worklight nitin nm

© 2012 IBM Corporation1

Worklight Deep Dive and the IBM Mobile Strategy

Nitin [email protected]

2

Build mobile applications

Connect to, and run backend systems in support of mobile

Manage mobile devices and applications

Secure my mobile business

Extend existing business capabilities to mobile devices

Transform the business by creating new opportunities

Client Initiatives

IBM mobile portfolio at a glance

IBM Sample Offerings

• Worklight

• Cast Iron

• IBM Rational Application Developer

• WebSphere Application Server Web 2.0 and Mobile Feature Pack

• IBM Websphere Portal Mobile Experiences

• IBM Lotus Domino XPages

• Green Hat (an IBM company)

• Worklight

• Cast Iron






• IBM Endpoint Manager for Mobile devices

• IBM Rational AppScan

• IBM Security Access Manager

• IBM GBS - Security & Privacy practice

• Identity Manager






• Unified Communications Services

• Mobile Application Platform Management

• IBM GTS Mobile Enterprise Services (MAPM)

• IBM GBS – Strategy & Transformation and Mobile Solutions Practice

• Social Collaboration Software

• IBM Lotus Notes Traveler

• IBM WebSphere Commerce V7.0 Feature Pack 4








3

Extend & Transform• Strategy and planning services• Mobile-enabled solutions including

analytics, commerce, and social business

• Implementation and hosting services• Pre-built analytics, commerce, and

social business apps• IBM Interactive user interface design

services• Physical device management services







Client Initiatives

Manage & Secure• Device analytics and control • Mobile environment analytics • Endpoint & data protection• Secure network communications &

management• Mobile lifecycle management• Provisioning & configuration

management• Private app stores and Catalogs• Device inventory & policy

management• Mobile security &aAccess

management • Mobile security intelligence • Encrypted local device data storage






IBM delivers comprehensive end-to-end mobile solutions for the enterprise in the market

Build & Connect• Development and testing of mobile apps

(native, hybrid, web/HTML5/Dojo/Sencha/jQuery)

• Traceability and collaboration across requirements, code and testing

• Tools for Mobile Software Development Lifecycle (SDLC)

• Large shared codebase across multiple devices and environments

• Integrated device SDKs

• Runtime skinning for apps

• Enhanced connections to enterprise data and apps

• Integration with device capabilities

• Packaging and publishing mobile apps for app stores and marketplaces

• Unified push notification framework

• Aggregated user statistics and event reporting for monitoring and analytics













4

Mobile is an enterprise priority that helps transform your business and is driving key client initiatives

IBM has extensive capabilities in this space with additional new and enhanced offerings including:

• Worklight: an open, complete, and advanced mobile application platform for HTML, hybrid, and native applications

• IBM Endpoint Manager for Mobile Devices: unified endpoint management, with integrated mobile security

IBM is a leader in the mobile enterprise space

4

IBM delivers a comprehensive end-to-end mobile solution

5

Enterprise mobile development pain points

Approach Shortcomings

100% Native Development – use native languages of the device OS (i.e. Objective C with Apple SDK for iOS)

• Expensive development and maintenance• Long time to market & limited scalability of

development• Scarce and costly resources

Hybrid App Development – use open source languages and tools such as HTML5/JS/CSS3 and PhoneGap

• Lacking enterprise-grade functionality• Limited access to device features• No integration and services layer

1st Generation Mobile Enterprise Application Platforms (MEAP) – for example KONY, Antenna Software, Verivo and Sybase SUP

• Limiting WYSIWYG IDEs• Proprietary scripting languages & limited

scalability of development• Professional Service-based business models• Lack of Strong ROI

6

Connectivity and Scalability Requirements

Security Authentication Scalability

BackendSystems

7

Seamless Enterprise Integration

Enterprise

Security Requirements

Back-endWorklight

8

Highlevel topology context for connectivity

User uses app (A) on device D connecting to network (N)

Over the Internet or Intranet (I/i) using a Gateway/Reverse Proxy (GW)

Connecting to Worklight server (WL), which inturns uses an ESB or Integration Broker (IB) to connect to the Internet (I) or existing backend resources (EBE)

9

Worklight Studio Development Models

10

Worklight StudioA complete, extensible environment with maximum code reuse and per-device optimization

Worklight ServerUnified notifications, runtime skinning, version management, security features, integration and delivery

