Aitegearo (Introduction)
EFRIS kotoma aileleba nges lo ebalasi amusugun ebe Eletronic Fiscal Receipting and Invoicing System ngesi epone lo aicil erisitin olago nu agwelanar iboro itosomaete acuma ngin na ecilere arisitin ngun. Erai EFRIS idiope oboro alu itosomao anu aingarakin atukun ikapun lu esolo ka aitidisiar atiokisio nu duc ejaasi anu aidar aiwadikaeta nu agwelanar kwape nat aitolom ka aikor arisitin.
Erai ngesi eipone lo itet lo itosomao aijeria epone lo elosi agwelanar ka aimor aiwadikaeta ngun ka URA kotoma apak ngipengin toma.
Imoriarit aitosomao na arisitin nu olago (e-invoicing) alo URA ka da aimor epone lo ejaar agwelanar kanepe anen olago, ne ebalasi amusugun ebe (system to system connection), acuman ngun nu ecamakit erionget lo esolo anu aidar olago akiro keere nu ikamunitos agwelanar (electronic Fiscal Devices (EFDs)) ka acuman ngun nu ipimaere epone lo egwelanarere akinyet na imotokan ka aikor arisitin nu olago (Electronic Dispenser Controllers).
Edaun aitegear egwelet kitosomaete adio atutubet kere na EFRIS, ijukaro do keere nu ikamunitos egwelet ngon cut toni ne ejaai URA kotoma apak angipe angina anu aijerun arisiti na olago.
Atacak esolo lu imarimaritai lu ebeit aitosom EFRIS
Kopaana, ebeit atacak esolo lu iwadikauna anu esolo alo ameda ana iyatanakin obooro (VAT Registered taxpayers) keere aiwadikaun anu aitosom EFRIS. Konye, ngun lu mam ejaasi ogurupu ngon, isinyikoikitai aiwadikaun anu adumun ajokiso nu ipu nu do eyauni aitosomao na EFRIS.
Adoketait na sodit (Step 1): Edumuni do atacan esolo ekodet (link) lo EFRIS olago alo URA https://www.ura.go.ug kosodi alomar itosomai do epone lo elomanara ngesi olago lo URA (enamba lo esolo ka elacet ke lo olage). Ijukino do ngesi enaba lo elacet lo itosomao iwran atipet(one time password). Ijukono enaba lo obaluwa lo olago (email) arai osimu kwape do eseunitor atacan esolo olope. Itolomari do atacan esolo enaba ngon kosodi do adumun Alomar ore lo EFRIS (Homepage)
Adoketait na iyareit (Step 2): Esekuni do atacan esolo ne ebala ebe “First time registration” “aiwadikaun na sodit” kosodi atupakin keda aitejenaar arai ekoto ngesi aitosom arisiti na olago (e-invoicing) arai bo nat na ijeruno itosomaete EFD, elimori do ngesi aiboisio ace nu aisubus (arai ejaasi). Edaun, kosodi do aijukar ailipa ke ne ejai URA tetere ecamakino.
Adoketait na iuniet (Step 3): Edau do atacan esolo eijukun ailipa (application) ke olago, icikakini do ngesi ejenunet lo URA (Logo) ara bo nat iput yen etogo (home icon) anu aisiteteun apapula na olago (refresh page). Arai elomarit aiwadikaun ido ocamunitete, etatkanunete do akiro nu ikamunitos EFRIS apapula angina ana olago.
Kiitunite: Kuju na arucokin olago toni olago (system to system), arucokin olago alo URA arai bon at aitolomikin EFRIS acobilait arai osimu ke atacan esolo (Desktop client app), ekotokin ijo ojaasi keda akim/agogong na itekeri acuman (power), enamba lo esolo (TIN) ka nukon nu aiyeyia (password) tetere ijo aitejenaar kwape elope kosodi arucokin olago (internet). Anu arucokin na olago toni olago (system to system connection), ekotokin atacak esolo adumun arucokin na ebalasi amusugun ebe API ane ejai URA anu adumun arucokin.
Egwelar iboro, ikamunio/iwadikao do nu ikamunitos egwelet ngon aiboisit alo agwelanaran na ikamunitos nu aicil arisitin arai bo nat aibosit na egwelarere (point of sale). Edaun eikamun ngun, itogogongoro (encrypted) kosodete aijukar ne ejai URA kotoma apak ngipengin anu aijerun a risiti olago (e-receiptand e-invoice).
