The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS...

15
交通部公路總局 Directorate General of Highways, MOTC The Third - Generation Motor Vehicle and Driver Information System (M3) Project 2017 eASIA award / Open Digital Government Chen, Shou-Chiang 2017/9/12

Transcript of The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS...

Page 1: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

交通部公路總局 Directorate General of Highways, MOTC

The Third-Generation Motor Vehicle and

Driver Information System (M3) Project2017 eASIA award / Open Digital Government

Chen, Shou-Chiang2017/9/12

Page 2: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

Evolution

1

Driver & Motor Vehicle Administration, DGH

Regional Office: 7

Local Office: 30Staff: 3,471

Training

Institution: 3

Transportation

industry: 41,270Inspection

Plant: 533

Driving

School: 233

(up to 2016/12/31)

Motor vehicles: 7,840,000

Motorcycles: 13,650,000

Total: 21,490,000(21 million)

Motor vehicles: 13,510,000

Motorcycles: 14,480,000

Total: 27,990,000(28 million)

5,450,000,000(5.4 billion)

Provide 53 Cross

agency services

Number of Motor Vehicles Number of Driver Licenses Number of Data Records

Page 3: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

Core ApplicationInnovative Services

Data WarehouseBusiness Intelligence

Cloud PlatformDigital Convergence

7 x 24 MonitoringSecurity Certifications

Design Concept

2

Prediction

Deploy

Warning

Response

User

Intelligence

Cloud

Security

SaaS

DaaS

PaaS

IaaS

Page 4: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

Implementation

3

Design

2010/6~2012/9

Build

2012/9~2015/5

Maintain

Since 2015/5

• 1 Main Subsystem

(Driver System)

• 1 Innovation Service

(MVDIS Official Website)

• Establish SOC

(Security Operation Center)

• 2014/2:20 Security Systems

• 2014/3:3 Information Services

• 2014/7:-13 Main Subsystem

-9 Information Services

-4 Innovation Services

• 2 Main Subsystem

• 2 Information Services

• 2 Innovation Services

Build Phase 2(2013/3~2014/7)

Migration

Build Phase 1(2012/9~2013/3)

Emergency Kick off

Build Phase 3(2014/7~2015/5)

Innovation

Category / Year 2013 (M2) 2014 (M2/M3) 2015 (M3) 2016 (M3)

Motor Vehicle Fuel Charges 43.8 47.4 51.3 51.6

Fees 3.2 3.2 3.4 3.4

Fines 14.3 13.7 14.9 15.9

Total 61.3 64.3 69.6 70.9

Unit: NTD Billion1USD ≒ 30NTD

Page 5: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

Private Cloud in GSN (1/4)M2 & M3 Data Center Co-exist

4

15 Main Business

Systems

1,954 functions

604 Application

Servers

676 Network Devices

From 2017/2 CA Platform

M3 NetworkM2 Network

Counter-staff can switch to M2 or M3 freely

Build Phase 2: Migration

Page 6: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

Private Cloud in GSN (2/4)Any system alert will be broadcasted via instant-message-APP (thb-Talk)

5

M3@IDCPrimary Center

GSN Taipei City

M3@IDC Disaster Recovery Center

GSN Taichung City

7 Regional & 30 Local Offices

33 External Kiosk

Build Phase 3: Innovation

Page 7: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

Private Cloud in GSN (3/4)7 x 24 Monitoring in Security Operation Center (M3-SOC)

6

M3@IDCPrimary Center

GSN Taipei City

Page 8: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

Private Cloud in GSN (4/4)International Standards & three Security Certifications

7

Scope StandardCertification

AuthorityRemark

M3 Primary CenterISO20000:2011

ISO27001:2013SGS

Approved on 2016-12-14

Valid to 2019-12-14

M3 Disaster

Recovery Center

ISO20000:2011

ISO27001:2013SGS

Approved on 2016-12-14

Valid to 2019-12-14

7 Regional OfficesISO27001:2013

BS10012:2009SGS

Approved on 2016-12-14

Valid to 2019-12-14

PIMSISMSITSM

Continuing Extend the Scope of ITSM / ISMS / PIMS

Page 9: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

Independent Verification and Validation

8

Complete

system

tests

Nationwide

online tests

Tests in

reality

• More than 500 tests were completed with about 18,500 participants.

• Unit test → Function test → Integration test → Parallel test → Depth

test → Non-function test → Source code test

• 10 nationwide exercises have been carried out on Saturdays since

January 2014. The maximum number of participants for a signal

exercise is 2,156. The total number of participants for 10 exercises is

18,738, and dealt with 340,778 cases.

• Environment test → Function test → Simulation test → Probe test

• Counter-staff can switch to M2 or M3 freely using dual route to

ensure the transaction is workable in both systems.

