Huawei e-Gov Cloud Solution · Digital building Smart environmental protection G2G Smart tourism...

Huawei e-Gov Cloud Solution

Leading new ICT improve e-Government efficiency

Trademark Notice

, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.

Other trademarks, product, service and company names mentioned are the property of their respective owners.

HUAWEI TECHNOLOGIES CO., LTD.

Huawei Industrial Base

Bantian Longgang

Shenzhen 518129, P.R. China

Tel: +86-755-28780808

Version No.: M3-036894-20160220-E-1.0

e.huawei.com

Copyright © Huawei Technologies Co., Ltd. 2016. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.

General Disclaimer

The information in this document may contain predictive statements including,

without limitation, statements regarding the future financial and operating results,

future product portfolio, new technology, etc. There are a number of factors

that could cause actual results and developments to differ materially from those

expressed or implied in the predictive statements. Therefore, such information

is provided for reference purpose only and constitutes neither an offer nor an

acceptance. Huawei may change the information at any time without notice. HUAWEI TECHNOLOGIES CO., LTD.

In today’s world, governments are shifting from management-centric to citizen-centric, and aim to become public service providers and defenders of market orders.

Against this backdrop, governments worldwide are exploring ways to redefine their functions, streamline organizational structures, and enhance service capabilities, meanwhile demanding higher requirements for government computerization.

Legacy e-Government systems face the following challenges:

• Slow sharing of data resources, little cross-departmental service collaboration, and an inability to diversify services

• Scaling separate systems that causes low resource utilization and poor IT service maintenance

• Multiple cyber attacks that threaten government information security

Challenges: Traditional e-Gov Cannot Adapt to New Development Trends

01 02

Leading new ICT improve e-Government efficiency Huawei e-Gov Cloud Solution

Challenges

Smart logistics

Safe City

Digital law enforcement

Digital inspection

Smart transportation

Smart healthcare

Smart community

Smart supervision

Government hotline

Emergency command

Smart enterprises

Wireless city

Digital building

Smart environmental

protection

G2GSmart tourism

e-GovCloud

G2B G2C

Cloud computing not only has injected fresh vitality into e-Government, but also has become a core ICT technology for projects across the globe. An e-Government cloud platform features efficient cross-departmental information sharing, convenient service deployment, flexible

capacity expansion on-demand, and a rich variety of business models. These compelling features prevent repeated investments and simplify Operation and Maintenance (O&M).

Huawei provides a service-centric e-Government cloud solution that gives government agencies, enterprises, and citizens easier access to information services.

With these new, high-availability computing environments, clients can use helpful government applications that reduce the need for new equipment and lower operational costs and security risks

Trends: e-Gov Cloud Will Link Governments, Enterprises, and Citizens

03 04


Trends

Huawei e-Gov Cloud Solution Overview

Feature Overview

The Huawei e-Gov Cloud Solution is “service-centric” because it enables precise decision-making by government agencies, efficient office applications for government employees, and convenient services for enterprises and citizens.

Huawei understands that e-Government services require continuous ICT innovation. So Huawei has built a cloud infrastructure in close cooperation with integrators and Independent Software Vendors (ISVs). This cloud infrastructure shares basic resources; open data platforms; wide-ranging, smart government applications; all-round security assurance; and efficient O&M services.

Cloud Data Center DR Data CenterIT Infrastructure

Network Communication Wi-Fi Switch

Government Network

InternetLTE

Mobile Government

Government OA

Government Application

Economic Regulation

Municipal Planning

Grid Management

Online Services

Information Publicity

Information Sharing

Support Platform

EnterprisePartner

EnterprisePartner

Government GIS

Mobile government

Support

Government Data Exchange

Big Data Management

Decision Making

Application Support

Application Integration

Portal SubscriptionCatalog Measurement User ManagementService Delivery

EnterprisePartner

Infrastructure-as-a-Service (IaaS)

• Leading Data Center (DC) planning and design, an agile network, high-performance computing, secure storage, and efficient virtualization technologies

