The source of this information is open to the Internet and is for personal study only. Please do not use it for commercial use. If there is any infringement, please contact to delete it.
1.1.1 Project Construction Tasks
Relying on the provincial government cloud platform; establish the collection, sharing, exchange of water conservancy professional data, water conservancy database, data warehouse, data resource directory and big data services, etc.; establish water conservancy big data analysis technology and decision support model platform framework; establish a micro-service architecture Water conservancy business service resource library, unified water conservancy information service access interface; access and integrate various data resources, model resources, service resources and application resources through a map; basic resources, data resources, model resources, service resources Unified development, registration, release and management. Ultimately realize the province's "smart water conservancy" "front-end integration, data capitalization, service value, management and control visualization, and display modernization." Promote the in-depth reform and development of provincial water conservancy information.
Figure 1 Project construction content
1.1.2 Scope of project construction
(1) Scope of project construction: This implementation plan is applicable to the integration and sharing of water conservancy information resources in this province, involving the accumulation of water conservancy work in the provincial water conservancy department, the provincial defense office, the units directly under the water conservancy department, and the city (state) water affairs bureau. It is a collection of various information activity elements with information as the core, covering data resources, business applications, infrastructure, security systems, and technical support conditions.
(2) Scope of data integration and sharing: Starting from the functions of administrative approval, administrative supervision, administrative law enforcement, and emergency management, focusing on the core business needs of the Provincial Department of Water Resources, such as flood control and drought relief, water resource management, and engineering construction management, focus on clarifying and sorting out data requirements and data results, the types of integrated data include but are not limited to water conservancy projects, rivers and lakes, hydrology, drinking water safety, water intake, river sewage outlets, water administrative law enforcement, etc. Including various data resources newly added during the project construction period.
(3) Application system integration scope: Concentrate on the core business application systems that have been built by all units in the hall, including the new business application systems during the project construction period.
1.1.3 Project construction basis and compliance standards
The project construction is based on the "Thirteenth Five-Year Plan for the Development of Water Conservancy Informationization" (Shui Gui Ji [2016] No. 205) issued by the Ministry of Water Resources, the "Thirteenth Five-Year Plan for National Economic and Social Winning the Battle of Poverty Alleviation and Development and Ensuring the Simultaneous Construction of a Moderately Prosperous Society" (Chuan Wei Fa [2015] No. 10), "Opinions of the General Office of the Communist Party of China and the General Office of the People's Government on Innovative Mechanisms to Promote Water Conservancy Supporting the Construction of Happy and Beautiful New Villages" ( Sichuan Commission Office [2016] No. 18) and other plans. On the basis of following the relevant national standards, the project construction follows the Ministry of Water Resources' "Top-Level Design of Water Conservancy Information Resources Integration and Sharing" (Water Information [2015] No. 169), "Top-Level Design of Water Conservancy Network Security" (2017), "Water Conservancy Object Classification and Coding General Principles", "Water Conservancy Data Catalog Service Specification", "Water Conservancy Engineering Code Compilation Specification" (SL 213-2012), "Water Conservancy Data Center Construction Guidance and Basic Technical Requirements" (Shuiwen [2009] No. 192) and other industry standards, Implement the Ministry of Water Resources' "Water Resources Information Network Identity Authentication System and Digital Identity Certificate Management Measures" and other systems.
1.1.3.1 Principles of project construction
According to the policies, standards and guidelines issued by the Ministry of Water Resources and the information construction of the Water Resources Department, and according to the business characteristics of the Water Resources Department, the following basic principles should be adhered to in the construction of the "Data Governance of the Water Resources Department" project: Based on the characteristics, serve the future; Strengthen leadership and overall planning; unify standards, each responsible; integrate innovation, integrate and share; one source, one source for multiple purposes; safety priority, stability and reliability; urgent use first, orderly advancement; sound mechanism, clear responsibility.
1. Based on the characteristics, serve the future: With the support of big data technology and data sharing technology, build the data governance project of the Water Conservancy Department, and make full use of "cloud computing, Internet of Things, mobile Internet, big data, artificial intelligence) A brand-new provincial-level shared platform service system for water conservancy informatization will be built with advanced information technologies such as satellite remote sensing, navigation and positioning, and gradually realize the "big water conservancy" with thorough perception, safety and efficiency, intelligent decision-making, and active service.
