Innovative ICT improves e-government efficiency

Transcription

1 Copyright Huawei Technologies Co., Ltd All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. Trademark Notice, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd. Other trademarks, product, service and company names mentioned are the property of their respective owners. General Disclaimer The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. HUAWEI TECHNOLOGIES CO., LTD. Huawei Industrial Base Bantian Longgang Shenzhen , P.R. China Tel: Version No.: M C Innovative ICT improves e- efficiency Huawei e- Network Platform Solution HUAWEI TECHNOLOGIES CO., LTD.

2 CONTENTS 03 Solutions 11 Success Stories

3 Solutions Innovative ICT improves e- efficiency Huawei e- Network Platform Solution Huawei e- Network Platform Solution s worldwide have made significant efforts in recent years to develop open, integrated, secure, and eco-friendly e- systems to improve work efficiency and provide transparent services. Layered and centralized information and communications technology (ICT) platforms have been an essential part of this process, as has the integration of intelligent applications. Requirements & Challenges Despite this progress, government ICT systems still faced the following challenges: Difficult network interconnection: Most government agencies had existing ICT networks, but had difficulty sharing resources, exchanging information, and maintaining systems. Their networks were developed based on different standards and were physically separated from each other. s needed a unified e- network that could simplify cross-department information sharing, improve government work efficiency, and save considerable network construction, operation, and maintenance costs. Ineffective information security protection: Networks played an indispensable role in daily office work, information release, and public services. However, e- networks faced a variety of security risks, including unauthorized access, virus, hacker attacks, and information loss. A report made by the State Information Center of China showed that a total of 700,000 government files were illegally accessed over the network in Insufficient resource sharing: A considerable number of independently-developed government ICT systems were information silos that could not interconnect with other systems. Take China's government ICT systems as an example. China's central government had 38 departments and a total of 80 government ICT networks. However, only four networks interconnected with each other. Duplicate ICT infrastructure construction led to low resource usage. According to a survey conducted by the National Development and Reform Commission of China, average government ICT resource usage in the last decade was below 10%. High communications costs: s needed to integrate resources in different departments to improve work efficiency and lower system operation costs. Traditional independent networks suffered inefficient and inaccurate information transmission. To reduce conference and travel costs, governments required an advanced office collaboration system to improve work efficiency and lower communication costs. Solution Overview Based on valuable experience in developing ICT systems for governments, Huawei developed the e- network platform solution to support data transmission, system interconnection, and service process, provide all- IP and high bandwidth service experience, lower service operation risks, and enhance system reliability

4 Solutions Innovative ICT improves e- efficiency Huawei e- Network Platform Solution Service applications collaboration platform portal UC e-customs e-hospital Intelligent transportation e-civil affair e-tax e-social security Intelligent community ERP/MES /SCM security audit and certificate Video conference Cloud desktop OA Hotline e- application Network security certificate Unified Network Huawei's e- network solution was applied in multiple situations, such as WAN, MAN, government campus networks, rural site network access, office building network deployment, private network migration, and network maintenance. The solution was designed to facilitate cross-level and cross-department communication, allow public servants to access the system anytime and anywhere, enable citizens to enjoy interactive public services, ensure efficient information transmission, and provide complete administration coverage. cloud platform network Access terminal Cloud-based provincial e- data center campus network Intranet office terminals Cloud desktop Municiple e- data center Small-sized data center Mini equipment room Server Storage UPS Access from remote offices PC e- WAN and MAN backbone network Access from rural offices Internet egress Mobile office terminals Mobile office access network Cloud data center network UC terminals Tablet Laptop Mobile phone IP phone Multimedia terminal Data security Information security Unified O&M management Cloud-based government O&M management network O&M management Cloud-based service operation and management O&M service support The e- network platform solution was developed to cover the following aspects: an interconnected government network, a comprehensive security protection system, a cloud-based e- platform that supports data sharing and support applications, a collaborative government office service platform, and a unified and centralized management for network O&M. Internet Huawei e- network platform solution overview e- WAN AR G3 County MAN Private line Backup link County department A MPLS VPN cross-level connection 1 3G/LTE Municiple department A Provincial/Municiple MAN Connection between theipsec VPN and MPLS VPN Backup link Secure and reliable connection Internet Internet egress Internet access AR G3 Independent organization 3 Unified government network management platform Security certificate MPLS VPN cross-department data sharing Mobile office County department A 2 Private line Municiple department B Cross-level networkconnection and cross department data sharing Large government campus Meet Internet economic development requirements Unified government network Unified Allow efficient dercee transmission and ensure complete service coverage Highlights Network architecture office collaboration Efficient Convergent Secure Comprehensive security protection The unified e- network covers multiple planes, allowing cross-level and cross-department network connection, secure and reliable data bearing, and complete network coverage. The carrier-class MPLS VPN ensures the stable connection of e- networks. Facilitate data sharing and exchange and improve decision-making accuracy Convergent Integrated e- Provide comprehensive security protection for e- networks The AR G3 router provides cost-effective rural network coverage services. The compliance with advanced technical standards supports the smooth evolution of IPv4 and IPv6, maximizing return on investment (ROI). Solution highlights The e- platform was developed based on open standards, supporting industry-mainstream devices and allowing users to perform unified and visual management for system O&M