• Consolidated DC resources create a shared infrastructure that provide government agencies with DC facilities, computing, storage, network, and redundant resource services

Platform-as-a-Service (PaaS)

• The government data exchange platform fully integrates basic data (population, enterprises, and geographic information) with flow data (population movement, city planning, administrative enforcement, and civil registration), improving government planning and emergency response capabilities

• The geographic resource platform displays a range of geographic applications on a single map that provides more accurate data for efficient decision-making

• The big data platform enhances clients’ ability to analyze, process, and audit immense amounts of structured and unstructured data

Software-as-a-Service (SaaS)

• A robust platform and solid ICT infrastructure create a

favorable environment to accommodate diverse government applications

• More than 100 well-known software vendors have developed applications for government agencies, enterprises, and citizens

• Applications include Office Automation (OA), Bring Your Own Device (BYOD), city planning, economic regulation, information publicity, online service, campus administration, and enterprise operation

Security assurance

• Data encryption, access control, cloud platform hardening, security patch management, access authentication, transmission encryption, network security, O&M security and auditing, terminal port control, and antivirus management

• Local informat ion secur i ty standards and specifications meet government requirements

O&M assurance

• Huawei ManageOne Platform manages infrastructure, IT O&M, resources, DC operations, and IT services

• Efficient, quality operation of government systems

Elastic resource scheduling: tenant-centric resource sharing, automatic traffic distribution in hybrid cloud mode, and elastic resource scheduling based on traffic pressure

Agile service support: pre-configured IT resource templates based on Service Level Agreements (SLAs) speed setup of government application environment that improves service provisioning efficiency by 50 percent; automatic VM cluster scaling for distributed parallel processing improves efficiency of key service response; automatic allocation of faulty tasks ensures service continuity

Rapid, efficient service: tenants have secure access to e-Gov cloud service anytime, anywhere for improved service quality

Complete information security: secure, isolated tenant services; sensitive information encrypted for storage to meet government security protection requirements

Benefits

05 06

Solution Overview Leading new ICT improve e-Government efficiency


Load Balancing, Elastic Resource Scheduling— Hybrid e-Gov Cloud Solution

Private clouds can support business operations when access traffic is normal. However, in cases of bursty traffic,

service continuity may be compromised. If hardware resources are configured to accommodate peak traffic,

many expensive resources will be idle when traffic is normal. The answer to this problem: a hybrid cloud that

elastically loads traffic for better service handling during peak traffic hours.

Huawei’s Hybrid e-Gov Cloud Solution balances loads to automatically route traffic to and from the public platform.

Based on preset policies and an elastic scaling function, the hybrid solution directs user access requests to different

service nodes, and increases or decreases Virtual Machines (VMs) accordingly. MPLS VPN, IPsec VPN, and security

gateways secure connections and data flows between private clouds and the e-Gov public platform. Open Software

Development Kit (eSDK) interfaces simplify automatic resource scheduling.

• Load balancing: automatically directs service traffic between private clouds and e-Gov public platform

• Elastic scaling: automatically allocates resources based on access pressure and actual needs

• Private VPN channel: ensures efficient, secure connectivity between private clouds and e-Gov public platform

Highlights

DNSService load balancing

Private Cloud Public Platform

MPLS/IPsec VPN channel

Data synchronization

Dept VDC

GSLB GSLB

Normal service traffic

Burst traffic

Elastic scaling

Normal service access

Load balancing

DB DB

Web Web Web

Internet/Government Extranet

Traditional storage resource provisioning relies heavily on time-consuming manual configuration

by highly-skilled administrators. Although it takes only three minutes to create a virtual

machine, provisioning storage resources is inefficient and slows service deployments.

Heterogeneous devices with different device models and from different vendors also are difficult to

manage.

