Sharing Data with Customers and Suppliers

Transcription

1 Sharing Data with Customers and Suppliers Assessing your future Web Services Infrastructure Graham Cunningham: SW Business Development

2 Agenda Business Outcomes The Business Challenge Web Services the Issues Introducing IBM DataPower Deployment Latest IBM Datapower Features W3P Q&A

3 Differing Business Scenario's Days Debt Reduction Stock Reduction Compliance New Channels Efficient Processing Dynamic Routing

4 Debt Reduction LOB Engineering Automotive More efficient delivery and acknowledgement Faster time to Invoice More accurate Invoicing Days debt reduced by 3 days

5 Stock Reduction LOB Wholesale Distribution More efficient delivery and acknowledgement Greater visibility of stock levels at supplier/partner JIT ordering easier Early visibility of demand changes thru supply chain

6 Compliance LOB Financial Services Flexible approach to delivery of key compliance data Easy to modify reporting models Reuse of internal reporting services Secure method of delivering sensitive information

7 New Channels LOB Media and Entertainment Easy rendering of existing web services to mobile Decoupled applications from existing backend apps Mobile look and feel Speed and responsiveness 200 % increase in volume of business

8 Efficient Processing LOB Outsourcing Services Prompt sharing of service requests Simplification of integration to customer and internal ERP Improved accounting reconciliation Flexible billing models possible Easy to obtain new clients

9 Dynamic Routing LOB Shipping Transportation Dynamic Customer services function enabled Transports could be dynamically rerouted Improved customer services More efficient Fleet

10 Web Services A Web service is a method of communication between two electronic devices over a network. It is a software function provided at a network address over the Web with the service always on as in the concept of utility computing. The W3C defines a Web service generally as:- a software system designed to support interoperable machine-to-machine interaction over a network. [1] Communication The W3C Web Services Architecture Working Group defined a Web Services Architecture, requiring a specific implementation of a "Web service." In this: [a Web service] has an interface Security described in a machine-processable format (specifically WSDL). Other systems interact with the Web service in a manner prescribed by its description using SOAP (Simple Object Access Protocol) Protocol messages, typically Conversion conveyed using HTTP with an XML serialization in conjunction with other Web-related standards. [1] The W3C also states: We can identify two major classes Transformation of Web services: REST-compliant Web services, in which the primary purpose of the service is to manipulate representations of Web resources using a uniform set of stateless operations. Arbitrary Web services, in which the service may expose an arbitrary set of operations.

11 Market Dynamics The adoption of cloud, analytics, mobile, and social computing is forcing organizations to open IT assets to new business channels 73% of organizations discovered cloud usage outside of IT or security policies Between 2005 and 2020, the 81% of adults 70% of amount of data use personally employees are in the world will owned mobile engaged in grow 300X, from devices for social 130 to 40,000 and challenging conducting them to rethink activities the way both they exabytes. have traditionally approached business security internally & control and externally

12 The World is Changing Need for new partner support Increase in partner data volume Planned security audit Backlog in partner management processing. In-house built security solutions

13 The Business Challenge Lead Architects How do you handle application interface security both inside and outside your enterprise? Do you have any challenges administering security between your company and other companies? Heads of business units. Do you have a need to secure your Web Services? Would you like to have a scalable and centralized security solution for your application interfaces? Middleware management teams Are you relying solely on IP firewalls and SSL proxies to secure your application interfaces? Are you using or planning to use XML and/or Web Services in critical applications? C level execs Protecting company reputation Passing industry audits Utilising all channels to customer/suppliers

14 Mobile Issues The technologies tend to be a bit different JSON/REST instead of SOAP/XML, OAuth instead of SAML Bandwidth and battery life are at a premium Need to minimize back and forth communications Security is a paramount concern Mobility of devices makes them easier to steal or spoof Access patterns and volumes are less predictable More service calls on mobile devices, potentially more users, anytime Performance matters Performance expectations are much higher on mobile

15 The Current Landscape Millions Trillions Websites Websites Build more resources Partners Connected cars Acquire new skills Connected appliances Address new challenges: mobile, Internet of Things Game consoles Maintain a secure and robust infrastructure 1 How can you do this? Internet TVs Tablets Smart phones

16 Why an Appliance For Connectivity? Consumable hardware platform Certified security assurance Achieves fast performance Many functions in a single device Simplified maintenance model Lower cost and complexity IBM DataPower

17 DataPower Gateways SECURE Mobile, API, Web, SOA, B2B and Cloud Workloads INTEGRATE Systems of Engagement with Systems of Record CONTROL & MANAGE Traffic and Service Level Agreements OPTIMIZE Data Delivery and User Experiences CONSOLIDATE & Simplify Infrastructure Footprint IBM DataPower Gateways provide a low startup cost, helping clients increase ROI and reduce TCO with specialized, consumable, dedicated gateway appliances that combine superior performance and hardened security in physical and virtual form factors 1717

