WO2010139167A1

WO2010139167A1 - Expert support application system platform for government affair and business affair decision-making and its construction method

Info

Publication number: WO2010139167A1
Application number: PCT/CN2009/075688
Authority: WO
Inventors: 单强; 贺文
Original assignee: 深圳市脑库计算机系统有限公司
Priority date: 2009-06-05
Filing date: 2009-12-17
Publication date: 2010-12-09
Also published as: HK1134991A2; CN101908163A

Abstract

The present invention discloses an expert support application system platform for government affair and business affair decision-making and its construction method. The system platform is composed of one center, two interfaces, three systems, six platforms, nine function modules, and multiple application systems. The system platform takes network consultation interaction and information security as the foundation, takes the data obtaining and integrating expert resources as the core, and enables a new generation decision-making system with standardization and normalization. The construction method corresponding to the system platform makes the system enable the interaction between expert and expert, expert and government, expert and corporation, and expert and society.

Description

Expert support application system platform for government business decision-making and its construction method

The invention relates to the field of intelligent decision support application technology, in particular to an expert support application system platform technology for government business decision-making, in particular to an expert support application system platform for government business decision-making and a construction method thereof. Background technique

The advent of the era of knowledge economy has greatly accelerated the speed of information dissemination and change, and promoted the continuous renewal of social ideology and personal knowledge structure. The relationship between problems has become more and more extensive, and the decision-making content at all levels has become more and more abundant. The hierarchy of decision-making processes is becoming more and more complex, and the effects and impacts of decision-making are becoming more and more profound.

In a highly information-based social environment, in the process of major decision-making, it may involve many aspects of social, political, historical, legal, cultural, economic, technological, natural, and other aspects of marginal science and interdisciplinary content. . The establishment of a decision proposition, decision-making goal, and decision-making plan requires not only a large amount of timely and accurate factual information and information, but also correct and predictable reasons and arguments, that is, sufficient basic and applied theory. , it is possible to produce the right decision. The major decisions made in the era of knowledge economy are far from enough by the general experience of the leader alone.

Gaoming's decision-making should actively conform to the requirements of the era of knowledge economy, adopt advanced decision-making methods, gain insight into the development trend of things, build high-rise buildings, and assess the situation, and then strategize and win thousands of miles away. The new era puts forward higher requirements for the scientific and democratic decision-making of leaders. The problems of "the quality of the leader" and "the advantages and disadvantages of the decision-making mechanism" are more and more eye-catching, and the decision-making situation is even more severe.

Observing current decision-making practices, there are many typical cases that cause major mistakes. According to the national audit The report disclosed that only the mistakes made by the auditing authorities in 2002 due to violations of guarantees, investment and borrowings caused direct losses of 7.23 billion yuan to the country. This is only economic loss, the negative social and political influences caused by various decision-making mistakes, and the harm caused to the country and the people is even more uncountable.

Why do some of the often unskilled decision-making cases become public topics? Because in some empirical decisions that some leaders are accustomed to, they are limited to the influence of various factors such as the individual's thoughts, knowledge structure, personal preferences, interests, organizational coordination, and administrative intervention. Sexuality, inefficiency in decision-making, and mistakes in decision-making have led to an endless stream of negative and negative effects. Analysis of those cases of resilience, it is not difficult to find the backwardness of the construction of decision-making systems, the sluggish operation of decision-making mechanisms, and the anomie of decision-making procedures.

The process of scientific decision-making is far from a process of raising a hand, not a leader's "being" behavior, but a rational, systematic, and legal process. This programmatic process generally goes through four main phases. First, ask questions, establish decision-making goals; second, collect information, formulate alternatives; third, evaluate analysis, optimize decision-making programs; fourth, implement decision-making programs, and track, feedback, correct, and improve.

To complete the above process, it is necessary to comprehensively and profoundly grasp the nature, cause factors, and development laws of decision-making problems. Leaders must organize and coordinate experts and scholars from beginning to end to conduct extensive and in-depth consultation and argumentation. In the early stage of decision-making, we should fully listen to opinions and suggestions from all sides, and screen out comprehensive, systematic, real and useful materials and information as the basis for decision-making. In decision-making, we propose various options to explain the purpose of each plan. , rationale, potential risks and ways to deal with risks, analysis and comparison, excellent and excellent; after decision-making, we must follow the implementation of decision-making, conduct performance evaluation, discover new problems, and constantly revise and improve.

From this point of view, scientific decision-making is a process of repeated cognition. The significance of this process of understanding lies in: "seeking truth" from the research of "seeking truth", "seeking truth" in the thinking and "seeking truth", so as to correctly understand the nature and regularity of things and grasp the development direction of things. Without detailed consultation from experts, Decisions made without specific rigorous arguments are unlikely to be scientific decisions. Only in the rigorous decision-making process, with the application of relevant scientific research results, in-depth consultation, research, and argumentation decisions are the real scientific decisions.

Improving the leader's knowledge level and decision-making ability, involving the leader's personal thought, morality, culture, experience, psychology, thinking and other aspects of continuous improvement in ability, is a gradual process, not a day's work. It is an inevitable choice under the new situation to reform and improve the decision-making system and mechanism, and let experts and scholars participate in decision-making consultation and argumentation.

Only by establishing a scientific decision-making system and mechanism, leaders will actively absorb experts and scholars to participate in decision-making activities, form a scientific decision-making organization system combining virtual and real, complementary advantages, and comprehensive integration, and establish a benign and interactive cooperative relationship. In order to effectively make up for the lack of relative lack of theoretical knowledge of leaders, expand the source of knowledge, source of wisdom, source of ideas, and activate and improve the thinking mode of leaders; can further enable leaders to "learn" in the decision-making process. However, it is necessary to encourage leaders to follow scientific decision-making procedures and rely on in-depth theoretical research to ultimately improve the predictability and correctness of decision-making.

The government business decision-making expert support application system platform is an expert system based on the government e-government network and the Internet. It uses advanced computer and information technology to integrate expert intelligence participation and external decision support through careful decision-making consultation activities. The system (DSS) forms a broad, face-to-face, intuitive decision support system platform. It is positioned to achieve daily, close contact and communication between government departments, business enterprises, social consulting organizations, experts and scholars. It is an indispensable part of government e-government decision-making and corporate business consulting.

With the speed of information transformation in China's traditional industries, various information systems are gradually being widely used, and the decision support system (DSS) is favored by its rich connotation and powerful functions, especially with online transaction processing technology ( Technologies such as OLTP and Data Warehouse are the most compelling.