Huawei’s Differentiated Storage Scheduling Solution uses a storage scheduling controller to build

a unified storage resource pool for heterogeneous storage devices, centralizes and encapsulates

services, generates multiple-level service templates, and provides a unified directory to external

systems. The solution recognizes differentiated storage needs (such as storage IOPS, capacity, and

encryption) from different tenants and applications and schedules resources based on preset policies

to automate resource matching and provisioning.

Business-Driven Resource Service— Differentiated Storage Scheduling Solution

07 08

Sub-solutions Leading new ICT improve e-Government efficiency


Storage service directory

Storage resource pool

Mid IOPSblock storage

Low IOPSblock storage

Encrypted block storage

Thin allocated storage

File storage

Data protection

Backup & restoration

VM deduplication

Storage snapshotVM backup

Load balancing

App backup

Remote duplication

…… ……

IOPS 300,000 + HA IOPS 50,000 IOPS 150,000 Encrypted storage NAS

Ministry A: civil servant exam application system

Ministry B: incident information publicity system

Max. concurrent connections: 105,000

IOPS: 200,000

Block storage: 2 TB

Max. concurrent connections: 1,000IOPS: 20,000

Block storage: 2 TB, requiring encryption

File storage: 1.5 TB

FusionSphere

Auto scheduling

SD

S c

ontr

oller

High IOPSblock storage

File backup

App MySql App

• Compatible with heterogeneous resources: builds a unified storage resource pool for heterogeneous storage devices, improving resource management efficiency by 50 percent

• Unified service encapsulation: generates multiple-level service templates and provides a unified directory to external systems

• Policy-driven resource scheduling and provisioning: improves service provisioning efficiency by 10 times

Highlights

Geographic information is widely used by governments - from farmland irrigation, civil construction, urban planning, to disaster prevention. Without a unified Geographic Information System (GIS), there will be difficulties in collaboration and information sharing. Obviously, government agencies need a unified, cloud-

based GIS application platform.

With its eSDK, Huawei can integrate its open cloud infrastructure management with third-party GIS platforms. This enables elastic, visible resource scheduling and management, quick GIS environment setup, and unified GIS data management and service provisioning.

e-Gov Geographic Application Support— Quick GIS Environment Setup Solution

GIS App Land resourcesEnvironmental protection

GIS resource scheduling node

FusionSphere

Remote sensing data

Vector dataSubject library

VMUnified GIS library

GIS data management service

GIS cloud platform GIS cloud platform

3D data

GIS cluster

Computing resource pool

Network resource pool

Storage resource pool

Basic geographic info

GIS cloud platform

• Combination of eSDK with GIS resource scheduling nodes enables quick GIS environment setup and elastic resource scheduling

• Unified GIS data management and service provisioning facilitate collaboration and information sharing across departments

Highlights

09 10



Map caching remarkably improves map accessibility in spite of massive amounts of geographic data. However, map caching is time-consuming and can be performed on only one host. Manual map caching on different hosts is even slower, makes synchronizing and updating data difficult, and often results in high fault rates.

Computing resource sub-tasks that are interrupted during the process must be restarted, compromising service continuity.

Huawei works with partners to jointly develop a Distributed Parallel Map Caching Solution that relies on hardware resources. The GIS cloud platform uses the eSDK to schedule computing resources and create a distributed parallel processing solution based on automatic cluster scaling. The solution greatly improves GIS map caching efficiency, reliability, and stability.

e-Gov Geographic Application Support— Distributed Parallel Map Caching Solution

• The GIS platform uses the eSDK to directly allocate computing resources, and automatic cluster scaling to implement distributed parallel processing

• The solution dynamically monitors sub-node task processes and reallocates faulty tasks to ensure service continuity

Highlights

Surveying and mapping

Portal

GIS Cloud Platform

Archive

Relational DB

VM VM VM

Secondary node

VM

VM

VM VM VM VM

Primary node Distributed

parallel map caching

Map display

FusionSphere

Elastic service resource scheduling

Read

Service provisioning

Process

eSDK

Environmental protection/Agriculture

Citizens/Other Agencies

Geoinformation Gov. data

Non-relational DB

Traditional spatial analysis only supports serial computing - tasks and resources must be matched through manual intervention, hindering efficiency. Spatial analysis fails to respond promptly to large amounts of bursty traffic requests, nor does it provide sufficient computing resources for key data-intensive services. Precise 2D/3D displays

of analysis results require technically advanced but expensive video adapters.

