Mobile Web Services Workshop 行 動 式 網 際 網 路 服 務 平 臺. 工 研 院 電 通 所 網 際 網 路 軟 體 技 術 組 鄭 仁 傑 Roger Jen-Chieh Cheng

Transcription

1 Mobile Web Services Workshop 行 動 式 網 際 網 路 服 務 平 臺 工 研 院 電 通 所 網 際 網 路 軟 體 技 術 組 鄭 仁 傑 Roger Jen-Chieh Cheng 1

2 Agenda Evolution (What hava happened?) Web Application Mobile Internet Mobile Commerce Area and Market Mobile Service Framework Open Service Access (OSA) MExE Web Services Architecture and Technology P2P Service Gateway Security Issue Conclusion 2

3 Evolution of a Web System - I Web Server Client Yesterday 3

4 Evolution of a Web System - II Web Server Client Transaction Server Rendering Server Client Independent of development between the business logic and the rendering More dynamic content as a aggregation of the business logic and rendering operations Profiling and advertizement added at the rendering level Scalable solution Invisible revolution for the end users Yesterday Today 4

5 Evolution of a Web System - III Multi channel to cross channel transaction User based services Calender, address book, wallet, billing Experience profilling, Projection of the user at the network level for permanent presence New business creation: User Service Provider Transaction Transaction Client Server Server User Server Rendering Rendering Rendering Rendering Server Server Server Server Realtime Realtime Interaction Interaction Server Server 5

6 Evolution of a Web System - IV Transaction Transaction Server Server Realtime Realtime Interaction Interaction Server Server Realtime Context Interaction Server User Server User Server Transaction Server Services Rendering Rendering Rendering Rendering Server Server Server Server Rendering Rendering Rendering Rendering Server Server Server Server Client Client Emerging Tomorrow 6

7 Wireless Today Wireless subscribers are demanding new services: Fast internet access Global roaming Wireless commerce Video communication Need higher transmission rate and more function features 7

8 Wireless Evolution 1st generation: 1980s Analog Voice Service 2nd generation: from 1992 Digital Voice and low rate data service 3rd generation: 2002 High rate data and multimedia service 8

9 Wireless Evolution AMPS GSM, IS-95A WCDMA, cdma2000 3rd Gen. 1st Gen. Mobile Telephone Service Analog Cellular Technology Macrocellular Technology Past 2nd Gen. Advanced Wireless Voice Services Advanced Wireless Data Services Digital Cellular Technology Microcellular & Picocellular Technologies Intelligent Base Station Technology Now Integrated High Quality Voice, High Speed Data, Location Services Global Roaming Advanced Multimedia Services Broader Bandwidth Radio Channels Higher Frequency Spectrum Utilization Advanced Speech, Data, Visual Compression & Radio Transmission 4th Gen. Distance Learning IN Capabilities (Intelligent Agents) Knowledge-Based Network Operation Unified Service Networks Year 2010 Year

10 Goals of Network Evolving Essence of network evolution: Convergence of communication and distributed computing Voice, video and data Telecom and datacom Control and management A ubiquitous QoS-enabled packet-oriented multimedia service network with an open service architecture is the trend. 10

11 Today Access is Channel Specific User in context Devices Networks Services For Each User Experience For Each Service 11

12 Tomorrow Access is in Two Steps A Service Level Agreement that defines the best devices for the best experience Virtual Identity Services User 12

13 Mobile M-Commerce Area $ Banking Transacting Delivering business / individual s information services Over Mobile!!! Informing Portal News Sport Weather Shares... Travelling Scheduling Shopping Entertainment Boots New Applications & Services Video conferencing Database Positioning Location 13

14 Mobile E-Commerce (M- Commerce) Where can M-Commerce be applied to? B-C (Business to Consumer) Mobile banking, Mobile retailing, Mobile stockbroking, Mobile auction, Mobile ticketing, Mobile advertising, Short Message Service, B-E (Business to Employee) Mobile scheduling, Mobile PIM, Mobile , Mobile Learning, Mobile intranet access, Document Retrieval and Management B-B (Business to Business) Mobile Application Service Provider, Mobile CRM, Mobile ERP, industryspecific application Source :IEK,2001/7 14

15 2G & 3G Mobile Internet Shifting Value 使 用 者 電 信 業 者 無 線 ISP 附 加 價 值 提 供 者 內 容 提 供 者 ( 行 動 商 務 ) 100% Shifting Value 72% $ 25% 23% 25% 小 於 3% 12% 小 於 2% 38% $ 註 : 2G 3G $ 主 要 獲 利 者 15

16 1,800 1,600 1,400 1,200 1,000 Million Subscribers Mobile Market Worldwide Quick Growth: 1 Billion Internet (mobile & fixed) and mobile subscribers respectively in 2004 World Subscriber Forecast Mobile Fixed Fixed Internet Mobile Internet Source: Siemens Year 16

