Research and Practice of UnionPay on Open Source Softwaredocuments.ossforum.jp/documentsfiles/3-3 Top IT Company Keynote... · （SUSE / RedHat / CentOS / Ubuntu ... Web Server Apache

Research and Practice of UnionPay

on Open Source Software

2017.11

2 | Presentation Title | XX Month Year2

2

目录1.China Unionpay Profile

2.Situation of CUP OSS Application

3.Cooperate With Open Source Community

4.Evaluation of OSS

5.Exploration of Open Source Practice

3 | Presentation Title | Client Name | XX Month Year

3

Enterprise Profile

Established in March, 2002,

Headquarters is located in Shanghai

China's bank card association which has more than 1,000 members

The core and hub of the card industry

Ensure the using of bank cards cross different banks or regions

Establishing and promoting standards in payment field

Card capacity

More than 6.2 billion cards

The top one all over the world

TradingVolume

2016: ￥ 72.9 trillion

The top one all over the world

GlobalizationCovering 160 countries and territories all over world

BrandBrand awareness in China is 99%

The top one in China


4

Organizational structure

China UnionPay

Parent Office && BRANCH

UnionPay International Co., Ltd.

China UnionPay Merchant Services Co., Ltd.

China UnionPay Data Services Co., Ltd

China Financial Certification Authority Co., Ltd.

Bank Card Test Center

UnionPay Company Service Co., Ltd.

UnionPay Smart Co., Ltd.

UnionPay Advisors Co., Ltd.

Important members of EMVCo

President of the executive council of EMVCo in 2017~2018

Leading and Establishing the special working group on “Two-Dimensional

Code Standards”


5

Enterprise development situationTo build an open and platform integrated payment service provider

In transition to a data company and a technology company.

Increase the exploration and investment of new technology and new mode,

support the rapid development of innovative products and services, improve

customer service experience.

Products

Technical Research

Service

Cloud ComputingBig Data

Artificial Intellegence

TokenSmartPOS

Quick PassUnionPay

WalletUnionPay

Two-Dimensional Code Risk Prevention

&& Contorl

Cardholder Merchant


6

目录1.Enterprise Profile



4.Evaluation of OSS



7

Situation of CUP OSS ApplicationIn 2011, CUP approved to construction the cloud computing demonstration projects of

the China's first batch. CUP uses open source technology to build the cloud platform,

achieved self-control of essential technologies . In 2013, CUP Cloud began to large-scale

applied. Until now, CUP Cloud's scale has more than 3000 units。

CUP Cloud takes business needs and financial industry requirements as direction ,

independent research the essential technologies.

VirtualizationXEN / KVM

VM ManagementOpenStack

BigdataPlatformHadoop /

HBase / Hive

OS（SUSE / RedHat / CentOS / Ubuntu）

App ServerJetty / JBoss

Web ServerApache / Nginx

Deep LearningTenserFlow

DatabaseMySQL

Distributed Storage

Ceph

SDNOVS / ODL

ContainerDocker

Container ManagementKubernetes

PaaS & DevOps Platform（Kubernetes , Ansible, Puppet, Jenkins）

Bigdata ServiceImpala/Spark

…

8 | Presentation Title | Client Name | XX Month Year8

Promote the Work of OSS

In order to strengthen the support of OSS technology in innovative research,

promote the application of open source technology in the CUP and the financial

industry. CUP together with domestic and foreign financial institutions, research OSS,

apply OSS and devote to OSS.

Research OSS Apply OSS Devote OSS


9




4.Evaluation of OSS



10

OpenStack Financial Team

OpenStack foundation

Board TC UC

• Responsible for major

decision of foundation

• Promoting OpenStack's

global influence

• Responsible for the

continuous development and

maintenance of OpenStack

• Core developer 3000+, a total

of more than 30 thousand

developers worldwide

• Promote the industry

application of Openstack

• Collect different industry

application technology

scheme

Financial

Team

Telecom

Working

Group

.

.

.

.

.

.

Industry Demand

The OpenStack foundation is a non-profit organization designed to open source software for the

construction and management of public and private cloud, is one of the world's three largest open source

foundation (Linux foundation, Apache foundation).

