Best viewed on Desktop

Logo
← BACK

APPLICATION ARCHITECTURE OVERVIEW

NEXT →

Architecture Principles

The DriveBN system follows modern software architecture principles:

  • Microservices Architecture: Independent, scalable services for each business domain
  • API-First Design: All components communicate through well-defined APIs
  • Cloud-Native: Built for One Government Private Cloud (OGPC) platform
  • Event-Driven: Asynchronous processing for real-time responsiveness
  • Low-Code Platform: Rapid application development for regulatory changes
  • Government Shared Services Integration: Integration with existing government platforms

Layered Architecture Design

The system implements a 6-tier layered architecture:

Presentation Tier

Purpose: User interface and experience layer & Native Mobile Applications

Components:

  • GOV.BN 2.0 Portal: Primary public-facing interface
    • React.js/Next.js framework
    • Server-side rendering for SEO optimization
    • Responsive design for all devices
    • Integration with Digital ID authentication
  • DriveBN Native Mobile App (Public): Citizen mobile application
    • React.js/Next.js framework
    • Native iOS (Swift) and Android (Kotlin) development
    • Platform-specific UI/UX optimization
    • Offline capabilities with local data storage
    • Push notification support with platform integration
    • Biometric authentication (Face ID, Touch ID, Fingerprint)
    • Camera integration for document scanning
    • GPS location services
    • Deep linking for seamless navigation
  • DriveBN Native Mobile App (Internal): Staff and agency interface
    • Deep linking for seamless navigation
    • Native iOS and Android applications for JPD staff
    • Role-based dashboards with native UI components
    • Administrative functions with enhanced security
    • Real-time data synchronization
    • Workflow management interface
    • Offline mode for field operations
    • Enterprise mobility management (EMM) integration
    • Advanced authentication and security features
  • Business Partner Portal: Third-party integration interface
    • Dealer and insurance agent access
    • Bulk operation capabilities
    • API management console
    • Real-time status monitoring
  • Cross-Border Portal: International services interface
    • Multi-language support
    • International permit processing
    • Secure document exchange
    • Compliance with international standards

Business Logic Tier

Purpose: Application processing and security management

Components:

  • API Gateway: Central request routing and security
    • NGINX implementation
    • Rate limiting and throttling
    • Request/response transformation
    • Circuit breaker patterns
    • API versioning management
  • Authentication Service: Digital ID integration
    • OAuth 2.0 and JWT token management
    • SAML federation support
    • Multi-factor authentication
    • Session management
    • Single sign-on (SSO) capabilities
  • Authorization Service: Role-based access control
    • RBAC (Role-Based Access Control)
    • Fine-grained permissions
    • Dynamic policy evaluation
    • Audit trail logging
  • Workflow Engine: Low-code process automation
    • Visual workflow designer
    • Process versioning and rollback
    • Real-time process monitoring

Service Tier

Purpose: Business domain services and core functionality

Core Microservices:

  • Vehicle Management Service:
    • Technical approval processing
    • Vehicle registration management
    • License issuance and renewal
    • VRN (Vehicle Registration Number) management
    • Change of particulars processing
    • Integration with VIS (Vehicle Inspection Stations)
  • Driver Management Service:
    • License issuance and renewal
    • Highway code test management
    • Practical test scheduling
    • International permit processing
    • Medical fitness verification (BruHIMS integration)
    • Driving class management
  • Enforcement Service:
    • Traffic violation processing
    • Demerit points calculation
    • Court decision management
    • Appeal processing
    • Blacklist management
    • Cross-agency enforcement coordination
  • Business Operations Service:
    • Commercial permit management
    • Dealer registration and management
    • Insurance agent registration
    • Cross-border permit processing
    • Trade plate management
    • Workshop approval management
  • Inventory Service:
    • Stock management (plates, stickers, forms)
    • Revenue management and reporting
    • Counter services coordination
    • Printing service management
    • Legacy SPD access during transition
  • Document Service:
    • Digital certificate generation
    • Document template management
    • Digital signature integration
    • QR code generation for verification
    • Document lifecycle management
    • Archive and retrieval services
  • Payment Service:
    • Fee calculation and processing
    • Receipt generation
    • Refund processing
    • Payment gateway integration
    • Financial reporting
    • Revenue reconciliation
  • Notification Service:
    • Multi-channel messaging (SMS, Email, Push)
    • Template management
    • Delivery tracking
    • Schedule notification management
    • Integration with Talian Darussalam 123