At present, DSS has more research on decision-making objects, but there is no relationship between decision makers and DSS. Deep research, not to mention organizational design and business process reengineering that are closely linked to the analytical process

(BPR) issue. Therefore, different systems have different application effects after project implementation: Some systems conform to the existing management system and provide effective support for work; some systems cannot adapt to the existing management system, and a large number of functions cannot be used. The electronic document function has increased the workload. This inconsistency between organizational structure and DSS systems has become a major obstacle to DSS applications. Summary of the invention

The object of the present invention is to provide an expert support application system platform for government business decision-making and a construction method of the platform, which is based on network consulting interaction and information security, and takes data acquisition and integration expert resources as the core, A new generation of decision-making systems that standardize and standardize.

The utility model relates to an administrative business decision-making expert supporting application system platform, which adopts a computer system, a storage system, a network system and a multimedia system as basic hardware conditions, and the application system platform comprises the following:

a. Decision-making expert interactive intelligent support center, which is a center that supports decision-making in combination with all other intelligent support groups including computer and support decision-making;

b. Two interfaces, including: an internal information exchange interface of the e-government network, and other related social unit information exchange interfaces; an exchange front-end machine is set up and deployed in the intranet part of the government, and the decision-making consulting expert interacts intelligently according to the actual connection situation. The data exchange and conversion between the support center and the administrative office business system of the government intranet is realized by means of the network or the storage medium using data import and export, and the formed connection is a secure interface; the structure of the shared database of other related social unit information exchange interfaces Design and definition, security management design and definition of shared databases, user rights management of databases;

c. Three systems, including: expert support system standards and technical support systems, e-government decision support systems, and economic operation consulting service systems; d. Six platforms, including: information release and service platform, analysis and decision support platform, resource intelligence platform, multimedia information transmission platform, external decision support system integration platform, identification and authorization support platform;

e. Nine functional systems, including: expert online system, file transfer management system, synchronous recording and recording system, expert online inquiry system, expert online call response system, government online decision system, assistant decision system, expert online information system and expert proposal Management system

f. Multiple application systems, including: Administrative Decision Support Expert Support Subsystem and Business Decision Consultation Expert Support Subsystem.

The technical support system of the expert support system standard and its technical support system is divided into an application environment, an application area boundary, a network and telecommunications transmission, a security management center, and a password management center.

The information publishing and service platform is oriented to government agencies and social organizations, introduces the workflow and overall dynamics of the decision-making system, publishes key information of various industries, introduces decision-making methods and techniques, publishes relevant case studies, and provides personalized professional services. , carry out online value-added services.

The analysis and decision support platform is established in the decision-making expert interactive intelligent support center, using data warehouse and data mining technology, according to the requirements of the administrative leadership for decision support consultation, completing the decision-making consulting needs of various government agencies and functional bureaus, and The needs of the community for expert consultation; timely understanding and access to the information needed for relevant decision-making, real-time access to relevant national policies, regulations and detailed economic report data of various industries, providing first-hand information for leadership decision-making, for leadership decision-making Provide scientific basis and provide first-class and latest industry solutions for business unit consultation.

The resource intelligence platform includes a knowledge base intelligence body, a database intelligence body, a model library intelligence body, a method library intelligence body, a graphic, an image intelligence body, and a call of various resources by the expert intelligence group.

The multimedia information transmission platform is built on a local area network/internet network and supports multiple transmission modes, including computer network, communication, video processing, streaming media, and automation technology; the transmitting station and the receiving station adopting the image quality Control function to adapt to the unstable Internet transmission rate; use multiple types of compression techniques for images to adapt to different images Resolution and environmental requirements; Enables adaptive function when the Internet channel transmission rate is poor. The data exchange adopted by the external decision support system integration platform is a unified standard specification, and a manageable and scalable data exchange is established on the orderly data structure, and is distributed by the data exchange service system distributed in each system. The data center is composed of a data exchange monitoring system.

The identity recognition and authorization support platform adopts a secure network technology to construct a logical service network, and the lowest level security measures are applied on the backbone switch, and logical isolation of each service network can be realized on the same physical network; and a unified authentication and authorization center is utilized. To complete the authentication and effective authorization of each business application; the entire security infrastructure also includes firewall system, virus protection system, intrusion detection system, log and audit system, security management system, data backup and fault tolerant disaster recovery system, computer room physics Security system.

The computer system includes a server, and the server adopts two types: centralized and clustered, which can be independently or integrated mode; centralized server integrates powerful servers to replace multiple small servers; clustered servers use multiple servers to cluster The way to link up to form a server group that is similar to or stronger than the large server function distributes the running tasks to each server.

The network system includes network attached storage, a public key system and a digital certificate, a directory service technology, and a virtual private network, where: the network attached storage is directly connected to the network through a network interface, and is accessed by the user through the network; the public key system and Digital certificate: A key consists of two parts: a public key and a private key. After encrypting the data using any of the keys, only the corresponding other key can be decrypted. The owner of the key first encrypts the identity data using the private key, and together with the public key, forms a digital certificate to be stored in a place that other people can enter. Directory service technology: The system's various resources and user information are passed through a unified format. Centralized storage and management; Virtual private network: Use private tunnel technology to establish a simulated point-to-point leased line on the public network, securely encrypt and decrypt data transmission, and use it as a security for remote system login and internal LAN. connection. The invention relates to a method for constructing an application system platform for a government business decision-making expert, comprising the following steps:

Data source construction, data collection of relevant data in government OA (office automation system), enterprise CRM (customer relationship management system) business system;

Identify the architecture, use batch or real-time processing techniques, use the above collected data, identify data objects and have a comprehensive understanding of the consulting users;

Data transfer architecture, supporting batch or real-time data transfer between systems;

Data storage, data storage and management;

The data analysis architecture analyzes and processes information to improve the quality and efficiency of government business decision-making experts in supporting application system platform services.

The method also includes the following data quality assurance system:

When the data is input, it is ensured that the field is automatically filled, the information is automatically debugged, the logic check function based on the history data, and the image system;

Data storage and organization actively run predefined queries or spot checks when the system is idle, proactively determine the error in the database using a dedicated data warehouse for analysis, rather than backing up the database; increasing data security control limits the background operations on production data; Data is archived;

Data transfer and consolidation use advanced extraction, transformation, and loading to enhance data quality; use an integrated architecture to share data between systems, ensuring data consistency and integration across systems; collating data from different systems Analyze the data warehouse to support a full range of analysis; Data applications use advanced data analysis tools to improve analytical capabilities, streamline reporting, and improve data security access control.

The method for constructing the system platform further includes a security construction method of the system platform: Information security infrastructure: On the basis of the information transmission service platform provided by the network infrastructure, a general security service for the application system is added, which is an application system. Provide a common, high-performance and authorized computing platform, the so-called intelligent trust and authorization platform; it includes public key base Infrastructure PKI, Authorization Management Infrastructure, and Timestamp Service Systems, Public Key Infrastructure 不可 Non-repudiation based on data confidentiality, integrity, identity, and behavior, primarily in distributed computing environments; Facilities ΡΜΙ mainly provide access control functions for application systems in a distributed computing environment;

The information security application security environment integrates traditional information security protection technologies through trust and authorization services, and implements consistent network security management through a unified security policy mechanism. The above information security protection technologies include: network boundary protection, System intrusion detection, system security auditing, system vulnerability scanning, system security auditing, and virus prevention technologies.

