Контрастність
Шрифт

Framework

By analogy with the ISO 42010 standard, the INFOTECH framework defines and specifies the architectural levels that make up modern corporate information systems:

scales icon

Level 1: Legal and documentary

CRM, PKI X.509

According to the framework, the upper sixth level defines BPMN processes according to which the legal relations of electronic document management are reflected. Each step of such a process and all its documents are signed with the personal key of the official's QES, which allows for disputes and investigations by the Ministry of Justice of Ukraine. In addition, this level of the system is focused on analytics in interaction with citizens through the system of electronic interaction of executive authorities.

In 2022, ERP.UNO legal and documentary systems will be built on the Facebook RocksDB single key space storage, which can work via Intel SPDK on NVMe disks, for example, as part of such storage as CEPH. The volume of documents in large enterprises reaches 1TB per year.

ДСТУ: 28147, 4145. ISO: 19510, 19514, 42010, 18033, 14888, 10118, 10116, 15946, 29146.

doc-box icon

Level 2: Accounting and registration

ERP, ArcGIS

The account-registry tier offers a low-level, scalable, distributed log data and metadata store that can be built on relational databases, databases with a single key space with consistency guarantees (chain-hash), or combinations of these.

Classical representatives of this level in enterprise management systems are human and material resource management systems, PCI DSS banking systems, warehouse systems, supply and production management systems, service systems, project management systems, etc.

ISO: 9075, 27001. RFC: 7363, 6350, 4180.

laptop icon

Level 3: Connectivity of people and devices

IoT, GPS

The people and devices connectivity layer defines the communication protocols and technologies that connect the main resources of an enterprise (devices and people) into a single telecommunications network. Typically, a production facility consists of many devices that connect to industrial buses such as MQTT and user workstations.

In terms of products, this level is usually represented by corporate communicators and dashboards where robotic equipment is monitored: devices, sensors, etc.

Enterprise resources - people and devices are usually stored in the LDAP directory of the enterprise.

ISO: 19464, 20922, 21823, 27402, 30161, 30165. RFC: 8567, 9006, 9011, 9019, 9159, 9100, 8323, 7815, 7228, 6455.

doc-drawer icon

Level 4: Platform

MQTT, WebSocket

The platform layer defines the means of memory (persistent and volatile) and computing resources (via message delivery processing brokers). This layer defines relational databases and databases with a single key space, as well as standards and protocols for transferring information in industrial ERP systems, such as CSV, JSON, SOAP, BERT, ASN.1, etc.

link icon

MQ

  • CSV/CSM
  • SOAP/XSD/XML
  • JSON/JTD
  • GRPC/MQTT
  • WS/BERT
  • MQTT/BERT
  • TCP/ASN.1
link icon

DB

  • Mnesia
  • RocksDB
  • Cassandra
  • Oracle

RFC: 8927, 8259, 4627, 7493, 7159, 4227, 3288, 6025, 5911, 4120, 4122, 7363, 6537, 6940, 7890.

clip icon

Level 5: Data schema

UML, System F

The data schema level defines the data storage model both in terms of entity objects and in terms of technologies and protocols that are needed to describe them.

This is mainly the Zakman Framework and the family of standards that describe UML.

ISO: 20452, 42010, 19501, 19505.

lock-key icon

Level 6: Security

CA, NS, LDAP, ABAC

The security level defines the scheme of functioning of the main central certifying authority, accredited key certification centers, encryption and signature protocols, enterprise directory, and Internet protocols for naming resources. Everything is defined according to the ASN.1 specification. INFOTECH is the holder and author of all implementations.

link icon

CA

  • CSR
  • OCSP
  • ECC
  • RSA
link icon

NS

  • UDP/DNS
  • DNSSEC
link icon

LDAP

  • TCP/LDAP
  • X.509
  • CMS
link icon

ABAC

  • PEP
  • PDP
  • PAP

ISO: 8824-8825. RFC: 2251-2256, 6960, 5280, 1034-1035, 4033-4035. NIST: 800-162.

System features

The features of the MIA: Registers system are in close integration with the MIA: Document Management system, which contains regulatory documents with electronic signatures and/or seals (QES, DSTU 4145), based on which the creation, modification, and deletion of register objects are carried out. MIA: Registries support retrospective historical search, integration with geographic information systems (GIS), and the BPMN process management system, which are the basis for formalizing a subject-oriented analytical model.

tools icon

Functional Capabilities

  • creation, modification, and deletion of registration objects based on legal documents with electronic signatures and electronic seals;
  • support for the retrospective and historical presentation of transactional data;
  • unified management of registers;
  • support for the life cycle of registration objects;
  • ensuring collective inter-organizational work with registries;
  • ensuring confidentiality (GDPR, X.509);
  • access control based on ACL, RBAC;
  • an orchestration of formal processes that formalize work with registries (BPMN);
  • archival work;
  • work with extracts;
  • integration with external systems (MIA: Document Management, ESRI ArcGIS);
  • clear and simple API.
chain icon

Implementation

  • ERZ (Unified Register of Weapons of the National Police of Ukraine) SUSZCZ (System for Management of Forces and Means of Civil Protection of the State Emergency Service) YIS (Unified Information System of the Ministry of Internal Affairs) FP MTRZ (Functional Subsystem for Material and Technical Resources of the Ministry of Internal Affairs) GSC (Main Service Center of the Ministry of Internal Affairs).
registers icon

Types of registers

  • registers of registers (meta-level)
  • registers of subject-oriented vocabularies (nomenclatures, reference books)
  • person-oriented registries (individuals/legal entities, investigations)
  • registers focused on material values (state property, weapons, transportation)
  • registers focused on geographical objects (addresses, territorial communities)
  • event-oriented registers (emergency registration, case systems)
hand-right icon

Classification of functional and technical requirements

  • Requirements for the user interface
  • Requirements for system administration
  • Requirements for typical business processes of the system
  • Requirements for the processing system
  • Requirements for integration with external systems
  • Requirements for work distributed in space and time
  • Requirements for a set of security measures
  • Technical requirements for data storage