Sunday, July 15, 2012

Irish Revenue Online Service is an example of the wrong way to implement an online service

Most citizen's don't particularly enjoy paying taxes, because nobody  like parting with their hard earned money. Therefore, the tax authorities should try to make the process of filing a tax return as painless as possible. In fairness the Irish tax authorities have done a good job  of making the paper forms and associated documentation quite easy for the lay person to understand, so when I recently started using  the revenue on-line service  I was expecting that it would be equally simple to use. Unfortunately I was very disappointed and found it very frustrating.


This service was originally developed to be used by tax professionals who spend most of their working life dealing with tax issues and is it is optimised for this type of user. It was only in recent years that they opened the system to "normal taxpayers" and they have been surprised that the system has not proved more popular. However, from my experience (which I will describe below) I can totally understand why people are sticking with the much more user friendly paper based system. I understand why the tax authorities would prefer people to use the on-line system, but they will have to adapt the system significantly if they hope that a large section of the population will be willing  to switch.

The first hurdle that users must battle with is the registration process. They need to be careful to avoid fraudulent registrations, but the system they devised is almost guaranteed to take about over a week to complete and hence relatively few normal taxpayers will have enough patience to do it properly.
  1. When you initially register on their web site you will in a normal enough looking web site registration form. However, when you complete this form you are not really registered you have simply applied for a ROS Access Number (RAN) which is required to progress to the next stage. For security reasons this RAN is printed on a physical piece of paper and then posted to your home address. This is done to ensure that the person applying for access to your tax records is really you (or at least has access to post delivered to your home).
  2. However, the need to print and post the document ensures that there is a delay of several days before you can move to the next steps which is to apply for your Digital Certificate. When you apply for the certificate, they don't issue it to you straight away, but instead they generate an access password which must be printed out and posted to you. This second postal interaction doesn't really increase security, because anyone who can intercept the first letter will probably be equally able to intercept the second. 
  3. In any case, you must wait until your password arrives in the post before you can retrieve your Digital Certificate and begin using the system.
Although this system seems quite straight forward, the delay involved effectively stopped me from using the system the first two years I tried. Like many citizens, I normally only need to interact with the tax system once per year when filing a tax return. As soon as I have collected all of the necessary information to complete a return, I like to complete the return straight away so that I can then relax and forget about the tax system for the next year.

The first year I decided to try filing my tax return on-line I was full of enthusiasm. When I had all of my documents ready to file a tax return, I was disappointed, but not surprised that I had to wait for the first postal step. However, when the letter arrived with the revenue access number I was frustrated that I could not complete the form straight away and so I completed the return on paper before the second letter arrived.

The next time I thought about the ROS system was when it was time to file a return for the following year. I found the old letter in my file with the access code to retrieve my certificate. Unfortunately when I tried using it I was told that the password had expired. Therefore I went back to using the paper system for another year.

The third year I decided that I should be a little more patient and so I completed the registration system from scratch. This time I encountered technical issues when I went to retrieve my password. The system gave me the unhelpful message "Something has gone wrong. Please contact the ROS HelpDesk". In fairness, the people operating the help desk were very responsive and did their best to help. However, it was hard for them to diagnose the cause of the problem from this generic message.
  1. Their first suggestion was that the browser I was using might not be a supported one. They supplied me with a list of supported browser versions. I tried three of the browsers on their list but all of them gave me the exact same error message.
  2. The next guess from the help desk people was that it might be an issue caused by the operating system I was using. They suggested that I try again on a Windows system. Since I would never destroy a good PC, by installing Windows on it, I was forced to create a Windows virtual machine image that I could use exclusively for accessing the ROS system,
  3. Unfortunately when I tried accessing the system from the windows system it was still telling me "something has gone wrong". When I told this to the help desk, their next suggestion was to try updating the version of Java installed on the machine. Luckily this suggestion worked and after a delay of 3 weeks I was finally able to use the ROS system.
Since I am using a virtual machine to access the tax system, I should be able to keep a backup of my exact environment and use this to access the site next year. However, many users will be constantly updating their environment and it is likely that they will encounter fresh issues each year.


I think that there are a few simple changes that could be implemented to make the ROS system easier to use for non-professionals:
  • If they abandoned the use of private digital certificates it would simplify the registration process and also allow them to be much more fussy about the details of the software used to access them. Most banks think that normal SSL encryption is secure enough for their web interfaces, so surely the revenue site should go along with this concensus.
  • It would be helpful if the web site gave more helpful error messages. As a software developer I appreciate that it can be difficult to generate meaningful error messages, but surely they could do better than the simple "something has gone wrong". 
  • It would also make life easier if they added an option to summarise the user's environment and email it to the help desk people so that they could see all of the relevant details at one glance. The  help desk people were simply guessing in the dark about what might be the cause of my problem, because there was no better way for them to diagnose the problem.
In summary the process the system seems to be quite fussy about the computer environment users have when trying to access the site. Tax professionals who spend quite a bit of time accessing the ROS site will probably be willing to install specific versions of software to enable them to access the site. However, the majority of citizens who only want to access the site once per year will be much less willing and hence will probably stick with the paper system unless it is made easier.

5 comments:

  1. do you think it is possible to access the system on an android phone. I have saved my certs on a micro sd card which can be plugged into either my tab or phone but i can't get the ROS system to find the certs (/sdcard/external_sd)

    ReplyDelete
    Replies
    1. I doubt it will work. The site is very fussy about the version of Java usedby the clients. To make matters worse the sitter gives you little or no diagnostic information to help figure out why it isn't working.

      Delete
    2. Thanks for that Brian.
      Cool Blog by the way.

      Delete
  2. It is by FAR... the most frustrating thing on the internet today. Java constantly needs to be updated..... there are errors with cert permisions...... the cert has expired..... Complete crap. I use it bi-monthly to pay vat and there is always an issue.

    ReplyDelete
    Replies
    1. Thanks for the comment Richie, but sorry to hear that your experience is just like mine!

      Delete