The method for constructing the system platform further includes an integrated construction method of the system platform:

a. Data integration, encapsulating business logic in the data storage process, and sharing data without sharing business logic, can be directly integrated in the data layer;

b. Function integration, directly calling the functions of the existing system through the API of the application system. The integration of such functions may occur at a single system level or may span multiple systems;

c. Presentation layer integration, accessing multiple applications with a unified user interface, making them look like a single application, with new features and workflows added to the new interface.

The integrated platform of the system platform adopts EAI products for integration of the above system platform, wherein the EAI product includes four levels of functions:

Business Process Management: Integrate and manage existing system-completed business processes for more complex functions, including event-driven rules, state-driven rules, task assignment/event correlation, event escalation, and duplicate data inspection;

Application system connection: Connect with existing systems, call his functions, including database connection, file transfer, enterprise package solution, expertise, authentication and authorization, encryption; translation and conversion: the delivery of messages and data Translation, format conversion, formatting, including grammar, semantics, XML translation, and one-to-many message splitting;

Communication middleware: Transferring messages and data between different systems, communication middleware components Use different communication models and pass on the information according to the content and context of the message.

The method for constructing the system platform further includes an interface construction method of the system platform: an external service interface: an access access function for providing an expert consultation service to the public, the interface needs to provide an access mode to the Internet and the telecommunications public network. To facilitate service access of public users of different terminal types; need to provide basic network layer security functions; for users accessing the Internet and telecommunications public networks, network access can be obtained through access authentication and VPN gateway devices respectively. Control and information security transmission protection;

Interface with the public service service network: For the data exchange interface of the application layer, two levels of security functions, namely the security functions of the network layer and the application layer, need to be provided; wherein the network layer mainly provides security for information transmission through the VPN gateway. Protection function to ensure confidentiality and integrity during transmission; while application layer security is mainly done through SOAP server, focusing on application layer combined with SOAP access control technology and element-level security functions provided by XML Exchange security of business data;

Interface with the confidential network: Physical isolation between the non-confidential e-government office network; the physically isolated interface also provides a certain data security exchange function. This asynchronous secure data exchange function is mainly through the secure island switch module. Realize

Interface with the government-related private network: exchange and transmission of confidential information through the government-related private network, provide further concealment of the internal topology of the classified network, and security isolation and operation audit function of the network interface, further strengthen the Management of confidential information flows.

The video communication construction method included in the construction method of the system platform is as follows:

The video communication adopts a combination of distributed technology and multicast technology, and the combination of the distributed structure server and the multicast server; the video communication is also virtualized into multiple servers in the same server, the same network environment, and the same software server.

The method for constructing the system platform further includes a method for constructing a payment and settlement system of the system platform: a. The commercial bank and UnionPay adopted mature, stable and secure payment, directly connected with the commercial bank payment system, and unified settlement through the UnionPay settlement system;

b. Co-issue a joint expert credit card with a commercial bank, a commercial bank magnetic card and a large-capacity RFID chip.

The value of the invention lies in: 1. Creating a new mechanism to aggregate expert intelligence into a unified platform, creatively construct an open platform, and organize various types of experts to form an effective organization mechanism and organize on an open application system platform to form a huge The high-level talent gathering place, on the basis of the application of multimedia communication technology and instant messaging technology, to achieve remote links, online and collaborative network terminals, so that the experts and the community can complement and interact with each other, completely change the traditional high value-added experts How to use it. 2. Providing innovative standards for the professional service system for e-government scientific decision-making. 3. Improve the application value and commercial value of e-commerce in an all-round way. When the majority of industrial and commercial enterprises make major business decisions, when they need to solve technical problems, and when they want to obtain the latest scientific research results, system experts will provide the most complete and convenient for enterprises. The most economical expert-level consulting support service system. DRAWINGS

1 is a general framework diagram of an application system platform of the present invention;

2 is a schematic diagram of a data structure of an application system platform of the present invention;

3 is a network architecture diagram of an application system platform of the present invention;

4 is an integrated architecture diagram of an application system platform of the present invention;

FIG. 5 is a diagram of a distributed intelligent collaborative framework of an application system platform of the present invention. DETAILED DESCRIPTION As shown in Figure 1, the general framework of the government business decision-making expert support application system platform consists of "one center, two interfaces, three systems, six platforms, nine functional systems and multiple application subsystems". among them:

A center refers to the establishment of an interactive intelligent support center for government business decision-making consultants, called DSC;

Two interfaces, including: an internal information exchange interface of the e-government network and other related social unit information exchange interfaces;

The three systems include: expert support system standards and their technical support systems, e-government decision support systems, and economic operation advisory service systems;

Six platforms, including: information publishing and service platform, analysis and decision support platform, resource intelligence platform, multimedia information transmission platform, external DSS integration platform, identification and authorization support platform;

Nine functional systems, including: expert online system, file transfer management system, synchronous recording and recording system, expert online inquiry system, expert online call response system, government online decision system, assistant decision system, expert online information system, expert proposal management system ;

Multiple application systems, for government business application systems, include: government decision-making consulting expert support subsystems and business decision-making consulting expert support subsystems.

A Center: Government Business Decision-Making Consultant Expert Interactive Intelligent Support Center (DSC) Previous DSS is a part of computer-system support decision-making, while government business decision-making consulting expert interactive intelligent support center DSC refers to all computer and other supporting decisions. The combination of expert intelligence and body groups supports the center of decision making.

In today's society, political, economic, commercial, corporate and other activities are in a complex environment, and their internal relations are also intricate, and in the information age, various situations are changing rapidly. Therefore, it is only at the height of system theory to study various complexities. The system can make informed decisions about various activities. The essence of DSC's integrated integration method is to organically combine expert groups, data and various information with computer technology, and combine the scientific theories of various disciplines with human experience and knowledge to bring into play the overall advantages of the integrated system.

Two interfaces: government network internal interface, business enterprise information interface

The first is to serve the government decision support, so it is placed in the government e-government in the network layout. Among the service networks is an important part of the government e-government network. However, since it is not a pure e-government system, it can provide business expert consulting services to various social organizations and enterprises, so it is impossible to directly put it into the e-government intranet. Therefore, E-IDSS must set up an interface to ensure exchange of information with the e-government intranet and other relevant social units.

