I.O.'S ORDER OF THE MINISTER OF INFORMATION AND COMMUNICATIONS OF THE REPUBLIC OF KAZAKHSTAN

of March 29, 2018 No. 123

About approval of Rules of integration of objects of informatization of "the electronic government"

According to subitems 13) article 7 of the Law of the Republic of Kazakhstan of November 24, 2015 "About informatization" PRIKAZYVAYU:

1. Approve the enclosed Rules of integration of objects of informatization of "the electronic government".

2. Declare invalid the order of the acting minister on investments and development of the Republic of Kazakhstan of January 28, 2016 No. 104 "About approval of Rules of integration of lock of "the electronic government", payment gateway of "the electronic government" with information systems" (it is registered in the Register of state registration of regulatory legal acts at No. 13244, it is published on March 14, 2016 in information system of law of regulatory legal acts of the Republic of Kazakhstan of Ad_let).

3. And the state services of the Ministry of information and communications of the Republic of Kazakhstan to provide to development department of "the electronic government":

1) state registration of this order in the Ministry of Justice of the Republic of Kazakhstan;

2) within ten calendar days from the date of state registration of this order the direction it in the Republican state company on the right of economic maintaining "The republican center of legal information" for official publication and inclusion in Reference control bank of regulatory legal acts of the Republic of Kazakhstan;

3) placement of this order on Internet resource of the Ministry of information and communications of the Republic of Kazakhstan;

4) within ten working days after state registration of this order submission to Legal department of the Ministry of information and communications of the Republic of Kazakhstan of data on execution of the actions provided by subitems 1), 2) and 3) of this Item.

4. To impose control of execution of this order on the supervising vice-minister of information and communications of the Republic of Kazakhstan.

5. This order becomes effective after ten calendar days after day of its first official publication.

Approved by the Order of the acting minister of information and communications of the Republic of Kazakhstan of March 29, 2018 No. 123

Rules of integration of objects of informatization of "the electronic government"

Chapter 1. General provisions

1. These rules of integration of objects of informatization of "the electronic government" (further – Rules) are developed according to the subitem 13) of article 7 of the Law of the Republic of Kazakhstan "About informatization" (further – the Law) and determine procedure for integration of objects of informatization "the electronic government.

2. In these rules the following basic concepts are used:

1) information system (further – IS) – the organizational ordered set of the information and communication technologies, service personnel and technical documentation realizing certain technological actions by means of information exchange and intended for the solution of specific functional objectives;

2) objects of informatization – electronic information resources, the software, Internet resource and information and communication infrastructure;

3) integration of objects of informatization – action for the organization and ensuring information exchange between objects of informatization based on the standard protocols of data transmission used in the Republic of Kazakhstan;

4) authorized body in the sphere of informatization (further – authorized body) – the central executive body performing management and cross-industry coordination in the sphere of informatization and "the electronic government";

5) service for provision of open data – data transmission method unilaterally between objects of informatization;

6) safety of web services (WebServiceSecurity) (further – WSSecurity) – the standard of application of functions of safety in case of exchange of messages between the SOAP web services. In case of use of style of architecture of the software for the distributed systems (REST) safety of service is ensured through HTTPs security measures, and application of authentication of users;

7) the state service of access control to personal data (further – the state service) – the service providing information exchange of owners and (or) operators, the third parties with the subject of personal data and authorized body in case of access to the personal data containing in objects of informatization of state bodies and (or) the state legal entities including obtaining from the subject of personal data of consent to collection, processing of personal data or their transfer to the third parties;

8) Deffi-Hellman's protocol – the cryptographic protocol allowing two and more parties to exchange in advance approved general confidential key, using couple of public and private keys in communication channel, unprotected from listening;

9) public Peer IP address – the unique IP address of the device naming the VPN tunnel and used on the Internet on the party of the initiator and/or owner of object of informatization;

10) integration service – method of information exchange of objects of informatization;

11) the initiator of integration service – the owner of object of informatization initiating request for provision of integration service;

12) the owner of integration service (further – the owner of service) – the owner or the owner of object of informatization providing integration service;

13) extensible markup language (eXtensible Markup Language) (further – XML) – the extensible markup language used for storage and data transmission in the structured and machine-readable format;

14) the client connector – the software giving to the initiator of object of informatization opportunity of generation of point of connection to the integration service placed on ShEP, VShEP with support of the ShEP, VShEP formats;

15) the transport signature – the digital signature used for ensuring integrity and authorship of the transferred messages in case of information exchange of IS using the WSSecurity specification;

16) certification center – the legal entity certifying compliance of open key of the digital signature to the closed key of the digital signature, and also confirming reliability of the registration certificate;

17) API with open right of access (OpenAPI) – API exposed in open entry to the Internet, which is not requiring coordination or permission of the Owner of electronic information resource for implementation of information exchange;

18) the magazine of logging – the files containing information on system operation used for monitoring of its work and identification of the reasons in case of failure;

19) the single transport circle of state bodies (further – UTS of GO) – the network of telecommunications entering information and communication infrastructure of "the electronic government" and intended for ensuring interaction local (except for the local networks having Internet access), departmental and corporate networks of telecommunications of state bodies, their subordinated organizations and local government bodies, and also other subjects of informatization determined by authorized body with observance of required level of information security;