Worklight Runtime ComponentsExtensive libraries and client APIs that expose and interface with native device functionality and the Worklight server

Worklight ConsoleA web-based console for real-time analytics and control of your mobile apps and infrastructure

←

←

Worklight Mobile Platform


Worklight Architecture


Worklight Studio

• Eclipse-based IDE• Combining native and standard web

technologies in one multiplatform app• Environment-specific optimization• 3rd-party libraries integration• Device SDK integration• Back-end connectivity utilities

• Eclipse-based IDE• Combining native and standard web

technologies in one multiplatform app• Environment-specific optimization• 3rd-party libraries integration• Device SDK integration• Back-end connectivity utilities


Integrated Development Environment

(Eclipse Plug-in)

Application development using native and/or familiar web technologies:

• HTML5• CSS3• JavaScript

Integrated device SDKs allow direct access from within the IDE to emulators and code debugging utilities

Worklight Studio


Single Shared Codebase

Common code placedin primary file

Environment optimization code is maintained separately


Worklight Runtime Architecture

Worklight ServerWorklight Server

Authentication

JSON Translation

Server-side Application Code

Adapter Library

Client-side App Resources

Direct Update

Mobile Web Apps

Unified Push Notifications

Sta

ts A

ggre

gatio

n

Device RuntimeDevice Runtime

• Cross Platform Technology

• Security and Authentication

• Back-end Data Integration

• Post-deployment control and Diagnostics


Secure back-end integration

XML-based declarative specification

Multi-source data mashups

Eclipse plug-in supporting auto-complete and validation

Simplified adapter testing

Server-side debugging

Web services and JDBC integration

Access to session data and user properties

Back-end Integration


Data Collection and Analytics


Direct Update – On-device Logic

Worklight Server

Native Shell

Pre-packaged resources

Pre-packaged resources

1 Download

4Update web resource

App Store

Web resources

Web resources

Cached resources

Cached resources

1. Web resources packaged with app to ensure initial offline availability

2. Web resources transferred to app's cache storage

3. App checks for updates

– On startup

– On foreground

4. Updated web resources downloaded when necessary

2Transfer

3 Check for updates


Unified Push Notifications Architecture

Polling AdaptersPolling

Adapters

Message-based

Adapters

Message-based

Adapters

Unified Push APIUnified

Push API

Notification State

Database

Notification State

Database

User-Device

Database

User-Device

Database

iOS Dispatcher

iOS Dispatcher

Android Dispatcher

Android Dispatcher

BlackBerry DispatcherBlackBerry Dispatcher

Windows Phone

Dispatcher

Windows Phone

Dispatcher

SMS Dispatcher

SMS Dispatcher

Apple Push

Servers (APN)

Google Push

Servers (C2DM)

RIM Push Servers

Microsoft Push

Servers

SMS/MMS Brokers

Administrative ConsoleAdministrative Console

Worklight Client-side

Push Services


Push Services


Push Services


Push Services


Push Services


Push Services


Push Services


Push Services

iOS Push API

iOS Push API

Android Push APIAndroid Push API

BlackBerry

Push API

BlackBerry

Push API

WindowsPush APIWindowsPush API

Broker API

Broker API


Worklight Console

• Application Version Management• Push management• Usage reports and analytics• Reports of custom application events• Configurable audit log• Administrative dashboards for:

• Deployed applications• Installed adapters • Push notifications

• Data export to BI enterprise systems

• Application Version Management• Push management• Usage reports and analytics• Reports of custom application events• Configurable audit log• Administrative dashboards for:

• Deployed applications• Installed adapters • Push notifications

• Data export to BI enterprise systems


Worklight Differentiators


IBM Worklight

V5.0.5


Introducing IBM Worklight 5.0.5 New tooling

jQuery Mobile WYSIWYG editor New/updated environments

Windows 8 Windows Phone 7 iOS native applications Android native applications Java ME native applications

New/updated features SMS notifications JMS adapter Custom device provisioning JSON data store Server side reports viewing

Deprecated functionality


DEMONSTRATION


© Copyright IBM Corporation 2012. All rights reserved. The information contained in these materials is provided for informational purposes only, and is provided AS IS without warranty of any kind, express or implied. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, these materials. Nothing contained in these materials is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software. References in these materials to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and/or capabilities referenced in these materials may change at any time at IBM’s sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way. IBM, the IBM logo, Rational, the Rational logo, Telelogic, the Telelogic logo, and other IBM products and services are trademarks of the International Business Machines Corporation, in the United States, other countries or both. Other company, product, or service names may be trademarks or service marks of others.