Huawei’s Spatial Analysis and 2D/3D Integrated Display Solution replaces CPUs with GPUs, improving computing efficiency by 50 percent and speeding decision-making. By sharing virtual GPUs, the GIS platform associates GPUs and VMs. The combination displays 2D/3D images for multiple users, saving hardware costs. The solution offers modular computing resources by service category. This ensures data-read efficiency for key data-intensive services such as spreading trend analysis.

e-Gov Geographic Application Support— Spatial Analysis and 2D/3D Integrated Displays

• Automatically allocates data storage resources based on QoS priorities that speed the response to key services and emergent requests

• GPU pass-through meets performance requirements for parallel analysis and improves computing efficiency by 50 percent

• GPU virtualization displays 2D/3D images for multiple users, reducing costs

Highlights

FusionSphere

GIS Cloud Platform

eSDK

Spreading trend

VM

VM

VM

VM

VM Wind

Air pressure

Terrain

Slope aspect

Elevation

VM Result display

3D editing

VM

VM

Pollution monitoringSpatial data

Database

Geoinformation

Environmental protection

Archive Alarm

VM

VM

VM Polluted zone

Spreading zone

Observe zone

Influence scope

Cache zone analysis

VM

VM

VM Nearby rescue

Move path

Evacuation

Contingency plan

Path analysis

VM Overlay analysis

Analysis results

Spatial analysis over geographic elements

2D/3D display and operation

Pollution locating

Spatial analysis

Decision suggestion

Data spatial analysis

vGPU

vGPU

vGPU

GPU

GPU

GPU

GPU

vir

tual

izat

ion

GPU

pas

s-th

roug

h

11 12



In case of frequent retrieval and analysis of massive amounts of geographic data, traditional GIS architecture may not have sufficient data read/write capabilities, causing time-consuming service processing. The architecture may fail to meet performance requirements for sudden loading, spatial analysis, and decision-making, particularly in the event

of an emergency such as earthquake rescues.

Huawei works with industry-leading GIS providers to build a GIS-based Decision Acceleration Solution by combining distributed storage and parallel storage software. The solution eliminates storage node bottlenecks and uses distributed storage to enable parallel extraction of data from multiple warehouses. This accelerates analysis and decision-making.

Quickly Retrieve Data in Case of Emergency— GIS-based Decision Acceleration Solution

• Distributed storage makes possible parallel storage and speeds decision-making efficiency by 10 times

• Horizontal expansion enables large capacity expansion and linear performance growth

Highlights

Huawei incorporates cutting-edge BYOD technologies into its Mobile Government Solution that’s tailored to government customers’ needs: centralized application management, E2E data security, and full life cycle device management. The solution provides holistic security protection for terminals, networks, applications, data, and

O&M. In addition, the Huawei-developed Mobile Device Management (MDM) platform enables tenants to manage devices and applications by themselves.

As a result, government employees can stay connected with their office systems anytime, anywhere, using mobile terminals. Agencies and city management can use smart terminals to reduce citizen disputes and improve public satisfaction.

