Implementation and Management Approach
ITALO ensures an appropriate level of technical, semantic and organizational interoperability. The role of ITALO is therefore valuable in the exchange between public administrations, in this case between the energy sector and agencies of MITyC, establishing a secure communication channel for these agencies. The channel should offer guarantees of authenticity between the final destinations and confidentiality of communication. ITALO allows MITyC developed in requiring the disclosure of certain information to certain agencies, sending it comfortably and easily. To do this, applications have to connect to ITALO deployed in the Ministry which, in turn, connects via SSL to the ITALO components installed in the respective agencies with which MITyC has to communicate. This connection, as mentioned, is secured through a SSL channel that guarantees the confidentiality of information. It also establishes a channel with end to end authentication through the use of server certificates on both the client and the server side. Finally, the authenticity and integrity of messages is guaranteed by signing the Electronic Certificate of the Secretariat of Energy.
Technology solution
The application has been developed in C # and ASP.NET, under the development environment Visual Studio. NET 2005. The deployment has been carried out on a Server Web IIS 6.0 on Windows 2003 Advanced Server. The persistence of data is accomplished, partly by a Manager SQL Relational Database Server 2005 on Windows 2003 Server. To fulfill its functions, the system makes use of the following components:
- Validation System certificates. To ensure the identity of the developers who run the application, as well as the validity of server certificates of the recipient agencies.
- System SRX MITyC electronic signature. To permit the firm documentation submitted, using the Electronic Certificate of the Secretary of State for Energy.
As already mentioned, ITALO has two basic components:
- On the one hand, the component for sending via Web Service, information to various organisms.
- In addition, the Administration Web platform characteristics for the communication of each application with the respective agencies.
Communication applications with the MITyC ITALO component deployed in the Ministry, and the communication of this component with the components deployed in the various ministries, are carried out through Web Services, with the significant benefits it entails.
As for the information exchanged between the MITyC and agencies, it has been defined based on the XSD schema to be validated by all those that wish to refer information to the agencies. Information interchange between agencies is based on XML language. Applications to connect with ITALO must define the specific data to be sent, the organisms to communicate with ITALO has a Management window, accessible via web and via certified digital authentication or username / password by application developers.
Measures taken:
- Definition of an XML format for exchange between agencies using XSD to detail the precise information to be exchanged.
- Establishment a secure communication channel for communication between these agencies. The channel should offer guarantees of authenticity between the ends and confidentiality of communication. For that reason the SSL authentication technology was chosen for both client and server.
- Use of server certificates in both the server machine and the client machine in order to have complete assurance of authenticity at the time of establishing the communication channel.
- Signing of the information provided through the application using Electronic Certificates. This will ensure the authenticity, not repudiation and integrity of the source of information. To do this, applications have to connect to ITALO deployed in the Ministry which, in turn, connects via SSL to the ITALO components installed in the respective agencies with which MITyC has to communicate. This connection, as mentioned, is secured through a SSL channel that guarantees the confidentiality of information. It also establishes a channel with end to end authentication through the use of server certificates on both the client and the server side. Finally, the authenticity and integrity of messages is guaranteed by signing the Electronic Certificate of the Secretariat of Energy.