Okay, sure to start. So, hello. My name is Bianca. I'm going to talk about a project that
has something to do with OpenSource, and that's why I'm here for. The project is called
Gia Luce, which is translated to something like health department pilot. It's a software
that tries to help health departments. My name is Bianca, and I'm the product owner,
tech lead of this product. That's created an interesting consolation, because I work
for the 100's at the city of Frankfurt, so the health department office. But we get the
money from the health ministry of health in Germany, which gets the money from the health
ministry of Germany, which basically gets the money from the European Union. So, basically,
we have all the different levels of Paris involved, where it comes to money from who speaks
to whom and who does what. So, I work for the city of Frankfurt, but we developed the software
for the state of health in Germany. So, probably you ask, what do public, the most important
slide here is how to get governments to do open source software. I think there's three
ingredients that you need. You need someone that encourages the use of open source software
inside the government. So, basically, if you're working for a government, you can be that person
too. You need to have a good lawyer that has some experience for different topics like procurement,
contracts, licensing, and so on and so forth. And you also need to find software providers.
They want to build solutions that don't try to sell you ready-made products, because ready-made
products won't work for any government software, because governments are complicated.
So, you're probably going to ask, what do you public have departments do? So,
in Sherman, that's the Gesundheit's Amt, and you probably know us from the pandemic. We
had a people with effects machines. And, no, we do. Usually, our main goal is to protect and
prove the people's health. So, the usual topics that we have are infectious diseases,
like vaccinations, like hygiene, supervision. We also do, well, some probably
problematic things for people, which are sexual, transmission,
timisable diseases, HIV, with children of youth health. We do, for example,
the school entry examinations. When children go to school, we check for their health.
We also do a check-up for their dental status, and also do things like when civil
service officers want to start working for the government. They get a health report that they
are healthy enough to work for the government. These are things that public health departments
do at least in Germany, and very important things that we're doing are statistics. We need to
know based on data how good a better the health situation of the population is. So, basically,
a perfect task for digital tools and software, but yeah, you knew pandemic,
effects machines was a problem at least in Germany. So, we had seen, yeah, we don't really know
how many COVID cases we had in a pandemic, not in real time, but we had an opportunity to get
the funding from the European Union from the project next generation EU. And we already had
a corporation from the health department of Frankfurt, where I worked for an administrative
for socially fairs in Germany. So, that's good. We also have a lot of money, at least,
for a project like this, 23 million euros. It's basically tax-pires money. It's our common
money, so we try to spend it in a meaningful way. So, we say public money public code,
and create open source software, not alone from my side, because I also have a second product owner,
shout out to Tim, who is basically my backup for this project. We have
developers inside the city of Frankfurt, one data analyst, a team of technical people,
and we have, of course, support from a professional software provider up to 60 developers
from the company Chrome that is located in Bond, and we had 11 software development teams
to build the software itself. We also had some external security experts, that were sections,
experts, accessibility experts, so up to 130 people were involved in this project at this peak.
So, what were the problems and what we try to improve with open source software? Well,
the thing is that Germany is a really federated state, and you cannot tell
when you know how one municipality works, how the other one works even if it's close to the other.
So, basically all the municipalities can choose whatever software they want, and they can basically
choose what services they offer, because not all our mandatory, somehow optional, and so
you realize when you're trying to build a software for entire federal state, you're going to build
a software that is built on very different business modules and on very different configurations.
And you're also going to build a specialist application, not something like a office
office program, but the software that helps in, I don't know, the school entry
examination of a school child. So, which tries to calculate things like a score in a certain
rating. We also have a very high bar for the queue, the data protection, because we basically
always work with medical data. Not so dangerous things are personal data, but we usually work with
medical data, and we have a varying level of IT know-how in the various health departments. So,
basically our software should run in 25 different municipalities, and that's a little bit interesting
when you have probably one or two in two competent IT administrators, but not in all of them.
So, the software should be scalable and accessible, and we had a very tight timeline,
our software was developed in under one year, from start coding protection, and the interesting
thing is that we decided as to control this entire project from within the administration.
Usually, in Germany, it's the way like, okay, the government tries to build a software.
It doesn't know what to do. So, there comes consulting with agency one that makes the concept of
the software, then comes consulting agency two that does something with the concept,
and in the end, it doesn't really work. So, we tried to say, let's make it completed different.