Two interfaces refer to the internal information exchange interface of the e-government network and other relevant social unit information exchange interfaces. In the exchange of information with the government e-government intranet, an exchange front-end machine is set up and deployed in the intranet part of the government. According to the actual connection situation, the E-IDSS and the administrative office of the government intranet are connected through the network or the storage system. The medium uses data import and export means to realize data exchange and conversion, and forms a connection between the E-IDSS and the government intranet as a secure interface.

As the government business decision-making experts support the application system platform placed in the e-commerce network, in order to ensure the security of information data for providing expert consulting services to other relevant units of the society, especially to ensure that E-IDSS is not connected to its information system, For the government network security, an information exchange interface must be established.

The functional requirements of other relevant social unit information exchange interfaces are as follows:

Structure design and definition of shared database, security management design and definition of shared database, user rights management of database; establishment of shared database and data exchange and exchange between shared database business database; implementation of data exchange between business database and shared database The data conversion function in the process; automatically judges which data in the business database has changed, and extracts the change data to the shared database; supports the remote management and monitoring function of the interface subsystem; supports the management of the shared database metadata.

Three systems: standard system, government decision support system, business consulting service system

1. E-IDSS standard and its technical security system

Based on the research progress at home and abroad, based on the study and application of various domestic and international standards, and the lack of standards, under the guidance of the China Expert Committee and the China Federation of Experts and Work, establish some government decision support and business consulting services experts. The system's norms, construction is in line with China's situation Expert System 4.0 Standard System. The construction content includes: business specifications, data coding standards, data interface standards, technical specifications, system performance indicators, etc.

The information assurance technology of the IDSS information system can be divided into application environment, application area boundary, network and telecom transmission, security management center and password management center.

2. E-government decision support system

In addition to the above standards and its technical support system, E-IDSS has two application support systems, the most important of which is the e-government decision support system. This system guarantees that E-IDSS can provide support services for government decision-making and provide various expert consulting services for government functions. There are N corresponding application subsystems under this system, and N is a natural number greater than 1.

3. Economic operation consulting service system

E-IDSS The second application support system is the economic operation consulting service system. It is the most important system supporting the commercial operation of E-IDSS. This system guarantees that E-IDSS can provide timely expert interaction consulting services for businesses and business organizations in all walks of life. There are N corresponding application subsystems under this system.

Six support platforms

1. E-IDSS information release and service platform

The E-IDSS information release and service platform is aimed at government agencies and social organizations, introduces E-IDSS workflow and overall dynamics, publishes key information of various industries, introduces decision-making methods and techniques, and publishes relevant case studies for provincial, municipal, and district governments. Organs and social units provide personalized professional services, such as expert inquiries (including local and international), expert literature search, online academic seminars (regional or international), etc.; provide relevant information to network members; Online value-added services (such as online subject consultation, online project bidding, etc.).

2, E-IDSS resource intelligence platform

Different from the first three generations of DSS, E-IDSS introduces various resource intelligence bodies, especially the expert intelligence group interacts with decision makers and consultants. The E-IDSS resource intelligence platform provides: including knowledge base intelligence Body, database intelligence, model library intelligence, method library intelligence, graphics, image intelligence, etc. Its function is to complete the task of calling the various resources of the expert intelligence group.

3. E-IDSS multimedia information transmission platform

Through the construction of the E-IDSS multimedia information transmission platform, people can basically realize the access to the E-IDSS system at any place (anywhere), any time (anytime), and get the required video and audio at any time. Other decision information. E-IDSS multimedia information transmission platform design target ^ ^ Real-time transmission of high-fidelity quasi-dynamic images between remote points on the Internet.

Both the sending site and the receiving site have image quality control functions to adapt to the unstable Internet transmission rate; multiple types of compression techniques are applied to the image to adapt to different image resolutions and environmental requirements; When it is poor, it can start the adaptive function. It integrates computer network, communication, video processing, streaming media, and automation technology. It is an integrated solution for video, audio, data and graphics. It combines functions such as network video, video conferencing, and live video broadcasting. Network capabilities. It is an integrated multimedia service transmission platform built on a LAN/Internet network and supporting multiple transmission methods. Its characteristics and advantages are mainly reflected in the digital, networked, intelligent, systematic and ultra-large-scale networking capabilities in multimedia applications.

4. E-IDSS analysis and decision support platform

The E-IDSS Analysis and Decision Support Platform is a comprehensive analysis platform built on DSC. It uses data warehouse and data mining technology, according to the requirements of administrative leadership for decision support consultation, completes the decision-making consulting needs of various government agencies and functional bureaus, as well as the needs of the community for expert consultation; timely understanding and access to relevant decision-making offices The required information, real-time access to relevant national policies, regulations and detailed economic report data of various industries, providing first-hand information for leadership decision-making, providing scientific basis for leadership decision-making, and providing first-class and latest industry for business unit consultation. Program. 5, E-IDSS external DSS integration platform

E-IDSS is an integrated platform that does not include all-in-one DSS in all walks of life, but provides an external DSS integration platform that provides data interfaces and provides data collection, data sharing, and data exchange capabilities. Integrate existing expert systems from various external industries into E-IDSS to serve socially relevant units. On the one hand, through the integration of more and more rich E-IDSS, and quickly have expert systems in various industries, to serve the community at low cost; on the other hand, the DSS of various industries will be improved by integrating into E-IDSS. Your own decision making and service functions. The data interface is designed for different DSS, cross-application data exchange and service interworking requirements in various industries, and XML is used as an interface for data exchange specification to complete cross-system business collaboration. It is equivalent to each DSS and the "middle bridge" with E-IDSS. Data collection is based on the established data interface standard, connecting the data of each DSS, and transmitting the data of each DSS to the DSC of the E-IDSS by using various communication methods. Multiple DSSs have been established in various industries and have certain dispersion. To ensure that policy decisions and business consultants support information consistency and integrity in the system, a shared database is required for data sharing. Data exchange is a secure, reliable, efficient, manageable, and scalable data exchange that follows a unified standard specification and is built on an ordered data structure. It consists of a data exchange service system distributed in each system and a data exchange monitoring system in the data center. Data exchange between business systems and access to shared databases is done through data exchange. The external DSS integration platform is the underlying software platform for E-IDSS core applications.

6, identification and authorization support platform

E-IDSS is closely related to government decision-making, and is connected with business consultation. It is related to whether government decision-making is scientific and reasonable, and it is related to the stability and development of social economy. Therefore, while building the entire E-IDSS system, it should strengthen the layers. The construction of the safety system to ensure safe, reliable and stable operation of the entire E-IDSS system.

The first is that we have adopted a secure network technology, such as MPLS VPN technology, to build a logical service network in the construction of the E-IDSS network, so that the lowest level of security is applied to the backbone switch. Measures can prevent users of other business systems from using the E-IDSS information resources without authorization, and prevent users of the system from entering other business logic networks. On the same physical network, logical isolation of each service network can be achieved. Since the implementation of such security measures is based on backbone routers and switches, it has a high security level.

