Post on 11-May-2015
Simple, Secure SOA for HP NonStop Applications
M A Y 2 0 0 6
Agenda
• What is Service Oriented Architecture
• ACI’s Secure SOA Enabler– ACI Web Access Services– ACI Enterprise Security Services– ACI WorkPoint
What is Service Oriented Architecture?
• An architectural style whose goal is to achieve loose coupling among interacting software agents– The communication can involve either simple data passing
or it could involve two or more services coordinating some activity. Some means of connecting services to each other is needed.
• The technology of Web services is the most likely connection technology of service-oriented architectures. Web services essentially use XML to create a robust connection.
Benefits of SOA
• Application and infrastructure reuse
• Improved business agility / flexibility
• Decrease in development time and cost• SOA more closely aligns business
and IT and in so doing, makes organizations themselves more agile, flexible and thus more competitive
Industry Technologies
• XML
• SOAP
• WSDL
• WS-Security
• WS-Addressing
What is ACI’s Secure SOA Enabler?
• A bundle of ACI products providing NonStop users with the ability to expose their Pathway and BASE24 applications as SOA Web Services• ACI Web Access Services (nee WebGate)
• ACI Enterprise Security Services (nee SafeTGate)
• ACI WorkPoint (nee WorkPoint)
What does Secure SOA Enabler do?
• Creates XML Schemas from application message DDLs
• Creates Industry Standard SOAP WSDL• “Self-Describing” message services
• Secures Web Services• Allows services to be used as building blocks for
more complex transactions• Orchestration of Web Services
• Supports BASE24, Pathway applications and homegrown
You areHere
Using ACI Web Access Servicesto Create a Web Service
ACI Web Services Tool Kit
• PC based utility application which generates industry standard WSDL from NonStop application message DDLs
• Also creates proprietary ACI server-side files– SOAP Configuration files
– Data Service Repository (DSR) files
WAS Pathway and XPNET SOA Services
• A Guardian NonStop process with interfaces to – WAS HTTP Server (synchronous services)– WebSphere MQ (asynchronous services)
• Industry standard SOAP header processing– WS-Addressing– WS-Security
• XML message transformation – Pathsend message structures– ISO 8583 message structures
ACI WASACI WAS
HTTP Server
ACI Web Services Tool KitFTP to PC
ACI WASSOAPCONF
ACI WASDSR
WSDL
WSDL
BA
SE
24P
ath
way
S
erve
r
RQ/SV COBOLPathsend DDL
DDLGISOHISO/RBSI
SC
OB
OL
req
ues
ter
BA
SE
24
Pathway XPNET
Step 1- Convert Message structures to XML
ACI WASSOA Services
ACI WASACI WAS
HTTP ServerACI WAS
SOA Services
ACI Web Services Tool KitFTP to PC
ACI WASSOAPCONF
ACI WASDSR
BA
SE
24P
ath
way
S
erve
r
RQ/SV COBOLPathsend DDL
DDLGISOHISO/RBSI
BA
SE
24
Pathway XPNET
Step 2- Distribute the generated files
WSDL
WSDL
WSDL
WSDL
Step 3- Build a client using Industry IDEs
WSDL
WSDL
ACI WASACI WAS
HTTP ServerACI WAS
SOA Services
BA
SE
24P
ath
way
S
erve
r
BA
SE
24
Pathway XPNET
HTTP(SOAP(XML))
TCP/IP
ACI WASSOAPCONF
ACI WASDSR
Step 3- Build a client using Industry IDEs
WSDL is supported by numerous IDE vendors
ACI WASACI WAS
HTTP ServerACI WAS
SOAP
ACI WASSOAPCONF
ACI WASDSR
ACI Web Services Tool Kit
Using Enterprise Security Servicesto Secure a Web Service
1. No Security
Methods of Securing Web Services
2. SSL only, with no user details
3. HTTP Basic Authentication without SSL
4. HTTP Basic Authentication over SSL
5. SOAP WS-Security Username profile without SSL
6. SOAP WS-Security Username profile over SSL
• Application Firewall– SSL– HTTP Basic Authentication– WS-Security
ACI Enterprise Security Services
43
ACI ESSApplication
Firewall
Credentials Database
HTTPSACI WASHTTP/S
1
SOAP Request (Web Service +
Operation) + Username and
Password
7
Result of Web service returned to User
ACI WASSOA Services
Web serviceProtected,
User authenticated/
authorized?
2
6
Pathwayor
BASE245
Enterprise Security Services – Application Firewall
Using ACI WorkPointto Orchestrate Web Services
ACI WorkPoint
• ACI WorkPoint is a comprehensive Business Process Management solution which enables design, execution, monitoring, and management of enterprise business processes and Web services
• Now available on NonStop!
Orchestration with ACI WorkPoint
Pathway
BASE24
IDF
PR
DF
PT
DF
ACI WorkPointBusiness Process Management
ACI Enterprise Security ServicesAuthentication, Authorization, Auditing
ACI Web Access ServicesSOA Pathway Services
Add/Update terminals (PTDF)
Validate Retailer ID (PRDF)
Validate FIID (IDF)
Logon
IDF: Institution
PRDF:
Retaile
rPTDF:
Terminal
LogonIDF: Institution
PRDF: Retailer
PTDF:Terminal
Questions?
or….
Come by the ACI stand for a demo