allows a client organization's application to request
services from a supplier organization; and, (ii)
portal-to-portal, in which the client organization's
staff may consult a supplier organization's Web
applications after identification/authentication in
their local infrastructure.
INTEROPS is based on international technical
standards: SAML, for the input of identification and
authorization data into an identification vector;
SSLV3, to secure the transport layer and ensure the
integrity and confidentiality of the exchanges; SOAP
and WS-Security for Web service exchanges; and,
XML, to describe interoperability agreements and
the trace interchange format.
In Belgium, Crossroads Bank for Social Security
(CBSS, 2012), serves as an "integrator" for Belgian
social security. This institution is at the centre of a
system that exchanges data among all institutions,
employers and foreign institutions and manages the
receipt and routing of the data transmitted, which are
coded in XML using standard schemas (XML
schemas). The data exchanged involve all functions
related to social security affiliation, return-to-work
statements and changes in circumstances that affect
beneficiaries.
5.2 The Case of the European Social
Security Agreement
In the European Union social protection is one of the
elements of the right to free movement of persons.
When a person who has worked in various Member
States of the European Union applies for a pension,
indicating that he/she has worked in various
countries, it sparks off an exchange of information
between social security institutions.
The application is normally submitted to the
appropriate institution in the home state. The first
task of this institution is to compile the necessary
data to complete the application and initiate an
inquiry. An inquiry will then be carried out into the
insured member’s rights, based on contribution
periods in the state to which the institution belongs.
The next step consists of what is called the
interconnection phase: compilation of a list of the
appropriate institutions in the states where the
insured says he/she has worked.
The definition of rights is based on the exchange
of a significant number of data. In accordance with
new Regulations (883/2004 - 987/2009), paper is no
longer a valid support for such exchanges, and
electronic data exchange is in the process of
becoming the only recognized medium. Structured
electronic documents (SED) have been introduced
for this purpose and architecture is being created to
provide a basis for the electronic exchange of social
security information (EESSI) (European
Commission, 2012). The implementation of this new
scenario in all the social security institutions of the
European Union means solving a series of
interoperability problems which we will use as an
example of the application of the guidelines.
The Model for Social Security Interoperability
enables to specify and to implement the different
interoperability requirements involved in this case.
In Layer 1, interoperability facilitators play a key
role by providing the basic mechanism to exchange
and transform data formatted in XML. They consist
of: (i) SOAP Web services to implement
interoperability with institutions, (ii) a central
Integration Broker platform that interacts with the
institutions and provides message translation
services.
Using External services to obtain information
about the civil status and living situation of the
individuals is currently under discussion in the
EESSI working group.
Unlike national scenarios, using Basic Registries
and Shared Data Services is limited to a Master
Directory of institution’s contact data. Basically, it
consists of a centrally maintained data base (with a
coordination hub in Brussels) which issues local
replicas at the points of access. In this way all the
institutions share the information used to address
messages. The transfer of messages is guaranteed
through a Master Directory which contains the codes
of all the institutions.
Layer 2 (Secure Data Exchange) also plays a key
role by providing the means to comply with data
protection and data security regulations when
exchanging data between different countries. All
information messages are signed and encrypted
using Digital Certificates delivered by EESSI. In
addition, the networking is based on s-Testa, which
is a private European Union network.
Layer 3 (Aggregate public services) in the EESSI
consists of the implementation of the business
processes described above, which carry out the
administrative operations starting with a benefit
claim and finishing with the benefit delivery or
refusal decision. However, institutions with a lower
development level may use a common system
(called “WeblC”), which consists of a presentation
layer and a data base already installed at the point of
access and provided by the European Commission as
an additional component of EESSI.
Summarizing, the proposed model for
Interoperability in Social Security matches with this
ProposalofanInteroperabilityModelforSocialSecurityInformationSystems
457