eInvoke: Secure e-Invoicing based on web services

Electronic Invoicing services (e-Invoicing) will have a pivotal role in all the stages of handling Value Added Tax (VAT) for European Member States. Through a systematic introduction of e-invoicing, tax administrators will be able to implement new tools and procedures to carry out alternative controls that are less intrusive on the trading partners. Nevertheless, successful European e-invoicing implementations need to be in compliance with the corresponding European Directive 2001/115/EC. Most contemporary e-Invoicing implementations are proprietary and based on EDI, thus demonstrating great deficiencies. This paper presents an open electronic invoicing system named eInvoke, based on XML, XML cryptography and Web Services, that addresses all security requirements imposed by the Directive. Our e-Invoicing system has been accepted by “CEN/ISSS e-Invoicing Focus Group on Standards and Developments on electronic invoicing relating to VAT Directive 2001/115/EC” and its summary appears in CEN 2003 report [13] (pg 79–85), forwarded to EC as a recommendation. Alexandros Kaliontzoglou holds a Degree in Electrical and Computer Engineering from the National Technical University of Athens (NTUA), Greece. Since 2001 he is a PhD candidate in the area of Network and Information Systems Security at the Telecommunications laboratory in the School of Electrical and Computer Engineering of NTUA. Since April 2000 he has been working for Expertnet S.A. as a security engineer specializing at Web Technologies and network applications, and he has been active both in European research projects in the 5th and 6th Framework Programme (eMayor, Intelcities, SELIS, Reshen, La Mer, TSEC, WebSig) and projects of the Greek private sector. His research interests focus in the area of IT Security, Service Oriented Architectures, Web Services, Software Engineering, e-Government, e-Commerce and Public Key Infrastructures. Pelagia Boutsi has obtained the Degree in Informatics from the University of Piraeus, Greece, in November 2001. Since April 2002, she is a PhD candidate in the area of Security Information at the Computer Science Department of University of Piraeus. Since September 2001 she is employed at Expertnet S.A. as member of the Technical Department. Her current research interests are in the fields of PKIs, XML and XML Security. She has participated in European research projects and projects of the private sector. Despina Polemi has obtained the Degree in Applied Mathematics from Portland State University(USA) in 1984, Ph.D. in Applied Mathematics (Coding Theory) from City University of New York (Graduate Center) in 1991. She held teaching positions (1984– 1995) in Queens College and Baruch College of City University of NewYork. From 1991 to 1996 was assistant professor (tenure track) in State University of New Yorkat Farmingdale in the department of Mathematics. During 1996–2002 she was an associate researcher in ICCS. From 2000 to 2003 she acted as President of the BoD in a security consulting company Expertnet (www.expertnet.net.gr) and technical manager of the company from 2000–2004. She nowa Professor in the University of Piraeus R&D department. Her current research interests are in the fields of cryptology, security and e-business. She has over ninety publications in the above areas. She has received many research grants from various organizations such as the Danish Research Foundation, MSI Army Research Office/Cornell University, IEEE, State University of New York (SUNY), and The Graduate School of City University of New York (CUNY). She has been project manager (PM)/technical manger (TM) in security projects of various programmes such as National Security Agency (NSA), Dr. Nuala McGann Drescher Foundation, Greek Ministry of Defense, INFOSEC TELEMATICS for Administrations (COSACC), the Fifth Framework IST Programme (HARP, BEE, SEED, WebSig, TSEC, CORAS, RESHEN, SEED, La Mer, SECRETS) and the 6FP (e-Mayor, Intelcities, BIOSEC, SELIS). She participated in the EC security projects of the programs COST, ACTS, and NATOs’ security projects. She is a member of IEEE. She serves as an evaluator, reviewer and expert in the European Commission and consultant for the FP6.     

Agent-based game-theoretic model for collaborative web services: Decision making analysis

In agent and (web) service computing, collaboration takes place when distributed entities have limited knowledge and capabilities, so they cannot perform required tasks without interacting and helping each other. For instance, web services, which are loosely-coupled business applications, are called to cooperate in distributed settings for the sake of efficiency. In this context, agents that abstract and act on behalf of web services could act in cooperative groups that gather a number of agents sharing some common goals. Enabling those agent-based web services to decide about their strategies in terms of joining and acting within groups, inviting other agents to join, and leaving a group to act alone is an open issue that we address in this work. In this paper, we propose a framework where agent-based web services select strategies that maximize their outcomes. These strategies could be categorized into cooperative strategies involving other agents and strategies that highlight the single operative attitude. Although cooperation seems to bring better utility to cooperative agents, we highlight that web services in some environments obtain better outcome while they act individually (i.e., outside the group). This means that the cost of cooperation (in some particular cases) might negatively influence the outcome and obtained utility. As solution, we propose in this paper (1) an agent-based model that formalizes web services decision making where different parameters are considered; and (2) a game-theoretic framework that analyzes the web services strategies allowing them to maximize their acting performance where non-zero-sum games are being used. The paper presents theoretical results, which are also confirmed through extensive simulations.     

