Provision of WiFi Facilities at Government Premises Tender Briefing

1
???? WiFi ? GovWiFi Programme
Alex Lee Wi-Fi Programme Manager, OGCIO December
4, 2007
2
Todays Agenda

• Why Government Wi-Fi
• Programme Scope
• Funding Arrangement
• Programme Plan
• Implementation Approach
• Wi-Fi Services
• Roles
• Challenges
• Achieved Milestones

3
Why Government Wi-Fi

• We will build Hong Kong into a wireless city
  through a combination of government investment
  and market force.

4
Why Government Wi-Fi

• Government takes a leading role
• to turn HK into a ubiquitous city
• to enhance peoples quality of living
• to facilitate ICT development in HK
• Brings about benefits on all fronts
• the general public
• the business sectors
• the ICT industry

5
Programme Scope

• Scope
• Free Wi-Fi facilities at some 350 government
  premises with high public patronage
• Key features
• Flexibility
• Availability
• Security
• Technology (Wi-Fi)

5
6
Programme Scope (Contd)

• 13 B/Ds involved
• CSO, FEHD, GPA, HAD, ImmD, LAD, LCSD, LD, MD,
  SFAA, SWD, TD and TID
• Types of Premises with Wi-Fi facilities
• Public Libraries
• Public Enquiry Service Centres
• Job Centres
• Government Joint User Buildings
• Community Halls and Centres
• Cultural and Recreational Centres, large Parks
• Various government offices for public services

7
Funding Arrangement

• A central initiative led by OGCIO.
• Approved commitment of some 217M under Head 710,
  covering the one-off implementation and
  operations during implementation from 2007-08 to
  2009-10.
• Recurrent consequences will be arranged by OGCIO
  with FSTB.

7
8
Programme Plan
9
Implementation Approach

• Trial site
• Leverage on an existing LCSD
• site with multiple contractors.
• Production services
• Total outsourcing and service-based.
• A contract to PCCW-HKT Network Services Ltd. for
  all 3 regions.
• 3 implementation teams, one per region.

10
Wi-Fi Services

• 5-year service contract with a break option at
  end of the 3rd year
• Service-based, the contractor
• Supplies and owns all h/w, s/w and broadband
• Implements and operate the services, including
  central helpdesk
• Service level
• Central facilities 99.9
• Site facilities 95
• No more than 1 unscheduled service interruption
  per location per month

11
Service Key Features

• Technology Wired and wireless WLAN, mesh
  network.
• Wi-Fi Facilities Two types of connection,
  encrypted and not-encrypted.
• Security No pre-registration is required. Use
  MAC address to identify individual connections.
  With WLAN security and content filtering.
• Bandwidth Based on estimated number of
  concurrent users. At least 1Mbps downstream and
  512Kbps upstream per user, minimum 3Mbps per
  location.
• Health and safety Should comply with
  International standards and OFTAs code of
  practice.
• Ongoing support Central service monitoring and
  trilingual helpdesk service.

11
12
Technical Architecture
12
13
Government Site

• Wi-Fi coverage Within the designated areas and
  avoid excessive spillover outside the venues.
• Interference No or minimal interference with
  existing equipment and other Wi-Fi services in
  the vicinity.
• Access Points Ensure visual compatibility with
  the environment, ease of installation and
  physical safety.
• Site variations indoor/outdoor, layout, opening
  hours, visitor type and other site-specific
  requirements.
• Control Remote network management and control.

13
14
Wireless LAN Security

• Wireless LAN-controllers Access Points
• Ensure fair-use i.e. time and bandwidth control
• Unauthorized access to mobile device
• Block peer-to-peer access
• Unauthorized access to a corporate network
• Detect and block unauthorized APs
• Detect and block client device by MAC address
• Man-in-the-middle attack
• Encryption (WPA, SSL, VPN, etc)
• Detect and block unauthorized APs

14
15
Network Operation Center (NOC)

• Firewall Control in/out traffic and block
  network attack.
• IDS/IPS Detect or block suspicious/improper
  activities.
• Network monitoring and logging Record user
  activities to prevent eCrime, bandwidth control.
• Content-Filtering Deny access to obscene or
  indecent contents.
• Captive portal Display the landing page of each
  site. Contents can be site-specific.

15
16
Involvement of B/Ds
16
17
Challenges

• Multiple stakeholders with different interests
• Aggressive project schedule
• Wi-Fi security issues
• Health issues

17
18
Achieved Milestones

• Announcement of the initiative in February
• Obtained funding approval in May
• Issued tender and launched HDC site in July
• Award contract in November

Next milestone Roll-out Wi-Fi service at some
120 Govt premises by June 2008.
19
Developing HK into a wireless city is a journey,
building the infrastructure and
developing contents and services to drive
the usage are the keys to success.
19
20
Thank You