Government Secure Intranet
Encyclopedia
Government Secure intranet (GSi) is a UK government wide area network
, whose main purpose is to enable connected organisations to communicate electronically and securely at low protective marking levels
.
(P2P) basis between similarly accredited
networks. The network itself is open within the context of its accreditation - it imposes no restrictions on traffic types carried across the network, restrictions and policy control is left to the connecting departments. Email traffic in and out of the network is filtered by an external provider.
, and was turned into practical reality by the Internet Special Products group of Cable & Wireless
(then known as Mercury Communications
) at their Brentford premises. GSi development started late 1996, and can be roughly dated by checking the registration date of its first domain name, 'gsi.net', registered 30 May 1997. It went formally live several months later (according to the CCTA this was February 1998).
The main drivers behind the development of GSi was the plethora of inter-agency connections in UK government which made managing security and connectivity budgets problematic. GSi not only provided better oversight, it also normalised connectivity. GSi was designed as an accredited, dual link connected TCP/IP backbone, it imposed no restrictions on what type of TCP/IP traffic it carried as this was considered a policy decision for each connecting department.
The design of GSi was strictly standards based, partly supporting the then developing eGIF interoperability standards. This was a direct consequence of the two key technical people driving the project, one from Cable & Wireless
, one from the UK government in the form of the then existing CCTA.
GSi uses SMTP as mail transport protocol, and the conversion from the then prevalent X.400
email facilities to SMTP proved for many departments an improvement in reliability and speed. In the case of X.400, this conversion also cut email costs substantially as X.400 message conversions were still chargeable even if the conversion failed due to message size. In some cases, the ROI
of such an email conversion was as short as two months.
The creation of GSi handed Cable & Wireless
a monopoly on UK government data connectivity. GSi can be considered one of the more successful UK government IT projects from the point-of-view of take up - even when still in pilot phase, demand increased to a point where service windows had to be imposed to continue building the platform to full strength.
The development of GSi is also the root of the creation of the CESG Certified Listed Adviser Scheme, CLAS. During the build of GSi, the need for accredited advisers became clear as advice on connectivity invariably involved discussing government confidential matters. CESG
eventually responded with the above CLAS scheme, ironically locking out the original architect, builder and manager of the network as he was not a British national.
won this contract from Cable & Wireless
in August 2003. Cable & Wireless
then bought Energis
in 2005, thus regaining control over the platform.
Cable and Wireless Worldwide won the GSI Convergence Framework contract in 2011.
Local authorities with a GCSX connection can now use a GCSX email account to exchange sensitive data, including DWP benefits data, patient identifiable data, with health sector staff who have a NHS.net email address, e.g. PCT staff and GPs.
As both GCSX and the Police National Network (PNN) are both connected to the wider Government Secure Intranet (GSi), data can be transferred securely between local authorities and the Police.
GC Mail can be used now to replace the existing less efficient and less secure methods of exchanging data between local authorities and the Police. Local authorities that deliver Housing and Council Tax benefits are taking part in the e-Transfers programme, which is e-enabling the process for delivery of Local Authority Input Documents (LAIDs) and Local Authority Claim Information (LACIs).
Compared with version 3.2 the main Code of Connection version 4.1 areas of are:
• Mobile working - full implementation of compliant service
• Firewall specification (EAL 4)
• Execution of unauthorised software
• Requirement for IT Healthchecks (CHECK / CREST / TigerScheme)
• Labelling e-mails with protective markings.
Wide area network
A wide area network is a telecommunication network that covers a broad area . Business and government entities utilize WANs to relay data among employees, clients, buyers, and suppliers from various geographical locations...
, whose main purpose is to enable connected organisations to communicate electronically and securely at low protective marking levels
Classified information in the United Kingdom
Classified information in the United Kingdom, now called Protectively Marked Information, is a system used to protect information from intentional or inadvertent release to unauthorised readers. The system is organised by the Cabinet Office and is implemented throughout central and local government...
.
Use of GSi
Many UK government organisations use the GSi to transfer files on a peer-to-peerPeer-to-peer
Peer-to-peer computing or networking is a distributed application architecture that partitions tasks or workloads among peers. Peers are equally privileged, equipotent participants in the application...
(P2P) basis between similarly accredited
Accreditation
Accreditation is a process in which certification of competency, authority, or credibility is presented.Organizations that issue credentials or certify third parties against official standards are themselves formally accredited by accreditation bodies ; hence they are sometimes known as "accredited...
networks. The network itself is open within the context of its accreditation - it imposes no restrictions on traffic types carried across the network, restrictions and policy control is left to the connecting departments. Email traffic in and out of the network is filtered by an external provider.
Origin
The concept of GSi was defined by the Cabinet OfficeCabinet Office
The Cabinet Office is a department of the Government of the United Kingdom responsible for supporting the Prime Minister and Cabinet of the United Kingdom....
, and was turned into practical reality by the Internet Special Products group of Cable & Wireless
Cable & Wireless
Cable & Wireless Worldwide PLC is a global telecommunications company headquartered in Bracknell, United Kingdom. Cable & Wireless specialises in providing communication networks and services to large corporates, governments, carrier customers and resellers...