2. Strengthen leadership and unified planning: start with top-level design, conduct unified planning for the project, formulate scientific implementation plans, technical standards and data specifications, and achieve the goal of "unifying technical architecture, strengthening resource integration, promoting information sharing, and ensuring sound operation" The realization of the project solves the overall problems such as project fragmentation, low-level redundant construction, scattered information resources, low development and utilization efficiency, and insufficient integration and sharing of information resources during the project construction process.
3. Unified standards, each responsible: Adhere to the construction concept of standards first, follow the four-step principle of "one national standard, two departmental standards, three provincial standards, and four self-construction". The formulation of standards must take into account the current level of information technology , it is also necessary to foresee the development of information technology in the future, establish a standard system that is closely connected, coordinated with each other, clearly structured, reasonably constituted, mutually supported, and meets the needs, and strictly implement it, so that the standard system becomes a unified guide in the project construction process. unique principle.
4. Convergence, innovation, integration and sharing: Data governance projects need to integrate different resources according to the system. The key to the realization is to solve the interconnection and interoperability problems between systems. It is necessary to coordinate multi-vendors, multi-protocols and face various Apply difficult problems. This needs to solve all kinds of equipment, interfaces between subsystems, protocols, system platforms, application software and all integration-oriented issues related to subsystems, organizational management and staffing. Finally, the implementation goal of "a game of chess horizontally and a line vertically" will be achieved.
V. One source, one source, multiple uses: According to the principle of "one source, one source, multiple uses", formulate the data integration and sharing standards of the Water Resources Department, establish a catalog of water conservancy information resources, and establish an intelligent, open, and scalable Municipal water conservancy data fusion architecture. Integrate water conservancy business data across the province in accordance with unified data standards and unified access services. In order to build a water conservancy data exchange database based on various water conservancy business data, provide a vertically connected and horizontally interconnected networked data exchange sharing system and a water conservancy data exchange system, clarify the authority of data management, and establish data collection and storage throughout the life cycle , exchange, update, sharing and security management methods.
6. Build urgently and advance in an orderly manner: the data governance project of the Water Resources Department is a complex project, involving various levels such as big data services, data integration, standard formulation, and GIS map construction. Under the guidance of standards first, distributed implementation can be carried out, so that key systems and emergency systems can be built first, and the strategy of step-by-step implementation is adopted to complete the construction tasks in stages and batches.
7. Improve the mechanism and clarify the responsibilities: the data governance project of the Water Resources Department has urgent requirements, heavy tasks, high technical requirements, and difficult promotion. It requires the unified planning of the Water Resources Department, and the joint efforts of various departments and city and county water resources bureaus to strengthen organization and leadership. The project started Finally, a special leading group should be established together with the construction unit to improve the project management organization, designate special personnel for the project, implement relevant tasks, and clarify relevant responsibilities.
1.1.1 The overall design idea of the project
Build a "smart water conservancy" technical support system to create an "overall water conservancy" with integrated and efficient operation. Break down the internal business barriers of each department, integrate resources, optimize processes, and improve cross-departmental collaboration capabilities with an overall and holistic approach; further enhance the sense of gain for enterprises and the public with integrated, convenient, and intelligent management and services.
Based on the "overall thinking" of "smart water conservancy" reform, and drawing on Internet thinking such as "user thinking, traffic thinking, platform thinking, and cross-border thinking", the "Internet thinking of water conservancy services" is formed. One is to adhere to the "people-centered" approach and optimize the government service process and application design from the perspective of user experience; the other is to test the effectiveness of government services based on the results of the masses' "whether they come to use them and whether they like to use them"; the third is to use the "big platform, The new model of intensive construction with small front-end and rich ecology will change the situation of scattered systems and numerous chimneys; the fourth is to change the traditional construction operation management model, introduce Internet culture in the construction of "smart water conservancy", absorb "fast iteration", "small steps and fast The fifth is overall consideration, from technological innovation to business innovation, from management innovation to system and mechanism reform, to systematically promote the reform and construction of "smart water conservancy".
