www.issa.int/ict2015 promoting excellence in social security interoperability frameworks and data...

www.issa.int/ICT2015

Promoting excellencein social security

www.issa.int

Interoperability frameworks and data standardization:Sharing processes in the French social security

system

Elisabeth HUMBERT-BOTTINChief Executive Officer

Modernization of Social Statements, France

14th International Conference onInformation and Communication Technology in Social Security

2 – 4 September 2015 | Astana, Kazakhstan


www.issa.int21/04/23 2

Outline

The Public Interest Group on Modernisation of Social Statements (GIP – MDS)

Sharing … is Exchanging

Interoperability needs and response / solution

Data standardisation needs : a radical transformation

Management needs : working together


www.issa.int

The Public Interest Group on Modernisation of Social Statements (GIP MDS)

21/04/23 3

Public Interest Group (GIP) for the Modernisation of Social Statements (MDS)

The GIP-MDS provides employers and accounting support partners an online and secured mechanism to submit social declarations (site: net-entreprises.fr).

• Mandatory social schemes: Acoss, Agirc-Arrco, Cnav, Pôle Emploi, Cnamts, MSA, RSI…

• Mutuals and provident funds: CTIP, FNMF, FFSA

• Social partners: CFDT, CGT, CGTFO, Medef, CGPME, UPA, Syntec informatique, Conseil supérieur de l’Ordre

The mission

Stakeholders Key figures

More than 3 million enterprises subscribed to net-entreprises

30 million statements in 2014

60 people in the team

98% of satisfied web-users


www.issa.int

Sharing … is exchanging

The Public Interest Group (GIP) is, by definition, a vector for sharing

Social security context: necessarily ICT-based: We deal with information. Each one builds its own Information System. Information Systems have to be, not only open, but truly

interoperating.

21/04/23 4


www.issa.int

Interops: a major Interoperability protocol for a secure exchange

21/04/23 5

Institution A Institution B

authentication

response

Implementation standard Implementation standardagreement


www.issa.int

A powerful protocol

Based on standards

3 variants … and (soon) 4 Interops A Interops P Interops S And soon, Interops R

21/04/23 6

Functionality Standard

Message transfer HTTP

Message exchange SOAP 1.2

Protocol for exchanging identification/authentication credentials SAML 1.1 and 2.0

Message routing between corresponding Web Services WS Addressing 1.0

Transferring attached documents (data packages) WS XOP/MTOM 1.0

Segmentation of large attached data packages WS-ReliableMessaging 1.1

Basic infrastructure services for authentication and securing exchanges SSL/TLS


www.issa.int

Interops supports a large number of exchanges

Used by more than 100 exchange procedures: Rights to benefits - retirement / Family. Service Providers access to their payment Cross-validation of granted rights. Permanent training account payments and follow-up, etc.

21/04/23 7

Client application

Targeted ServiceProxy

Reverse Proxy

Client institution

Provider institution

1. Client application performs a SOAP request

2. The request is enriched with Identif. credentials and sent to the provider institution through a secure channel

3. Request sent to the targeted service

4. The response is sent to the client application through the secure channel.


www.issa.int

Implementation facilitated by the « token suite »

21/04/23 8

Token Suite

Token server V2

(Jeton Net-

entreprises.fr)

Token server V3(Token InterOPS)

Gateway InterOPS-A

Provider

Ttr

ace

Man

age

r

Administration User Interface(Shell / Web)

Su

per

visi

on

In

terf

aces

(S

MT

P,S

NM

P)

“Token suite” Administrator

Gateway InterOPS-A

Client

HTTP(S)/SOAP

Assertion Generation

Service

Dis

co

very

S

ervi

ce

Application / Portal

Au

then

tic

atio

n S

erv

ice


www.issa.int

s

DSN (Nominative payroll statement): a radical transformation

21/04/23 9

ENTREPRISE

Avant net-entreprises

DADS-U

TDS

Acoss CNAM CNAV Pôle emploi

DARES

Organismes

…

Normes, périodicités, messages et stockages multiples

Aujourd’hui avec net-entreprises

ENTREPRISE

Organismes

Plusieurs normes, périodicités, messages et stockages

An employer is identified once and performs only one operation

Now, with the DSN

EMPLOYERS

DSN System

Institutions

One monthly flow

A unique folder for each Employer

Only one message

Before net-enterprises Now, with net-enterprises

EMPLOYERSEMPLOYERS

Multiple standards, periodicities, messages and storing

Multiple standards, periodicities, messages and storing

InstitutionsInstitution

s


www.issa.int

Following a necessary standardisation

21/04/23 10

2012 2013 2014-2015 2016-2017

-35% of requested data on the replacing statements-35% of requested data on the replacing statements

DSN phase 1

DSN phase 1

DSN phase 2

DSN phase 2

DSN phase 3

DSN phase 3

4 procedures replaced




15 to 30 procedures

replaced

15 to 30 procedures

replaced

Declarations /

statements

without DSN

Declarations /

statements

without DSN

-75% of requested data

-75% of requested data

Quantity of data items

-70% of requested data on the replacing statements-70% of requested data on the replacing statements

Total: 800 data items100 data items

instead of 135 for the 4 replaced

procedures

150 data items instead of 250 for

the 7 replaced procedures

200 data items instead of 800 total requested

data items

Plus other 20 procedures …With the same data !!!

Plus other 20 procedures …With the same data !!!


www.issa.int

Subsequent development of a message library

A list of messages to be defined – some examples: Information about employment status. Access to an employee’s (work) contracts. Summarising earnings from the preceding months. Report of successive employers who have employed the

same person.

Organizing information sharing: Potentially hundred of interested organizations.

21/04/23 11


www.issa.int

How institutions use the DSN Which are the processes based on payroll data ?What involved data and their definition ? Comparison with data from DSN ?What new pace?

21/04/23 12

Step 1: Analyse the need of the different data Step 2: Analyse the sources of the needed data items

Is the different data item needed ?

If yes, what’s its source ?

NOYES

NOYES

NOYES

NO

NOYES

NOYES

NOYES

NOYES

NOYES NOYES NOYES

NOYESNOYES

Are there alternative rules to avoid or transform the data

item?

Is the data item needed for the main business process

triggered by the statement ?

Does this implies changing

regulations ?

For most of the cases of the process ?

Needed for other business (control,

statistics, …) ?

Is there any alternative solution ?

Does this implies a feasible change in the process?

When

to previous

questions

Is the data item in the payroll ?

Is the data item in the SIRH?

Is the data item in another source?

Other data collection in the institution (re-

engineering) ?

Data collection in other

institutions?Order method

Order method

Regulatory Processes


www.issa.int

Major challenges depending on a crucial issue

Independently from the technologiesIndependently from the operational added value of these projects for all stakeholdersIndependently from the resources allocated.Independently from the agreed delays (frequently short).

The main aspect to leverage is the capacity of actors (more and more numerous) to work together.

21/04/23 13


www.issa.int21/04/23 14

Q&A

www.issa.int/ict2015 promoting excellence in social security interoperability frameworks and data...

Documents