www.ibm.com


BACK-UP

27

Internet

IBM WorkLightRuntime for safe mobile apps•Encrypted data cache•App validation

IBM Endpoint Manager for MobileConfigure, Provision, Monitor•Set appropriate security policies•Enable endpoint access•Ensure compliance

Secure Data & the Device

Secure Data & the Device

IBM Security Access Manager (for Mobile)Context aware authentication & Authorization of users and devices•Standards Support: OAuth, SAML, OpenID•Single Sign-On & Identity Mediation

IBM Mobile ConnectSecure Connectivity •App level VPN

Protect Access to Enterprise Apps &

Data

Protect Access to Enterprise Apps &

Data

Achieve Visibility & Enable Adaptive Security Posture

Achieve Visibility & Enable Adaptive Security Posture

IBM QRadarSystem-wide Mobile Security Awareness•Risk Assessment•Threat Detection

Build & Run Safe Mobile Apps

Build & Run Safe Mobile AppsIBM WorkLight

Develop safe mobile apps•Direct Updates

IBM AppScan (for Mobile)Vulnerability testing•Dynamic & Static analysis of Hybrid and Mobile web apps

IBM DataPowerProtect enterprise applications•XML security & message protection•Protocol Transformation & Mediation

IBM Mobile Security Capabilities

28

PCs and mobile devices have many of the same management needs

Device inventory

Security policy mgmt

Application mgmt

Device config (VPN/Email/Wifi)

Encryption mgmt

Roaming device support

Integration with internal systems

Scalable/Secure solution

Easy-to-deploy

Multiple OS support

Consolidated infrastructure

Device Wipe Location info Jailbreak/Root

detection Enterprise App store Self-service portal

OS provisioning

Patching

Power Mgmt

Anti-Virus Mgmt

Traditional Endpoint Management Mobile Device Management


Extend & Transform• Strategy and planning services• Mobile-enabled solutions including

analytics, commerce, and social business

• Implementation and hosting services• Pre-built analytics, commerce, and

social business apps• IBM Interactive user interface design

services• Physical device management services







Client Initiatives

*Blue pen = what Worklight brings*Blue pen = what Worklight brings











IBM delivers comprehensive end-to-end mobile solutions for the enterprise in the market


























The mobile lifecycle

• Strong demand by LoB

• Higher expectations of user experience with mobile apps

• Lack of best practices guidance on how to deliver mobile applications

• More direct involvement from users/stakeholders in design

• Native programming models are not portable across devices.

• Highly fragmented set of mobile devices and platforms

• Very large number of configurations of devices, platforms, carriers, etc. to test

• Mobile landscape evolves at a much faster pace

• More frequent releases and updates for apps with more urgent time-to-market demands


Mobile brings business and IT challenges

Top Mobile Adoption Concerns:

1. Security/privacy (53%)

2. Cost of developing for multiple mobile platforms (52%)

3. Integrating cloud services to mobile devices (51%)

Source: 2011 IBM Tech Trends Reporthttps://www.ibm.com/developerworks/mydeveloperworks/blogs/techtrends/entry/home?lang=en

Enterprise Business Model Changes• New business opportunities based upon geolocation

• Anytime, anywhere business transactions

• Importance of social business interactions

App Development Lifecycle Complexity• Complexity of multiple device platforms with

fragmented Web, native, and hybrid model landscape

• Connecting the enterprise back-end services in a secure and scalable manner

• Unique mobile requirements (user interface, connected/disconnected use, version upgrades, etc.)