To promote the reform and construction of "smart water conservancy", we must pay attention to handling the "five relationships":
One is the relationship between up and down. The reform of service organizations requires that, in accordance with relevant national standards and regulations, be connected with relevant national platforms and systems, and open up information channels from top to bottom.
The second is the relationship between left and right. Grasp the window period of institutional reform in the province, focus on solving problems such as system integration and data sharing standards after institutional reform, vigorously develop business collaboration, and improve the efficiency and effectiveness of the overall government.
The third is the relationship between front and back. Integrate, optimize and upgrade the existing information infrastructure and application systems of various departments, realize the full utilization and application of existing assets, and maximize the value of financial investment.
The fourth is the relationship between inside and outside. Establish an operation mode that integrates the government's internal operations and external services, and the improvement of external service capabilities will force the improvement of internal operational efficiency and achieve a higher level of external service.
The fifth is the relationship between unity and division. Scientifically and rationally divide the relationship between provinces and cities, business departments and technical departments, etc., clarify the relationship between "unification" and "division" in construction and operation, and ensure that the province's "smart water conservancy" construction is coordinated and in step.
1.1.2 The overall structure design of the project
According to the overall goal of smart water conservancy construction, it is oriented towards the intelligentization of water conservancy business at all levels, based on the intelligent monitoring system integrating space and ground, with the water conservancy infrastructure sharing platform and water conservancy big data center as the core, with intelligent applications as the symbol, and with security systems, The standard specification and operation and maintenance system are the guarantee, and the top-level design structure of water conservancy informatization is formed. The schematic diagram of the top-level structure design is shown below.
Figure 2 Schematic diagram of the top-level architecture design
The first layer: basic data layer: mainly includes intelligent monitoring system, water conservancy high-speed Internet information network.
Ø Terminal perception layer, space-ground integrated smart monitoring system
It is not only the collection end of future perception information, but also the terminal of intelligent applications. In order to adapt to the requirements of informatization, comprehensive perception, and intelligent applications, it is inevitable to force and lead the technological innovation and technological revolution of application terminal equipment. This is the driving force, which is enough to give birth to the new development of the water conservancy industry. Unified planning, unified design, unified construction, and unified investment for key river sections, key projects, and key applications. A large number of terminal equipment on the surface, on the basis of standardization, standardization, and productization, will be included in the construction, expansion, reinforcement, and maintenance of water conservancy projects in the future.
Ø Network layer , water conservancy high-speed Internet information network
The water conservancy information network connects various subjects and objects in "smart water conservancy" and provides transmission services for various data of "smart water conservancy" in the subject and object. According to different environmental conditions, it is constructed in various ways such as relying on government affairs network, leased public network, and self-built private network. and related units. The water conservancy information network includes a hydrological business network and an industrial control network. The water conservancy business network covers water conservancy departments at all levels and carries various hydrological information systems. The water conservancy industrial control network covers water conservancy projects and their management units at all levels and carries various water conservancy project control systems. The network is relatively independent, and only strong controlled connections are made between nodes at the same level as needed.
The second layer : cloud support capability layer and big data center
The construction of "smart water conservancy" is an important way to realize the deepening of "reform and opening up" and further "emancipation of the mind". The system construction must fully consider the integration and sharing with the provincial "Government Cloud". Realize the "vertical alignment" with the Ministry of Water Resources, river basins, provinces, cities, and counties to achieve a horizontal game of chess with the provincial "government cloud". By improving the ability to obtain data resources, integrating various types of water conservancy data, establishing a directory of water conservancy data resources, and improving the data update mechanism, a water conservancy data system with unified standards and continuous updates will be formed. In the later stage, it will be obtained through system perception, migration, entry, and sharing, or All information produced by system integration must be stored according to the new rules. Realize the full sharing of big data.