We know what we want. We need someone who wants to implement this, and then we try to build
better software, and I think it turned out pretty well. So, these are challenges.
The concept is that we also thought about, okay, if Germany is such a federated state,
let's build a federated system, because changing systems is hard, but adapting software
to a working system is probably easy, we thought about. But we realized, yeah,
running the software is probably a little bit complicated. So, we thought about, okay, we
use a centralized cloud environment, but we built a decentralized infrastructure on the top of it.
We embraced all the new, new, mass things that we should use, because of security,
is zero trust, secured by design and privacy, but it's designed. I'm going to show you
afterwards how we achieved some of that, and we developed this in a insect approach,
and we provide all the software as software as a software to the different municipalities.
So, they don't have to care about maintaining, running and updating these things,
and they have just to use the software, the wages. So, what do we do? Yeah, we built a service
mesh, because we have varying number of business modules, and business modules with different
community from the duration in different health departments. For example, here's the health department
of Frankfurt, which has his school entry module, and has his inspection module on top of a
base module, all of their own key cloud instance, then we have some connection,
connecting software, and we also have some other organics, like probably the health department of
Weesbaden, which has probably a completely different configuration, because yeah, federalism.
Health department of instance, basically looks the way the shown in this deployment view,
we have different microservices or building blocks, we have a key cloud. As I am, we have
different business modules for the different various use cases, like inspection,
missile protection, like school entry and travel medicine, but we also have some core components for
I don't know, administration of resources or inventory, and things like user management,
calendar, and vines or forf. The entire application is built after the federal trust paradigm.
So, we have MTLS connections, we have reverse proxies, we don't have any passwords,
anymore, so we are a pass key only, and we are without any virtual networking in between.
And yeah, we have also some central services to connect all these health departments to
gather. So, if we want to exchange, for example, some report templates, we can exchange them from
one health department to the other, and we can also exchange data for statistics,
because we want to gain data from different cities and compare them how the situation of the
health of the population is in the entire federal state or in entire country. So, I also told you
about security and privacy by the design, how do we achieve that? Here's an example that we're
using for a concept called central file. You probably can think about that we have a lot of
personal data, different addresses of people, different spelling of names and so on. So, we have
a centralized base data like the address and the name, but we have completely separated business
modules with the real medical data. So, we have divided these data in different microservices
or modules, and so we have the opportunity to use this real-use the data, but to create completely
different separate identify for all the different reasons the people were at the health department.
So, we have no unique identify across the entire system. So, we do not know if you were here,
we're at a healthy partner for a skill entry examination that you probably have been here
for an examination. So, we are completely divided into different modules and we have put it
work into the entire architecture. All right. So, that's the technology. It's a lot of technology
that we have to orchestrate. We run on Kubernetes on top of OpenShift. We have up to 21 modules
for a healthy partner in the service mesh, and we also have completely separated database
instances, which is very interesting for our data protection officers, because they're happy
because nothing is mixed, and they're quite happy with it. So, what are other things to we have?
Well, we have for the user sessions some redness. We have three different reverse
process, because we have three different target groups. We have the employees of the health department.
We have a portal for the citizens, and we have the administration of the user data. So, I have
told you some theory about it. I'm going to show you how it looks like and what it is.
These are German screenshots, but I explained it shortly, what it is. It's basically
yeah, a web application. So, this is basically the dashboard, the starting page for the
employees in the administration. They are seeing what they have worked on. If they have some
task that they should fulfill, then I told you that it's a specialist application or that it's
more than one specialist application. This is a form for an socio-pediatric development screening.
It tries to rate how good a batch compared to other children, a child is good in
jumping over a rope. These are things that are medically rated. You'll see a lot of data,
but the most important thing about it is that we then give the parents some recommendations
when they sent a child to school, that they should probably check with a
with a doctor for specific reasons. So, this is what comes out of these applications, and we also
create all the different documents directly in the application. What you also do, we do a lot of
statistics. So, basically, we have even getting a short overview over what is happening in my
health department is quite challenging for some governments. So, we built a good overview
what is happening right now, and what we are also doing is we do a lot of statistics.
