Australian Tax Office
Tax reform
In June 2000, the Australian Taxation Office completed and deployed a PKI designed and tailored to secure the electronic submission of Business Activity Statements (BAS). Several of Castelain's team members worked with the ATO in the successful establishment of this PKI, which was the first fully accredited Gatekeeper PKI in Australia.
The ATO PKI is used to secure the electronic lodgement of activity statements and other transactions. Without this system in place the BAS and therefore the Goods and Services Tax (GST) would have been more costly to administer and would have gained less acceptance by the business community.
Castelain staff were involved at numerous levels in the implementation of the ATO PKI:
- Business and technical requirements capture, analysis and refinement.
- System architecture definition and conceptualisation via Use Case models, component models, deployment models and other static and behavioural views.
- Supplying product (hardware and software) specifications for procurement purposes by the likes of EDS.
- Design of software components to bind the commercial products into the overall solution and to help satisfy the special needs of the ATO PKI.
- Design and specification of interfaces to other subsystems such as the Help Desk.
- Off-site software construction in the C++ language.
- Writing test strategy and protocol documents through numerous types of testing: unit, integration, system, stress and acceptance.
- Assistance in deployment and testing of the solution at ATO's site in Canberra working alongside EDS.
- Development and documentation of associated policy and procedures.
- In-depth assistance with the production of an extensive documentation suite that is the material by which the National Office for the Internet Economy (NOIE) evaluates the PKI against its Gatekeeper accreditation criteria.
The ATO PKI was delivered on schedule and continues to have one of the largest user bases in the world.
Developing the ATO PKI strategy direction
Castelain has been engaged on an ongoing basis with the ATO to undertake major initiatives with the ATO PKI system. This includes helping in developing the ATO PKI strategy direction for the next five years.
Other projects
Castelain staff have a long working relationship with the ATO dating back to 1995 when Castelain staff were engaged to design and deliver the security solution for the ATO's innovative e-tax product for submission of personal income tax returns. Since then Castelain has worked on a range of other ATO projects such as the ABR security system.
More recently, Castelain has been engaged by the ATO to:
- Project manage a "SWOT" team established to resolve a number of production problems in the ATO's distributed server environment.
- Provide design and technical expertise to the ATO's secure e-mail project including evaluation of a range of commercially available products and solutions.
- Undertake research into the possible uses and adoption of ABN-DSC certificates.
- Manage, write and co-ordinate and evaluate two separate RFTs relating to the ATO's identity management systems.
- Investigate the use of a multi-function token to act as an ID card, provide building and network access and hold PKI credentials for secure email.