• Emergency response Level 1 (7/7~7/9) → Emergency response

Level 2 (7/10~7/18) → Emergency response Level 3 (7/21~7/31)

KPI: 90% of the system reactions were within 5 seconds with a success rate of

99.9%.

KPI: 90% of the system reactions were within 5 seconds with a success rate of

99.99%.

Page 10: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

Intelligences of M3 (1/3)

9

Core services

Cross Agency Services

Mission Services

M3

Cloud

N to 1 to N

Any

Taxation

Page 11: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

10

Intelligences of M3 (2/3)Mission Services

UserOrientedMy Address

My Vehicles

My Driver Licenses

My License Fee

My Ticket Fines

Nearby OfficeNearby Inspection Plant

M3 APP Multiple Media Kiosk Roadside Inspection

Page 12: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

Intelligences of M3 (3/3)Auditing all cross agencies

11

M3

Order Agency Transaction %

1 Freeway Bureau (Highway tolls) 103,424,712 29%

2 Fiscal Information Agency (Taxation) 88,893,387 24%

3 National Police Agency (Police business) 50,466,740 14%

422 County Police Department & Parking mgmt.

Office (Violation & parking fee ticketing)37,263,854 10%

5Environment Protection Adm. (Vehicle pollution

& recycling)30,236,834 8%

Total 310,285,527 85%

Leased Line

VPN

Internet

Socket Service

Web Service

File Transfer

Media Transfer

Data Link

(2015/8/1~2016/7/31)

Network

Audited in 2015~2016 To be audited in 2017

Central Authorities

En

viro

nm

ent P

rote

ctio

n A

dm

.

Min

istry

of E

co

no

mic

Affa

irs

Natio

na

l Fre

ew

ay B

ure

au

Natio

na

l Deve

lop

ment C

ou

ncil

Fis

ca

l Info

rmatio

n B

ure

au

Po

lice

Age

ncy

To

uris

m B

ure

au

Natio

na

l Imm

igra

tion

Age

ncy

Min

istry

of H

ea

lth a

nd

Welfa

re

Min

istry

of J

ustic

eJu

dic

ial Y

ua

n

Fin

an

cia

l Su

pe

rvis

ory

Com

mis

sio

n

Bu

rea

u o

f Sta

nd

ard

s

Ma

ritime

Po

rt Bu

rea

u

Con

trol Y

ua

nB

ure

au

of E

ne

rgy

MunicipalitiesTa

ipe

i City

Ta

oyu

an C

ity

Ta

ina

n C

ity

New

Ta

ipe

i City

Ta

ichu

ng C

ity

Ka

oh

siu

ng C

ity

Counties (cities)

Hua

lien C

ounty

Hsin

ch

u C

ity

Hsin

ch

u C

ou

nty

Ta

itun

g C

ou

nty

Nan

tou

Cou

nty

Cha

ngh

ua C

ou

nty

Yu

nlin

Cou

nty

Chia

yi C

ity

Chia

yi C

ou

nty

Pin

gtu

ng C

ou

nty

Yila

nC

ou

nty

Ke

elu

ng C

ity

Mia

oli C

ou

nty

Pe

ngh

u C

ou

nty

Kin

me

n C

ounty

Lie

nch

iang

Cou

nty

Page 13: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

12

M3 Data Science(1/2)Personal Information De-identification

On Going

1. Government

3. Business

2. Academic Research

4. Open Data

De-identification

Personal

Information

De-identification

Personal

Information

HashEncryption

Key

De-identification Standard• Define the classification

norm• Confirm the legitimacy• Verify the effectiveness

Data Analysis Platform• Meet the security norm• Screen recording• Provide de-identification

data for all purpose

Page 14: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

13Data Lake

Car Classification

Car Age

Car Type

Exam Unit

Exam Reason

Pass Rate

Fail Reason

Accident Record

Driver Exam Age

Driving ClassRecord

Traffic ViolationRecord

Accident Record

Driver ExamCar Exam

Accidents

M3 Data Science(2/2)Data Analysis between Accidents and M3 Exam Data

Data ScrubbingData Collation Data Analysis Data Present

On Going

Page 15: The Third-Generation Motor Vehicle and Driver Information ... ISO20000:2011 ISO27001:2013 SGS Approved on 2016-12-14 Valid to 2019-12-14 M3 Disaster Recovery Center ISO20000:2011 ISO27001:2013

Thank you for attention感謝聆聽,敬請指教

※Icons in this slide is licensed by CC 3.0 BY made by freepik, Pixel perfect, Eucalyp, Madebyoliver, Becris, Yannick, Creaticca Creative Agency, Dave Gandy,

Smashicons, Those Icons from www.flaticon.com