17 Framework for Services VHE OSA Personal Service Environment (Customized/Portable) Applications/Clients Service Capability Features Service Capabilities Personalized services Personalized user interface Consistent set of services anytime and anywhere Built using Service Capability Features Standard API Pre-set by Standards, e.g. CAMEL, SAT, MExE Bearers 17

18 Virtual Home Environment (VHE) Users are consistently presented with the same personalized features, User interface customization, Services In User profiles whatever network services accessible by all kinds of netowrk and wahtever terminal(within the capabilities of the terminal and network) wherever the user may be located global roaming MExE and OSA are two of the toolkits which may be used to support VHE 18

19 VHE Value Added Service Provider USER Personal Service Environment Provided and controlled by Control Access to services depending on: Location of users available capability features user preference Home Environment Contains 1:N General User Preferences and Subscribed Service User Profile HE Value Added Service Provider Services are accessible from Whatever network wherever users may be 19

20 Open Service Access (OSA) Provide an extendible and scalable architecture that allows for inclusion of new service capability features and service capability servers. API is general; independent of vender specific solution; Programming language; Operating systems. Object-oriented techniques, like CORBA, can be used to achieve above goals. 20

21 Why needs OSA? Network Operator 多, 環 境 不 一 服 務 業 者 投 入 意 願 難 提 昇 整 合 各 Operator, 提 供 相 同 之 開 放 服 務 平 台 Network Operator 1 Internet Network Operator 1 Network Operator 2 Internet Network Operator 2 Internet Network Operator 3 Internet Network Operator 3 Service Platforms Service/Content Providers Open Service Platform Service/Content Providers 21

22 OSA Capability Web Server MExE Client GPRS/3G Bearer HLR CSE Communication Network Internet/DPE Multimedia Message Server WAP Client SAT SAT Client WAP PPG MExE Server OSA Gateway Payment Gateway Application Server 22

23 行 動 式 資 訊 交 換 開 放 平 台 技 術 Service Terminal Common Service Platform MExE Client Open Service Access * * * Embedded Browser Mobile Information Device Profile J2ME Core APIs KVM Gateway API Framework API Call Control OSA APPLICATIONS API Messaging API API User Interaction Mobility API Accounting Management API Data Session Term Caps API Content Based Charging RTOS Framework SCFs *Authentication *Authorization *Discovery *Registration *Notification *Integrity Management *Security/Privacy *Public Key Infrastructure (extension) Network SCFs Call Control *Data Session Control User Location User Status *Terminal capabilities *User Profile Mngt. Billing MExE Server WAP PPG 23

24 MExE Mobile Execution Environment details a flexible and secure application environment for 3G (and 2G+) mobile devices. MExE consists of a variety of current technologies and incorporates both WAP and Java. It also includes a framework which specifies: Capability and content negotiation User profiles Management of services Virtual home environment User control of application connections Journalling of network events 24

25 High level architecture MExE Aspects 25

26 MExE Services (1) Access to MExE Services Services execute on a remote server 26

27 MExE Services (2) Service client downloaded to MExE MT 27

28 MExE Services (3) Standalone service downloaded to MExE MT 28

29 MExE Services (4) MExE MT to MExE MT services 29

30 Web Services Architecture Uses UDDI to find appropriate Web service WSDL WSDL Green pages White pages Yellow pages UDDI XML / SOAP Web services repository UDDI XML / SOAP XML/SOAP Web How a client talks Web services to a service provider client depends on the WSDL UDDI WSDL Web services provider Uses UDDI to register a Web service with the repository SOAP FTP HTTP SMTP 30

31 .NET and J2EE Security/identity.NET Transaction support Messagin Microsoft Security/identity J2EE Transaction support Messagin XML/SOAP XML/SOAP J2EE implementations Web services UDDI WSDL iplanet(sun) IBM BEA HP Hitachi IONA Fujitsu Sybase Oracle SOAP HTTP XML 31

32 Microsoft.NET Platform VisualStudio.NET IDE-cross language debuggers-xml Schema editors.net servers Application Center 2000 BizTalk Server 2000 Commerce Server 2000 Exchange Server 2000 Host Integration Server 2000 Internet Security and Acceleration Server 2000 SQL Server 2000.NET framework COBOL VB C# CLR C++.NET building Block services Passport HailSotrm Operating system layer Windows XP Windows 2000 Windows ME Windows CE Security/identity.NET Transaction support Messagin Microsoft XML/SOAP Web services XML/SOAP 32

33 J2EE Web Services pack The Java architecture For XML binding (JAXB) The Java API for messaging (JAXM) The Java API for XML (JAXP) The Java connection architecture The Java API For remote procedure Calls (JAX-RPC) The Java API for registries (JAXR) Security/identity J2EE Transaction support Messagin XML/SOAP XML/SOAP Web services 33

