Summary of Contents

Foreword: Web Services Business Strategies and Architectures 1

Chapter 1: Return On Investment (ROI) and Web Services 9

Chapter 2: Selling Web Services 25

Chapter 3: Enterprise Application Integration (EAI) and Web Services 39

Chapter 4: Business To Business Integration (B2Bi) and Web Services 57

Chapter 5: Integration Brokers and Web Services 71

Chapter 6: ERP and Web Services The Third Wave 85

Chapter 7: E-Logistics Processes Integration Using Web Services 101

Chapter 8: UDDI-based Electronic Marketplaces 117

Chapter 9: Web Services and the Real Estate Industry 143

Chapter 10: Business Process Standards For Web Services 157

Chapter 11: Web Services and Straight Through Processing (STP) 175

Chapter 12: Web Service Intermediaries 201

Chapter 13: An Introduction To ebXML 221

Chapter 14: Web Services Architectures 237

Chapter 15: .NET and J2EE, a Comparison 257

Chapter 16: Web Services and Application Frameworks (.NET and J2EE) 273

Chapter 17: Web Services Security 291

Chapter 18: Network Security for Web Services 305

Chapter 19: Remote References and XML Web Services 319

Index 333

Web Services Business Strategies and Architectures

Kapil Apshankar

HenryChang

Mike Clark

Eduardo B. Fernandez

Peter Fletcher

Whitney Hankison

J. J effrey Hanson

Romin Irani

Kunal Mittal

Judith M. Myerson

David O'Riordan

Dimple Sadhwani

Gunjan Samtani

Bilal Siddiqui

J0rgen Thelin

Mark Waterhouse

Chanoch Wiggers

Liang-Jie Zhang

APress Media, LLC

Web Services Business Strategies and Architectures

© 2002 Apress Originally published by Expert Press in 2002

AH rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means without the prior written permission of the

publisher, except in the case of brief quotations embodied in critical articles or reviews.

The authors and publisher have made every effort in the preparation of this book to ensure the accuracy of the information. However, the information contained in this book is sold

without warranty, either express or implied. Neither the authors, Expert Press, nor its dealers or distributors will be held liable for any damages caused or alleged to be caused either

directly or indirectly by this book.

EXPERT Published by Expert Press Ltd,

Arden House, 1102 Warwick Road, Acocks Green, Birmingham, B27 6BH, UK

ISBN 978-1-59059-179-6 ISBN 978-1-4302-5356-3 (eBook) DOI 10.1007/978-1-4302-5356-3

Trademark Acknowledgements Expert Press has endeavored to provide trademark information about all the companies and products mentioned in this book by the appropriate use of capitals. However, Expert Press cannot guarantee the accuracy of this information.

Credits Editors Peter Fletcher Mark Waterhouse

Contributing Authors Kapil Apshankar Mike Clark Henry Chang Eduardo B. Fernandez Peter Fletcher Whitney Hankison ]. Jeffrey Hanson Romin Irani Kunal Mittal Judith M. Myerson David O'Riordan Dimple Sadhwani Gunjan Samtani Bilal Siddiqui J 0rgen Thelin Mark Waterhouse Chanoch Wiggers Liang:Jie Zhang

Assistant Editors Kristin P<llsson James Hart Dan Robotham

Principal Reviewer Mark Horner

Technical Reviewers Kapil Apshankar Mike Clark Romin Irani Andrew Krowczk Saurabh Nandu Chanoch Wiggers

Production Coordinators Rachel Taylor Pip Wonson

Index Bill J ohncocks

Illustrations Rachel Taylor Pip Wonson

Production Assistant Helen Pickering

Proof Reader Agnes Wiggers

Cover Dawn Chellingworth

The image used on the cover is a design for the Business Promotion Centre, Duisburg, Germany. Used with the permission of Foster and Partners Architects.

About the Authors

Kapil Apshankar Kapil has three years experience in knowledge management, il8n, LIOn, and manufacturing domains. He works as a team leader for a major software corporation in India. Currently he is working with Web Services in all their forms to devise ways and means to take this nascent technology to its limits.

His other interests include Linux, networking, and distributed computing. When not dabbling with his computer, he can be seen playing the harmonica or drawing pencil portraits. Kapil can be reached at kapilapshankar@yahoo.co.in.

Mike Clark Mike is currently working solely on Research and Development around Web Services and ASP.NET technology. He is solely responsible for www.salcentral.com, the world's first Web Services brokerage along with www.webservicebuy.com, www.uddiregistrar.com and a suite of Web Services available at www.soapengine.com. All his spare time is taken up with his wife and two kids, though it's seldom enough to stop the feeling of guilt for the time spent "playing in the attic" as the kids call it.

