ORDER OF THE MINISTER OF DIGITAL DEVELOPMENT, INNOVATIONS AND AEROSPACE INDUSTRY OF THE REPUBLIC OF KAZAKHSTAN

of April 29, 2020 No. 165/Tax Code

About modification of the order of the acting minister of information and communications of the Republic of Kazakhstan of March 29, 2018 No. 123 "About approval of Rules of integration of objects of informatization of "the electronic government"

I ORDER:

1. Bring in the order of the acting minister of information and communications of the Republic of Kazakhstan of March 29, 2018 No. 123 "About approval of Rules of integration of objects of informatization of "the electronic government" (it is registered in the Register of state registration of regulatory legal acts for No. 16777, it is published on April 24, 2018 in reference control bank of regulatory legal acts of the Republic of Kazakhstan) the following change:

The rules of integration of objects of informatization of "the electronic government" approved by the specified order to be reworded as follows according to appendix to this order.

2. To provide to committee of the state services of the Ministry of digital development, innovations and aerospace industry of the Republic of Kazakhstan in the established legislative procedure:

1) state registration of this order in the Ministry of Justice of the Republic of Kazakhstan;

2) placement of this order on Internet resource of the Ministry of digital development, innovations and the aerospace industry of the Republic of Kazakhstan;

3) within ten working days after state registration of this order submission to Legal department of the Ministry of digital development, innovations and the aerospace industry of the Republic of Kazakhstan of data on execution of the actions provided by subitems 1) and 2) of this Item.

3. To impose control of execution of this order on the supervising vice-minister of digital development, innovations and the aerospace industry of the Republic of Kazakhstan.

4. This order becomes effective after ten calendar days after day of its first official publication.

Appendix

to the Order of the Minister of digital development, innovations and the aerospace industry of the Republic of Kazakhstan of April 29, 2020 No. 165/Tax Code

Approved by the Order of the acting minister of information and communications of the Republic of Kazakhstan of March 29, 2018 No. 123

Rules of integration of objects of informatization of "the electronic government"

Chapter 1. General provisions

1. These rules of integration of objects of informatization of "the electronic government" (further - Rules) are developed according to the subitem 13) of article 7 of the Law of the Republic of Kazakhstan of November 24, 2015 "About informatization" (further - the Law) and determine procedure for integration of objects of informatization of "the electronic government".

2. In these rules the following basic concepts are used:

1) objects of informatization - electronic information resources, the software, Internet resource and information and communication infrastructure;

2) service for provision of open data - data transmission method unilaterally between objects of informatization;

3) authorized body in the field of informatization (further - authorized body) - the central executive body performing management and cross-industry coordination in the field of informatization and "the electronic government";

4) information system (further - IS) - the organizational arranged set of the information and communication technologies, service personnel and technical documentation realizing certain technological actions by means of information exchange and intended for the solution of specific functional objectives;

5) business data of object of informatization - these interactions of the owner and initiator of integration service which are part of messages of the ShEP, VShEP format as the block which is not checked on the party of ShEP, VShEP;

6) integration of objects of informatization - action for the organization and ensuring information exchange between objects of informatization based on the standard protocols of data transmission used in the Republic of Kazakhstan;

7) safety of web services (WebServiceSecurity) (further - WSSecurity) - the standard of application of functions of safety in case of exchange of messages between the SOAP web services. In case of use of style of architecture of the software for the distributed systems (REST) safety of service is ensured through HTTPs security measures, and application of authentication of users;

8) Deffi-Hellman's protocol - the cryptographic protocol allowing two and more parties to exchange in advance approved general confidential key, using couple of public and private keys in communication channel, unprotected from listening;

9) public Peer IP address - the unique IP address of the device naming the VPN tunnel and used on the Internet on the party of the initiator and/or owner of object of informatization;

10) the initiator of integration service - the owner of object of informatization initiating request for provision of integration service;

11) integration service - method of information exchange of objects of informatization;

12) the owner of integration service (further - the owner of service) - the owner or the owner of object of informatization providing integration service;

13) extensible markup language (eXtensible Markup Language) (further - XML) - the extensible markup language used for storage and data transmission in the structured and machine-readable format;

14) the transport signature - the digital signature used for ensuring integrity and authorship of the transferred messages in case of information exchange of IS using the WSSecurity specification;

15) certification center - the legal entity certifying compliance of open key of the digital signature to the closed key of the digital signature, and also confirming reliability of the registration certificate;

16) the client connector - the software giving to the initiator of object of informatization opportunity of generation of point of connection to the integration service placed on ShEP, VShEP with support of the ShEP, VShEP formats;

17) API with open right of access (OpenAPI) - the API exposed in open entry to the Internet, which is not requiring approval or permission of the Owner of electronic information resource for implementation of information exchange;