34 P2P/Web Srvice Gateway Service Portal Service Gateway 線 上 資 訊 服 務 Internet Information Proxy Agent Filter 個 人 資 訊 服 務 Information Warehouse 金 融 資 訊 商 務 esoho Server Ethernet VoIP NAT Fierwall Kernel Space Smart Phone User Space WLAN Access Point Notebook PC Printer P2P/Web Service Gateway 34

35 P2P/Web Srvice Gateway( 續 ) Proxy & QOS Personalization Content Filtering Service Mapping Export mapping Import Services Transformation Service Publication & Lookup Security & Management Service Provision/Brokering NAT/Firewall 35

36 M-Commerce Security WTLS vs SSL WEB with PrivateWire Client - WAP Solution Internet Thin Client WAP Gateway PrivateWire Gateway Application Web Server WTLS SSL 36

37 Wireless Identity Module(WIM) Card (Smart Card + SIM Card) Application( EC, Push Application) SIM WAP(1.2,1.3,2.0) Application Non-WAP Application WPKI (draft) WTLS WML SSL3.0(TLS) S/MIME 3.0 PKCS#15 (Information format) Unwrapping key,digital Signature,hash Verify Certificate,Access Control ISO 7816 Bluetooth Privacy Integrity Authentication Non-Repudiation A B 37

38 Transaction WPKI Architecture Mid-Tier Service Provider CA CA PKI Repository PKI Portal WAP Phone WAP Gateway WTLS or signtext LDAP HTTP Application Service Provider 38

39 XML Key Management System(XKMS) Application Key Pair Holder Private key Public key Relying Party production Register my public key! Registration Server Give me the public key I need! Assertion Server XML Public keys PKI Provider PKI Private Keys 39

40 Web Service Security Issues POST /TravelService HTTP/1.1. <SOAP-ENV:Body> <m:makereservation.> Non-repudiation <flight>abc 1234</flight> <hotel>efg 5678<.hotel>. Integrity </m:makereservation> Confidentiality </SOAP-ENV:Body>. Authentication/ Authorization. <SOAP-ENV:Body> <m:makereservationresponse.>. </m:makereservationresponse> </SOAP-ENV:Body>. Travel Agency Service Web Server Web Service Engine Travel Service POST /TravelService HTTP/1.1. Non-repudiation <SOAP-ENV:Body> <m:booking.> Integrity <flight>1234</flight>. </m:booking> Confidentiality </SOAP-ENV:Body>. Authentication/ Authorization POST /TravelService HTTP/1.1. Non-repudiation <SOAP-ENV:Body> <m:booking.> Integrity <hotel>5678</hotel>. </m:booking> Confidentiality </SOAP-ENV:Body>. Authentication/ Authorization Airline Service Web Service Engine Airline Service Hotel Service Web Service Engine Airline Service 40

41 Web Service Security: Possible Solution Security Token Service Service Provider opens back channel to Identity Provider to query about user Travel Agency Service Bob Secured XML(SOAP) Message Transport-specific SSL TLS Transport-neutral XML Digital Signature XML Encryption SAML Web Server Web Service Engine Travel Service Hotel Service Web Service Engine Airline Service 41

42 Web Service Security in The World TrustBridge 係 根 據 微 軟 與 IBM VeriSign 聯 手 發 展 的 網 路 服 務 安 全 技 術, 著 重 於 一 種 稱 為 網 路 服 務 安 全 (WS-Security) 的 規 格 Liberty Alliance Project 自 由 聯 盟 計 畫 ( 是 一 個 嶄 新 的 組 織, 成 立 目 的 為 了 建 構 開 放 式 的 聯 合 單 一 登 入 Single sign-on) 解 決 方 案, 符 合 數 位 經 濟 以 任 何 設 備 上 網 的 需 要 42

43 Web Service 整 合 服 務 架 構 Browser Interface Hand Phone Interface PDA Interface Web Services 認 證 授 權 Single Sign-on Security Service Flow Control Content Manager CA Server Legacy Object Legacy Object Legacy Object Business Object XML-RPC/RMI/HTTP XML/DCOM/CORBA/ Web Service/JCBC/ODBC.. Internet Internet / / Extranet Extranet / / Intranet Intranet XML-RPC/RMI/HTTP XML/DCOM/ Web Service/CORBA/JCBC/ODBC.. Legacy System Legacy System.. SOAP Web Service UDDI JCBC/ODBC/ Files.. User Profile Content Meta Data Database Bank System 43

44 Service-Driven Network New Products New Markets 3rd Party Content Creators ISDN DSL Dial-up Network Services Technology Foundation Cable Modem Cellular/PCS Back Office Servers Paging Satellite Services : Anytime Anyplace on Anything Airport SOHO Home Hotel 44

45 Thank you! 45