Secure Access ‘Anytime, Anywhere’— Mobile Government Solution

• Pre-configured CA certificates for terminals: Two-Factor Authentication (TFA), high security

• Unified AnyOffice client: Single Sign-On (SSO), seamless service switching, high efficiency

• Many kinds of policy control: full life cycle management of mobile devices, refined management of mobile applications

• MDM-based self-help tenant management: government agencies manage their own terminals and applications, achieving security isolation

• The MPLS VPN can be connected via the NAT for duplicate server IP addresses

Highlights

MDM server

Application serverMobile access

gateway

Agency 1 Agency 2

MPLS VPN

Pre-configured CA certificate

Tenant self-management

Unified authentication

PE

CE

WLAN

Internet

AnyOffice client

Device Pipe Cloud

CE

13 14



DSS

Decision-making

High-speed network

Parallel storage

Parallel extraction

FusionCompute

FusionStorage

Spatial analysis

PCI-e SSD

Sudden loading

Load Compute Analyze Decide

Hybrid

Breaches of important government data may cause severe consequences that can compromise the credibility of government agencies. When services are migrated to the cloud, the e-Gov cloud stores data from various government tenants, but cloud storage faces the following security challenges: the cloud storage administrator

can randomly access storage devices and copy data after adjusting device settings; and sensitive data may be stolen during the routine maintenance, repair, and transportation of storage devices.

The Huawei e-Gov Cloud Encryption Storage Solution uses a secure system jointly developed by Huawei and Xingtang Communication Technology Co., Ltd. Based on dual-controller and redundant design, the solution meets cryptography algorithms and level-3 data encryption requirements in China.

Government Data Security— e-Gov Cloud Encryption Storage Solution

• Self-service key management: prevents cloud system administrator and tenants from unauthorized access

• Balances three functions: system, security, and audit

• Hardware encryption: high security, linear encryption, decryption, and low latency

• Transparent deployment: seamless integration with SAN storage devices

• Secure migration: eliminates data breaches during device repair, maintenance, and transportation

Highlights

Encryptor

Huawei unified storage

FC/IP network

Office 1 Plaintext

Ciphertext

e-Gov Cloud Administrator

Data treasury

Big Data

Cloud audit

……Office 2

XX

Requires:No breaches,

even if data is lost

Requires:Prevention of

unauthorized access

Service portal

Maintenance personnel

Huawei Helps Set Up National Engineering Lab For e-Government Cloud

Background and Challenges• China’s State Information Center (SIC) is responsible for nationwide IT construction, research, and

development as well as related technical support

• The National Engineering Lab for e-Government Cloud Integration and Application is an important part of the national technology innovation system. It creates government applications and verifies integration, engineering research, and e-Government cloud designs for national ministries.

Solution• Implemented Huawei’s e-Gov Cloud Solution for multiple IaaS, PaaS, and SaaS, and virtual data center

• Provided virtual resource pools for tenants, allowing them to manage the resources themselves

• Huawei’s ManageOne unifies management of physical and virtual resources, and helps administrators monitor resource usage and quickly locate faults with visual end-to-end transaction management

Benefits• China’s first national government cloud platform

• VDC, unified IT management, resource usage improved from less than 20% to 70%

• Contributes standards for China’s e-Government clouds

Success Stories

15 16



Hybrid e-Gov Cloud Ensures Smooth Civil Service Exam Registration

e-Government Cloud Platform Facilitates‘Smart Guangzhou’ Construction

Background and Challenges• China’s annual civil service exam registration results in explosive traffic growth on registration website

• To ensure smooth exam registration, the Ministry of Human Resources and Social Security turned to the SIC’s e-Gov Cloud Platform for backup and load balancing services.

Solution• The SIC deployed Huawei’s Hybrid e-Gov Cloud Platform

• The platform used global load balancing, based on preset policies, to automatically direct registration requests to different service nodes

• The platform increased or decreased VMs according to peak pressure changes to automate service resource provisioning

Benefits• Stable registration of 1.998M candidates over ten days

• Millisecond-level response on registration pages, zero service interruption, zero data loss

• O&M labor costs reduced by 60 percent

Background and Challenges• Guangzhou is an important economic, financial, trade, transportation, and exhibition center in China. It’s

also a center for politics, military, culture, technology, and education in south China. As a result, building an “IT-driven” and “Smart” Guangzhou has become an important part of government strategy.