Integration Tier

Purpose: External system connectivity and data exchange

Technologies: REST APIs, SOAP, GraphQL, Kafka, Message Queues

Integration Components:

  • Government Shared Services Integration:
    • BruHIMS Connector: Health records for drivers 86+ and disabled drivers
      • HL7 FHIR standard implementation
      • Real-time medical data synchronization
      • Privacy-compliant data exchange
      • Automated health verification workflows
    • Digital Payment Gateway: Government payment processing
      • PCI DSS compliant implementation
      • Multiple payment method support
      • Real-time transaction processing
      • Automated reconciliation
    • SpeRe Connector: Document management system
      • WebDAV and CMIS protocol support
      • Document versioning and audit trails
      • Automated document archival
      • Full-text search capabilities
    • DAaaS Connector: Data analytics service
      • Real-time data streaming
      • Dashboard and report generation
      • Predictive analytics capabilities
      • Executive reporting automation
  • External System Integration:
    • VIS Connector: Vehicle inspection stations
      • Real-time inspection result processing
      • Automated workflow triggers
      • Quality assurance monitoring
      • Integration with multiple VIS providers
    • Insurance Company APIs: Policy verification
      • Real-time policy validation
      • Claims data integration
      • Automated renewal notifications
      • Risk assessment data exchange
    • Bank Verification APIs: Financial services
      • KYC (Know Your Customer) verification
      • Credit check integration
      • Payment verification services
      • Financial risk assessment
    • Cross-Border Gateway: International data exchange
      • Secure encrypted data transmission
      • International permit verification
      • Multi-country compliance
      • Diplomatic protocol adherence

Data Tier

Purpose: Data storage, management, and analytics

Technologies: Oracle 19c, Redis, PostgreSQL, Kafka

Data Components:

  • Primary Data Storage:
    • NCDB Oracle Database: Transactional data
      • Oracle 19c with RAC (Real Application Clusters)
      • Automated Storage Management (ASM)
      • Data encryption at rest
      • Automated backup and recovery
      • Performance monitoring and tuning
  • Document Storage:
    • SpeRe Document Repository: Digital documents
      • Object storage implementation
      • Document versioning and audit trails
      • Content delivery network (CDN) integration
      • Automated archival policies
  • Analytics and Reporting:
    • DAaaS Analytics Database: Business intelligence
      • PostgreSQL for structured analytics
      • ClickHouse for real-time analytics
      • Data warehouse implementation
      • ETL pipeline automation
  • High-Performance Caching:
    • Redis Cache Cluster: Session and data caching
      • Distributed caching architecture
      • Session state management
      • Real-time data caching
      • Cache invalidation strategies
  • Message Processing:
    • Message Broker: Asynchronous communication
      • Apache Kafka for event streaming (TBD)
      • RabbitMQ for message queuing (TBD)
      • Dead letter queue handling
      • Message replay capabilities

Infrastructure Tier

Purpose: Platform services and operational management

Technologies: Kubernetes, Docker, OGPC, Monitoring Stack

Infrastructure Components:

  • Cloud Platform:
    • OGPC Virtual Machines: Government cloud hosting
      • VMware vSphere virtualization
      • High availability configuration
      • Disaster recovery capabilities
      • Compliance with government security standards
  • Container Platform:
    • Kubernetes Orchestration: Microservices deployment
      • Multi-zone cluster deployment
      • Automated scaling and healing
      • Service mesh implementation (Istio)
      • Rolling updates and canary deployments
  • Monitoring and Observability:
    • Monitoring Stack: System observability
      • Prometheus for metrics collection
      • Grafana for visualization
      • Loki for logging
      • AlertManager for incident management
  • DevOps and CI/CD:
    • CI/CD Pipeline: Automated deployment
      • Github implementation
      • Infrastructure as Code (Terraform)
      • Automated testing frameworks
      • Security scanning integration
      • Blue-green deployment strategies
  • Security Tools:
    • Security Infrastructure: Protection and compliance
      • Web Application Firewall (WAF)
      • OWASP ZAP security scanning
      • Vulnerability management
      • Compliance monitoring
  • Backup and Recovery:
    • Data Protection: Backup and Disaster Recovery
      • Veeam backup solution
      • Oracle RMAN integration
      • Cross-site replication
      • Recovery time objective (RTO) < 4 hours
      • Recovery point objective (RPO) < 1 hour