Eddautu
Edaun do egwelet ka adumun nu ikamunitos egwelet ngon, itogogongori (encrypts) do EFRIS aiwadikaeta ngun nu egwelet angon kosodi aitolomun arisiti na olago ido igwaikitete inabai lu arisiti lu ebakai ebe Fiscal Document Number (FDN) arai enamba (esula) lo arisiti, enaba lo ewanyere abeitonut na arisiti angina lo ebakai Quick Response (QR)code ka icie da.
Itogogongoori do bobo EFRIS (encrypts) nu ikapun arai ebeei lo egwelet angon (Financial data) kosodi eijukar ne ejai lo agwelaran. Kotoma apak na, itolomuno/ijeruno do arisiti ngin na olago. Aloseta nu keere araasi nu iswamasi kotoma atipet do mam ekoto itikokoloto aijerio na arisiti ana olago tetere ainakin agwelak.
Arucokin olagon (System to system connections)
Iswamai ejok anu atacak esolo lu ejatatar arucokina na olago na itosomaete kesi anu agwelanara. Iswamai do keda agwelanarak lu ejaasi sek ka lu itetiak da. Erai do arucokin olago toni olago na itosomao anu arucokina epone lo ecilia atacan esolo arisitin keda EFRIS anu aijililun arisiti kotoma olago itosomaete arucokina na ebakai ebe API connection. Isipedori do na aitosomao na arisitin arai emamei/apak na emameor erucokina na ekwam (offline mode).
Olago lo URA (The URA web portal)
Epedorete atacak esolo aitosomon akauntan kec itosomaete arucokinet na EFRIS kotoma olago lo URA kapak ana elomaratar kesi akauntan kec olago alo URA (URA portal by logging in). itosomaete do kesi esula kec lo esolo (TIN) ka akirot kec na aiyeyia (password) anu eijeruna arisit olago angon. Ejerunete do kesi esula lo aiyeyia lo itosomao irwan atipet (One-time password) ido ejaun do anu eitosomao adaun isawan akais aarei alu wongon (24 hours). Ekotokin do atacak esolo eidar esula ngon ejok inyek icie adumun ka aitosom erono.
Na igwaikino acobilait (Desktop -Client Application) Erai na na itosomai epone lo acobilait (software) lo ijeruno (downloaded) olago alo URA kokwap ana arisitin nu ijerio olago (e-invoicing downloads menu). Itolomikino do acobilait atacan esolo kwape nat Laptop arai desktop computers tetere aitosom aijeria arisitin. Kotoma opone alo, ekotokin do atacan esolo aiswamaun esula ke lo itosoma (Used ID) ka da esula lo aiyeyia (password). Mam do ngesi ekotokin esula lo aiyeyia lo itosomao irwan atipet (One-time password). Akec apolou ebe egongakin do URA da ne ejaasi isulai lu olago ngun lu iswamauni atacan esolo (self-created digital keys) kwape ngun cut obee lu eraasi lu atacan esolo ngo bon olope ka nu ikamunitos agwelanar ke.
Esula lo atipet lo ebe USSD Quick code
USSD nges ebekasi amusugun ebe Unstructured Supplementary Service Data. Arai bon at ebe aswamisio ngun nu iyatanakino akiro, ido anyaritai bobo da ebe isulai lu atipet lu ingarakinete arucokin na etuputupaikina na atipet kiding na alu eyaunitos nu arucokina okwam ka esimu olope. (Quick codes that supports real time (concurrent) connection between a mobile network operator and a user’s mobile phone). Einakino do atacak esolo esula lo (Code) itosomaete kesi anu aijeruna arisiti na olago itosomaete isimun kec lu akan.
Acuma na ijerere arisitin (Electronic Fiscal Device (EFD))
Kotoma aileleba EFD nges acuma na ejaasi keda nu aiyeya nu egogong na ecamakit URA tetere itosomao anu aidaria nu agwelanar. (EFD is a device with full proof or inaccessible fiscal memory certified by a tax authority used to efficiently manage and control sales). Ejatatar keda aiboisit na aitac iboro na ebakai ebe Point of Sale system (POS) ka na apak ne idarere akiro nu agwelanar ne ebe virtual Sales Data Controller (SDC) orucokitete anu aitolomun arisiti na olago. Imoriarit da aboisit na eyuwara na itolomi akiro nu egwelet toni ne ejai EFRIS.
Iyatakino, igangit do EFD aitolomio na arisitin nu olago arai emamei arucokina ngin na olago (offline issuance of e-receipts). Ecamakit da acuma na amoio na akiro ka apatan kotoma ke. Kada asiomio bon (read only), aidario na arisitin anu olago, ka aitolomio na iripotan alu aswam ana aisubus lu angina apak, esabiti, elap ka ekaru, lu ikamunitos aisubus.