18) the magazine of logging - the files containing information on system operation used for monitoring of its work and identification of the reasons in case of failure;

19) the single transport circle of state bodies (further - UTS of GO) - the network of telecommunications entering information and communication infrastructure of "the electronic government" and intended for ensuring interaction local (except for the local networks having Internet access), departmental and corporate networks of telecommunications of state bodies, their subordinated organizations and local government bodies, and also other subjects of informatization determined by authorized body with observance of required level of information security;

20) the simple protocol of access to objects (SimpleObjectAccessProtocol) (further - SOAP) - the protocol based on XML for transmission of messages in case of integration of IS;

21) the register of services - the list registered in lock of "the electronic government" and external lock of "the electronic government" of services, with the description of service;

22) service connector - the software allowing the owner of object of informatization to create and place integration services on ShEP;

23) the electronic message - the electronic document in the XML, JSON format intended for exchange of information between objects of informatization;

24) the digital signature (further - the EDS) - set of electronic digital symbols created by means of the digital signature and confirming reliability of the electronic document, its accessory and invariance of content;

25) the operator of information and communication infrastructure of "the electronic government" (further - the operator) - the legal entity determined by the Government of the Republic of Kazakhstan to which ensuring functioning of the information and communication infrastructure of "the electronic government" assigned to it is assigned;

26) the service integrator of "the electronic government" (further - the service integrator) - the legal entity determined by the Government of the Republic of Kazakhstan to which functions on methodological ensuring development of architecture of "the electronic government" and standard architecture of "electronic akimat", and also other functions provided by the Law are assigned;

27) lock of "the electronic government" (further - ShEP) - IS intended for integration of objects of informatization of "the electronic government" with other objects of informatization of "the electronic government";

28) objects of informatization of "the electronic government" - the state electronic information resources, the software of state bodies, the Internet - resource of state body, infrastructure facilities of "the electronic government", including the service software product, the software and information systems of other persons intended for forming of the state electronic information resources within implementation of the state functions and rendering the state services;

29) external lock of "the electronic government" (further - VShEP) - the lock subsystem of "the electronic government" intended for ensuring interaction of the information systems which are in the single transport circle of state bodies with the information systems which are out of the single transport circle of state bodies;

30) payment gateway of "the electronic government" (further - PShEP) - IS automating processes of information transfer about carrying out payments within rendering the paid services rendered electronically;

31) Application programming interface (further - API) - the interface of programming of appendices, set of the ready programs provided by service for information exchange between objects of informatization;

32) encapsulation of AH (AuthenticationHeader) - encapsulation of the authenticating heading which allows to authenticate the next node in the VPN tunnel and to provide integrity of transmitted data without enciphering. Value in the field of the protocol of the heading IP - equal UDP to port 51;

33) ESP (Encapsulation Security Pay load) - encapsulation of the protected data which allows to cipher all shot transmitted via the VPN channel including useful load and IP headings of source and appointment.

34) Hyper Text Transfer Protocol (further - HTTP) - the protocol of applied level of data transmission initially - in the form of hypertext documents in HTML format, used for transfer of any data;

35) IP (Internet Protocol) - network model of data transmission, presented in digital form;

36) Java Script Object Notation (further - JSON) - the text format of data exchange based on JavaScript;

37) Representational State Transfer (further - REST) - style of architecture of the software for interaction of components of the distributed appendix in network. REST represents the approved set of the restrictions considered when designing of the distributed systems or interactions of services, using standards, such as HTTP, URL, JSON and XML;

38) the SSL certificate (Secure Sockets Layer) - the registration certificate, held for use Internet resource or IS for providing the procedure of authentication;

39) TCP (Transmission Control Protocol) - one of the main protocols of data transmission of the Internet intended for management of data transmission;

40) UDP (User Datagram Protocol) - the protocol of the user datagrams, one of crucial elements of TCP/IP, set of network protocols for the Internet;

41) URL (Uniform Resource Locator) - the uniform locator (location determinant) of resource, specifies the address of service of object of informatization;

42) Virtual Private Network (further - VPN) - virtual private network for exchange of information of two nodes;

3. Are not subject to integration by means of ShEP, VShEP:

1) the services provided by certification centers;

2) objects of informatization which contain the data constituting the state secrets of the Republic of Kazakhstan and office information of limited distribution;

3) the objects of informatization placed on information and communication platform of "the electronic government" and intended for forming of single space of data for the purposes of provisions of analytical information on activities of the Government of the Republic of Kazakhstan;

4) services for provision of open data by means of OpenAPI, API, with use of the XML, JSON formats and the HTTP and HTTPS protocols, by means of architectural REST style, including the Internet portals of open data, open budgets and open regulatory legal acts.

4. Non-state IS is integrated with IS of state body only through VShEP put into commercial operation.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info