Solution for three-stage project ID authentication system of the nation’s Golden Tax Project

The running of the tax ID authentication system is mainly on the special tax network, which is a comprehensive network and provides data distribution channels for the applications of business system, office work system, audio and video. The network covers national and local taxing crosswise and covers central taxing department and tax office of province (autonomous regions, municipalities directly under the central government, cities under separate province), local cities, districts and counties at length wise direction.

1.1.1 Internal structure of the tax ID authentication system

The tax ID authentication system (internal) provides service to the personnel of the nation’s tax system. Based on the current number of people and plus a certain amount of redundant, the total amount of users who receive the certificate is 1 million.

The tax ID authentication system (internal) consists of  state administration of taxation ID authentication system, province-level registration and publishing system and the application-level of failure-preparation system.

Internal architecture of the tax ID authentication system

1.1.2 External architecture of the tax ID authentication system

The tax ID authentication system (external) provides service for the nation’s tax payers, and the number of users who get the certificate is around 20 millions.

The tax ID authentication system (external) has the same function with the tax ID authentication system (internal), but has slight difference over the arrangement’s applicable areas. The publishing system which provides external service is arranged on the internet to provide certificate service related to taxing business for the tax payer’s declaration of taxes. The arrangements of key management system, signature system and register system are all on the special business network, which realize the data exchanging with internet publishing system through logical isolation (fire wall or network brake). The real-time synchronization of OCSP data and fixed-time synchronization of LDAP data. The synchronization of OCSP and LDAP data of the central and province department is realized through internet.

The tax ID authentication system (external) consists of state administration of taxation ID authentication system, province-level registration and publishing system and the application-level of failure-preparation system.

External architecture of the tax ID authentication system