5 Solutions Innovative ICT improves e- efficiency Huawei e- Network Platform Solution Comprehensive Security Protection Networks, information, and data security is mission-critical for government operation. However, changing network environments bring various security risks, such as cyber attacks, spam, viruses, unauthorized access to confidential information, and illegal port monitoring. s need a comprehensive, multi-dimensional, and proactive information security protection solution. Integrated e- Cloud computing technologies are becoming increasingly mature and are used in a variety of industries. Many governments begin utilizing cloud computing technologies and services in e- systems to address issues, such as duplicate investments, low resource usage, and information silos. However, governments faced challenges in the large-scale implementation of cloud computing technologies, such as resource integration, system collaboration, security protection, and O&M management. Service application Data center Cloud Data center 1 Cloud data center security Management center Provincial MAN Ministry A Ministry B Ministry C Cloud-based government application Education Social securities Municiple MAN Operation management platform Manage One Network Wired + wireless Pipeline department Private line 3 Remote access certificate 3G/LTE Internet 2 Egress security protection Cloud-based application service Virtual resources of Ministry A Virtual resources of Ministry B Virtual resources of Ministry C Other virtual resources County MAN Remote county Terminal 4 Terminal security management Galax virtual cloud service platform Mobile terminal Highlights Fixed terminal Municiple office terminal County office terminal Mobile office terminal Huawei's comprehensive security protection includes the following components: Internet egress security protection Terminal security management Cloud-based government security protection Unified security audit document security protection Online behavior management website and web-based application security protection These components provide multi-dimensional security protection for e- systems, covering cloud platforms, pipelines, and terminals, meeting security protection standards, eliminating terminal access risks, and preventing network attacks. Huawei's comprehensive security protection supports visual network monitoring and allows users to efficiently detect and respond to internal and external security risks. Comprehensive security protection: Meets government requirements and ensures the secure and stable operation of government ICT systems. Unified management for Internet egress: Minimizes information security risks. Unified security access platform: Allows visual traffic monitoring and effective risk control. Network isolation and access control: Provides level-3 security protection. Multi-dimensional security event information collection: Allows the system to activate comprehensive security protection mechanisms when detecting security threats. cloud network Server Midrange computer Computing resource pool Storage resource pool Cloud-based e- data center Cloud-based e- infrastructure OTN DC interconnection backbone network Remote DR center Based on customer requirements and industry trends, Huawei developed the converged cloud-based e- solution. The solution allows government technical personnel to centrally manage and control equipment room facilities, basic infrastructures, and virtual resources. System administrators can dynamically distribute cloud resources based on network capacities to perform virtual and convergent management for computing, switching, and storage networks. The cloud-based e- solution provides diversified security policies and customized management interfaces based on user requirements, allowing users to independently manage resources and information securely. Integrated e- provides an efficient, easyto-maintain, reliable, secure, and cloud-based platform made up of the following parts: Modularized equipment room ManageOne unified O&M management platform Cloud-based government network Cloud-based security protection system FusionSphere virtual service platform Cloud data encryption unit 07 08

6 Solutions Innovative ICT improves e- efficiency Huawei e- Network Platform Solution Highlights Converged and cloud-based government platform: Allows governments to perform network security isolation, self-service system management and maintenance, quick application migration, efficient crossdepartment data sharing, and efficient and accurate decision-making. Rights- and domain-based user management: Prevents unauthorized resource access and service operation. Diversified virtual machine () isolation: Ensures resource security. Unified management and control: Covers L1, L2, and L3 resources in multiple data centers and improves O&M efficiency by 50%. office collaboration supports essential applications, such as unified communications (UC), video conferencing, secure desktop, government OA, and government hotline. These all improve work efficiency and enhance governmental service capabilities. Featuring high security, mobile applications, and service collaboration, government office collaboration includes UC, office collaboration, and video conferencing. The espace UC component allows users to collect, process, transmit, and share internal office information flexibly, facilitating decision-making and cross-department services collaboration. The cloud-based desktop office component features high security and flexibility, meeting government requirements on information security and terminal access control. The video conferencing component features high definition, system integration, easy maintenance, and high security and reliability. This improves work efficiency and reduces conference costs. Office Collaboration agencies usually have multiple layers, frequent internal communication, excessive process tasks, and heavy traffic load. Traditional OA and conferencing systems can no longer meet office collaboration requirements. To cope with the challenges brought by the developing ICTs, governments need a brand-new office support platform that integrates advanced ICTs. IP PBX MCU espace Server UMS Voice Recording 3 Integration with application systems IP Phone espace Desktop SIP TLS SRTP Telepresence Highlights The government office collaboration platform is based on the layered structures of governments, allowing government agencies to enjoy higher office efficiency. The solution uses network video optimization technologies to offer bandwidth and QoS support. The SDK-based open network capability allows third-party platforms to flexibly invoke network resources to ensure optimal user experience in video conferencing, voice communication, and data applications. Signal media stream encryption technology provides comprehensive protection for information security. The multi-level enterprise address book and multi-level multipoint control unit (MCU) networking diagram match the multi-layer network architecture of governments. PSTN LAN Data center Address book Secure access WAN 1 End-to-end signaling streaming media encryption HQ 2 Multi-layer address book Backup center Local branch 3G/LTE Internet /3G IP PBX PSTN espace Desktop espace Desktop IP Phone espace Desktop IAD Telepresence Ontrip Home Desktop Conference 09 10

