APIs and Cross-Border Data Exchange in E-Government Context, Petteri Kivimäki, Chief Technology Officer at NIIS

1. APIs and Cross-Border Data Exchange
in E-Government Context
PETTERI KIVIMÄKI, CTO @pkivima
API DAYS FINLAND 2019, HELSINKI, 5 JUNE 2019

2. Topics
u What is X-Road
u X-Road as enabler for cross-border data exchange
u NIIS as the X-Road core development organization
u X-Road Development Model

3. What is X-Road

4. Point-to-Point – API Gateway – X-Road

5. X-Road Provides
u Organization level authentication
u Machine to machine authentication
u Standardized messaging model
u Non-repudiation and logging of messages
u Digital signatures with timestamps and eSeals
u Usage statistics
u Access rights management
u Address management and message routing
u Transport level encryption.

6. X-Road Architecture
Messages (SOAP)
CA
OCSP
Messages
(SOAP)
Addresses,
services
TimestampTimestamp
Central Services
Security Server
Central Server
Configuration
Proxy
Consumer
Security Server
Information
System
Certificates Certificates
Provider
Security Server
Information
System
TSA
Messages
(SOAP)
Trust Services
X-Road Core
Trust Services
Information System

7. What Is X-Road

8. What Is X-Road
u A centrally managed distributed data exchange layer for information
systems – an open source platform enabling a secure Internet-based data
exchange between information systems.
u All kind of organizations - public and private sector enterprises and
institutions - can connect their information systems to X-Road.
u X-Road employs a versatile security solution: authentication, multilevel
authorization, a high-level log processing system, digitally signed and time-
stamped data traffic.
u Distributed architecture and standardized messaging model make data
exchange between all the members of the X-Road ecosystem significantly
more efficient.

9. X-Road as enabler
for cross-border
data exchange

10. X-Road Federation
u Two X-Road ecosystems can be joined together, federated.
Federation is a one to one relationship between two ecosystems.
u Members of the federated ecosystems can publish and consume
services with each other as if they were members of the same
ecosystem.
u Federation is not only about technology – administrative
and/or legal agreements are also needed between:
u X-Road operators of the federated ecosystems
u Member organisations that exchange data (data exchange parties)

11. X-Road Federation
X-Road Ecosystem 1 X-Road Ecosystem 2
Central Server
Security Servers
Central Server
Security Servers
Data
Configuration

12. Federation Case Studies
u Business registers of Estonia and Finland
u Tax boards
u Implementation of X-Road in Iceland
u Improving environment services in the greater Helsinki area
u More information available at:
u https://x-road.global/case-studies

13. NIIS as the X-Road
core development
organization

14. Mission
To ensure the development and strategic management of the X-Road
and other cross-border components for eGovernment infrastructure.

15. NIIS Responsibilities
u Management, development, verification, and audit of the source code
u Administration of documentation
u Administration of business and technical requirements
u Conducting development
u Developing and implementing principles of licensing and distribution
u Providing second-line support for members
u International cooperation.

16. NIIS governance model
X-Road Operators
Development Teams
NIIS Members
X-Road Operators
NIIS Members General
Meeting
Advisory
Group
Working Group
Development
Teams
X-Road
Community
NIIS Members
• Ministry of Economic Affairs and Communications (Estonia)
• Ministry of Finance (Finland)
X-Road Operators
• Information Systems Authority (Estonia)
• Population Register Centre (Finland)
Partners
• Faroe Islands
• Iceland

17. X-Road
Development
Model

18. Development Model
NIIS Members
X-Road Community
NIIS Members
X-Road Community
Enhancement request
Rejected request / item
New release
Evaluate
Request Flow
Develop
Sprints 1-n
Publish
Releases x.y.z
Prioritize
Product Backlog
Product Roadmap
Working Group
YesNo
Is aligned with?
Product Roadmap is a plan that outlines the flow of new
features needed to satisfy the needs of NIIS members. The
roadmap helps to reach a consensus about future
developments and it provides a framework to help plan
and coordinate upcoming releases. The X-Road roadmap
takes into consideration scoped functionality and X-Road
production compatibility.
Advisory Group
Business feature request
Yes
No
Approve to Product Roadmap?
Product Backlog is a detailed plan that outlines the flow
of technical items that are required to implement the
features in the Product Roadmap. Each new feature in the
Product Roadmap is usually broken into multiple technical
items in the Product Backlog.
Product Backlog Item
Business feature request is
about adding a new feature to X-
Road core.
Enhancement request is about
improving existing functionality.

19. Development Model
Phases
u Evaluate – collect new feature and
enhancement requests and select the
best ones for development.
u Prioritize – maintain and prioritize
product backlog.
u Develop – agile development of
features requested by NIIS members.
u Publish – Publish and distribute new
releases.
Interest Groups
u NIIS – owns the model and is
responsible for executing it.
u NIIS Members – submit
enhancement requests, submit code
contributions, prioritize backlog, use
the software.
u X-Road Community - submit
enhancement requests, submit code
contributions, use the software.

20. Roadmap 2019
2019 2020
v6.20.0 v6.21.0 v6.22.0
2018
January April October
Ubuntu 18.04 LTS support REST support v1 REST support v2
Improved support for cloud
platforms (Security Server)
v7 research and planning
kick off
+ minor improvements and bug fixes
API based UI
Streamlined
Onboarding Process
Standalone Security
Server
ST IV support
Enhanced time-stamping

21. High Level Roadmap 2019-2021
2019 20212020
• Upgrade and completion of X-Road
version 6.
• Research and planning for X-Road version
7.
• Start of development of X-Road version 7.
• Beta pilot version of X-Road version 7.
• End of development of X-Road version 6.
• First release of X-Road version 7.
• Development of X-Road version 7.
• Maintenance of X-Road version 6.

22. WWW.NIIS.ORG