In addition, we can also use a unified authentication and authorization center to complete the authentication and effective authorization of each business application. Improve system security at the application layer. Since each system uses a unified authentication and authorization center, each application system is prevented from establishing identity authentication at the application layer. The entire security infrastructure also includes firewall systems, virus protection systems, intrusion detection systems, audit and audit systems, security management systems, data backup and fault tolerant disaster recovery systems, physical security in the computer room, and more.

The nine functional systems include: Expert online system, file transfer management system, synchronous recording and recording system, expert online inquiry system, expert online call response system, government online decision system, auxiliary decision system, expert online information system and expert proposal management system. .

Multiple application systems are divided into two categories: the government decision-making consulting expert support subsystem and the business decision-making consulting expert support subsystem.

Core: Distributed establishment of computer network, system software and expert intelligent data warehouse; Model: Human-centered human-computer interaction with life DSS; Function: Integrate subjective initiative of decision makers with DSS expert intelligence skills In the process of support, and form a vital interaction.

1, the positioning of the application system

To realize the application architecture, we must handle the relationship between inheritance and development, and make accurate and reasonable positioning for application systems at different stages. Application system positioning method:

(1) First-level positioning structure: System positioning according to the level of state administrative agencies. Only one level is the national e-government network as the center, including the provincial sub-networks and the municipal sub-networks;

(2) Time distribution of the system: The time phase of the system includes the system to be eliminated, and the system in use System, system under development, system in planning.

2. Implementation of the application system

The implementation of the application system is a very complicated process, and there are many uncertain factors. Therefore, the implementation should be based on the service-oriented concept, implement the application system multi-layer architecture, and adopt the common, based on unified standards and specifications. A componentized development model for business functions and processes. This not only enhances the reusability and scalability of the system, but also facilitates the exchange and sharing between systems.

The goal of government business decision-making experts to support the application system platform is to support the platform of experts across the country, and integrate expert systems from various industries to achieve interconnection, data sharing, resource integration and development and utilization, and quality assurance of data consistency and integrity. It is the key basic work. Therefore, under the guidance of relevant data standards and specifications, designing data structures based on technical and management methods, and strictly following data entry and delivery processes, can provide reliable data resources for all application systems.

In order to meet the requirements of high-quality data for E-IDSS, a complete data architecture is designed. The systematic classification of data generation, transmission and use is described for each level of the data architecture. Targeted analysis is designed to provide data quality and efficiency in all aspects.

Data sources: Relevant data in government systems, enterprise CRM, etc.

Identification architecture: Using data collected in batch or real-time processing, using the collected data, identifying data objects and providing a comprehensive understanding of the consulting users.

Data Transfer Architecture: Supports technical functions for bulk or real-time data transfer between systems. Data storage: Data storage and management.

Data Analysis Architecture: Analyze processing information to improve the quality and efficiency of E-IDSS services.

Data quality assurance system

There are several links in the process from data entry to use. Each link can lead to errors. Therefore, solving the quality problem of data needs to divide the problem into different links. Rational, in order to find and correct problems early.

1. Technical means

Data input: automatic filling of fields; automatic error debugging function; logic check function based on historical data; image system.

Data storage and organization: Actively run pre-defined queries or spot checks when the system is idle, proactively determine the error in the database using a dedicated data warehouse for analysis, rather than backing up the database; Increase data security control limits the background operations on production data; The data is archived.

Data transfer and consolidation: Enhance data quality with advanced extraction, transformation, and loading; use integrated architecture to share data across systems to ensure data consistency and integration across systems; organize data across systems Go to the analytical data warehouse to support a full range of analysis.

Data application: Use advanced data analysis tools (such as OLAP, data mining, etc.) to improve analytical capabilities, streamline report work, and improve data security access control.

2. Management means

Data input: Provide sufficient training for the input personnel, pay attention to the front-end operation process; Improve the work enthusiasm and service quality of the staff; Reduce the front-end input, transfer a large amount of data to the background.

Data Storage and Organization: Reduce the time from discovery of data errors to processing for timely processing. Establish efficient, clean and secure steps to modify data errors, quickly and orderly, and have a clear history.

Data Transfer and Consolidation: Choose the best solution to design the data transfer process, ensure that each data transfer is confirmed by the data recipient; define and control the format and standards of cross-system data.

Data application: Determine the calculation method of the indicator from the business, and determine the clear calculation method and data source.

E-IDSS platform architecture

Platform architecture from platform operation and maintenance, system development, security, network and infrastructure The technical design and functional description are designed to provide an advanced, high-quality, high-performance platform operating environment for the government business decision-making experts to support the application platform data center, and ensure that all application systems have a good central switching platform.

Unified operating system version, based on the technical requirements of the integrated business system, input cost and technical support capabilities to develop a unified operating system version standard, to reduce the complexity and difficulty of operation and maintenance, to ensure the normal use of the system.

To improve the use of servers, servers are one of the most important infrastructures, and effective use can increase the efficiency of the system and the long-term investment benefits of IT. In view of the current decentralized use and management of servers, and the low utilization rate, centralized and distributed solutions can be designed that can be independently or comprehensively adopted.

1) Centralized server consolidation is the replacement of multiple small servers with powerful servers. This method can effectively improve the operating capacity and efficiency of the system and enhance the management capabilities of the system. Due to the power of large servers, when the system needs to be expanded, it can reduce the investment in new facilities to a certain extent. But powerful devices have high demands on the network and infrastructure.

2) Clustered server: A clustered server links multiple servers in a cluster to form a server group that is similar to or stronger than a large server. The running tasks are distributed to each server. Clustered connectivity provides greater system fault tolerance and scalability while enhancing centralized management and performance. When the system capacity is insufficient, just add the corresponding server to the cluster according to the actual demand. Avoid re-purchasing expensive large server investments.

In essence, to improve the use of the server, the decision-making expert supports the application system platform should also improve the existing application system and data architecture from several: Adopt the multi-layered structure of the application system, and concentrate the business logic processing to the middle layer of the application server; Centralized data backup and storage, separated from the client application interface and business logic layer on the system architecture; used for server and application server software Clustered mode linkage, as the application middle layer; use cluster to connect the database server in the data centralized storage area; Advanced system and data architecture can better understand the purpose of capacity expansion, and meet the expansion needs in a targeted manner.

Part of infrastructure technology

Storage Area Network (SAN): A Storage Area Network connects two or more storage systems to two or more servers through a hub or switch, using Fibre Channel technology to form a shareable and ready-to-use network. The data storage network that is called, usually these servers work in a cluster. The SAN interface, connected devices, communication control protocol plus additional storage devices and separate SAN servers form a SAN system.

