Simple, Secure SOA for HP NonStop Applications

1
Simple, Secure SOA for HP NonStop Applications
M A Y 2 0 0 6
2
Agenda

• What is Service Oriented Architecture
• ACIs Secure SOA Enabler
• ACI Web Access Services
• ACI Enterprise Security Services
• ACI WorkPoint

3
What is Service Oriented Architecture?

• An architectural style whose goal is to achieve
  loose coupling among interacting software agents
• The communication can involve either simple data
  passing or it could involve two or more services
  coordinating some activity. Some means of
  connecting services to each other is needed.
• The technology of Web services is the most likely
  connection technology of service-oriented
  architectures. Web services essentially use XML
  to create a robust connection.

4
Benefits of SOA

• Application and infrastructure reuse
• Improved business agility / flexibility
• Decrease in development time and cost

• SOA more closely aligns business and IT and in so
  doing, makes organizations themselves more agile,
  flexible and thus more competitive

5
Industry Technologies

• XML
• SOAP
• WSDL
• WS-Security
• WS-Addressing

6
What is ACIs Secure SOA Enabler?

• A bundle of ACI products providing NonStop users
  with the ability to expose their Pathway and
  BASE24 applications as SOA Web Services
• ACI Web Access Services (nee WebGate)
• ACI Enterprise Security Services (nee SafeTGate)
• ACI WorkPoint (nee WorkPoint)

7
What does Secure SOA Enabler do?

• Creates XML Schemas from application message DDLs
• Creates Industry Standard SOAP WSDL
• Self-Describing message services
• Secures Web Services
• Allows services to be used as building blocks for
  more complex transactions
• Orchestration of Web Services
• Supports BASE24, Pathway applications and
  homegrown

8
(No Transcript)
9
Using ACI Web Access Servicesto Create a Web
Service
10
ACI Web Services Tool Kit

• PC based utility application which generates
  industry standard WSDL from NonStop application
  message DDLs
• Also creates proprietary ACI server-side files
• SOAP Configuration files
• Data Service Repository (DSR) files

11
WAS Pathway and XPNET SOA Services

• A Guardian NonStop process with interfaces to
• WAS HTTP Server (synchronous services)
• WebSphere MQ (asynchronous services)
• Industry standard SOAP header processing
• WS-Addressing
• WS-Security
• XML message transformation
• Pathsend message structures
• ISO 8583 message structures

12
Step 1- Convert Message structures to XML
13
Step 2- Distribute the generated files
WSDL
14
Step 3- Build a client using Industry IDEs
WSDL
15
Step 3- Build a client using Industry IDEs
WSDL
HTTP(SOAP(XML))
16
WSDL is supported by numerous IDE vendors
17
Using Enterprise Security Servicesto Secure a
Web Service
18
Methods of Securing Web Services

• 1. No Security

2. SSL only, with no user details
3. HTTP Basic Authentication without SSL
4. HTTP Basic Authentication over SSL
5. SOAP WS-Security Username profile without SSL
6. SOAP WS-Security Username profile over SSL
19
ACI Enterprise Security Services

• Application Firewall
• SSL
• HTTP Basic Authentication
• WS-Security

20
Enterprise Security Services Application
Firewall
Web service Protected, User authenticated/ authori
zed?
ACI WAS SOA Services
HTTPS
ACI ESSApplication Firewall
Credentials Database
21
Using ACI WorkPointto Orchestrate Web Services
22
ACI WorkPoint

• ACI WorkPoint is a comprehensive Business Process
  Management solution which enables design,
  execution, monitoring, and management of
  enterprise business processes and Web services
• Now available on NonStop!

23
Orchestration with ACI WorkPoint
Validate FIID (IDF)
Validate Retailer ID (PRDF)
Add/Update terminals (PTDF)
24
Questions? or. Come by the ACI stand for a demo
25
(No Transcript)