Iswamatai do na noi noi anu apedor akinyet na imotokan ka ekwam. Ejatatar emudu lo icikakino (compressor gun) lo irereo epone lo itosomaere anu do ajenun ka eimar epone lo elomia akinyet. Egwelar akinyet aijanget, ijukaro do akiro toni ne ejai acuma na EFD da erucokitai anu eijerun arisiti kotoma apak. Imaruno do esolo kopone alo ejaar agwelanaro na akinyet na engicio kotoma apaipo na ijeri akinyet.
Kiitunite/Aisinyikoikinet (NB): Atacak esolo lu mam epedorete agwel acuma na EFD arai ERP isinyikoikitai aitosom arai elago lo URA arai bo nat arucokina na itosomaere acobilait (Desktop Application).
Etaci do atacan esolo igaraman lu arucokin olago toni olago, egarama lo agwel acuma, eigwaikin arucokin (installation) ka aswamisio nu aitemonokino na angin duc (repair services).
Arucokino (System) |
Igaraman (Costs involved) |
Arucokino olago (System to system) |
Akim (Power), acobilait (computer), akaunta na esolo olago na iswamai (active tax portal account), arucokina olago (internet connectivity), aingarakino na amamus olago (offline mode support), aingarakino na arucokin atacan esolo keda URA olago, ka aitogogongoro na arisiti an olago (E-Receipt/invoice validation) |
Acuma na EFD |
Akim (Power), acobilait (computer), akaunta na esolo olago na iswamai (active tax portal account), arucokina olago (internet connectivity), aingarakino na amamus olago (offline mode support), agwel acuma ka aitogogongoro na arisiti an olago (E-Receipt/invoice validation) |
Arucokin na acobilait (Client App) |
Akim (Power), acobilait (computer), akaunta na esolo olago na iswamai (active tax portal account), arucokina olago (internet connectivity), aingarakino na amamus olago (offline mode support) ka aitogogongoro na arisiti an olago (E-Receipt/invoice validation) |
Esula lo atipet (USSD Quick code) |
Akim (Power), arisiti na olago (E-Receipt/invoice validation) |
Olago lo URA (Portal) |
Akim (power), acobilait (computer), aiboisit na esolo na olago (active tax portal account), arucokina na olago (internet connectivity), Arisiti na olago (E-Receipt/ invoice validation) |
Eiwadikaun (Registration)
Itunga keere lu iwadikauna keda URA ejatatar keda akaunta na EFRIS ido epedorete elomar toma itosomaete enamba kec lo esolo ka esula lo aiyeyia (password). Ijukakino do kesi esula do lo aiyeyia (OTP) lo itosomao irwan atipet keda ebalua alo olago arai bo nat onaba lo esimu. Ekoti do atacan esolo eiwadikaun anu aitosom EFRIS anu aswamiso kec nu aisubus keere nu angin apaaran.
Aidar iboro lu Egwelanaro (Stocking Management)
Epone lo aidar iboro lu egwelanaro egeun keda aitolomio na obore arai aswamisio ne da esekuna atacan esolo iboro/aswamisio kere lu egwelanari ngesi ane ejaasi iboro lu imarimarit EFRIS (EFRIS product list). Ekorari (maps) do na iboro keere kitoni ne ejaai esula lo iboro lo itogogongoritai (standardized product code).
Atacak esolo lu egwelanarete aswamisio epedorete do aiyatakin alosit akonye aicil arisitin nu olago arai edaun aitolomar aswamisio kec ne ejai EFRIS (configuration is completed). Konye, atacak esolo lu egwelanarete iboro, ekotokin do kesi aileleb iboro itiaisinei lu iboro kec eroko kesi epedora aijerunun arisitin. Anu do atacak esolo aijulujul iboro kec, aijukar iboro (transfer stock) arai bo nat aingitun nu ikamunitos iboro kotoma apak.
Kiitunite (NB): Ne mam atacan esolo epedora adumun esula lo ibore ayen ekoto ngesi arai bo nat apakaet ken a ipimaere, ekotokin do atacan esolo ngon aikwenyakin URA. Ijaunete do lu ikamunitos EFRIS ailipa ngin kosodete aitemokin ibore ngin arai bo nat eipimae ke.
Aitemonokin/Aidar Aiwadikaeta nu Ikapun (Fiscal Document Management)
Kotoma ane, epedori atacan esolo:
Aitolomun ka aiyatakin ikapun ice lu itegelitai ka amusugun ebe debit notes. Ingarakinete nu aiyatakin (adjustments) ikapun lu etolomunitai arisiti na acepak oponi iyatakinai iboro lu egwelaritai arai bon at ebeei.