X-Road is an open source data exchange layer solution that enables organizations to exchange information over the Internet. X-Road is a centrally managed distributed data exchange layer between information systems that provides a standardized and secure way to produce and consume services. X-Road ensures confidentiality, integrity and interoperability between data exchange parties. X-Road is used nationwide in the Estonian data exchange layer X-tee and in the Suomi.fi Data Exchange Layer service in Finland. However, X-Road is not just for public sector organisations – all kinds of organisations regardless of size or type can join the national environments and exchange data with other member organisations. Two X-Road ecosystems can be joined together, federated. Members of the federated ecosystems can publish and consume services with each other as if they were members of the same ecosystem. Federation enables easy and secure cross-border data exchange between member states using X-Road. Nordic Institute for Interoperability Solutions (NIIS) is a non-profit association founded jointly by Finland and Estonia. NIIS is responsible for the development and management of the X-Road core. X-Road is released under the MIT open source license and is available free of charge for any individual or organization.

1. X-Road
–
The Open Source Data Exchange Layer
PETTERI KIVIMÄKI, CTO @pkivima
THE 2019 PLATFORM SUMMIT, STOCKHOLM, 22 OCTOBER 2019

2. Topics
u What is X-Road
u X-Road as Enabler for Cross-border Data Exchange
u NIIS as The X-Road Core Development Organization
u X-Road Development Model

3. What is X-Road

4. Point-to-Point – API Gateway – X-Road

5. X-Road Provides
u Organization level authentication
u Machine to machine authentication
u Standardized messaging model
u Non-repudiation and logging of messages
u Digital signatures with timestamps and eSeals
u Usage statistics
u Access rights management
u Address management and message routing
u Transport level encryption.

6. X-Road Architecture
Messages (SOAP)
CA
OCSP
Messages
(SOAP)
Addresses,
services
TimestampTimestamp
Central Services
Security Server
Central Server
Configuration
Proxy
Consumer
Security Server
Information
System
Certificates Certificates
Provider
Security Server
Information
System
TSA
Messages
(SOAP)
Trust Services
X-Road Core
Trust Services
Information System

7. What Is X-Road

8. What Is X-Road
u A centrally managed distributed data exchange layer for information
systems – an open source platform enabling a secure Internet-based data
exchange between information systems.
u All kind of organizations - public and private sector enterprises and
institutions - can connect their information systems to X-Road.
u X-Road employs a versatile security solution: authentication, multilevel
authorization, a high-level log processing system, digitally signed and time-
stamped data traffic.
u Distributed architecture and standardized messaging model make data
exchange between all the members of the X-Road ecosystem significantly
more efficient.

9. X-Road as Enabler
for Cross-border
Data Exchange

10. X-Road Federation
u Two X-Road ecosystems can be joined together, federated.
Federation is a one to one relationship between two ecosystems.
u Members of the federated ecosystems can publish and consume
services with each other as if they were members of the same
ecosystem.
u Federation is not only about technology – administrative
and/or legal agreements are also needed between:
u X-Road operators of the federated ecosystems
u Member organisations that exchange data (data exchange parties)

11. X-Road Federation

12. Federation Case Studies
u Business registers of Estonia and Finland
u Tax boards
u Implementation of X-Road in Iceland
u Improving environment services in the greater Helsinki area
u More information available at:
u https://x-road.global/case-studies

13. NIIS as The X-Road
Core Development
Organization

14. Mission
To ensure the development and strategic management of the X-Road
and other cross-border components for eGovernment infrastructure.

15. NIIS Responsibilities
u Management, development, verification, and audit of the source code
u Administration of documentation
u Administration of business and technical requirements
u Conducting development
u Developing and implementing principles of licensing and distribution
u Providing second-line support for members
u International cooperation.

16. NIIS Governance Model
X-Road Operators
Development Teams
NIIS Members
X-Road Operators
NIIS Members General
Meeting
Advisory
Group
Working Group
Development
Teams
X-Road
Community
NIIS Members
• Ministry of Economic Affairs and Communications (Estonia)
• Ministry of Finance (Finland)
X-Road Operators
• Information Systems Authority (Estonia)
• Population Register Centre (Finland)
Partners
• Iceland
• Faroe Islands

17. X-Road
Development
Model

18. Development Model
NIIS Members
X-Road Community
NIIS Members
X-Road Community
Enhancement request
Rejected request / item
New release
Evaluate
Request Flow
Develop
Sprints 1-n
Publish
Releases x.y.z
Prioritize
Product Backlog
Product Roadmap
Working Group
YesNo
Is aligned with?
Product Roadmap is a plan that outlines the flow of new
features needed to satisfy the needs of NIIS members. The
roadmap helps to reach a consensus about future
developments and it provides a framework to help plan
and coordinate upcoming releases. The X-Road roadmap
takes into consideration scoped functionality and X-Road
production compatibility.
Advisory Group
Business feature request
Yes
No
Approve to Product Roadmap?
Product Backlog is a detailed plan that outlines the flow
of technical items that are required to implement the
features in the Product Roadmap. Each new feature in the
Product Roadmap is usually broken into multiple technical
items in the Product Backlog.
Product Backlog Item
Business feature request is
about adding a new feature to X-
Road core.
Enhancement request is about
improving existing functionality.
https://github.com/nordic-institute/X-Road-development/

19. Development Model
Phases
u Evaluate – collect new feature and
enhancement requests and select the
best ones for development.
u Prioritize – maintain and prioritize
product backlog.
u Develop – agile development of
features requested by NIIS members.
u Publish – Publish and distribute new
releases.
Interest Groups
u NIIS – owns the model and is
responsible for executing it.
u NIIS Members – submit
enhancement requests, submit code
contributions, prioritize backlog, use
the software.
u X-Road Community - submit
enhancement requests, submit code
contributions, use the software.

20. Roadmap 2019
2019 2020
v6.20.0 v6.21.0 v6.22.0
2018
January April October
Ubuntu 18.04 LTS support REST support v1 REST support v2
Improved support for cloud
platforms (Security Server)
v7 research and planning
kick off
+ minor improvements and bug fixes
Security Server Owner
Change
Streamlined
Onboarding Process
Standalone Security
Server
ST IV support
Enhanced time-stamping

21. “
”
X-Road is a modular, easy-to-use, cloud native, secure data
exchange solution.
X-Road is thriving as a core digital infrastructure component
in the EU countries and is a worldwide known technology
solution.
X-ROAD VISION 2022

22. WWW.NIIS.ORG