Network Attached Storage (NAS): Traditional direct-attached storage puts storage devices directly on the server or client, and is not suitable for enterprise data collection and data sharing. The NAS storage device is directly connected to the network through a network interface and accessed by users through the network.

Public key system and digital certificate: The public key system has strong identity authentication and information encryption for both parties that need to exchange information. The key consists of two parts: a public key and a private key. After encrypting the data using any one of the keys, only the corresponding other key can be decrypted. The owner of the key first encrypts the identity data such as its own name using the private key, and together with the public key, forms a digital certificate to be stored in a place that other people can enter. When both parties need to exchange information, their respective keys play different roles.

Directory Services Technology: Each large IT system includes many different network resources such as servers and network printers, as well as a large number of system users. Directory service technology centrally stores and manages the various resources and user information of the system in a unified format. Through unified management of users, the user's identity authentication work can be centralized on the directory server to meet the requirements of single sign-on.

Virtual Private Network (VPN): The use of private tunneling technology to establish a simulated point-to-point leased line on the public network (such as the Internet) to secure the encryption and decryption of data transmission. Can be used as A secure connection between the remote system login and each internal LAN.

E-IDSS security architecture

The information security architecture consists of information security infrastructure and information security applications and security. The information security infrastructure includes public key infrastructure PKI and authorization management infrastructure PML.

1. Information Security Infrastructure

The information security infrastructure adds a common security service for application systems based on the information transmission service platform provided by the network infrastructure, providing a universal, high-performance and authorized computing platform for application systems, so-called intelligent trust. And licensing platform. The introduction of intelligent trust and authorization infrastructure enables applications to build their own security systems in a convenient and flexible manner.

The information security infrastructure uses public key infrastructure PKI, authorization management infrastructure, and time stamp service system to provide unified information security support for application engineering.

Public Key Infrastructure 基础 Basic security functions such as data confidentiality, integrity, identity authentication, and non-repudiation of behavior are primarily provided in distributed computing environments. Authorization Management Infrastructure ΡΜΙ Mainly Provides access control for applications in a distributed computing environment.

2. Information security application security environment

The main function of the information security application security environment is to enable the government business decision-making experts to support the access of the application system platform to the basic information security services provided by the information security infrastructure, and to integrate the network boundary protection and system intrusion through trust and authorization services. Various traditional information security protection technologies such as detection, system security audit, system vulnerability scanning, system security audit, virus prevention, etc., and implement consistent security management across the network through a unified security policy mechanism, and finally form a unified information identity. And the authorization platform provides powerful information security protection for the business support platform.

1, data integration For some application systems, if the business logic is encapsulated in a data storage process, or only needs to share data without sharing business logic, it can be integrated directly at the data layer.

2, functional integration

Functional integration directly calls the functions of existing systems through the API of the application system. This functional integration may be application integration at a single system level, or process integration across multiple systems, or even beyond the decision-making expert support application system. External integration of the platform.

3, presentation layer integration

This is an integrated way of accessing multiple applications with a single user interface. They look like a single application, and new interfaces may incorporate new features and workflows.

Implementation of integrated architecture

EAI products are used for the above-mentioned different levels of integration, and EAI products should include four levels of functionality.

Business Process Management: Integrate and manage existing business processes completed by the system to achieve more complex functions. Includes event-driven rules, state-driven rules, task assignment/event correlation, event escalation, and duplicate data checking.

Application System Connection: Connect to an existing system and call his function. Includes database connectivity, file transfer, enterprise package solutions, expertise, authentication and authorization, and encryption.

Translation and conversion: Translation, format conversion, formatting, etc. of the delivered messages and data. Includes syntax, semantics, XML translation, and one-to-many message splitting.

Communication middleware: Transferring messages and data between different systems. The communication middleware component supports different communication models and passes the information according to the content and context of the message.

Interface design

The network infrastructure of the entire decision-making expert supporting the application system platform mainly involves the following four types of interfaces: the external service interface of the unified application support platform, the unified application support platform and the public. The interface of the service service network, the interface of the public service service network and the classified network, and the interface between the classified network and the government-related private network.

External service interface of E-IDSS unified platform

The external service interface of the E-IDSS unified platform mainly provides access and access functions for expert consultation services to the public. In order to meet the diversified user needs of the government business decision-making experts to support the application system platform to apply public services, the interface needs to provide several typical access methods for the Internet and the telecommunications public network to facilitate the service connection of various public users of different terminal types. In.

Considering that the decision-making experts used by the public support the security of the application platform application service, the interface needs to provide basic network layer security functions. For users accessing the Internet and the telecommunications public network, network access control and information security transmission protection functions can be obtained through access authentication and VPN gateway devices respectively.

Interface between E-IDSS unified platform and public service business network

For the data exchange interface of the application layer, two levels of security functions, namely the security functions of the network layer and the application layer, need to be provided. The network layer mainly provides security protection functions for information transmission through the VPN gateway to ensure confidentiality and integrity during transmission. The application layer security function is mainly implemented through the SOAP server. The application layer combines SOAP access control technology and XML-provided element-level security functions to provide security protection for the exchanged business data.

Interface between E-IDSS unified platform and classified network

Since the classified network system mainly operates the confidential internal e-government office system, it should be physically isolated from the non-confidential e-government office network according to the requirements of the State Secrecy Bureau.

However, according to the requirements of government decision-making, the E-IDSS unified platform must exchange data with the internal confidential network to complete the leadership decision consultation. Therefore, the physically isolated interface must also provide certain data security exchange functions. The switching function is mainly implemented by a secure island switch module. Interface between E-IDSS unified platform and government-related private network

The government-related secret networks exchange and transmit confidential information through the government-related private network. According to the relevant regulations of the State Secrecy Bureau, the classified private network has adopted a large number of physical security protections in the process of construction. Security protection measures, therefore, the interface mainly provides further concealment of the internal topology structure of the classified network, as well as security isolation and operation auditing of the network interface, and further strengthens the management of confidential letters and flows.

E-IDSS video communication platform

The unique distributed structure of the E-IDSS video communication platform. In the video conferencing (communication) industry, in order to solve the problem of supporting large users and saving bandwidth, multicast technology is adopted to design the cascade server as the highest level. The government business decision-making expert supports the video communication platform of the application system platform by adopting a combination of distributed technology and multicast technology to develop a system combining distributed architecture servers and cascaded servers. It solves the bandwidth bottleneck problem of thousands of simultaneous online video consultations, and has important meanings for adapting to the government-organized and industry-wide tree-structured private network from the central->provincial->prefecture->prefectures. The video service network is connected to the network.

The application of the combination of distributed and multicast-level technologies enables government business decision-making experts to support the application platform system video communication platform to achieve true operational level.