18 Gateway for the Multi-channel Enterprise Single security and integration gateway platform to provide security, integration, control & optimized access to a full range of Mobile, API, Web, SOA, B2B, & Cloud workloads SOA Secure, integrate, control & manage SOA workloads in the DMZ and Trusted zones Mobile Simplify mobile security with single, purpose-built gateway; control mobile traffic and accelerate delivery Cloud DataPower gateway functionality in a virtual appliance form factor, supports multiple hypervisor & cloud environments API Easily secure, control, publish, monitor & manage your APIs IBM DataPower Gateway B2B Extend Connectivity & Integration beyond the enterprise with DMZ-ready B2B edge capabilities Web Simplify web security with single, purpose-built gateway; control traffic and accelerate delivery for intranet and internet web applications

19 Common Use Cases IBM DataPower Gateway Appliances are the industry-leading Security & Integration gateways that help provide security, integration, control and optimized access to a full range of Mobile, Web, API, SOA, B2B, & Cloud workloads Internet DMZ Trusted Domain Application or Service Consumer Trading partners Consumer DataPower Gateway 1 Mobile Gateway 2 API Gateway 3 Web Gateway 4 B2B Partner Gateway DataPower Gateway Middleware z System 5 SOA & API Gateway 6 ESB / Integration Gateway 7 Internal Security Enforcement 8 Web Services Governance & Management 9 Legacy Integration

20 Proficiency Functions Secure Authentication, authorization, auditing Security token translation Threat protection Schema validation Message filtering & semantics validation Message digital signature Message encryption Integrate Any-to-any message transformation Transport protocol bridging Message enrichment Database connectivity Mainframe connectivity B2B trading partner connectivity Control Service level management Quota enforcement, rate limiting Message accounting Content-based routing Failure re-routing Integration with management & visibility platforms Optimize SSL / TLS offload Hardware accelerated crypto operations JSON, XML offload JavaScript, JSONiq, XSLT, XQuery acceleration Response caching Intelligent load distribution Simplify, offload & centralize critical functions Before DataPower Gateway After DataPower Gateway Consumer Consumer Consumer Secure Integrate Control Optimize Consumer

21 Deployment Appliance On Premise Virtual device On Premise - Licensed as IBM s/w Virtual Device (cloud) - Rental Model

22 Security Purpose-built hardware provides physical security Sealed, tamper-evident case No usable USB, VGA, other ports Intrusion detection switch Trusted Platform Module Encrypted flash drive FIPS level 3 Hardware Security Module (option) for secure storage of private keys Hardened firmware provides platform security for physical & virtual gateways Single signed and encrypted firmware by IBM No arbitrary software Optimized, embedded operating system High assurance, locked-down configuration Key materials are not exportable from the appliance *

23 Simplify - Transport and payload transformations Integrate disparate transport protocols with extreme ease Transform the message format with ultimate flexibility for data mapping Support synchronous, asynchronous, publish & subscribe and guaranteed-delivery message patterns HTTP MQ JMS FTP IMS SOAP XML COBOL CSV 23

24 Accelerate - Configuration Approach Enforce security standards with zero coding Uses intuitive pipeline message processing Import/export configurations between environments Transaction probe shows message content between actions for debugging 24

25 Governance - DataPower Monitoring Easily integrate DataPower with your existing monitoring infrastructure Leverage advanced SOA monitoring tools for a more holistic analysis Create advanced log and audit solutions that meet your application requirements Customize your monitoring with a flexible log subscription engine Send to multiple targets Send in multiple formats 25 SNMP syslog ITCAM SOA Other

26 IBM 7.1 DataPower Gateway Secure. Integrate. Control. Optimize. Released Nov 2014 Multi-channel gateway Utilize single gateway with integrated access enforcement from ISAM to secure & optimize delivery of mobile, API, web, SOA, B2B, cloud apps, and integrate with IBM MobileFirst & WebSphere platforms Consolidated product Single, modular & extensible gateway platform to secure, integrate, control, & optimize full range of workloads Enhanced security Enable additional flexible authentication from internet consumers & Non-Microsoft consumers to Microsoft systems New hardware platform Increase capacity & throughput while reducing latency with latest generation hardware B2B module Centralize B2B trading partner connectivity & transaction management with high performance secure entry point in the DMZ Deployment flexibility Use physical or virtual appliance with seamless configuration migration with on-premise & cloud deployments

27 Highlights of IBM DataPower Gateway & V7.1 Single multi-channel gateway platform to secure & optimize delivery of mobile, API, web, SOA, B2B, cloud apps, and integrate with IBM MobileFirst & WebSphere platforms Integrates industry-proven access enforcement capabilities of IBM Security Access Manager into the DataPower platform, available as add-on ISAM Proxy Module IBM DataPower Gateway is the new name of a consolidated, extensible & modular platform Converges three existing products, XG45 / XI52 / XB62, into a single modular offering Physical appliance uses purpose-built latest generation hardware platform to provide increased performance & capacity Virtual appliance runs on VMware & Citrix XenServer hypervisors and cloud platforms that support them Easy-to-use & secure B2B integration capabilities, formerly on XB62 appliances only, available as add-on B2B Module Enable authentication from internet consumers & Non-Microsoft consumers to Microsoft systems with Kerberos S4U2Self support

