnston – IdA/DWP

You weren't invited to Ovum's Industry Congress on 24 May 2011, were you, so you didn't hear Phil Pavitt's talk on the "frictionless services" that he says the public is demanding from HMRC.

Still, you can read about it in Computer World UK, where you will discover that Phil is the Chief Information Officer (CIO, i.e. what we used to call the "DP Manager") at HMRC and he says frictionless services require identity assurance (IdA).

He may be right about that, after all we don't know what a frictionless service is, but he must be wrong when he says: "We don't currently have ID authentication in UK government".

That's just not true. Some of us small businesses have been submitting our VAT returns online using the UK Government Gateway every three months for several years now and that requires ID authentication by the UK government. And millions of people use HMRC's self-assessment website for income tax, again via the Government Gateway.

Why does Phil make this false statement?

Because no-one in Whitehall likes the Government Gateway. It doesn't look anything like the front end of Amazon or eBay or Facebook or Google. They want the Government Gateway to go away, it's old and ugly and not the sort of accessory a hip young CIO wants to be seen dead wearing. It cost millions. It works. It seems to be secure. But it's got to go.

What will the IdA replacement look like? Not long to wait to find out now, says Phil, "in March of this year the Department for Work and Pensions (DWP) revealed plans that will see it be the first central government department to roll out identity assurance services, in a project that is set to cost £25 million".

£25 million? What's the betting that there's a 1 in front of that by the time the National Audit Office get to take a look? If we're lucky. Otherwise a 4. While even Oxfam won't want the old Government Gateway, already paid for, years of successful use behind it, but pensioned off in its prime.

What do we foresee? All together now – friction!




Some food for the thoughts of Jon Ungoed-Thomas and Philip Johnston – IdA/DWP

You weren't invited to Ovum's Industry Congress on 24 May 2011, were you, so you didn't hear Phil Pavitt's talk on the "frictionless services" that he says the public is demanding from HMRC.

Still, you can read about it in Computer World UK, where you will discover that Phil is the Chief Information Officer (CIO, i.e. what we used to call the "DP Manager") at HMRC and he says frictionless services require identity assurance (IdA).

He may be right about that, after all we don't know what a frictionless service is, but he must be wrong when he says: "We don't currently have ID authentication in UK government".

That's just not true. Some of us small businesses have been submitting our VAT returns online using the UK Government Gateway every three months for several years now and that requires ID authentication by the UK government. And millions of people use HMRC's self-assessment website for income tax, again via the Government Gateway.

Why does Phil make this false statement?

Because no-one in Whitehall likes the Government Gateway. It doesn't look anything like the front end of Amazon or eBay or Facebook or Google. They want the Government Gateway to go away, it's old and ugly and not the sort of accessory a hip young CIO wants to be seen dead wearing. It cost millions. It works. It seems to be secure. But it's got to go.

What will the IdA replacement look like? Not long to wait to find out now, says Phil, "in March of this year the Department for Work and Pensions (DWP) revealed plans that will see it be the first central government department to roll out identity assurance services, in a project that is set to cost £25 million".

£25 million? What's the betting that there's a 1 in front of that by the time the National Audit Office get to take a look? If we're lucky. Otherwise a 4. While even Oxfam won't want the old Government Gateway, already paid for, years of successful use behind it, but pensioned off in its prime.

What do we foresee? All together now – friction!




Monday, 14 November 2011

WrinklesInTheMatrix: ex-Guardian man Mike Bracken 1

The Cabinet Office want everyone to transact with government over the web.

In order to do so, the government must know who everyone is. That means everyone needs an electronic identity.

Mindful of the humiliating failure of the Home Office's identity cards scheme, the Cabinet Office have asked the private sector to devise an identity assurance service. An identity assurance service that is absolutely nothing like the Home Office scheme with its national identity register and its biometrics.

Someone has been spoiling the Cabinet Office's fun by pointing out that we already have a way to transact with government over the web, using the UK Government Gateway.

Too old-fashioned, they say, we must have a modern gateway.

And as if to prove it, the Cabinet Office have hired ex-Guardian man Mike Bracken to be executive director of government digital services and SRO of the identity assurance programme. (Keep up at the back – senior responsible owner.)