Unique virtual server technology for E-IDSS video communication platform

The government business decision-making expert supports the application system platform video communication platform to uniquely design the virtual server technology. The so-called virtual server is virtualized into multiple servers in the same server, the same network environment, and the same software server. For users on different virtual servers, the user feels exclusive use of one server.

The importance of virtual server technology: Improve operational efficiency: In video consulting and communication leasing business, multiple enterprises share the same physical resources. Enterprise unit management needs: Large-scale unit management needs, for different levels of departments, for different levels of supervisors, allocated to use on different virtual servers, do not interfere with each other, make full use of resources. Monitoring application: Most of the monitoring information is not public Open to the public to see. A separate virtual server is typically used.

The E-IDSS new decision support system consists of the following main components, each of which can be completed by the Agent Agent.

1, problem synthesis and interaction

Responsible for human-computer interaction. Through this interface, decision makers can directly query the data in the virtual database, observe the results of online analysis and processing, and combine the qualitative and quantitative decision-making information of the inference engine to make reasonable decisions through human-machine collaboration.

2, virtual database system

Use virtual database technology to extract topic-oriented data collections from large, autonomous, and mixed data (structural and non-structured) data sources. From this perspective, virtual database technology can be used as a way to construct a data warehouse. Virtual database systems are used to manage virtual databases and accept data mining and OLAP query requests to quickly and accurately capture useful information and transform it into the data formats required for data analysis and data mining.

3, data mining

Data mining can extend the depth of OLAP analysis and mine complex patterns hidden in the depths of data that OLAP can hardly find in order to provide decision makers with high-level knowledge support or a rich knowledge base. Constant updating of data can result in changes in mining knowledge. Moreover, the interests and requirements of decision makers are also changing.

4. Inference engine

Complete the reasoning function of the expert system to help decision makers to demonstrate or provide decision makers with alternatives (such as providing similar cases through case-based reasoning). For decision-making situations where the model is used less frequently, the model management of the traditional decision support system and the interface design work with other components can be reduced.

5, knowledge base

Knowledge for storing data mining. Also interact with experts to get, change, and not Improve the quality and quantity of knowledge and improve the reasoning ability of the inference engine. The knowledge base is managed by the knowledge base management system.

In an era of increasingly competitive knowledge-based markets, policymakers urgently need accurate and timely information and knowledge support. The emergence of virtual database technology solves the problem of information integration and unification of guided multi-data sources, and is especially suitable for DSC to integrate the needs of various industry expert systems. At the same time, the data sets in the virtual database from different data sources in the form of a unified relational database system provide good data support for data mining, which is convenient for mining high-quality decision-making knowledge and improving decision support capabilities.

The E-IDSS platform payment and settlement system uses mature, stable and secure payment by commercial banks and UnionPay. The specific performance is directly connected to the commercial bank payment system, and the settlement is unified through the UnionPay settlement system.

Brain Bank · China E-IDSS and commercial bank jointly issued a joint expert credit card, which is not technically a common credit card that is commercially available. It completely adopts the commercial bank magnetic card rules in technology, and embeds a 13.56M-sized RFID chip in the card as an expert to store its own, brain bank · China E-IDSS platform internal financial system as a carrier.

On the one hand, it completely breaks through the bottleneck of the existing magnetic card credit card technology (cannot write more information, only store account information), so that the existing credit card technology application can be applied in one step into an RFID expert credit card. On the other hand, it makes the expert credit card safer, more stable and more reliable. On the more important aspect, the RFID expert credit card realizes the operability of the internal financial system of the brain library·China E-IDSS platform without breaking the existing financial system planning, and the actual financial system and brain bank through RFID chips. * China's E-IDSS internal virtual financial system exchanges and interacts, and technically realizes the purpose of going from system to tradition, tradition and system.

Claims

Claim

1. An expert support application system platform for government business decision making, using a computer system, a storage system, a network system, and a multimedia system as basic hardware conditions, wherein the application system platform includes the following:

a. Decision-making expert interactive intelligent support center, which is a center that supports decision-making in combination with all other intelligent groups that support the decision-making, including computers;

b. Two interfaces, including the internal information exchange interface of the e-government network, and other relevant social unit information exchange interfaces; the establishment of the exchange front-end machine, deployed in the intranet part of the government, according to the actual connection situation, the decision-making consulting expert interactive intelligent support The central office and the administrative office business system of the government intranet use the means of data import and export through the network or the storage medium to realize data exchange and conversion, and the formed connection is a secure interface; the structural design of the shared database of other related social unit information exchange interfaces And definition, shared database security management design and definition, database user rights management;

c. Three systems, including: expert support system standards and technical support systems, e-government decision support systems, and economic operation consulting service systems;

d. Six platforms, including: information release and service platform, analysis and decision support platform, resource intelligence platform, multimedia information transmission platform, external decision support system integration platform, and identity and authorization support platform;

e. Nine functional systems, including: expert online system, file transfer management system, synchronous recording and recording system, expert online inquiry system, expert online call response system, government online decision system, assistant decision system, expert online information system and expert proposal Management system; f, multiple application systems, including: government decision-making consulting expert support subsystem and business decision-making consulting expert support subsystem.

2. The system platform according to claim 1, wherein the technical support system of the expert support system standard and the technical support system is divided into an application environment, an application area boundary, Network and telecom transmission, security management center and password management center.

3. The system platform according to claim 2, wherein the information release and service platform is directed to government agencies and social units, introduces the workflow and overall dynamics of the decision system, issues key information of various industries, and introduces decision-making methods. And tips, publish some relevant case studies, provide personalized professional services, and conduct online value-added services.

4. The system platform according to claim 3, wherein the analysis and decision support platform is established in an intelligent support center for decision-making consulting experts, using data warehouse and data mining technology, according to requirements of administrative leadership for decision support consultation. Complete the decision-making consultation needs of various government agencies and functional bureaus, as well as the needs of the community for expert consultation; timely understand and obtain the information needed for relevant decision-making, and obtain relevant national policies, regulations and economic operations in various industries in real time. Detailed report data, providing first-hand information for leadership decisions, providing a scientific basis for leadership decisions, and providing first-class and up-to-date industry solutions for business unit consulting.

The system platform according to claim 4, wherein the resource intelligence platform comprises a knowledge base intelligence body, a database intelligence body, a model library intelligence body, a method library intelligence body, a graphic, an image intelligence body, and an expert completion. The invocation of various resources by the body group.

6. The system platform according to claim 5, wherein the multimedia information transmission platform is built on a local area network/internet network and supports multiple transmission modes, including computer network, communication, video processing, streaming media, and Automation technology; its transmitting and receiving sites have image quality control functions to adapt to the unstable Internet transmission rate; multiple types of compression technology for images to adapt to different image resolutions and environmental requirements ; When the Internet channel transmission rate is poor, the adaptive function can be started.