Mobile Security and Management• Protection of privacy and confidential information

• Use of client-owned smartphones and tablets

• Visibility, Security & Management of mobile platform requirements


Mobile client initiatives: Manage and Secure





Client Initiatives

Customers can now:

• Use IBM Endpoint Manager for mobile visibility, security and management

• Use IBM Security Access Manager to authenticate and authorize mobile users and devices

• Utilize managed services for complete mobile landscape management



IBM Endpoint Manager for Mobile Devices – extending visibility, control and automation for mobile

IBM Endpoint Manager for Mobile Devices – extending visibility, control and automation for mobile


Extending visibility, control and automation to mobile devices

Building on the July 2010 BigFix acquisition

IBM Endpoint Manager for Mobile DevicesIBM Endpoint Manager for Mobile Devices

Available March 2012:

• Advanced management for iOS, Android, Symbian, and Windows Phone

• Unified management automatically enables VPN access based on security compliance

• Integration with back-end IT management systems such as service desk, CMDB, and SIEM

• Security threat detection and automated remediation

• Extends IBM’s existing 500,000 endpoint deployment

Desktop / laptop / server endpoint

Mobile endpoint

Purpose-specific endpoint

Securitymanagement

Systemsmanagement

Commonmanagement agent

and console

Near-instant deployment of new features

IBM Endpoint Manager


Mobile client initiatives: Extend and Transform



Client Initiatives

Customers can now

• Use our strategy and planning services to build a mobile strategy and transform their business

• Use our industry frameworks and solutions delivered via software, strategy, managed services and business process consulting

• Use mobile to engage their own customers in new ways with WebSphere Commerce and IBM Social Collaboration software





Social collaboration software – mobile access to enterprise social collaboration

Social collaboration software – mobile access to enterprise social collaboration








Client Initiatives

Key Capabilities• Strategy and planning services• Mobile-enabled solutions

including analytics, commerce, and social business

• Implementation and hosting services

Key Capabilities• Mobile web app development• Enterprise data, service, and

application integration• Mobile Technology Preview

features

Key Capabilities• Mobile Lifecycle Management• Device analytics and control• Secure Network

Communications & Management

Concord Hospital improved patch compliance 50%, reduced software license costs 25%, and has not had a single malware infection since implementation of IBM Endpoint Manager for patch management and core protection

Customers are focused on a bigger mobile picture

*ING Canada*ING Canada








Client Initiatives

IBM mobile portfolio at a glance

IBM Sample Offerings

• Cast Iron






• Worklight

• Cast Iron






• Worklight


























Mobile Security Objectives


Enforcing security updates

Remote disableRemote disable

Direct updateDirect update

Providing robust authentication

and authorization

Authentication integration framework

Authentication integration framework

Data protection

realms

Data protection

realms

Coupling device id

with user id

Coupling device id

with user id

Streamlining Corporate security

processes

Mobile platform as

a trust factor

Mobile platform as

a trust factor

Application Security

Code obfuscation

Code obfuscation

SSL with server

identity verification

SSL with server

identity verification

Proven platform security

Proven platform security

Security Features Mapping

Jailbreak and

malware detection

Jailbreak and

malware detection

App authenticity

testing

App authenticity

testing

Protecting data on the device

Encrypted offline cache

Encrypted offline cache

Offline authentication

Offline authentication

Secure challenge-

response on startup

Secure challenge-

response on startup


Detect Security Problems and non-Compliance

IBM Endpoint Manager for Mobile DevicesIBM Endpoint Manager for Mobile Devices


Mobile presents an enormous set of opportunities…

Business to ConsumerBusiness to Consumer

• Improve customer satisfaction

• Deeper customer engagement and loyalty

• Drive increased sales through Personalized offers

• Customer service

• Competitive differentiator

• Improve brand perception

• Deeper insight into customer buying behavior for up sell and cross sell

• Improve in store experience with mobile concierge services

Business to EnterpriseBusiness to Enterprise

• Increase worker productivity

• Improved claims processing

• Increase revenue through sales engagements

• Extend existing applications to mobile workers and customers

• Reducing fuel, gas, or fleet maintenance costs that are relevant in particular industries

• Increase employee responsiveness and decision making speed

• Resolve internal IT issues faster

• Reduce personnel cost (utilizing personal owned instead of corporate issued devices)