7 Success Stories Innovative ICT improves e- efficiency Huawei e- Network Platform Solution Nanjing e-gov Extranet: Providing Large Bandwidth, Diverse Services, and High Scalability Huawei Reinforces Egress Security for Shanghai e-gov Extranet Background The Nanjing e-gov Extranet involves nearly 200 government agencies, 200 LTE base stations, 600 regional healthcare institutions, 500 intelligent transportation video access points, and 2000 community offices. The access points were connected through different carrier networks and lack unified standards and specifications, leading to difficult network management. The municipal government of Nanjing wanted a unified e-gov extranet to connect all access points and effectively support services. Solution The backbone Metropolitan Area Network (MAN) consists of core layer, aggregation layer and access layer: Core switches and egress routers were deployed to forward and process core-layer data traffic. Two routers were deployed at each aggregation node and dual-homed to core switches. A total of 20 aggregation nodes were deployed to aggregate service data. The MPLS VPN technology was used at core and aggregation layers to bear and isolate service systems, including VPN, public access, and Internet access. Local data is switched and forwarded at access layer, which is the minimal network unit of the e-gov extranet. Carriers are responsible for the access layer. Customer Benefits High-performance network system connected thousands of nodes across the city Comprehensive QoS ensured the normal operation of applications on the same network platform Remote aggregation node design reduced link leasing costs by 20% Favorable scalability and flexible access made the system easy to manage and maintain Background After 15 years of development, the Shanghai e-gov Extranet had covered more than 1200 municipal-level agencies and connected 17 district-level e-gov extranets. The unified egress security of the Shanghai e-gov Extranet was under great pressure from a growing number of network attacks, such as viruses, data interception, and web page tampering. Solution Huawei deployed two USG9500 unified gateways at the egress of the Shanghai e-gov Extranet: The high-end firewall enabled flexible configuration, dynamic expansion, up to 480G processing capability, and support for 48 million concurrent streams In addition to firewall, NAT, and VPN capabilities, a series of application protecting functions were provided, such as intelligent routing, traffic control, intrusion prevention, user management, application identification, content auditing, anti-ddos Customer Benefits Met the needs of Internet traffic aggregation for 80,000 terminals across 1200 agencies and future business growth Ensured the stable operation of the e-gov extranet with carrier-grade hardware reliability Effectively prevented security threats from the Internet 11 12

8 Success Stories Innovative ICT improves e- efficiency Huawei e- Network Platform Solution Ningbo e-gov Cloud: Building a Smart Service Platform The Video Collaboration Platform Effectively Connects 66 Agencies in Ryazan Oblast, Russia Background A majority of government agencies in the city of Ningbo, Zhejiang province, had established OA, website, and service systems, keeping the city ahead of other cities in terms of informatization. IT systems had independent equipment rooms that required dedicated maintenance teams. Meanwhile, resources could not be shared across department agencies. The government urgently needed a smart government service platform to implement cross-departmental information sharing and big data analysis, facilitating decision-making. Solution Used a single cloud platform to bear extranet services from multiple micro data centers, implementing information sharing. Deployed two active data centers to provide services at the same time, ensuring high service reliability. Leased IT resources and services on demand with the innovative VDC mode. Implemented central management of physical and virtual resources and simplified O&M through a convergent platform. Background Ryazan Oblast of the Russian Federation covers an area of 39,600 square kilometers and includes 25 sub-regions, 4 statelevel cities, 8 district-level cities, 4 intra-city districts, 28 towns, and 505 villages. The regional government consists of 31 agencies located throughout the capital of Ryazan City. Communication among these agencies created serious problems and increasing expenses. Solution Huawei proposed a platform for High-Definition (HD) video conferencing, which employs 2 VP9620 Multi-point Control Units (MCU) and 66 VP9030 HD videoconferencing endpoints. The solution has the following advantages: Designed according to standard protocols, the system can be linked with existing equipments and easily expanded, enhancing its investment value. Superior audio/video decoding technologies guarantee flawless transmission of HD audio, video, and other data for optimum conference experience. User-friendly interface simplifies conference management. Customer Benefits Easy information sharing: implemented resource sharing and information exchange across 20 government agencies High service continuity: enabled automatic failover, Recovery Time Objective (RTO) 0 Low O&M cost: reduced O&M personnel from 70 to 15 and Total Cost of Ownership (TCO) by 50% Customer Benefits Deployed one videoconferencing system to accommodate 66 conference sites Helped the government to speed up its flow of information, work more efficiently, and cut its operating costs Significantly improved the government of Ryazan s capacity to respond to public emergencies