7. The system platform according to claim 6, wherein the data exchange adopted by the external decision support system integration platform is in accordance with a unified standard specification, and is manageable and scalable based on an ordered data structure. The data exchange consists of a data exchange service system distributed in each system and a data exchange monitoring system in the data center.

The system platform according to claim 7, wherein the identity recognition and authorization support platform uses a secure network technology to construct a logical service network, and the lowest level security measures are applied on the backbone switch, on the same physical network. It can realize the logical isolation of each business network; use the unified authentication and authorization center to complete the identity verification and effective authorization of each business application; the whole security infrastructure construction also includes firewall system, virus protection system, intrusion detection system, log and audit System, security management system, data backup and fault tolerant disaster recovery system, computer room physical security system.

9. The system platform according to claim 1, wherein the computer system comprises a server, and the server adopts two types of centralized and clustering, which can be independently performed or integrated mode; centralized server integration is powerful. The server replaces multiple small servers; the clustered server links multiple servers in a cluster to form a server group that is similar to or larger than the large server and distributes the running tasks to each server.

10. The system platform according to claim 1, wherein the network system comprises network attached storage, a public key system and a digital certificate, a directory service technology, and a virtual private network, wherein:

The network attached storage is directly connected to the network through the network interface, and is accessed by the user through the network;

Public key system and digital certificate: The key has two parts, the public key and the private key. After encrypting the data with any one of the keys, only the corresponding other key can be decrypted; First, the identity data is encrypted by using the private key, and together with the public key, the directory service technology is formed: the various resources of the system and the information of the user are collectively stored and managed through a unified format;

Virtual Private Network: Use private tunnel technology to establish a simulated point-to-point leased line on the public network, securely encrypt and decrypt data transmission, and use it as a remote system login and internal A secure connection between the local area networks.

11. A method for constructing an application system platform for an expert in government business decision making, comprising the steps of:

Data source construction, data collection of relevant data in government OA and enterprise CRM business systems; identification architecture, using batch or real-time processing technology, using the above collected data, identifying data objects and having a comprehensive understanding of the consulting users;

Data transfer architecture, supporting batch or real-time data transfer between systems; data storage, data storage and management;

The data analysis architecture analyzes and processes information to improve the quality and efficiency of government business decision-making experts in supporting application platform services.

12. The method of constructing a system platform according to claim 11, further comprising the following data quality assurance system:

When the data is input, it is ensured that there is automatic filling function of the field, automatic error debugging function, logic checking function according to historical data, and image system;

Data storage and organization actively run predefined queries or spot checks when the system is idle, proactively determine the error in the database using a dedicated data warehouse for analysis, rather than backing up the database; increasing data security control limits the background operations on production data; Data archiving; data transfer and consolidation use advanced extraction, transformation, and loading to enhance data quality; use an integrated architecture to share data across systems to ensure data consistency and integration across systems; The data is organized into an analytical data warehouse to support a full range of analysis;

Data applications use advanced data analysis tools to improve analytical capabilities, streamline reporting, and improve data security access control.

The method for constructing a system platform according to claim 12, wherein the method for constructing includes a security construction method of the system platform: Information security infrastructure: Based on the information transmission service platform provided by the network infrastructure, a universal security service for application systems is added to provide a universal, high-performance and authorized computing platform for application systems, so-called intelligentization. Trust and Authorization Platform; it includes Public Key Infrastructure PKI, Authorization Management Infrastructure PMI, and Time Stamp Service System. Public Key Infrastructure PKI provides data confidentiality, integrity, identity authentication, and behavior primarily in a distributed computing environment. Reliable basic security functions; Authorization Management Infrastructure PMI mainly provides access control functions for application systems in distributed computing environments;

The information security application security environment integrates traditional information security protection technologies through trust and authorization services, and implements consistent network security management through a unified security policy mechanism. The information security protection technologies include: , System Intrusion Detection, System Security Audit, System Vulnerability Scan, System Security Audit, and Virus Prevention Technology.

The method for constructing a system platform according to claim 12, wherein the method for constructing includes an integrated construction method of the system platform:

a, data integration, packaging business logic in the data storage process, sharing data without the need to share business logic, can be directly integrated in the data layer;

b. Function integration, directly calling the functions of the existing system through the API of the application system. This functional integration may occur at a single system level, or may span multiple systems; c. Presentation layer integration, with a unified The user interface to access multiple applications, making them look like a single application, with new features and workflows added to the new interface.

15. The method for constructing a system platform according to claim 14, wherein the integration of the system platform is performed by using an EAI product, wherein the EAI product comprises four levels of work process management: a service completed for an existing system. Process integration and management for more complex functions, including event-driven rules, state-driven rules, task assignments/things Correlation, event escalation, duplicate data checking;

Application system connection: Connect with existing systems, call his functions, including database connection, file transfer, enterprise software package solution, expertise, authentication and authorization, encryption;

Translation and transformation: Translating and translating messages and data, format conversion, formatting, including grammar, semantics, XML translation, and one-to-many message splitting;

Communication middleware: Transferring messages and data between different systems. The communication middleware component supports different communication models and passes information according to the content and context of the message.

The method for constructing a system platform according to claim 12, wherein the method for constructing includes an interface construction method of the system platform:

External service interface: It provides access to the public consultation service for the public. The interface needs to provide access to the Internet and the public network of the telecommunications to facilitate the service access of public users of different terminal types. The network layer security function; wherein the user accessing the Internet and the telecommunications public network can obtain the network access control and the information security transmission protection function through the access authentication and the VPN gateway device respectively;

Interface with the public service service network: For the data exchange interface of the application layer, two levels of security functions, namely the security functions of the network layer and the application layer, need to be provided; wherein the network layer mainly provides security for information transmission through the VPN gateway. Protection function to ensure confidentiality and integrity during transmission; while application layer security functions are mainly implemented through SOAP server, focusing on the application layer combined with SOAP access control technology and element-level security functions provided by XML. Exchange security of business data;

Interface with the government-related private network: exchange of confidential information through the government-related private network Transmission, providing further hiding of the internal topology of the classified network and security isolation and operational auditing functions of the network interface, further strengthening the management of the confidential information flow.

The method for constructing a system platform according to claim 12, wherein the method for constructing a video communication method of the system platform is further included:

Video communication adopts a combination of distributed technology and multicast technology, and a combination of distributed structure server and multicast server; video communication is also virtualized into multiple servers in the same server, the same network environment, and the same software server.

18. The method for constructing a system platform according to claim 12, wherein the method for constructing includes a method for constructing a payment and settlement system of the system platform:

a. The mature, stable and secure payment of commercial banks and UnionPay adopted is directly connected with the commercial bank payment system, and unified settlement through the UnionPay settlement system;

b. Co-issued a joint expert credit card with a commercial bank, which is a commercial bank magnetic card and is embedded with a large-capacity RFID chip.