Boy. Is he ever modern. He ran the Guardian website until six months ago. He uses Apple laptops. And Google Apps. Which means Google, Julian Assange and the Chinese will all know about the identity assurance programme before we the public do.

Anyway, he's not having any of this cobwebby old Government Gateway nonsense. He says in his latest blog, Establishing trust in digital services:
... the UK assumed the federated model in the Electronic Communication Act (2000) and built the Government Gateway accordingly. But a lot has moved on in the dozen years since Government Gateway was developed and we have a lot of work to do to develop solutions that work for users in the many contexts that they’ll need them.
You may not grasp all the detail – he's talking about the federated model of identity management, not a United States of Europe – but you get the gist, "a lot has moved on", the Government Gateway is oldsville.

Why do we need to move on? Why is there a lot of work to do? Because:
There is a strong desire to work collaboratively across the public and private sectors to develop solutions that meet users differing needs. That desire is international. The USA’s National Strategy for Trusted Identities in Cyberspace and the EU Project STORK pilots testify to the opportunities.
Now here's a wrinkle – if you click on that Project STORK link of his to see which opportunities are testified to, what's the first thing you see?
The aim of the STORK project is to establish a European eID Interoperability Platform that will allow citizens to establish new e-relations across borders, just by presenting their national eID.
"eID" in STORKspeak is electronic identity, and not the famous festival of the same name. Bit of a clanger for ex-Guardian man Mike Bracken, that – "national eID" takes us straight back to identity cards and national identity registers.

But this time it's double wrinkle because what's the only thing everyone (else) knows about Project STORK? It's a pan-European project to share personal and business information and the UK leg of Project STORK is ... yes ... the Government Gateway.

----------

Updated 16.7.17

Nearly six years after the blog post above was written:
  • The Government Digital Service (GDS) is still there.
  • The Government Gateway is still there.
  • The Cabinet Office's identity assurance programme still isn't.
  • Mike Bracken is long gone.
  • And STORK (or at least eIDAS) is still there, please see GDS backs pilot to test digital identity for banking across borders, 12 July 2017:
    The Government Digital Service (GDS) is a member of a consortium of leading European private and public sector organisations which has said it will start a pilot into the use of a citizen’s national digital identity from France to open a bank account in the UK.
Sublimely nostalgic for old-timers, it is not six years but nearly 10 since the EU's eGovernment website published:
EU/UK: EU pilot to boost compatibility of eID kicks off in the UK, 15 October 2007

The ultimate goal of the STORK project is to implement an EU-wide interoperable system for the recognition and authentication of eIDs [electronic identities] that will enable businesses, citizens and government employees to use their national eIDs in any Member State. Once established, this would significantly facilitate migration between Member States, allowing easy access to a variety of eGovernment services including, for example, social security, medical prescriptions and pension payments. It could also ease cross-border student enrolment in colleges ...

The UK’s Identity and Passport Service (IPS) is leading the pilot project, in close co-operation with the Government Gateway, the UK’s centralised registration service. “It is about the eventual pan-European recognition of electronic IDs,” noted an IPS spokesperson.
UK progress during those 10 years?

WrinklesInTheMatrix: ex-Guardian man Mike Bracken 1

The Cabinet Office want everyone to transact with government over the web.

In order to do so, the government must know who everyone is. That means everyone needs an electronic identity.

Mindful of the humiliating failure of the Home Office's identity cards scheme, the Cabinet Office have asked the private sector to devise an identity assurance service. An identity assurance service that is absolutely nothing like the Home Office scheme with its national identity register and its biometrics.

Someone has been spoiling the Cabinet Office's fun by pointing out that we already have a way to transact with government over the web, using the UK Government Gateway.

Too old-fashioned, they say, we must have a modern gateway.

And as if to prove it, the Cabinet Office have hired ex-Guardian man Mike Bracken to be executive director of government digital services and SRO of the identity assurance programme. (Keep up at the back – senior responsible owner.)

Boy. Is he ever modern. He ran the Guardian website until six months ago. He uses Apple laptops. And Google Apps. Which means Google, Julian Assange and the Chinese will all know about the identity assurance programme before we the public do.