Therefore, we also have integrated some usable way of creating statistics. Not in a way
like you have to build a scale query where some people then need to be database experts,
but we have built a really usable interface for creating statistics, creating graphics,
comparing graphics to each other, and this is probably the most sophisticated type of visualization
that we have is a chloropathemath to highlight in what region a specific value is high or low compared
to other regions of probably the city of Frankfurt, because this is the city of Frankfurt,
but you could also compare it to other regions of the federal state and so on. So, that's basically
important to realize if there's some health issue evolving that is specific to a specific region
of a city or federal state, and we have created a usable fast interface to create these
these evaluations very fast, because it's basically the daily business in health departments,
but right now they are doing like a kid and need to make an extra file,
they need to do it all by hand, so we build in my web interface. What we also did, we
build some citizen services, so here's a service where you can change an appointment,
we send you an appointment, you probably don't have to time at this time, so you can change the
appointment, you can also send us some data before you appointment, basically some basic information
that we need from you, and so the things that you would expect from a normal digital evolved
government, yeah, we're working on it in Germany, let's say at least, and yeah,
what also do we have? We are integrating matrix for every health department, every health department
gets its own home server, it's also integrated, we are single sign-on with P-clock, and we are
every ever, we are checking for deeper use cases of integration, for example, talking to other
doctors in other regions of the health care system in Germany, because the health departments
are just a part of the health care systems, this system, and we are also in the process of getting
available, we are integrated as the official TI messenger built on top of the spec of the
schematic which is responsible for the digital health care system in Germany, that is one part,
we also do some technological experimental things right now, because we are thinking about
we have built a very decentralized federated system with a very strict
distribution of data in different data bases, and now we probably have the use case to link
the data together, so we teamed up with the project Atlas to try to evaluate things like
multi-public computation, because we are basically really good in having separate databases
that we can connect on our infrastructure, but probably we don't want to throw all the data
into more data lakes, so we thought about how about to use this concept, all right, so
I'm going to leave you with probably the question, what license do we choose? We are
the base components are very permissive, they are Apache 2, we also have some business modules
which are HEPL, we free, because of the reason the market for public health stuff in Germany is
very, has very many proprietary vendors, so we don't want to give them the opportunity to sell
all software, but we wanted to give the government opportunity to build new business modules, new
specialists, special list applications on top of our stack, and that's our stack, and I leave
you with the QR quotes from the code of open code, but I go and hand over into the questions,
because I think we have three minutes left, right, yes, thank you very much for the thought,
there are two questions that actually you have, so did you deploy in your ex-designer and do
some user acceptance on your ex, and the second question is, how is the plumbing once the
EU money is found out? Yeah, so I will repeat the question, so the first question was, what
is about your ex research, and the second question was, what is about funding when the EU funding
runs out, so we have an entire EU ex team in the development team, and we also do a very
user-centric requirements engineering, so we always have some specific meeting to kick off
and business module, then we have a normal HR development process with two weeks, two weeks
and so what you would expect from normal digital product development, but it's probably
renewed for government software, and for the funding thing we have a good news, because
the software was planned as a software for one federal state only, so, but now we are realized
that the very year which is weird when you know how Germany is divided into different
federal states, because participates in this platform and builds a new business module on top
of our software, so they're paying for that, and we also in the process that we have realized,
okay, they have something we want to integrate, and we are right now in talks with I think about
one third of Germany in reusing the software, so the chances are quite high that the software
will survive, next question, yeah, what would the hardest challenges for you on the project,
and if you're starting today, what would you do? I think the hardest challenge,
what are the hardest challenges in the project and what would I do differently, when I would start again,
I think, that's a hard question, no, I think I'm probably a tough person that tries to get
when I want something, then I get something, that's not good for a government, because the governments
are not in the right way for having people which also, yeah, so tough in talking about things,
but I think what I would do differently is getting more federal states in the beginning in the process,
but not too many, because the problem in Germany is that you can have too much discussion about
things, but starting with probably one or two or three from the beginning is probably a good
basis to have a really stable funding and background for support, the problem in Germany is that we
always try to discuss with 16 states and the country level and then we have too much discussion,
but I think from when you start with a bigger base, it's probably the easier,
yeah, next question, I think we have one minute left, yes,
can we let you complete it in this row, but in somehow, when I think you're a better person,
I think you're a better space for this level of interaction, could you repeat that?
Can you open a hell of better space when I can somehow hold this?
Oh, okay, there was the question, if there's the connection to European health data space,
and the interesting thing about European health data space is that we would be able to
be a primary use case and from being the primary use case, we put it into the infrastructure
of the European health data space, but right now we are not really connected to the German
electronic health care record and so on and so forth, and so it will take some time,
probably be. All right, so