PESOI： Process Embedded Service-Oriented Architecture

1 Introduction Service-Oriented Architecture (SOA) has received significant attention recently as major computer and software companies such as HP, IBM, Intel, Microsoft, and SAP, have all embraced SOA, as well as government agencies such as DoD (US depar…     

Derivation of trust federation for collaborative business processes

Service Oriented Architecture (SOA) is considered to be an important enabler of Internet of Services. By adopting SOA in development, business services can be offered, mediated, and traded as web services, so as to support agile and dynamic business collaborations on the Internet. Business collaboration is often implemented as cross-enterprise processes and involves more than one business entity which agrees to join the collaboration. To enable trustworthy and secure provision of services and service composition across enterprise boundaries, trust between business participants must be established, that is, user identities and access rights must be federated, to support business functions defined in the business processes. This paper proposes an approach which derives trust federation from formally described business process models, such as BPMN and WS-CDL processes, to automate security configuration of business collaborations. The result of the derivation is trust policies which identify trust relationships between business participants and can be enforced in enterprises’ service runtimes with support of a policy deployment infrastructure.     

一种策略驱动的Web服务质量保障框架

随着面向服务计算技术的发展和应用,提供非功能属性保障能力成为服务在企业应用中获得成功的关键因素.同传统的分布式计算技术不同的是,服务是动态发现和绑定的,这要求服务双方必须动态协商并保障各种非功能属性.使用WS-Policy语言来显式描述Web服务的非功能性的能力和需求,并提出了一种策略驱动的服务保障框架来完成非功能属性的动态保障,最后在SOAP引擎SOAPExpress中实现了这一框架,结果表明它可以有效满足企业应用对Web服务质量的需求.     

Daios: Efficient Dynamic Web Service Invocation

Systems based on the service-oriented architecture (SOA) paradigm must be able to bind to arbitrary Web services at runtime. However, current service frameworks are predominantly used through precompiled service-access components, which are invariably hard-wired to a specific service provider. The Dynamic and Asynchronous Invocation of Services framework is a message-based service framework that supports SOA implementation, allowing dynamic invocation of SOAP/WSDL-based and RESTful services. It abstracts from the target service's internals, decoupling clients from the services they use.     

基于适配的服务协作流程动态管理

服务协作以服务为构造单元,通过组合不同的服务,实现复杂的业务逻辑,并以此为基础构建新的应用.为实现正确的服务协作,服务之间的交互必须是兼容且一致的.适配技术通过构造适配器来弥补服务之间的交互差异,为解决协作的一致性问题提供了有效的方法途径.然而考虑到服务计算环境的动态特性,协作适配器本身应具有动态调整及重新配置的能力,从而避免使其成为协作系统响应动态变化的可适应能力的瓶颈.文中首先给出了一种基于适配的服务协作方法,以保证服务交互的一致性.并针对提出的适配器结构,建立了适配器的执行模型,在此基础上给出了适配器的动态更新方法,使适配器具有可重配置以及动态调整的能力,从而保证了基于适配的服务协作系统的灵活性和动态可适应性.     

A resource-aware framework for resource-constrained service-oriented systems

As embedded systems become increasingly complex, not only are dependability and timeliness critical quality indicators, but also their ability to dynamically adapt to changes in their runtime environment. Service-oriented Architecture (SOA) offers a potential solution to this challenge by allowing services to be dynamically bound at runtime. However, resource contention between services and resource saturation can result in significant Quality of Service (QoS) degradation. To address these issues, this paper proposes a runtime, resource-aware architecture that combines resource monitoring with dynamic workflow orchestration to mediate resource contention within the orchestration environment. The architecture was evaluated on a medium-size service-oriented case study, deployed on a resource-constrained device.     

基于SOA的面向业务敏捷性流程集成模型

以企业的IT架构为着眼点,引入面向服务的架构,以业务流程、信息以及协作为切入点,构建以业务流程管理为中心的流程管理模型,通过分离流程的建模和实现过程,自动组合和调度服务等一系列机制,实现了动态、自动、敏捷的流程集成功能,通过跨企业采购流程为例对系统的功能加以说明。     

面向SOA的密码服务安全框架研究

SOA环境下用户管理的分布性、业务协作的动态性、以及服务的开放性给密码服务带来了极大的安全挑战。文章建立了一种安全框架,该框架定义了完整的安全服务集合和接口,可满足密码服务安全接入、访问控制、安全共享的特殊要求,为面向SOA的密码服务提供了安全保障。     

Enforcement of entailment constraints in distributed service-based business processes

ContextA distributed business process is executed in a distributed computing environment. The service-oriented architecture (SOA) paradigm is a popular option for the integration of software services and execution of distributed business processes. Entailment constraints, such as mutual exclusion and binding constraints, are important means to control process execution. Mutually exclusive tasks result from the division of powerful rights and responsibilities to prevent fraud and abuse. In contrast, binding constraints define that a subject who performed one task must also perform the corresponding bound task(s).ObjectiveWe aim to provide a model-driven approach for the specification and enforcement of task-based entailment constraints in distributed service-based business processes.MethodBased on a generic metamodel, we define a domain-specific language (DSL) that maps the different modeling-level artifacts to the implementation-level. The DSL integrates elements from role-based access control (RBAC) with the tasks that are performed in a business process. Process definitions are annotated using the DSL, and our software platform uses automated model transformations to produce executable WS-BPEL specifications which enforce the entailment constraints. We evaluate the impact of constraint enforcement on runtime performance for five selected service-based processes from existing literature.ResultsOur evaluation demonstrates that the approach correctly enforces task-based entailment constraints at runtime. The performance experiments illustrate that the runtime enforcement operates with an overhead that scales well up to the order of several ten thousand logged invocations. Using our DSL annotations, the user-defined process definition remains declarative and clean of security enforcement code.ConclusionOur approach decouples the concerns of (non-technical) domain experts from technical details of entailment constraint enforcement. The developed framework integrates seamlessly with WS-BPEL and the Web services technology stack. Our prototype implementation shows the feasibility of the approach, and the evaluation points to future work and further performance optimizations.     

Dynamic SOA Framework to Support Ad Hoc Enterprise Alliance Formation

Collaboration among businesses is needed to successfully fulfill a given task and goal. Service-Oriented Architecture (SOA) has been regarded as an efficient platform to support flexible interoperability among various enterprises by discovering, selecting and composing services. However, since a large number of enterprises have been participating in this SOA platform, relationships among these enterprises are getting too complicated to obtain flexibility and scalability for efficient collaboration. Thereby, in this paper, we propose a dynamic SOA platform to discover service chains for building ad hoc enterprise alliances where the only relevant enterprises are sorted out and merged. As a result, given an event, decision makers can find out which enterprises (and services from the enterprises) might be selected for their collaboration. The proposed SOA platform has been applied to mobile advertisement application as a case study. With respect to two indicators (i.e., precision and agility), we have shown that the proposed SOA outperforms traditional enterprise collaboration schemes.