20) the simple protocol of access to objects (SimpleObjectAccessProtocol) (further – SOAP) – the protocol based on XML for transmission of messages in case of integration of IS;

21) service connector – the software allowing the owner of object of informatization to create and place integration services on ShEP;

22) the register of services – the list registered in lock of "the electronic government" and external lock of "the electronic government" of services, with the description of service;

23) objects of informatization of "the electronic government" – the state electronic information resources, the software of state bodies, the Internet - resource of state body, infrastructure facilities of "the electronic government", including the service software product, the software and information systems of other persons intended for forming of the state electronic information resources within implementation of the state functions and rendering the state services;

24) the operator of information and communication infrastructure of "the electronic government" (further – the operator) – the legal entity determined by the Government of the Republic of Kazakhstan to which ensuring functioning of the information and communication infrastructure of "the electronic government" assigned to it is assigned;

25) the service integrator of "the electronic government" (further – the service integrator) – the legal entity determined by the Government of the Republic of Kazakhstan to which functions on methodological ensuring development of architecture of "the electronic government" and standard architecture of "electronic akimat", and also other functions provided by the Law are assigned;

26) external lock of "the electronic government" (further – VShEP) – the lock subsystem of "the electronic government" intended for ensuring interaction of the information systems which are in the single transport circle of state bodies with the information systems which are out of the single transport circle of state bodies;

27) payment gateway of "the electronic government" (further – PShEP) – IS automating processes of information transfer about carrying out payments within rendering the paid services rendered electronically;

28) lock of "the electronic government" (further – ShEP) – IS intended for integration of objects of informatization of "the electronic government" with other objects of informatization of "the electronic government";

29) the electronic message (further - the message) – the electronic document in the XML, JSON format intended for exchange of information between objects of informatization;

30) the digital signature (further – the EDS) – set of electronic digital symbols created by means of the digital signature and confirming reliability of the electronic document, its accessory and invariance of content;

31) Application programming interface (further – API) – the interface of programming of appendices, set of the ready programs provided by service for information exchange between objects of informatization;

32) encapsulation of AH (AuthenticationHeader) – encapsulation of the authenticating heading which allows to authenticate the next node in the VPN tunnel and to provide integrity of transmitted data without enciphering. Value in the field of the protocol of the heading IP – equal UDP to port 51;

33) Hyper Text Transfer Protocol (further – HTTP) - the protocol of applied level of data transmission initially - in the form of hypertext documents in HTML format, used for transfer of any data;

34) IP (Internet Protocol) – network model of data transmission, presented in digital form;

35) Java Script Object Notation (further – JSON) – the text format of data exchange based on JavaScript;

36) Representational State Transfer (further – REST) - style of architecture of the software for interaction of components of the distributed appendix in network. REST represents the approved set of the restrictions considered when designing of the distributed systems or interactions of services, using standards, such as HTTP, URL, JSON and XML;

37) the SSL certificate (Secure Sockets Layer) – the registration certificate, held for use Internet resource or IS for providing the procedure of authentication;

38) TCP (Transmission Control Protocol) – one of the main protocols of data transmission of the Internet intended for management of data transmission;

39) UDP (User Datagram Protocol) – the protocol of the user datagrams, one of crucial elements of TCP/IP, set of network protocols for the Internet;

40) URL (Uniform Resource Locator) – the uniform locator (location determinant) of resource, specifies the address of service of object of informatization;

41) Virtual Private Network (further – VPN) – virtual private network for exchange of information of two nodes.

3. Are not subject to integration by means of ShEP, VShEP:

1) the services provided by certification centers;

2) objects of informatization which contain the data constituting the state secrets of the Republic of Kazakhstan and office information marked "For office use";

3) the objects of informatization placed on information and communication platform of "the electronic government" and intended for forming of single space of data for the purposes of provisions of analytical information on activities of the Government of the Republic of Kazakhstan;

3-1) objects of informatization placed on information and communication platform of "the electronic government" and intended for implementation of tax and customs administration according to the legislation of the Republic of Kazakhstan;

4) services for provision of open data by means of OpenAPI, API, with use of the XML, JSON formats and the HTTP and HTTPS protocols, by means of architectural REST style, including the Internet portals of open data, open budgets and open regulatory legal acts.

4. Non-state IS is integrated with IS of state body only through VShEP put into commercial operation.

In case of integration availability of the agreement of joint operations on information security of the state and non-state IS is also considered.

Connection of non-state IS to integration service is performed according to paragraph 3 of Chapter 2 of these rules.

Connection of IS of state body to integration service of state body is performed according to paragraph 4 of Chapter 2 of these rules.

5. Actions for integration of objects of informatization are performed by means of portal web of "the electronic government" taking into account formats of the data specified in appendix 1 to these rules.

6. Integration of objects of informatization is performed on condition of availability of integration service in the register of services on the web portal of "the electronic government".

7. The operator makes changes to service or excludes it from the register of services at the request of the Owner of service or authorized body with the notification of authorized body and the service integrator.

The operator in case of non-use of the state service by the initiator of integration service disconnects it from the service containing personal data and confidential information at the request of authorized body and (or) the owner of service, and (or) the service integrator with the notification of authorized body.

8. When rendering services in electronic form object of informatization sends data on use of payments to PShEP.

All requests and documents make sure the EDS of authorized persons of participants of integration interaction.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info