The third layer: intelligent application system
Water conservancy intelligent applications include seven categories of water resources, water disasters, water ecology/water environment, water engineering, water administration, and water public services. With the support of cloud support platforms and big data centers, this "smart water conservancy" planning and construction of hydrology and water Intelligent application systems such as intelligent application of resources, grid-based monitoring and early warning, "Internet + supervision service", joint dispatch of water engineering disaster prevention, and intelligent application of public services.
The fourth layer: intelligent display
It mainly builds a digital water conservancy exhibition center, a mobile application center and a modern water conservancy transportation and management center. Using water as a medium, it explores the historical trajectory, demonstrates the unity of ancient wisdom of modern civilization and today's technology, and demonstrates the integration of profound history and modern civilization. Through the province's "water conservancy map" to display the overall picture, characteristics, parameters, functions, benefits, etc. of the province's hydrological information.
1.1.3 Project data architecture design
According to the architecture, the process of data life cycle management, the functional components participating in the process and the relationship between data are described. The data architecture flows step by step around big data and hydrological business applications from data aggregation, data collation, data storage to data service, and data application. Through data scheduling, data monitoring, metadata management, data quality, and data standards, improve the data update mechanism to form a standardized and continuously updated hydrological data system, oriented to data resource applications and services, and make data truly alive. Water conservancy and water conservancy business application data and big data use the global data collection of the data resource pool, standardize the data structure, deeply extract data value, unify data resource management and thematic services, support water conservancy business application and management decision-making, and provide information for the Provincial Department of Water Resources Construction provides strong support for the development of big data and intelligence. The data architecture diagram is shown below.
Figure 3 Schematic diagram of data architecture
(1) Data aggregation
Data aggregation is the starting point of the "smart water conservancy" data process, and it is also the embodiment of the core ability of subject aggregation. In the real physical world, water-related objects and environmental information are observed, sensed, and recorded, and a large amount of data is generated. The data of the water conservancy industry can be divided into river system data, water conservancy engineering data, groundwater data, water quality monitoring data, etc., through sensing, Positioning, remote sensing, video, manual reporting and other methods are used to observe, perceive and record it. Traditional application data is the main data source supporting traditional water conservancy business applications. The data outside the industry is the data accumulated for a long time by the effective operation of other government departments, enterprises and institutions. It serves the needs of water conservancy business and integrates comprehensive new data. These location, navigation data, and Internet data can be exchanged and purchased. The introduction of methods such as crawling and crawling is an important part of the smart application of "big data". In the process of data aggregation, the data already in the database can be sorted out according to business needs, and the data items that need to be aggregated can be sorted out to form data sharing in the way of joint modeling without database.
(2) Data collation
Data collation aims to unify and standardize the aggregated multi-source heterogeneous data, mainly to complete the logical relationship between data, so as to improve the standardization and availability of data, avoid data redundancy and duplication, and break data chimneys and inconsistencies The phenomenon. For data in the water conservancy industry, it is mainly based on certain data processing rules to complete the unified and standardized conversion of spatial coordinates, data formats, and data encoding in real time in batches, and at the same time establish object-entity relationships, and associate different data according to the principle of spatio-temporal consistency , to realize the hooking of object space information and object relationship information. Faced with complex, changeable, and innovative big data, through processes such as data extraction, cleaning, standardization, deduplication, and loading, it connects data in different fields, completes data sorting, and ensures data vitality.
(3) Data storage
Data storage is responsible for the storage and management of space-time integrated water conservancy global data. Data storage logically constructs five major libraries, including basic library, business library, theme library, shared library, and decision-making library. It is oriented to topics such as water resources, water environment, water engineering, and water public services, and supports operations such as update, retrieval, and statistical analysis. Big data storage stores data according to structured, unstructured, semi-structured, etc., and reconstructs various mixed data such as water conservancy and hydrology, meteorology, natural resources, etc., location, navigation, video, etc. according to the characteristics of time and space Data relationships provide support for data sharing, information services, and decision support.
(4) Data service
Data services are standardized and shareable services extracted from the storage layer. "Smart water conservancy" needs to integrate its core business assets and open them to the application layer in the form of services, or integrate them by third-party applications, so as to explore business models, improve service levels, and expand cooperation space. Unified services can realize cross-system and cross-protocol service interoperability among multi-service applications in the water conservancy industry. For hydrological data models, it can be reconstructed according to data components and business requirements, and provide professional model analysis capabilities in a unified service manner to better support data applications.
