This page provides an overview and comparison of the main usage options of X-tee. In addition, it describes the general expenses related to the X-tee infrastructure.

Every usage option of X-tee and the related expense calculations have been described more precisely on the following pages of the application guide.

Usage options of X-tee

There are four main options: simple membershiphosted security serverservice mediation, and information system as a service.

Data exchange can have up to three parties: a company is the final consumer or provider of the X-tee service; the host, mediator, and/or service provider are parties who control a part of the infrastructure related to X-tee. The duties of the parties depend on the chosen usage options of X-tee.



Simple membership

Hosted security server

Service mediation

Information system as a service

Registering an institution at X-tee Self-Service portal

Company

Company

A mediator registers their institution

Service provider

Information system development and management

Company

Company

 Company and
mediator

Service provider

Installing a security server

Company

Host

Mediator

Service provider

Development and management of X-tee services

Company

Company

Mediator

Service provider

Registering an information system at X-tee Self-Service portal

Company

Company

Mediator registers a mediating information system

Service provider

Data entry and management

Company

Company

Company

Company

Security server certificates (AUTH + SIGN)

Company

Host

Mediator

Service provider

Signing tool

Company

Host

Mediator

Service provider

OCSP service and time-stamping service

Company

Host

Mediator

Service provider

Obligations of an X-tee member

Company

Company

Mediator

Service provider

Table 3.1 Duties of the parties.


Expenses related to X-tee

Expenses related X-tee can be generally divided in two:

  • Creating and maintaining the infrastructure necessary for using X-tee;
  • Creating, maintaining, and ensuring the availability of the information system communicating with X-tee (including X-tee services).

In the application guide, we will focus on expenses related to the X-tee infrastructure. Expenses related to creating and maintaining the information system communicating with X-tee are highly variable and shown in the application guide in a very general manner. Some volume estimations regarding the creation of X-tee services have been highlighted in section 4 of the application guide. Sample solutions.

Expenses related to the X-tee infrastructure

Expenses related to the X-tee infrastructure mostly arise from the security requirements of X-tee. These requirements ensure the authentication of the parties of X-tee and the evidential value of the exchange of messages. Therefore, the data gathered via X-tee can be used in decision-making processes in a trustworthy manner.

An overview of expenses related to the infrastructure has been provided in table 3.2. The expenses provided are estimations and are primarily designed to characterise their magnitudes. Specific expenses depend on the particular service provider and volume of service usage.

Expense factor

Purpose

Estimated expense

Notes

Time-stamping service

Using the time-stamping service gives evidential value to the X-tee usage logs of every party. This means that a company interfaced with X-tee can prove when and which data and with whom they exchanged.

€430 per security server per year *

The security server uses the service 30 times per day.

OCSP service

The purpose of the OCSP service is to verify that the company’s X-tee certificates are valid. The service returns the certificate’s validity confirmation, which is communicated to other parties of X-tee. This enables the other party to verify whether the data came from the right source.

€450 per certificate per year *


In case of a larger number of certificates, the price per certificate is usually lower.

The security server uses the service 30 times per day per every certificate in the security server regardless of the frequency of using X-tee services.

Certificates

Two types of certificates are used to authenticate parties. One AUTH certificate is used per security server and one SIGN certificate is required per every party using the security server.

AUTH €90 per year*

SIGN €150 per year*


Signing tool

Each party of X-tee signs all outgoing messages using the AUTH certificate and the validity confirmation gained via the OCSP service. Signing ensures that every message communicated via X-tee has evidential value.

€75 – €50,000

Signing tools differ from each other mainly in terms of signing speed.

Installing a security server

X-tee can be used only via a security server. X-tee ensures the security of communication between two security servers.

approx. €200 per security server
(approx. 5 working hours).

Installing a security server is a one-time job. The precise price depends on the hourly rate of the labour force.

Security server management

Is necessary to ensure smooth running.

Approx. €1,500 per security server per year

(approx. 100 working hours).

The precise price depends on the hourly rate of the labour force.

Table 3.2 Overview of expenses related to the infrastructure.

* Time-stamping service, OCSP service, and the related certificates are jointly referred to as trust services.

Depending on the chosen X-tee usage option, the expenses may be divided between several companies or already included in the price of a service provided by a company. More information is provided on the following pages of the application guide.