Single Window Systems
In the OIC Member States
75
IT Infrastructure
The e-GUCE is organized in logical and physical shared multi-layered IT infrastructure. The
three-tier infrastructure allows any of the three tiers to be upgraded or replaced
autonomously in response to changes in business processes, services or technology.
The infrastructural layers are:
 Presentation layer, web based user interface hosted by ORACLE Glass Fish application
server allocated in demilitarized zone (DMZ);
 Application layer, ORACLE Glass Fish application / service layer;
 Data persistence layer, High Availability ORACLE RAC with mirrored data storage
mechanism.
4.1.4.1.1 Flexible and extendable IT infrastructure
The e-GUCE Architecture is designed to fully avoid the loss of service (maximum tolerable
downtime) whether planned or unplanned through the use of the High Availability (HA)
approach. The current ICT Infrastructure is providing the hardware / software clustering for
HA and virtualization services in which the SW is effectively providing the required level of
service (e-GUCE target level 99,999%). Virtualization is used at all level, on test, development
and production environment in order to utilize the maximum of the processing and hardware
resources.
4.1.4.1.2 Data storage and warehousing
e-GUCE operational data is stored on a clustered version of the Oracle Real Application
Clusters (Oracle RAC) that utilizes shared storage architecture. The storage shared proprietary
infrastructure represents a private cloud system to store the operational data in a 24/7 high-
availability and business continuity infrastructure. In addition, the storage is setup in mirror
mode (two identical storages) for direct input / output (I/O) operation mode on both storage
systems.
The e-GUCE data is integrated in ORACLE Data Warehouse and Pentaho Business Intelligence
System for reporting and analysis services. For statistical purposes, ASYCUDA++ data is
integrated in the e-GUCE data warehouse. This approach offers timely and accurate reporting
and analysis services to all users.
Electronic Signature
The authentication procedure of the users of e-GUCE is based on single sign-on protocol using
the unique identifier for companies and private persons is the taxpayer number. The
authorization service is set to particular roles that share the same security privileges within
the e-GUCE.