gra implementations perbix_search

GRA Implementations using Open Source Technologies

Mark Perbix and Yogesh ChawlaSEARCH

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 2

Goals

Quick review of Global Standards and Initiatives

Describe projects that have adopted and successfully implemented various Global Standards

Discuss advantages of using Open Source software

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 3

Global Standards and Initiatives

Global Reference Architecture (GRA)

Global Federated Identity and Privilege Management (GFIPM)

Global Technical Privacy Framework

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 4

Global Standards and Initiatives

Global Reference Architecture (GRA)National Information Exchange Model (NIEM)Governance – Policy and Technical Standards

Global Federated Identity and Privilege Management (GFIPM)Single Sign OnAccess Control

Global Technical Privacy FrameworkPrivacy Policy Rules Enforcement

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 5

Focus

Global Reference Architecture (GRA)National Information Exchange Model (NIEM)Governance – Policy and Technical Standards

Global Federated Identity and Privilege Management (GFIPM)Single Sign OnAccess Control

6

GIST - Where does it all fit in?

MessagingData Architecture Access Control Authentication Federation

< Data >

Payload

Data

Transport

Structural Design

& IS Enablement

Data Disclosure

& Auditing

User Identification

& Credentialing

Security

Management

Underlying

Technology

Standard

Global Adaptation

of Standard

Enablement of

Interoperability

Manifestation in

Your

Implementation

XML

NIEM

IEPDs

IEPs

WS*

TCIP/IP

HTTP & HTTP/S

GRA

SSPs

Adapters &

Connectors

BPEL/XSLT

ebXML

Global Technical Privacy Framework

SIPs

Intermediary &

Service Registry

XACML/SAML

GFIPM

GFIPM Metadata

SP Services

AD & LDAP

Crypto

Trust Model

GFIPM Trust Model

IdP Services

Trust Federation

Federation & FMO

Definition

Participation in

Federation

Communication Profiles

Services

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 7

GRA - Technical Components

IntermediaryConnector Adapter

Workflow

Intermediaries

Shared Execution Context

Apache Camel/ CXF Component

Apache Camel/ CXF Component

Apache Camel/ CXF Component

JusticeLine of Business

System

JusticeLine of Business

System

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 8

GRA Implementation Projects

Notification Service Interstate Compact for Adult Offender

Supervision (ICAOS)Maine State Police Incident Reporting

Subscription Notification Hawaii Integrated Justice Information System

(HIJIS)

Federated Query/Response with GFIPMVermont Integrated Justice Information

System Portal

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 9

ICAOS

Business RequirementsNotify fusion centers (and potentially other

law enforcement agencies) when a probation or parole offender relocates to another state.

OutcomeSend notification through existing fusion

center network infrastructureNotifications sent from outside the fusion

center environment meeting security requirements

10

Relocation Notification Flow

11

Add SIRS Flow

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 12

Maine State Police Incident Reporting

Business Requirements Incident Reports sent to N-DExCase Referrals sent to Prosecutor

OutcomesSingle Incident Record sent by police

agencies to FBI and/or Prosecutor

13

Maine State PoliceS

tate

Po

lice

Adapter/Connector Container

Incident Reporting Service Connector

N-DEx Submission Web Service

DA Case Management System Staging Database

Adapter/Connector Container

Charge Referral (?) Service AdapterIntermediary Host*

( aka Maine Justice Broker)

Incident Reporting

Service

Router Intermediary

Transform Intermediary

Transform Intermediary

Simple XMLME Incident Report (N-Dex Conformant)

Incident Data (MEDATS format)

Incident Data(N-Dex format)

Insert into staging databaseCumberland County SO(Spillman)

Portland/S.Portland PD

(SunGard)

Adapter/Connector Container

Incident Reporting Service Connector

ME Incident Report(N-Dex Conformant)

Red = activities funded thru GRA grant and within current scope of work with SEARCH

Black – activities funded thru grants administered by Tom Jewett and involving

SEARCH

Maine Incident Reporting System

09/21/2012

DA Case Management System

Program to update Case Mgmt. System

PPD/SSPD(SunGard Staging

database)

Insert into staging Database

Simple XML

CCSO(Spillman staging

database)

Insert into staging database

Green – work funded thru grants/sources available to Tom Jewett, but not involving

SEARCH responsibility

Simple XML

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 14

HIJIS Notification of Re-arrest

Business RequirementNotify probation and parole officers when

an offender is arrested for a new offense

OutcomeMonitor statewide booking process and

send a notification to parole and probation officers

Subscriptions are automatically loaded from Parole and Probations systems

15

Subscription/Notification Flow

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 16

Vermont Federated Query

Business RequirementProvide access to incident records from all

law enforcement agenciesSupport Single Sign-On access

OutcomesEnable users to access records in other

agency RMSs using native credentials Implement Entity Resolution capabilities to

merge persons or vehicles that do not have unique identifiers

17

Federated Query with Entity Resolution

Single Sign On

18

19

System-to-System Authentication

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org

Open Source Technology Option

Apache FoundationServiceMixCamelCXF

AdvantagesCompliance with StandardsNo upfront licensingBroad community of supportNo vendor “lock-in”Maintainability

20

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org

Sustainability Options

Develop internal expertiseRely on outside resourcesWhy?Many options

Shared support - cooperative

21

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org

What is the OJBC?

Non-profit consortium of state and local jurisdictions to support reuse and sharing of technologyStates of Hawaii, Vermont and Maine are the initial membersGoals of the consortium: Integrate contributions from member states

into a single, reusable platformProvide shared expert staff resourcesEnable use of low-cost, open source

technology

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org

Benefits of the OJBC

Commonality across states creates significant opportunity for reuseDon’t reinvent the wheelLearn from one anotherSave time and money

National standards create the basis for a common technology platformTechnology is powerful, but complex and costly to own and operate in isolationContinues a long tradition of collaboration among jurisdictions

SEARCH, The National Consortium for Justice Information and Statistics | www.search.org

Questions?

24

“The only one thing you can always count on is that everything

will always change”- UnknownContact Information

Mark PerbixDirector, Information Sharing Programsmark.perbix@search.org916-712-5918

Yogesh ChawlaInformation Sharing Architecture SpecialistYogesh.chawla@search.org608-438-5965