28 Single, modular & extensible platform Modules B2B Module B2B DMZ gateway EDIINT AS1,AS2,AS3,ebXML Partner profile management B2B transaction viewer Any-to-Any message transformation Database connectivity TIBCO EMS Module Integrate with TIBCO EMS messaging middleware Support for queues & topics Load balancing & fault-tolerance ISAM Proxy Module User access control, session management, web SSO enforcement Advanced mobile security: mobile SSO, context-based access, onetime password, multi-factor authn Application Optimization Module Frontend self-balancing Backend intelligent load distribution Session affinity z Sysplex Distributor integration Integration w/ ISAM4MobileIBM DataPower Gateway (Base) Secure Authentication, authorization Security token translation Service / API virtualization Threat protection Message validation Message filtering Message digital signature Message encryption AV scanning integration Integrate Transport protocol bridging Message enrichment Message transformation & processing using JavaScript, JSONiq, XQuery, XSLT Mainframe integration & enablement Flexible pipeline message processing engine Control & Manage Service level management Quota & rate enforcement Content-based routing Message accounting Integration w/ management & visibility platforms including IBM API Management & WSRR for policy enforcement (2U Physical or Virtual Edition) Integration Module Any-to-Any message transformation Database connectivity Mainframe IMS connectivity Optimize & Offload SSL / TLS offload Hardware accelerated crypto JSON, XML offload JavaScript, JSONiq, XSLT, XQuery acceleration Local response caching Distributed caching w/ XC10 Backend load balancing

29 DataPower resources DataPower on Slideshare LinkedIn IBM DataPower Gateway Group Online User Forum YouTube IBM DataPower Gateway Channel developerworks Blog YouTube Channel: IBM DataPower Gateways Slideshare: IBM DataPower Gateway LinkedIn Group: IBM DataPower Gateway developerworks blog: IBM DataPower Gateway GitHub: IBM DataPower Gateway Online User Forum Product page on ibm.com Product documentation

30 Who Are W 3 Partnership? Background Information: W 3 Partnership is an independent provider of business consulting and Integration expertise Specialise in implementing Service Oriented Architecture and the standards and technologies associated with SOA Capabilities: Project Management, Technical Architecture, Design, Delivery and Support Expertise in WebSphere Message Broker (IBM Integration Bus IIB), WebSphere MQ, IBM DataPower, WebSphere Application Server Open Source Middleware WSO2 JEE, Java, JMS, SOAP, WSDL, XSD, XML, XSLT & BPEL Developed: Own IP called W3 Pattern Application Developer (W3PAD)

31 Call to Action Book a 1-1 Meeting(F-F) or Conference call with Meridan Agenda Use Case Volumes Payloads Security Requirements Protocols Outputs A Business Case Sample Configuration Implementation Schedule Graham Cunningham IBM SW Business Development Graham.Cunningham@w3partnership.com

32 Contact Details Visit us at or follow us on: Graham Cunningham IBM SW Business Development Marcus Langford Thomas Chief Operations Officer

33 Questions

34 Positioning versus ESB What is the primary integration need? Secure & optimize delivery of web apps & services to external consumers/partners in the DMZ e.g. edge of network Gateway Yes No DataPower as a secure gateway in the DMZ IIB for the Integration Bus Integrating a heterogeneous IT environment i.e. create an integration bus Do you require secure connectivity, intelligent load distribution or acceleration between apps & services? Yes IIB for the integration bus Augment and accelerate with DataPower as security & integration gateway Securing, optimizing & targeted integration to apps or services within the enterprise e.g. creating an Integration Gateway Does customer also need a universal connectivity solution? No Yes DataPower as security & integration gateway DataPower as security & integration gateway Augment with IIB for broader connectivity

35 W 3 Partnership DataPower credentials Installation, configuration and development experience on XG45, XI50/XI52, and XB60/62 Previous engagements Retail Banks Government Automotive industry Mobile phones retailer Credit card company

36 DataPower Customer Issues Users need to architect, design and build common functions on a repetitive basis Skilled consultants needs specialist training. A potential inhibitor to fast ROI Need to be able to control the versioning of services No central control or visibility of interfaces across the enterprise. Lack of guidance on implementation of patterns. Ease of management in the deployment of services

37 Patterns Patterns are abstraction mechanisms that can be applied repeatedly for recurring technical challenges Patterns enforce architectural standards and principles A service pattern defines the architectural standard, structure and technology ready for implementation.

38 Working with patterns Create new patterns Load existing patterns Add new services Clone patterns Simply & quickly deploy services based on existing patterns Maintain a record of all services created / deployed (Release Management) W 3 PAD - Product Capabilities