A Proposal of a Secure ABIS’s Transmission Subsystem Adherent to the Brazilian E-gov

Abstract

World governments often define and maintain several standards and good practices manuals to guide the IT Teams of ministries, departments and public agencies in development and deployment of Information Technology applications, infrastructure and processes. Despite often being a good representation of the state of art in many IT areas, these standards are written in a high level of abstraction and their practical deployment are hampered due to lack of highly specialized knowledge. In this regard, this paper proposes a secure and integrated transmission subsystem model compliant with the standards and specifications proposed by the Brazilian government and, at the same time, establish mechanisms and controls to ensure the effective protection of data, as well as reducing the risk of losses, changes and unauthorized access, ensuring non-repudiation and preserving the availability, integrity, confidentiality and authenticity of the information. The proposed model, that was originally developed to provide the integrated transmission subsystem to the ABIS architecture deployed in the national id program, can be fully extended to several other applications of Brazilian government and, furthermore, to applications of several other countries, since it follows the most important international good practices guides and standards.