You can contact Mike Clark at mikec@lucin.com.

Henry Chang Dr. Henry Chang is a research manager of B2B service infrastructure in the IBM Watson Research Center. He has developed IBM's B2B extranet web portal. He is now leading research in the areas of web business services integration, business process solution management, and on-demand e-utility hosting infrastructure.

Eduardo B. Fernandez Eduardo B. Fernandez (Eduardo Fernandez-Buglioni) is a professor in the Department of Computer Science and Engineering at Florida Atlantic University in Boca Raton, Florida. He has published numerous papers on authorization models, object-oriented analysis and design, and fault-tolerant systems. He has written three books on these subjects. He has lectured all over the world at both academic and industrial meetings. He has created and taught several graduate and undergraduate courses and industrial tutorials. His current interests include object-oriented design and Internet security. He holds a MS degree in Electrical Engineering from Purdue University and a Ph.D. in Computer Science from UCLA. He is a Senior Member of the IEEE, and a Member of ACM. He is an active consultant for industry, including assignments with IBM, Allied Signal, Motorola, Harris, Lucent, and others. More details can be found at http://www.cse.fau.edu/-ed.

Peter Fletcher Peter Fletcher is Managing Editor of Web Services Architect (http://www.webservicesarchitect.com/). Previously he developed web-based applications for the publishing group Peer Information, including content management and e-commerce systems. He holds a Masters degree in Cognitive Science.

Whitney Hankison Whitney is a Systems Analyst with the County of Santa Barbara, California, USA. She has co­authored Professional Windows DNA, and Professional VB .NET 1st and 2nd editions with Wrox Press. She can be reached at whankison@earthlink.net.

J. Jeffrey Hanson Jeff Hanson has more than 18 years of experience in the software industry, including working as Senior Engineer for the Windows OpenDoc port and Lead Architect for the Route 66 framework at Novell. He is currently Chief Architect for Zareus, Inc., which specializes in providing Web Service frameworks and platforms for J2EE-based installations. Jeff has also authored numerous articles.

Romin Irani Romin Irani is a Senior Software Engineer at InSync Information Systems, Inc. in Fremont, California. His primary job focus is on utilizing Web Services Technologies to help ease Enterprise Application Integration (EAI). Prior to that, he was the team leader on aj2EE­based eProcurement Marketplace. Romin has 7 years of professional experience with the last 4 years completely focused aroundj2EE. Romin has contributed several articles in the field of Web Services and has been a co-author of the following books: AXIS: The Next Generation of java SOAP, Professional]ava Web Services, and Beginning]SP Web Development, all published by Wrox Press.

Kunal Mittal Kunal Mittal (kunal@ kunalmittal.com) is a Technical Architect at Infosys Ltd, Pune, India specializing in Service Based Architectures usingjava-based Web Services. Kunal would like to thank Doron Sherman, CTO, Collaxa and Dave Shaffer, Principal Consultant, Collaxa for their contributions to the case study presented in this paper (http://www.collaxa.com/).

Judith M. Myerson Judith M. Myerson is a Systems Engineer/ Architect with a Master's Degree in Engineering. A noted columnist and writer with over 150 articles/reports published, she is the editor of Enterprise Systems Integration, Z'd Edition, and the author of The Complete Book of Middleware, and articles in New Directions in Internet Management - all by Auerbach Publishers. In addition to Web Services, her area of interest covers enterprise-wide systems, databases, enabling technologies, application development, network management, distributed systems, component-based technologies, and project management among others. She can be reached at jmyerson@ bellatlantic.net.

David 0' Riordan David O'Riordan (dave@bindsys.com) is co-founder and Chief Architect at Bind Systems (http://www.bindsys.com/) who provide business process software products based on Web Services standards. He has 15 years experience of designing enterprise software systems at companies such as Siemens and IONA Technologies. Before founding Bind Systems in 2000, he was the product architect of the Java CORBA product line at IONA Technologies.

Dimple Sadhwani Dimple Sadhwani is Senior Software Engineer at Island ECN based in New York. She has many years of experience working for financial and telecommunication companies on large­scale trading systems, CRM applications, Internet/Intranet portals, and client/server applications. She is co-author of the book B2B Integration - A practical guide to collaborative e­commerce, Imperial College Press. She has also authored several articles in the field of Web Services. Her e-mail address is dsadhwani@ island.com.