(5) Data application
The data application layer is the ultimate embodiment of "smart water conservancy" for all applications in the field of water conservancy and hydrology. The core covers water conservancy business construction business application systems, public service systems, and intelligent decision-making systems. Through the construction of intelligent applications to support government supervision, project operation, and convenience services, etc., it can improve the public's ability to perceive and know water, enhance the humanistic quality of water conservation and protection in society, and improve the service level of government water management and control.
1.1.4 Project platform architecture design
The comprehensive service management platform follows the principle of "platform is the foundation, data is the core, and application is the purpose", and is designed in the mode of "platform + data + application". The platform mainly includes three parts: portal, management center and application center. The schematic diagram of the platform architecture is as follows.
Figure 4 Schematic diagram of platform architecture
(1) Application Support Platform Portal
For the ultimate business managers, it is a centralized display of all informatization achievements and a one-stop entrance for data, services and applications. The portal of the application support platform mainly includes the work area and the information area. The work area is the main area for daily business processing, and functions such as the access entrance of the application, my daily to-do, my memo, file collaboration and personal collection are designed; the information area mainly It is to obtain internal and external notices, news and other content of the organization.
(2) Application Center
Oriented to users of resources and services, it provides system developers with on-demand application services. Through the full life cycle management of applications from registration, resource application, development, and online, it realizes the isolation of business and resources, and achieves application cloud and resource sharing. , information exchange and business collaboration purposes.
(3) Management Center
Resource- and service-oriented managers provide management and operation support for applications, provide managers with a global view of resources and services, and implement resource management and control, service review and authorization, and application monitoring. The management center realizes the management of the entire construction life cycle of the application without dead ends, makes the development, testing, deployment, launch and upgrade of the application transparent, and gives the initiative of the information system development to the owner.
1.1.5 Project security architecture design
1.1.5.1 Project security architecture design
Aiming at the security risks faced by the project environment, a security architecture as shown in the figure is proposed. The security architecture takes platform security services as the core and includes five levels of security design:
Figure 5 Project Security Architecture
(1) Implement security at the base layer
From physical security (device redundancy, disaster recovery backup, RAS, HA), storage security (data encryption, key management, backup recovery), network security (next generation firewall, IDS/IPS, DDoS, attack detection), security chip (TPM/TCM), etc. provide solid and reliable hardware infrastructure for the upper layer; system security: reinforce the security of the operating system, adopt enhanced identity authentication, provide trusted software, and security audit functions. This part is composed of the original security equipment of the Water Resources Department and Integrate existing equipment.
(2) Data layer security
Based on the full life cycle of data, from the aspects of data security and privacy protection, key distribution and management, disaster backup and recovery, etc., adopt data isolation, data protection, data backup and other technologies, and perform hierarchical encryption protection according to the importance of platform business data And hardware transparent encryption to protect the availability, confidentiality and integrity of platform business data.
(3) Software security
Ensure software security in terms of identity and access management (supporting two-factor authentication, single sign-on), application security, content security, client access security, configuration security, multi-tenant isolation, and cloud application monitoring.
(4) Platform security
Starting from a secure development environment, middleware security, programming interface security, distributed security, etc., based on lightweight process isolation technology, it provides a secure environment for application development, and improves through application online physical examination (static code review and dynamic simulation operation) Platform Security.
(5) Terminal access
From the aspects of terminal security protection, terminal behavior monitoring and terminal security access, etc., the security and access of terminals are guaranteed.
1.1.5.2 Safety guarantee system organization
The information security guarantee system of this project effectively implements the information security construction principle of "synchronous design, simultaneous construction, and simultaneous operation". In order to ensure the information security of this project, a unified overall information security guarantee system will be built.
The security organization structure of this project is designed as follows:
Figure 6 Project security architecture
The construction of information security guarantee system includes three parts: security management organization, security management system and security technology system.
The space is limited and cannot be fully displayed. If you like the information, you can forward + comment, and private message for more information.