Digital Certificates And Their Uses In HIIS

Elektronsko poslovanje lahko bistveno prispeva k pospeševanju postopkov ter prihranku časa in s tem k zniževanju stroškov tako ustanov kot strank. Izrazit primer take ustanove je Zavod za zdravstveno zavarovanje Slovenije, s katerim ima prek sistema obveznega zdravstvenega zavarovanja opravka tako rekoč vsak državljan Republike Slovenije. Delo z zavezanci v Zavodu je do nedavnega temeljilo izključno na papirni dokumentaciji, zato v Zavodu pospešeno tečejo projekti vpeljave elektronskega poslovanja. E-poslovanje prek interneta spremljajo potrebe po zagotavljanju visoke stopnje varnosti, tajnosti in nespremenljivosti poslanih podatkov. V prvem delu naloge so predstavljena digitalna potrdila, s pomočjo katerih zagotovimo visoko stopnjo varnosti poslovanja. Opisani so infrastruktura javnih ključev, na kateri temelji generiranje in hranjenje ključev, overjanje imetnikov in izdajanje digitalnih potrdil, objavljanje digitalnih potrdil (imeniki), preklicevanje in objavljanje preklicev digitalnih potrdil ter časovno označitev postopkov. Na kratko sta predstavljena overitelj na MNZ, ki ga sestavljata dva izdajatelja kvalificiranih digitalnih potrdil ter izdajatelj varnih časovnih žigov in overitelj ZZZS-CA, ki izdaja digitalna potrdila za potrebe delovanja sistema kartice zdravstvenega zavarovanja. V drugem delu so opisani obstoječi portali Zavoda, dostop do portalov ter njihova vsebinapri vsakem je podan predlog za izboljšavo. Opisan je tudi sistem neposrednega dostopa do zdravstvenega zavarovanja (On-line ZZ), ki zagotavlja pregledno, varno in zanesljivo izmenjevanje podatkov o obveznem zdravstvenem zavarovanju, prostovoljnih zdravstvenih zavarovanjih in preostalih podatkih zavarovanih oseb med informacijskimi sistemi Zavoda, prostovoljnih zdravstvenih zavarovalnic in izvajalci zdravstvenih storitev. Naloga pokaže, da Zavod uspešno izkorišča možnosti, ki jih ponuja internet, in je uporabnikom z uvedbo portalov omogočil varno, pregledno in sledljivo elektronsko poslovanje. Predlaganih je nekaj možnosti, da Zavod elektronske storitve nadgradi in svoje poslovanje še bolj približa uporabnikom.Electronic business can substantially increase speed of procedures and thus save time and significantly lower the costs for both institutions and users. A good proof of that is the practice of Health Insurance Institute of Slovenia, which deals with practically every citizen of the Slovenian state through the system of mandatory health insurance. Until recently all the procedures were conducted exclusively on papernow, however, the Institute is rapidly introducing electronic business into its practices. Internet based e-business procedures need to ensure a high level of security and secrecy as well as immutability of data. In the first part of the thesis digital certificates, ensuring a high level of security, are presented. The infrastructure of public keys as a base of generating and keeping of keys, mechanisms for certifying users and issuing digital certificates, publishing of certificates (registering), recalling and publishing recalls of digital certificates as well as time stamping, are described. The thesis describes the certifier at the MNZ, composed of two qualified digital certificate publishers, two publishers of qualified digital certificatesand the issuer of safe time stamps and certifier ZZZS-CA, issuer of digital certificates, which enable the functioning of the mandatory health insurance card. The thesis further describes the existing portals of the Institute, their data access and contents, suggesting improvements for both. Also, the thesis outlines the on-line system for health insurance (On-line ZZ), which ensures a clear, safe and reliable exchange of data on mandatory health insurance, voluntary health insurances and other data of insurants between the Institute\u27s information systems, voluntary health insurance companies and health service performers. The thesis shows that the Institute is making good use of the Internet possibilities and provides the safe, transparent and traceable e-business solutions for the users. A few possible upgrades for the Institute’s e-solutions, making them even more consumer-friendly, are proposed