Gunjan Samtani Gun jan Samtani is Divisional Vice President, Information Technology at UBS Paine Webber, one of the world's leading financial services firms. He has several years of experience in the management, design, architecture, and implementation of large-scale EAI and B2B integration projects. He is the primary author of B2B Integration - A practical guide to collaborative e­commerce, Imperial College Press. He has presented research papers at several national and international conferences and is the author of more than 100 articles and research publications in the field of finance and technology. His e-mail address is gsamtani@ubspw.com.

Bilal Siddiqui Bilal Siddiqui is an Electronics Engineer, an XML consultant, and the co-founder of W axSys, a company focused on simplifying e-Business. After graduating in Electronics Engineering from the University of Engineering and Technology, Lahore, in 1995, he began designing software solutions for industrial control systems. Later he turned to XML and used his experience programming in C++ to build Web- and W AP-based XML processing tools, server-side parsing solutions, and service applications. He is a technology evangelist and a frequently published technical author.

Jergen Thelin j0rgen Thelin is the Chief Architect at Cape Clear Software Inc. where he is responsible for the overall technical direction of the company's flagship Cape Connect Web Services Integration Platform product. Previously, he has worked on the development of a number of middleware products and major line-of-business software projects for blue-chip companies such as ICL, Reuters,J.P.Morgan, and BSkyB before joining Orbware to develop an enterprise server middleware product. He holds a Computing Science Honours degree from Stirling University, Scotland, and an MBA from Warwick Business School, England. He has been using the Java programming language since early 1996, and is a Sun CertifiedJava Programmer, Developer, and Architect.

Mark Waterhouse Mark Waterhouse has been a technical editor for a little over two years. Having initially worked for Wrox Press, he moved to Teet where since September 2001 he has edited the Web Services Architect web site (http://www.webservicesarchitect.com/) and associated papers. Before working, Mark was a volunteer advisor for the Citizen's Advice Bureau, and has studied Philosophy (BA) and Cognitive Science (MSc).

Chanoch Wiggers Chanoch is a Software Developer at Kiwi Media Design having left Wrox Press from his position as Editor. In addition to having been the architect of Professionaljava SOAP and Professional]ava Web Services, he has written for a number of articles and books published by Wrox Press and the Web Services Architect web site. You can contact him at chanochwiggers@ hotmail.com.

Liang-Jie Zhang Dr. Liang:Jie Zhang is a Research Staff Member at IBM's T J. Watson Research Center, where he has been actively working on B2B integration using Web Services. He is the lead author of Business Explorer for Web Services (BE4WS). His other research interests include Web Services-oriented business process outsourcing technologies and broadband-media commerce. He chaired the special session on Web Services at IC2002.

Table of Contents

Foreword: Web Services Business Strategies and Architectures

What Are Web Services? Do They Mean Business? What Web Services Are Not

Why Web Services Are Important Financial Imperatives Strategic Imperatives Structural Imperatives

How Web Services Do All This

Resources

Chapter 1: Return On Investment CROll and Web Services

Defining Return On Investment (ROI) An Example of ROI Calculation

ROI Analysis Discounted Cash Flow Analysis Payback Period Analysis ROI Analysis Becoming a Necessity

ROI and Web Services ROI Not Just About Technology

Calculating ROI of Web Services Factors to be Included in ROI Calculation Applying the ROI Formula Not the Only Model

Conclusion

Chapter 2: Selling Web Services

What's So Special About Web Services?

How do Web Services Benefit Development?

Point by Point Examination of Web Services

1

1 2 3

3 4 4 5

5

7

9

9 10

10 11 11 12

12 12

13 14 20 22

22

25

26

26

27

Table of Contents

Threats to Web Services' Rise to Power ASP or Not ASP? Let Them Be Free Customer Trust Dependent on Microsoft's New Software (a.k.a .. NET) Charging Mechanism It's Just Another Standard; I'll Wait for the Next One? What Type of Companies Will Form Around Web Services? Web Services Development Hosting of Web Services Testing Labs Web Services Brokerages Web Services Toolkit Developers

Conclusion

Chapter 3: Enterprise Application Integration <EAil and Web Services

Enterprise Application Integration (EAI) What is EAI? Types of EAI

Service-Oriented Architecture (SOA) Components and Operations of SOA

Web Services

EAI and Web Services Salient Differences between Traditional EAI Solutions and Web Services Example of Web Services for EAI Essential Features of a Web Services Framework Convergence of EAI Solutions and Web Services

Where to Start? Taking Advantage of Existing Assets Build an Internal Repository for Web Services ROI on Using Web Services for EAI Bottom Line

Conclusion

Chapter 4: Business To Business Integration (B2Bil and Web Services

ii

What Is 828 Integration (8281)?