Extending businessto mobile customers

and workforce

Improve operational efficiencies and

reduce costs

Differentiate the customer experience

Enable new services and business models

Bus

ines

sR

esul

ts

Banking Insurance Healthcare Telecom Retail Government Others

User Notification

3rd Party Mobility Services

Location Services

Mobile Payments

Social Mobile Commerce

Customer Careand Insights

Workforce Optimization

Product andService Innovation

IBM Enterprise Mobile Platform

Social Collaboration

Customers want a mobile platform that solves their needs








Mobile Devices and Applications

Collaboration Accelerators

Mobile Accelerators

Device Data & Analytic Accelerators

Cloud and Social Business Services

Business Applications

Enterprise Data & Analytics

Infrastructure and Virtualization

Connectivity

Security, Lifecycle and Governance

Mobile Device Production

Management

Platform Management

Mobile Device Application

Development

Platform Development

Registry and Metadata Services

Mobile Platform Reference Model


Mobile Devices and Applications

Collaboration Accelerators

Mobile Accelerators

Device Data & Analytic Accelerators

Cloud and Social Business Services

Business Applications

Enterprise Data & Analytics

Infrastructure and Virtualization

Connectivity

Security, Lifecycle and Governance

Mobile Device Production

Management

Platform Management

Mobile Device Application

Development

Platform Development

Registry and Metadata Services

Mobile Platform Reference ModelArchitectural Features

• Push Notifications• SMS• Grid/Vault

• Push Notifications• SMS• Grid/Vault

• Profile/Policy Mgmt• Security Svcs• App Versioning

(Prod)• Device Mgmt (i.e.

Wipe)• Device Insight /

Analytics• App Store (Prod)

• Profile/Policy Mgmt• Security Svcs• App Versioning

(Prod)• Device Mgmt (i.e.

Wipe)• Device Insight /

Analytics• App Store (Prod)

• Intrusion Detection• Health Monitoring• Availability• Problem Mgmt• Trace Analysis• Performance /

Throughput

• Intrusion Detection• Health Monitoring• Availability• Problem Mgmt• Trace Analysis• Performance /

Throughput

• ALM• App Construction /

Packaging• Reqs Mgmt for

Mobile• App Scanning

• ALM• App Construction /

Packaging• Reqs Mgmt for

Mobile• App Scanning

• Cloud Hosting• Elastic Workload Management

• Cloud Hosting• Elastic Workload Management

• App Testing• App Quality• App Versioning (Dev)• App Insight/Analytics• App Store (Dev)

• App Testing• App Quality• App Versioning (Dev)• App Insight/Analytics• App Store (Dev)

• Resource Management• Portfolio Management

• Resource Management• Portfolio Management


Companies are extending products to satisfy mobile requirements

Control Channel

Data Channel

C2DM

APNS

SOAPoverHTTPS

Authentication

“A health care company leveraging DataPower for securing their enterprise...”


Companies are extending products to satisfy mobile requirements

Control Channel

Data Channel

C2DM

APNS

SOAPoverHTTPS

Authentication

“A health care company leveraging DataPower for securing their enterprise...”

Worklight

WorklightShell andOn-deviceservices


Ensure securitycapabilities flowThrough as expected

Ensure securitycapabilities flowThrough as expected


Extending MQ/MessageBroker out to mobile devices with Worklight

Control Channel

Data Channel

C2DM

APNS

MQTT

MQTT

MQorMessageBroker

MQTT leveraged (wherepossible) for efficient exchange Otherwise leveraging Worklightnotifications

MQTT leveraged (wherepossible) for efficient exchange Otherwise leveraging Worklightnotifications




47

Worklight

WebSphere Application Server

WebSphere Portal

Web Experience Themes

Mobile Web Browser

Mobile Portal Accellerator

Feature phones Smartphones and Tablets

Mobile Web browser

Mobile hybrid apps

Mobile Sites with WebSphere Portal and Worklight


WorklightAccess device-specific features

(camera, contacts,etc...)App Store Presence

Application managementMobile Notifications

WebSphere Portal/WCM

Multiple Applications, Content, Roles, Personalization,

Customization

Hybrid Container

Device Features

Web Site

Hybrid Container

Web Site

Device Features

WebSphere Portal/WCM and Worklight used together can extend the capabilities and reach of an exceptional web experience

Hybrid Sites for Web Experiences and Worklight


WebSphere Portal and Worklight working together

Control Channel

Data Channel

C2DM

APNS

HTTPPortal andWCM



Portal/WCM focuses on what it does well – serving up Web (site) content in a personalized fashion which can leverages services on device

Portal/WCM focuses on what it does well – serving up Web (site) content in a personalized fashion which can leverages services on device

Push NotificationsLeveraging embeddedWorklight services

Push NotificationsLeveraging embeddedWorklight services

worklight nitin nm

Documents

ibm mobile portfolio

mobile enterprise space

generation mobile enterprise

endmobile solution mobile

ibm corporation

mobile apps forapp stores

device capabilities

device os