THE USER-FRIENDLY SYSTEM FOR WEB APPLICATIONS IN THE PUBLIC ADMINISTRATION OF THE REPUBLIC OF SLOVENIA

Uspešno prilagajanje spremembam na področju poslovanja je ključnega pomena tako za privatni kot javni sektor, ki svojo prednost iščeta tudi v elektronskem poslovanju. Prav javni sektor, ki ima monopolen položaj, mora skrbno slediti potrebam državljanov in uvajati elektronske storitve premišljeno in načrtno. Razvoj elektronskih komunikacij je povečal potrebo po učinkovitem upravljanju z identitetami. Elektronska identiteta je postala ključni dejavnik tudi na področju gospodarstva Evropske unije (EU) in vzpostavitve enotnega digitalnega trga. Zato je ustrezna strategija z upravljanjem identitet na nacionalni ravni odločilnega pomena. Magistrska naloga obravnava področje elektronskega poslovanja javne uprave Republike Slovenije in izpostavlja poglavitne težave s katerimi se srečujemo državljani, kot uporabniki njihovih elektronskih storitev. V začetnem delu naloge je opisana struktura javnega sektorja in opredeljen segment javne uprave, ki skrbi za razvoj in delovanje elektronskih storitev. Navedeni so strateški dokumenti, ki vplivajo na razvoj in zakoni, ki zagotavljajo pravno ureditev elektronskega poslovanja. Nadaljnja poglavja opisujejo trenutno stanje elektronskih storitev javne uprave Republike Slovenije in so osredotočena predvsem na segment poslovanja z državljani in s podjetji. Opisana je vzpostavitev in delovanje centralnega avtentikacijskega sistema za potrebe javne uprave (SI-CAS), ki omogoča zanesljivo in varno preverjanje identitet ter lažji razvoj novih elektronskih storitev. Predstavljena je primerjava elektronskih storitev javne uprave Republike Slovenije z drugimi članicami Evropske unije in sodelovanje slovenske javne uprave pri integraciji evropskih projektov na področju elektronskih storitev. Jedro naloge opisuje raziskavo, v kateri sem se osredotočil na pomanjkljivosti elektronskih storitev javne uprave Republike Slovenije tako z vidika varnosti kot učinkovitosti. S postopki za oceno kakovosti storitev sem ovrednotil slabosti in pomanjkljivosti elektronskih storitev in poiskal ustrezne rešitve. Možni predlogi izboljšav temeljijo na vpeljavi dodatnega varnostnega mehanizma, kjer sem primerjal različne metode dvostopenjskih avtentikacij z enkratnimi gesli (OTP). Predlagane rešitve temeljijo na zasnovanem avtentikacijskem sistemu SI-CAS, dvostopenjski SMS-OTP avtentikaciji in odprtem standardu SAML. Poudarek je na ustreznem upravljanju elektronskih identitet, ki so ključnega pomena pri zagotavljanju varovanja osebnih podatkov in nadzora dostopa pri elektronskih storitvah. V zaključku sledi pregled predlaganih rešitev in primerjava z obstoječimi rešitvami, ki so uveljavljene na področju dvostopenjskih OTP avtentikacij.Successful adaptation to changes in the business sector is crucial, for both, private and public sector, as they seek their advantage in the electronic commerce. The public sector with its monopolistic position must closely follow the needs of citizens and apply electronic services carefully and methodically. The development of electronic communications has increased the need for effective management of identities. Electronic Identity has become a key factor in the EU economy and the creation of a single digital market. Therefore, appropriate strategy with identity management at the national level is of outmost importance. This Master\u27s thesis describes the electronic operations of public administration of the Republic of Slovenia, and highlights the key problems of its citizens as end users of electronic services. Introduction describes the structure of the public sector and the segment of public administration which is responsible for the development and operations of electronic services. The thesis indicates strategic documents affecting the development and laws that provide the legal regulation of electronic commerce. Following chapters describe the current state of electronic services of public administration of the Republic of Slovenia, and are focused mainly on government operations with various stand-alone systems and services to citizens and businesses. Establishment and functioning of the central authentication system for the needs of public administration (SI-CAS) is also described. SI-CAS enables secure and reliable verification of identity and facilitates the development of new electronic services. Comparison of electronic public administration services of the Republic of Slovenia to other European Union members is presented, and it shows participation of Slovenian public administration in the integration of European projects in the field of electronic services. The main part of the thesis focus on the shortcomings of electronic public administration services of the Republic of Slovenia in terms of both, safety and efficiency. Using models to evaluate the quality of services, given are solutions that include the creation of additional security mechanism with two-factor OTP authentication and offer a user-friendly electronic services. Solutions are based on authentication system SI-CAS designed for public administration, two-factor SMS-OTP authentication and SAML open standard. Emphasis is placed on proper management of electronic identities that are vital to ensuring the protection of personal data and access control for electronic services. The final chapter recaps given solutions, and provides a comparison with existing solutions, which are established in the field of two-factor OTP authentication