My G+ Profile
« July 03, 2003 | Main | July 08, 2003 »
July 07, 2003
Government Information Awareness
I first found out about the GIA program from Dioecetes, and then later saw this article in Wired News. A group of MIT researchers have started a web site for gathering intelligence on elected officials in the interest of better government. Its so busy today that its hard to see what it does for sure.
I think transparency is one of the most important features that eGovernment can have. Not all eGovernment has to be from the government. Some of it, as this GIT project points out, might best come from non-profits or others.
05:06 PM | Recommend This | Print This
Blogging in the Workplace
An article in today's New York Times (free registration required) talks about how some companies are using weblogs as an alternative to email.
04:01 PM | Recommend This | Print This
Pipelining the Web
Suppose you've created a Web services interface to a legacy application. Later, you decide to restrict access to this Web service to a certain collection of trading partners. You could modify the Web service itself, but this makes it less general and thus harder to reuse in some other capacity. Instead, an active intermediary can sit in front of your Web service and perform the authentication and authorization using LDAP, SAML (Security Assertion Markup Language), or another system.Ê
Of course, programmers have been writing wrappers -- programs that sit outside another program and serve as its proxy -- for years. Whatâs different with active intermediaries is that thereâs no program -- at least not one that has to be written. Web services are based on the standardized interface protocol SOAP; SOAP interfaces are described using WSDL. The authentication service in our example could use the Web service's WSDL document to discover specific details of the SOAP-based API and wrap the Web service in an authentication and authorization proxy without anyone having to write any code.
[Full story at InfoWorld...]
We set off to write this feature to provide an umbrella for the reviews of active intermediaries we've done and continue to do (I've got one of Blue Titan I'm working on right now). The goal was to explain some concepts and to create some classifying terminology for the various products. This article is accompanied by a sidebar by Jon Udell on how active intermediaries can halt the finger-pointing. I wrote a glossary of active intermediary terms to accompany the article:
Active Intermediary: a proxy or other program that sits in between two web services and acts on the message flow between them to add some new functionality.
Message Store and Forward: ensures that messages are delivered once and only once and, for some applications, ensures that theyâre delivered in order.
Service Call Switching balances server load, shuttles potentially high load jobs to specific servers, or moves a new version of a service into production.
Context Sensitive Message Filtering: filters messages based on their content or the message meta-information. Probably the most obvious example of context sensitive filtering is authorization.
Event Monitoring: places monitors, alerts and triggers on a message flow. Alert recipients can be other programs or people.
Message Logging: stores messages and message meta-information for traffic analysis or auditing.
Service Facades: adapts one Web service to another or to an industry or corporate standard.
Rule-based Routing: scripts Web service interactions and routes messages to intermediaries based on message content and meta-information.
I also created a table, which is referenced in the online version as "Selecting the Right Pipes." I can't find it online at the InfoWorld site, but I've made a version of it available on my site. I'll continue to fill it in as I review active intermediary products.
11:25 AM | Recommend This | Print This
Managing the Web Services Flow
One of the chief differences between the decentralized computing model defined by Web services and distributed computing models of the past is the shift in component ownership. In distributed architectures, most of the interacting software components operated in a single trusted domain that was centrally managed. In the new decentralized model, interactions between components span organizational boundaries, making it difficult to manage, configure, monitor, and update the components from a single operations organization.
Core 3.0 from Confluent Software is a Web services manager that tackles this problem by providing a single point of configuration for far-flung Web service components. The architecture of Confluent Core is as distributed as the services that it manages. Core works through a set of active intermediaries called "gateways" or "agents," depending on how they are deployed.
[Full story at InfoWorld...]
Confluent CORE was a different product that ones I'd reviewed before. There was not specific transport layer included, just gateways, agents, and management points. There are certain businesses that will be very interested in the model that Confluent uses. For example, I was speaking to Scott Loftesness a few month ago about Web services and he made the observation that the financial services industry is not likely to embrace a third-party active intermediary model because of the security risks that would have to be mitigated. I'm inclined to believe Scott on this. CORE is an alternative that provides many necessary features without the attending potential risk of a third party intermediary.