基于C#的无IIS的Web Services服务

随着面向服务设计思想的进一步成熟,许多产品都提供Web服务,大部分的服务都依赖于第三方的程序,例如IIS,Apache等,而这些程序配置复杂,难以管理和维护.为避免这些问题,提出基于.NET、无IIS的Web服务的理论分析,并详细介绍了设计和实现的过程,实现了不需要任何配置和管理,即零配置和管理,不必依赖其它的Web服务提供者,便于程序的维护和发布.尤其是对于大量采用Web服务通讯的分布式程序,效率有很大的提高.     

基于Web Services的图像处理系统

随着分布式应用的普及,Web Services作为一项新兴技术具有很好的发展前景。本论文首先介绍了Web Services的体系结构;随后通过一个图像缩放处理应用详细描述了构建Web Services的步骤和方法,并通过WSDL文件实现服务器端和客户端的信息交互。最后通过建立UDDI注册中心,完成Web Services的动态注册、发现和绑定,并有效地实现分布式环境下的资源共享和协同工作。     

基于REST Web Services的分布式遥感数据检索技术研究

为了更好地解决分布式遥感数据检索的问题,提出了基于REST Web Services的分布式检索实现方法.根据分布式数据检索的需求和遥感数据检索系统的特点,研究了分布式数据检索的实现技术、REST的基本概念、目标与设计原则、主要思想以及实现方式,在此基本上设计了基于REST Web Services分布式遥感数据检索原型系统,并实现了基于REST Web Services分布式遥感数据检索原型系统.     

一种基于Web服务的工作流标识语言

在Web服务流标识语言WSFL的基础上,提出了一种在Web方式下基于Web服务的工作流标识语言WXML,解决了在Web方式下调用Web服务出现的“循环调用”问题,并对WXML工作流引擎进行了初步设计和实现。这种基于Web服务的工作流应用系统在互操作、集成、共享和效率等方面比现有技术具有明显的优势。     

基于Web Services的GDSS框架的研究

分析了群体决策支持系统(GDSS)和Web Services的技术特点。现有的GDSS存在许多缺陷,不能充分利用已有的各种资源,开发周期长,系统结构不灵活。Web Services是一套基于Web的分布式对象技术的标准。针对已有的GDSS的局限性,通过将Web Services技术与GDSS相结合,提出了一个基于Web Services的GDSS框架。利用此框架可以方便地实现网络资源的整合和组件重用,快速、高效地开发出实用的GDSS。     

Meta web service: building web-based open decision support system based on web services

Web services are currently one of the trends in network-based business services, which intuitively will be applied to build a semantic web-based decision support system (DSS). Since web services are self-contained, modular business process applications, based on open standards, enable integration models for facilitating program-to-program interactions. Decision modules in a semantic web-based DSS can be viewed as a web service. However, according to the current features, web services know only about themselves, they are neither autonomous, nor are they designed to use ontologies; they are passive until invoked, and they do not provide for composing functionalities. These lead to the motivation on building a sophisticated web service to contain these features and to utilize web services on behalf of the user. This paper aims to propose a new concept of Meta Web Service, a web service-based DSS. The meta web service understands the user's problem statement with ontology, performs web service discovery, web service composition, and automatically generates codes for composite web service execution. Case-based reasoning is applied to quickly find past histories of successful service compositions. A prototype of research web service has been developed to show the feasibility of the proposed idea.     

基于Web Services的信息集成方案

随着网络技术的发展,信息的共享和交换显得越来越重要.针对目前网络中信息的异构性,多样性、分布性等特点,提出了一种基于Web Services的异构信息集成方案.该方案主要采用XML技术对各种源信息进行包装,形成了一个虚拟的数据库,从而实现了异构数据源的共享.然后将信息注册在信息注册中心,信息请求方获得XML格式的信息后,使用XML解析器对其解析.该方案有效地解决了信息孤岛问题.     