(then known as Mercury Communications
Mercury Communications
Mercury Communications was a national telephone company in the United Kingdom. The company was formed in 1981 as a subsidiary of Cable & Wireless to challenge the monopoly of British Telecom which was privatised in 1984...
) at their Brentford premises. GSi development started late 1996, and can be roughly dated by checking the registration date of its first domain name, 'gsi.net', registered 30 May 1997. It went formally live several months later (according to the CCTA this was February 1998).
The main drivers behind the development of GSi was the plethora of inter-agency connections in UK government which made managing security and connectivity budgets problematic. GSi not only provided better oversight, it also normalised connectivity. GSi was designed as an accredited, dual link connected TCP/IP backbone, it imposed no restrictions on what type of TCP/IP traffic it carried as this was considered a policy decision for each connecting department.
The design of GSi was strictly standards based, partly supporting the then developing eGIF interoperability standards. This was a direct consequence of the two key technical people driving the project, one from Cable & Wireless
Cable & Wireless
Cable & Wireless Worldwide PLC is a global telecommunications company headquartered in Bracknell, United Kingdom. Cable & Wireless specialises in providing communication networks and services to large corporates, governments, carrier customers and resellers...
, one from the UK government in the form of the then existing CCTA.
GSi uses SMTP as mail transport protocol, and the conversion from the then prevalent X.400
X.400
X.400 is a suite of ITU-T Recommendations that define standards for Data Communication Networks for Message Handling Systems — more commonly known as "email"....
email facilities to SMTP proved for many departments an improvement in reliability and speed. In the case of X.400, this conversion also cut email costs substantially as X.400 message conversions were still chargeable even if the conversion failed due to message size. In some cases, the ROI
Return on investment
Return on investment is one way of considering profits in relation to capital invested. Return on assets , return on net assets , return on capital and return on invested capital are similar measures with variations on how “investment” is defined.Marketing not only influences net profits but also...
of such an email conversion was as short as two months.
The creation of GSi handed Cable & Wireless
Cable & Wireless
Cable & Wireless Worldwide PLC is a global telecommunications company headquartered in Bracknell, United Kingdom. Cable & Wireless specialises in providing communication networks and services to large corporates, governments, carrier customers and resellers...
a monopoly on UK government data connectivity. GSi can be considered one of the more successful UK government IT projects from the point-of-view of take up - even when still in pilot phase, demand increased to a point where service windows had to be imposed to continue building the platform to full strength.
The development of GSi is also the root of the creation of the CESG Certified Listed Adviser Scheme, CLAS. During the build of GSi, the need for accredited advisers became clear as advice on connectivity invariably involved discussing government confidential matters. CESG
Government Communications Headquarters
The Government Communications Headquarters is a British intelligence agency responsible for providing signals intelligence and information assurance to the UK government and armed forces...
eventually responded with the above CLAS scheme, ironically locking out the original architect, builder and manager of the network as he was not a British national.
GSi operations contract
GSi is operated on a five year renewable contract basis. EnergisEnergis
Energis Communications Limited, briefly Telecom Electric, or more usually just Energis was a 'technology driven communications company' based in the UK and Ireland...
won this contract from Cable & Wireless
Cable & Wireless
Cable & Wireless Worldwide PLC is a global telecommunications company headquartered in Bracknell, United Kingdom. Cable & Wireless specialises in providing communication networks and services to large corporates, governments, carrier customers and resellers...
in August 2003. Cable & Wireless
Cable & Wireless
Cable & Wireless Worldwide PLC is a global telecommunications company headquartered in Bracknell, United Kingdom. Cable & Wireless specialises in providing communication networks and services to large corporates, governments, carrier customers and resellers...
then bought Energis
Energis
Energis Communications Limited, briefly Telecom Electric, or more usually just Energis was a 'technology driven communications company' based in the UK and Ireland...
in 2005, thus regaining control over the platform.
Cable and Wireless Worldwide won the GSI Convergence Framework contract in 2011.
Recent developments
Government Connect has now gone live across Local Authorities in England and Wales. Government Connect is a pan-government programme providing an accredited and secure network between central government and every local authority in England and Wales and allows exchange of RESTRICTED information between authorities. The GCSX network is part of the wider GSi and provides connectivity to nearly all central departments.Local authorities with a GCSX connection can now use a GCSX email account to exchange sensitive data, including DWP benefits data, patient identifiable data, with health sector staff who have a NHS.net email address, e.g. PCT staff and GPs.
As both GCSX and the Police National Network (PNN) are both connected to the wider Government Secure Intranet (GSi), data can be transferred securely between local authorities and the Police.
GC Mail can be used now to replace the existing less efficient and less secure methods of exchanging data between local authorities and the Police. Local authorities that deliver Housing and Council Tax benefits are taking part in the e-Transfers programme, which is e-enabling the process for delivery of Local Authority Input Documents (LAIDs) and Local Authority Claim Information (LACIs).
Next steps
The next significant step for local authorities will be the introduction of the new Code of Connection version 4.1 for compliance in 2010.Compared with version 3.2 the main Code of Connection version 4.1 areas of are:
• Mobile working - full implementation of compliant service
• Firewall specification (EAL 4)
• Execution of unauthorised software
• Requirement for IT Healthchecks (CHECK / CREST / TigerScheme)
• Labelling e-mails with protective markings.