Requirements and Challenges

China will further expand social security cards application range and gradually unify social security cards according to the twelfth five-year plan. To achieve this goal, Human Resources and Social Security (HRSS) informatization must be further promoted and accelerated. At present, HRSS ICT system construction trends are as follows:

• Upper-level networks centralize data.
• Services are extended to grassroots organizations.
• All HRSS solution systems are uniformly planned and constructed.
• HRSS applications are integrated.
• Social security cards are unified to cover all services and functions.
• HRSS data is gradually centralized to accelerate big data market expansion.

During ICT development, HRSS customers face many challenges, primarily in seven areas:

Data sharing

HRSS agencies at all administrative levels separately build small data centers, following inconsistent plans and standards, leading to information silos. These information silos severely hinder data exchange, implementation of unified national medical services and social security card popularity.

System compatibility

Most small data centers are constructed by multiple equipment vendors with varying qualities and do not support data exchange, service interoperability, and service linkage. In addition, data changes on insured people or insurance services must be recorded in different systems using inconsistent data.

Decision-making and auditing

Distributed data storage and computing are not conducive to data resource mining and decision-making.

Computing capabilities

It is difficult to consolidate core computing capabilities scattered across multiple municipal data centers to develop a high-performance, centralized, and open computing architecture and enable data centralization, unified social security cards, and real-time services.

Operation and maintenance

Municipal data centers are equipped with only a small group of dedicated ICT Operation and Maintenance (O&M) personnel. Most O&M services are provided by multiple equipment vendors and providers. Even if one O&M provider is fixed as the sole provider after all data is centralized, high O&M costs, and closed data processing architecture problems remain. This hampers large-scale, highly reliable, real-time, and efficient O&M.

Application architecture

As core processing capabilities are centralized to upper-level applications, HRSS software architecture must provide load balancing, prevent single-point data storage and computing, and ensure high data processing efficiency to address distributed computing requirements.

Collaboration and supervision

Existing data centers cannot provide multi-level, multi-node, cross-department data sharing, in addition to collaborative management and unified supervision and auditing.

Huawei Solution

Huawei's End-to-End HRSS ICT Solution for Province-wide Data Centralization provides solid ICT support for social security application software and support platforms, closely integrating with system security and O&M systems.

Figure 2-1 Logical architecture

Huawei's solution sorts and consolidates service streams in all cities to develop a unified service software system, attaining an integrated social security system. A unified network and security platform connects terminals in service handling organizations, medical organizations, and communities to form a data center system that covers the human resources data center, Disaster Recovery (DR) center, and municipal sub-center. This system carries all service streams from all terminals and uses an array of hardware and software ICT systems, such as unified communications and collaborative office, to build a province-wide, layered collaboration and management system.

This solution primarily covers the following systems:

• Data center infrastructure

Huawei's solution uses a green data center design, in compliance with low-carbon footprint requirements.



• Core data processing

The storage system provides a comprehensive province-wide data view, enabling upper-level applications to centralize data scattered across municipal systems. Database servers and application servers address HRSS requirements for core data processing, high resilience, and open architecture.



• Network platform

A mix of star and ring topologies enables the access network to cover all municipal service handling organizations and develop an advanced, secure, reliable, and scalable HRSS network system.



• Security mechanism

The data center is divided into multiple zones based on differentiated security requirements, and external terminal access is strictly controlled. This ensures that data center construction is fully aligned with provincial core system security requirements.



• Multi-level collaboration and management platform

This platform supports multi-level convergent conferences, instant messaging, and desktop clouds.



• Unified O&M system

Huawei helps customers develop an integrated, function-rich O&M system by building a rich set of subsystems, including a unified O&M portal, service operating management, IT service management, centralized monitoring management, and cloud management.

Solution Highlights

Huawei offers an end-to-end HRSS ICT solution that includes the data center, computing storage, DR, network security, O&M management, and multi-level collaboration, providing powerful ICT support for HRSS customers throughout the lifecycle. This solution helps customers form an integrated ICT architecture to attain clear provincial and municipal responsibility division, internal and external HRSS data sharing, and cloud-based collaboration, as shown in

Figure 3-1.Overall architecture

This solution has the following compelling features:

• Highly available and reliable core service data processing

Virtual Machines (VMs) process services and non-core applications. Cost-efficient, open server clusters support computing capability expansion and enhance concurrent computing capabilities.




Universal standards-consistent architecture, simple O&M, and cost-efficiency reduce Total Cost of Ownership (TCO) by up to 30 percent.



• Comprehensive HRSS data center DR system, enabling application-level DR

Application-level DR for core service data enables multi-center redundancy survivability. Municipal sub-centers provide distributed processing capabilities (data preprocessing), eliminating Single Point of Failure (SPOF) risks. In other words, when the provincial data center is faulty, the municipal sub-center temporarily takes over all services.



• Distributed computing for data centralization and HRSS service requirements

The unified social security card system streamlines service, data, and management streams by consolidating application and data processing, infrastructure, collaboration management, and O&M, helping provincial data centers centralize lower-level HRSS data. The multi-center computing architecture efficiently supports core service distributed computing and provides high system performance to ensure unified social security cards.



• Multi-level HRSS network coverage to extend public services to grassroots organizations

Huawei's solution sets up a comprehensive, open HRSS network, which encompasses HRSS agencies at all administrative levels, as well as grassroots HRSS service handling and medical organizations. It supports internal service handling, government decision-making, social security funds, and information sharing to help extend HRSS services to communities and HRSS stations.



• Secure, reliable zone-based protection system for high security

Various zones, including production, exchanging, and decision-making, are uniformly planned on the social security cloud. Zone-based security protection approaches are configured on the cloud data center to comply with government security requirements.



• Unified management and collaboration, addressing data centralization requirements and support for efficient data supervision and auditing

Huawei's solution comprehensively integrates HRSS applications, including instant messaging, cloud-based office, and video conferencing, to improve multi-level collaboration and management capabilities. This solution also provides intuitive, unified, and easy-to-use O&M management by integrating network management and data center O&M.




Big data analysis and monitoring rule processing are provided to facilitate funds management.

Customer Benefits

• Big data processing, VMs at the application layer and physical database devices improve concurrent program processing capabilities by 400 percent and decrease delay by up to 80 percent.
• Large-bandwidth, reliable provincial backbone networks and multiple Virtual Private Networks (VPNs) for municipal access networks ensure higher network security.
• Full guarantees for residents' livelihood-related services and uninterrupted core system services enable HRSS systems to effectively exchange data with external systems.
• Efficient multi-level office collaboration and consolidation of Office Automation (OA) software and unified communications systems achieve one-stop HRSS service handling.
• Infrastructure and core HRSS services are uniformly managed to simplify O&M and improve O&M efficiency.