基于Web Services的分布式模型管理方法研究

在分析了基于Intranet模型管理系统国内外研究现状的基础上,提出了一种基于WebServices在分布式环境下用于决策支持系统的模型管理方法。该方法充分利用了最新的WebServices技术,使处于分布式环境下的模型可以进行模型的组合、生成和调用,为建立实用的分布式模型管理系统提供了一种可行的方法。     

自适应贪婪算法在Web服务查询优化上的应用

在基于自适应技术的基础上,提出了一个Web服务查询优化模型(web service profiler-reoptimizer-cache,WSPRC).在其核心组件之一的Reoptimizer上采用自适应贪婪算法,分析了其执行Web服务查询优化的过程,并从Web服务有前向约束、无前向约束和信息变化等方面与传统的贪婪算法进行了对比.实验结果表明,WSPRC模型和A-Greedy算法提高了Web服务查询访问的效率,节省了查询成本.     

构建基于Web Services的视频点播系统

在分析目前网上视频点播系统缺陷的基础上,提出了利用WebServices技术实现网上视频点播的思路,并介绍了视频点播的实现原理、实现方法和实现过程;简要分析了WebServices的工作原理,利用System,IO对象模型成功地在ASP.NET中实现了视频点播功能.     

基于Web服务的程序设计新思路

组件技术现已对国内外软件产业产生了深远的影响,然而原有的程序设计方法在业已存在的众多组件面前效率低下,产生了大量的资源浪费。提出的基于服务的程序设计（PBOS）就是一种充分利用分散的组件资源和硬件资源构建新型软件的方法,PBOS建立在以Web服务组件为代表的组件技术的松散性和异构性的特点之上,并充分考虑其零散分布性和组件的相对独立性,构建出一种跨域,甚至跨国进行组件搭建的基本方法,大大提高了组件资源和硬件资源的可重用性。     

基于MDA的Web服务动态组合的研究

针对目前Web服务动态组合方面出现的技术问题,给出了基于MDA的Web服务组合的方法,MDA具有将功能需求与具体实现技术分离的优势,因此可以有效地解决Web服务动态合成的可靠性、灵活性、复用性问题.在给出了结合MDA思想的服务合成体系框架的基础上,分析了UML类图与WSDL语言元模型、UML活动图与WS-BPEL语言元模型的对应关系以确定模型到代码的转换规则.最后以某制造企业的案例验证该技术的可行性.     

基于MTOM的Web服务性能优化研究

为提升Web服务性能,满足其进一步应用的要求,研究了消息传输优化机制(message transmission optimization mechanism,MTOM).针对基于Web的二进制数据传输,MTOM采用不同于传统内嵌Base64编码的方式,而是作为附件处理,压缩了报文,提高了性能.在理论分析的基础上,设计并构建了一组Web服务原型.通过一组对比实验,跟踪传输层报文验证了原型的正确和实际报文的缩减.实验结果表明了MTOM对Web服务性能近30％的提升.     

基于网格服务的协同设计平台的设计

为充分利用产品设计合作企业的资源和个体优势,更好地支持企业产品协同设计,从协同设计平台功能需求出发,研究了基于网格服务的协同设计平台的体系结构、资源集成与共享、网格服务实现、网格门户实现等关键技术,构建了基于网格服务的协同设计平台.该平台通过开放网格服务框架,实现了合作企业软件集成和设计资源共享,提高了资源的利用率和产品设计的质量.最后通过机械产品协同设计表明了该平台的有效性.     

基于主观逻辑的Web服务信任模型

在分析了传统主观信任评估模型存在问题的基础上提出了相应的改进方法,将改进后的信任评估模型方法应用到Web服务环境中,从而使Web服务环境中的实体信任度随着交易次数的增加能够自动更新.最后,通过模拟试验表明改进后的主观信任评估模型能更好的反应Web服务环境中实体信任度的变化.     

基于用户反馈QoS的动态Web服务发现方法

由于传统的基于关键字和简单分类的Web服务发现机制缺少服务质量(QoS)考虑,因此不能很好满足用户的需求。针对该问题,提出一种基于QoS的Web服务发现模型,通过引入QoS代理机制,对终端用户使用Web服务后反馈的QoS信息进行量化和度量处理,以支持基于QoS的Web服务发现;在此基础上,根据Web服务的动态性特点和不同用户的QoS需求,给出了基于用户反馈的QoS数据度量方法,并提出一种基于QoS的Web服务发现算法。实验结果表明,提出的Web服务发现方法能够较好地满足用户的需求。     

基于Web服务的EAI在银行业的应用

针对当前银行业信息化现状和数据大集中的难题,提出了以Web服务为核心技术,综合运用数据交换中心、智能代理、Java Agent等计算机技术的企业应用集成解决方案,结合湖南某商业银行的应用案例详细描述了该方案的技术实现。