Building a Secure and Future-Proof Authentication System to Revolutionize Access to Government Services

From Idea to Reality

The MyGov.be project represents a significant step in the digital transformation of the Belgian government. The goal of this app is to provide citizens with a central platform where they can easily and securely access various government services. With the introduction of the MyGov.be app, the Belgian government aims to simplify and secure access to government services. Additionally, the app is designed to meet future requirements of the European wallet framework.

A crucial component of the MyGov.be app is the authentication system, which must meet strict standards of security and reliability. IdentIT played a central role in this, developing a robust and future-proof solution that complies with all security and compliance requirements.

The Role of IdentIT

IdentIT played a pivotal role in developing the back-end authentication server for the MyGov.be app. Our expertise in Identity and Access Management (IAM) was leveraged to create a safe and reliable authentication solution. The project team from IdentIT, consisting of Glenn and Maxim, was responsible for its implementation.

Moreover, the collaboration with the Cronos team was essential to the project’s success. We worked closely to tackle complex technical challenges and deliver a powerful and secure solution for user authentication. We not only anticipated current requirements but also future regulations and technological developments.

Technical Challenges and Solutions

Staying Ahead of European Regulations

One of the biggest challenges within the MyGov.be project was anticipating future European regulations, specifically the wallet framework. Although the technical specifications are not fully developed, we had to work with limited information and make many assumptions. By closely collaborating with experts and anticipating likely requirements, we developed a flexible and future-proof authentication system that will seamlessly align with the European framework once fully rolled out.

Ensuring Mobile Security

Ensuring the security of the MyGov.be app on both Android and iOS was also a significant challenge. Each platform has its own unique characteristics and limitations, making it difficult to develop a uniform and secure solution. For example, on iOS, we encountered limitations in the Swift framework, which offers little room for adjustments in encryption. The allowed standards differed from those available on Android. Since hardware-based encryption is used, leveraging the security components physically built into the devices, we had to find a mechanism to support both platforms in the authentication process. This required the implementation of advanced cryptographic algorithms and ensured a secure and consistent user experience on both Android and iOS.

Container Orchestration and Smart Scalability

We also focused on implementing container orchestration using OpenShift. This container-native approach provided flexibility, scalability, and cost savings. By leveraging OpenShift, we can automatically scale the application during peak loads and reduce server capacity when demand decreases.

Moreover, this container-native approach simplifies the deployment of updates and new versions of the application. Thanks to the CI/CD pipelines set up by Maxim, we can quickly and reliably roll out new builds to different environments. This ensures a faster development and deployment cycle while maintaining the application’s stability and security. Additionally, the container orchestration provides a clear separation between different environments, making testing and debugging much more efficient.

Results of Two Years of Work

Robust, Secure, and Future-Proof

After two years of intensive efforts, the IdentIT team delivered an IAM solution that meets the highest standards of security and reliability. The system is robust and future-proof. To ensure the system’s reliability, we conducted extensive load testing, simulating scenarios with extreme numbers of users. This ensured that the app remains stable and fast even under maximum load.

Security was a top priority from day one. Every decision was weighed against the question of whether it would improve the system’s security. This resulted in a solution where security is deeply integrated. The fact that two independent penetration tests revealed no significant vulnerabilities testifies to the robustness of our security measures.

Feedback and Continuous Improvements

After the launch, we closely monitored user feedback to continuously implement improvements. During the public testing phase, testers thoroughly evaluated the app, providing valuable feedback to further refine the system. Although there has been less direct feedback on the IAM system since the official launch, we continue to proactively make improvements.

In the near future, updates are planned to further enhance the app’s user-friendliness. One of the key improvements will be the flexibility of login options, allowing users to more easily access the services offered by the MyGov.be app.

Collaboration and Lessons Learned

The Power of Seamless Collaboration

The close collaboration between IdentIT and the Cronos team was a crucial factor in the success of the MyGov.be project. This collaboration ensured efficient communication and smooth coordination between the various disciplines within the project. The direct communication line between the teams allowed for quick decision-making and immediate resolution of any issues. This ensured that the final solution seamlessly integrated with the other components of the MyGov.be app.

Personal Pride and Professional Growth

For Glenn and Maxim, the MyGov.be project was not only a professional challenge but also an opportunity for personal and professional growth. Maxim regards this project as the best he has worked on to date. The combination of new technologies, high expectations, and the need to often operate in uncharted territory made this an intensive and educational experience. Glenn emphasizes the unique experience of working on a mobile application and the challenges of new security mechanisms specific to mobile platforms.

Both team members see the MyGov.be project as a significant milestone in their careers, where they not only applied their existing knowledge but also significantly expanded it.

Vision for the Future and Impact

The Future of MyGov.be

The MyGov.be app stands at the beginning of a promising future, where further development and innovation are central. There is a clear vision to further integrate the app with European digital wallets, in line with the upcoming European wallet framework. This will enhance the interoperability between European systems and increase the accessibility of digital services for citizens across borders.

Societal Relevance

Although there was initial criticism of the concept of a new government app, MyGov.be offers a clear response to these concerns. The app is designed to consolidate fragmented digital government services and provide central access to various services. A key aspect of MyGov.be is the freedom of choice it offers citizens, allowing them to decide which services they wish to use. MyGov.be plays a crucial role in improving the accessibility and trust in digital government services.

Conclusion

More Than an App

The development of the MyGov.be app marks an important milestone in the digitalization of government services in Belgium. A robust and future-proof platform has been created that meets the highest standards of security and reliability. The strength of the MyGov.be app lies in its flexibility and scalability, and the focus on continuous improvement ensures that the app will continue to evolve to better meet the needs of citizens.

MyGov.be is more than just an app; it is a crucial government tool that will significantly improve how citizens and the government interact. This project is clear evidence of what can be achieved when technical expertise, innovation, and collaboration come together. And we are proud of that.