At the OpenStack summit held in Sydney in November 7th, the financial team was formally established


11

OpenStack Financial Team

Mission：Define the blueprint for financial cloud platform capabilities, identify

functional gaps, submit user requirements to the open source community for

upstream development and track the development progress

Financial Team

Gapworkgroup

User story workgroup

SDN researchworkgroup

Bank of Shanghai is taking the lead，participate in :Agricultural Bank of China、UnionPay 、Intel、99could

UnionPay is taking the lead，participate in : Industrial Bank 、 Bank of Shanghai、SUSE

UnionPay is taking the lead，participate in Industrial & Commercial Bank of China、Bank of Communications China、 Bank of Shanghai、Intel、99cloud、Fudan University

Define work objectives, organize and coordinate member, and promote achievement release


12




4.Evaluation of OSS



13

Open Source Software(OSS) Evaluation System

OSS Application and Optimization

OSS Management

OSS Selection Experiences

In order to promote a better application of OSS, relying on the CUP National

Engineering Laboratory of E-payment and E-commerce, financial industry OSS

evaluation system is established based on the experiences of Cloud Computing

Platform construction.

OSS Application Requirement in Financial Industry

OSS Evaluation

Model

Service Provider

Evaluation Model

Specification and Standards Of OSS Evaluation in Specific Domains

OSS Evaluation Implementation

OSS Evaluation Tools


14

OSS Evaluation Model

Intellectual property

and legal protection

Applications

and usage

Community developments

and attentions

Documentation

and supports

Defects and loopholes,

Confidentiality, Integrity,

Anti-repudiation

Operating environments,

API ,Data

Open-source License

Profession Approbation

ActivenessService Support

Security Compatibility

Maintainability

Scalability

Functionality

ReliabilityUsability

Performance

Based on characteristics of OSS and needs of the banking industry, the evaluation model that

containing 12 evaluation criteria and 117 evaluation indexes is established, which conforms

to the national standards of GB/T 25000 and GB/T 31495 series. Compared to the domestic

and foreign evaluating model, it is easier to measure and implement.


15

OSS Evaluation Implementation

Financial SDN Evaluation Model

SDN Network

SDN

Controller

Evaluation

Physical

Switching

Network

Virtual

Switching

Network

Network

Function

Virtualization

Evaluation Model

2 levels

5 aspects

Functionality Performance Usability Security

Maintainabili

tyReliability Scalability Compatibility

P2P

Network

Smart

Contract

Consensus

Algorithm

Account

System

Privacy

Security

Based on the evaluation model of OSS maturity, domain evaluation models are established

specific to SDN, SDS and Blockchain. The mainstream OSS and commercial softwares are

evaluated, which applied to company's technology selection and practical application.

Financial SDS

Evaluation

Model

Functionality

Performance

Reliability

Usability

Scalability

Financial BlockChain Evaluation Model


16




4.Evaluation of OSS



17

TEEI（Trusted Execution Environment Integration）

Requires two execution environments based on hardware separated mechanism for more

security and better user-experiences

The aim is：• to make open devices more secure

• to make secure devices more open

• to deploy applications more widely

• to make multi-party cooperation smoothly


18

TEEI Open Source

Non-secure Hardware

TEEI

REE

ITS TEE N3TEE

SENFC OtherDevices

UnionPay Trusted Platorm

TEEI Open source include TEEI OS、Android related Device Drivers and SDK

tool chain for trusted application development

Secure Hardware


19

TEEI Community

Chip

vendorsTerminal

Manufacturers

System

Developers

Application

Providers

Platform

Operators

Certification

Laboratories

Laboratory

Organization Management

Code Management

Community Management


20

More infomation，please pay attention to WeChat Official Account of National Engineering Laboratory for Electronic Commerce and Electronic Payment ！

Thanks！

Documents

Research and Practice of UnionPay on Open Source Softwaredocuments.ossforum.jp/documentsfiles/3-3 Top IT Company Keynote... · （SUSE / RedHat / CentOS / Ubuntu ... Web Server Apache