Secure E-Government Framework: Design and Implementation

this paper suggests a security framework for egovernment systems. The proposed system is a dynamic web application, represents a secure e-government model, provides the three main security services (authentication, confidentiality and integrity) and could be applied as a security reference model for e-government applications. National ID and password authentication scheme has been used in authenticating system's users. Advanced Encryption Standard (AES) have been used in encrypting citizen information and keyed massage authentication code algorithm (HMAC-MD5) has been used to guarantee the integrity of message contents and to authenticate the source of message. (RSA) algorithm has been used in (Digital Envelope) scheme for managing and distributing AES's key. RSA's private key, in turn, is encrypted by Triple Data Encryption Standard (3DES) using admin provided key .Three informational services were presented as e-services represented by (civil information system, passport issuance system and driving license issuance system). To prevent the backend sub-systems from attack, front-end sub-system (portal) was developed as a middleware system. Keywords—e-government, security framework, integrity, authentication, confidentiality, Portal, web application.