• Legacy IT resources cannot be efficiently reused, and new service rollouts take three to six months

• Separate construction of government resources result in high construction costs, complex O&M, and hard-to-guarantee security and stability

Solution• Huawei’s innovative virtual data center provides eight IT resource and service systems featuring on-demand

leases and minute-level service rollouts

• Integrated platform construction makes possible unified O&M of physical and virtual resources as well as service rollout and operations

• End-to-end isolation and reliability designs create secure service flows for commissions, bureaus, and offices

Benefits• 200+ government services supported

• Average service rollout time shortened from 90 days to 1 week

• IT-related purchase costs reduced by 40 percent

• O&M costs reduced by 30 percent

17 18

Success Stories Leading new ICT improve e-Government efficiency


Government Data Center in Frankfurt, Germany - Improving Data Access Efficiency

e-Government Cloud Platform in Laos Provides Nationally Unified Support for Business

Background and Challenges• Frankfurt is the commercial, cultural, education, transportation, and financial center of Europe. It was

awarded 11th place in the Global Power City Index 2012.

• Because of dramatic changes - smart phones, laptops, and tablets - in the way they communicated, citizens expected government agencies to respond quickly to their needs. However, legacy data processing systems could not fulfill these expectations.

• Although the existing IT infrastructure was inefficient, it could not be simply replaced by a new one because it had not reached the end of its life cycle

Solution• Frankfurt chose the Huawei OceanStor Dorado2100 G2 (full SSD) system to upgrade primary storage devices

• Increased performance of each device to 150k IOPS

• Established a hierarchical storage mechanism to store non-hot-spot data in the original disk array

• Implemented data storage in a heterogeneous environment

Benefits• Data access speed increased by 75 percent

• Data access latency reduced by 60 percent

• Seamlessly upgraded the existing IT infrastructure without service interruption

Background and Challenges• E-Government systems in Laos were outdated, preventing application development and service

improvement

• The Laotian Ministry of Science and Technology planned to build a new infrastructure to improve service capabilities and increase ROI

• Government agencies provided diversified services but failed to efficiently utilize information resources

• No reliable data storage or disaster recovery solutions existed

• No effective information methods available to support the government administration

Solution• Laos chose Huawei’s end-to-end (L1 to L2) cloud platform solution

• Offered an efficient, reliable, green cloud data center and uniform data management platform

• Delivered services such as technical training, service consulting, and system optimization

Benefits• Open government information and workflows promoted government administration transparency

• Information sharing increased work efficiency by 30 percent

• Provided a wide array of cloud services for government agencies, enterprises, and citizens

• Citizens received timely information, encouraging their engagement in public affairs

19 20

Success Stories Leading new ICT improve e-Government efficiency


Open Lab eSDK

Open Cooperation, Prosperous Future

Huawei focuses on the ICT infrastructure in the e-Government field and provides a full array of network (wired

and wireless), IT (data center, storage, and server), UCC, and information security products and solutions.

Depending on the powerful ICT infrastructure, Huawei cooperates with ISVs to provide various applications for

government agencies, enterprises, and citizens.

Currently, Huawei has established cooperative relationships with over 100 vendors in the e-Government field

and set up open service platforms and labs for joint innovation and solution verification.

Industry Partners Consulting/Design Partners

ICT Partners (100+)

Global PracticeHuawei e-Government Solution

Serves 80+ Countries

Venezuela

Chile

Argentina

MexicoCuba

Brazil

SenegalGhana

Angola

Mozambique

South Africa

Madagascar

Kenya

Zambia

Uganda

SudanNigeria

Tunisia

UKPoland Ukraine

Russia

PakistanSaudi Arabia China

Laos

Cambodia

Bangladesh

Malaysia

Australia

New Zealand

Samoa

Vanuatu

22


21

Success Stories

Open Collaboration

Huawei e-Gov Cloud Solution · Digital building Smart environmental protection G2G Smart tourism...

Documents

Transcript of Huawei e-Gov Cloud Solution · Digital building Smart environmental protection G2G Smart tourism...