An Intimidating Task

Essential Features of a 828 Integration Solution Conventional B2Bi Patterns Factors Involved in Your Choice of Integration Pattern

The Role of Extensible Markup Language (XML) In 8281 Web Services and B2Bi Web Services Networks

Conclusion

29 29 30 31 32 32 33 34 34 35 35 35 36

36

39

40 41 41

44 45

46

46 47 48 49 50

52 52 53 53 53

54

57

57

59

59 60 62

63 64 66

68

Chapter 5: Integration Brokers and Web Services Integration Brokers Enable a Best-of-Breed (BOB) Approach

Architecture of Integration Brokers Hub-and-Spoke Architecture Message Bus Architecture Multi-Hub Architecture

Services of Integration Brokers Enable All Types of Integration lnteroperability Open Architecture Support for All Communication Protocols Directory Services Trading Partner Management and Personalization

Security Scalability

Transactional Integrity

Web Services Will Web Services Become Just Another Service of Integration Brokers?

Easy Connectivity with Third-Party Web Services Solution An Example of Integration Brokers and Web Services

Existing Integration Broker Infrastructure and Web Services

Conclusion

Chapter 6: ERP and Web Services The Third Wave

Introduction The Business Drivers Behind ERP The Journey So Far ERP Implementation Methodology Why ERP and Web Services?

How Do Web Services Make ERP Easier? Current Scenario Technology Issues Web Services-ERP based model: Architecture for Information Integration/Exchange Web Services-ERP based model: Architecture for the Hosted Application Model

Comparison Beneficiaries of ERP Web Services Economics of ERP Web Services Interrelation The Road Ahead

Conclusion

Table of Contents

71 72

72 72 73 74

75 75 75 75 76 77 77 77 77 77

78 78 79 80 81

82

85

85 86 87 88 89

91 92 94 94 96 96 97 98 98 99

99

iii

Table of Contents

Chapter 7: E-Loglstlcs Processes Integration Using Web Services

E-Loglstlcs Processes Integration ELPIF Components and Services

E-Loglstlcs Example: UPS Integration

A Working B2B System Using ELPIF

Conclusions

Chapter 8: UDDI-based Electronic Marketplaces

Some Common Requirement of All E-commerce Models Content Management

lnteroperability in E-Commerce Supply Chain Management Solutions as a Special Case of e-Commerce

What Is a UDDI-based eMarketplace? How Customers and Businesses Participate in a UDDI based eMarketplace

How Can We Start a UDDI-based eMarketplace? What Is the Role of UDDI in Our eMarketplace? What Is the Role of Web Services Definition Language (WSDL) in an eMarketplace?

Architecture of a UDDI- and WSDL-based eMarketplace UDDI is Very Good, But it is Not Enough for an eMarketplace.

How WSDL Servers Work: Where Will a WSDL/SOAP Server be Located?

lnteroperablllty In SOAP Responsibilities of SOAP in Our UDDI-based eMarketplace

How Our SOAP Client Will Work with the SOAP Servers of eSuppliers (SOAP lnteroperability)

How Will Businesses Get Involved in Our eMarketplace?

How Do UDDI and WSDL Bring Down the Cost of B2B Integration? Mechanism for Publishing at Our UDDI-based eMarketplace

Common Business Protocols and Practices Advantages of Common Business Protocols How To Publish Fingerprints at a UDDI Registry

The Next Generation Dot Com

A Pragmatic Approach To UDDI-based eMarketplaces

Conclusion

Chapter 9: Web Services and the Real Estate Industry

lv

Technological Challenges Faced By the Real Estate Industry

Shortcomings of Current Technologies

Benefits from Web Services Business Drivers Technical Drivers

101

103 104

107

111

115

117

118 118 119 119

121 121

122 124 124

125 126 128

131 132 132 133

134 134

136 137 137

139

139

140

143

144

146

146 147 147

Table of Contents

Web Services Technologies Dynamic Discovery Using UDDI Message Exchange Using SOAP Defining Contracts Using WSDL

Case Study Problem Description How Can This be Implemented?

Conclusion

Chapter 10: Business Process Standards For Web Services

The Need for Business Process Standards

B2B and EAI Processes

Business Process Features

The Web Services Stack

The Candidates ebXML BPSS XLANG WSFL BPML

Convergence

OMG EDOC

Conclusion

Chapter 11: Web Services and Straight Through Processing CSTPl

What Is Straight Through Processing (STP)? The Need for STP The Drivers and Benefits of STP The Current State of Technology Supporting STP STP Encompasses EAI and B2Bi STP Involves Business Process Management (BPM) Critical Parameters of STP

Application of Service-Oriented Architecture (SOA) -based Framework to STP The solution

Why Use Web Services for STP?

An Example Usage of Web Services for STP Matching Utility Description An Example Business Process The Use of Web Services Advantages of Web Services Over the Current Implementation

Where To Start?

Conclusion

148 149 149 149

150 150 154

155

157

158

159

159

161

162 162 165 167 168

170

171

172

175

176 176 177 178 178 180 181

183 184

184

190 190 191 192 195

197

198

v

Table of Contents

Chapter 12: Web Service Intermediaries

What Is a Web Service Intermediary? Intermediary Services High-Level Web Service Intermediary Architecture Web Service Intermediary Issues Standards and Web Services Networks

The Birth of the UDDI Value Added Service Supplier The VASS Business Plan Who Pays the VASS?

Business Architecture for a Web Services Brokerage Creation Publication Promotion Selling

Conclusion

Chapter 13: An Introduction To ebXML

Introduction

Need for a Global Electronic Business Standard State of Things Today Advantages of Having a Global Standard What Should a Global Electronic Business Standard Consist of?

The ebXML Standard How ebXML Works What ebXML Does Not Address

Current Industry Support

Accelerating ebXML - The Role of Web Services Web Services - Benefits Web Services - Current issues Current Landscape

Relationship Between Web Services and ebXML (Implementation Phase)

Conclusion

Chapter 14: Web Services Architectures

vi

WebServlces.Org

The Stencil Group

IBM

W3C

Microsoft

201

201 202 205 205 206

207 207 211

212 214 215 216 217

218

221

221

222 222 223 223

224 224 227

227

229 231 231 232

232

235

237

238

241

242

243

245

Sun Microsystems

Oracle

Hewlett-Packard

BEA Systems

Borland

Conclusion

Chapter 15: .NET and J2EE. a Comparison

Introduction

Web Services Overview Service Description Service Implementation Service Publishing, Discovery, and Binding Service Invocation and Execution

Time To Choose

Conclusion

Table of Contents

247

249

253

253

254

255

257

257

258 259 261 263 264

267

270

Chapter 16: Web Services and Application Frameworks (.NET and J2EEl 273

Flavors Of Application Frameworks Microsoft .NET Framework Java 2 Platform, Enterprise Edition (J2EE) Framework

Web Services: All About lnteroperability Classification of Web Services Application Frameworks and Web Services Microsoft .NET Java 2 Platform, Enterprise Edition (J2EE) Differences Between J2EE and .NET Frameworks for Web Services Support

How To Choose an Application Framework for Web Services The Ten Most Important Deciding Factors

Application Servers and Packaged Application Providers A Word of Caution

An Example of Application Servers and Web Services

Conclusion

Chapter 17: Web Services Security

The Web Service Levels

The Communications Level

274 275 276

277 277 278 279 279 280

283 283

286 286

286

288

291

293

295

vii

Table of Contents

Web Services Framework Providers IBM Web Services Microsoft .NET Sun Microsystems Hewlett Packard BEA Systems web Methods

Web Services Providers Microsoft's .NET My Services (Formerly code-named HailStorm) Bowstreet SAP

Security products Netegrity Securant Oblix Grand Central Quadrasis WSBANG (Web Services Broker and Network Gateway)

The Supporting Levels

Conclusions

Chapter 18: Network Security for Web Services

Strategy Overview Physical Security Identity Security

Patches and Security Guidelines Microsoft-Specific Information Other Helpful Web Sites for Security and Virus Information Additional Security Software

Security Infrastructure Components Network Configuration Program Deployment Infrastructure Monitoring and Auditing

Security Configuration Alternatives Certificate Security Global Cache Security Custom Security

Business Strategies

Conclusion

viii

296 296 296 296 297 297 297

297 298 298 298

298 298 299 299 299 299 299

300

301

305

305 306 306

308 308 308 309

309 310 312 312

313 313 314 314

315

317

Chapter 19: Remote References and XML Web Services

What Are "Remote References"? Distributed Object Technology Definition of the Term Remote Reference Examples of Remote References from Existing Middleware Typical Uses of Remote References

Remote References and Web Services Applying Remote Reference Principles to Web Services

lnteroperablllty Considerations Language lnteroperability Web Service lnteroperability WSDL lnteroperability

Minimizing Problems with Remote References

Conclusions

Index

Table of Contents

319

319 320 321 322 324

326 326

328 328 328 329

329

330

333

ix