Ws-AC: A Fine Grained Access Control System for Web Services

The emerging Web service technology has enabled the development of Internet-based applications that integrate distributed and heterogeneous systems and processes which are owned by different organizations. However, while Web services are rapidly becoming a fundamental paradigm for the development of complex Web applications, several security issues still need to be addressed. Among the various open issues concerning security, an important issue is represented by the development of suitable access control models, able to restrict access to Web services to authorized users. In this paper we present an innovative access control model for Web services. The model is characterized by a number of key features, including identity attributes and service negotiation capabilities. We formally define the protocol for carrying on negotiations, by specifying the types of message to be exchanged and their contents, based on which requestor and provider can reach an agreement about security requirements and services. We also discuss the architecture of the prototype we are currently implementing. As part of the architecture we propose a mechanism for mapping our policies onto the WS-Policy standard which provides a standardized grammar for expressing Web services policies.     

Web Services for Geographic Information Systems

A surge in Web services and applications for geographic information systems (GISs) has made large spatial-data archives available over the Internet. Significant accomplishments in GIS Web services have led to several exemplifying map and image services that adhere to Web services standards and provide geospatial data and digital maps to enterprise developers.     

Knowledge-intensive systems in the social service agency: Anticipated impacts on the organisation

Shrinking resources and the increasing complexity of clinical decisions are stimulating research in knowledge-intensive computer applications for the delivery of social services. The expected benefits of knowledge-intensive applications such as expert systems include improvement in both the quality and the consistency of service delivery, augmentation of institutional memory, and reduced labour costs through greater reliance on paraprofessionals. This paper analyses the likely impacts of knowledge-intensive systems on social service organisations, drawing on trends in related service-delivery fields, and on known impacts of computer applications in organisations. A structural change may be anticipated: decision making and planning functions will shift increasingly from social service professionals to administrators.     

Big Data and virtualization for manufacturing cyber-physical systems: A survey of the current status and future outlook

The recent advances in sensor and communication technologies can provide the foundations for linking the physical manufacturing facility and machine world to the cyber world of Internet applications. The coupled manufacturing cyber-physical system is envisioned to handle the actual operations in the physical world while simultaneously monitor them in the cyber world with the help of advanced data processing and simulation models at both the manufacturing process and system operational levels. Moreover, a sensor-packed manufacturing system in which each process or piece of equipment makes available event and status information, coupled with market research for true advanced Big Data analytics, seem to be the right ingredients for event response selection and operation virtualization. As a drawback, the resulting manufacturing cyber-physical system will be vulnerable to the inevitable cyber-attacks, unfortunately, so common for the software and Internet-based systems. This reality makes cybersecurity penetration within the manufacturing domain a need that goes uncontested across researchers and practitioners. This work provides a review of the current status of virtualization and cloud-based services for manufacturing systems and of the use of Big Data analytics for planning and control of manufacturing operations. Building on already developed cloud business solutions, cloud manufacturing is expected to offer improved enterprise manufacturing and business decision support. Based on the current state-of-the-art cloud manufacturing solutions and Big Data applications, this work also proposes a framework for the development of predictive manufacturing cyber-physical systems that include capabilities for attaching to the Internet of Things, and capabilities for complex event processing and Big Data algorithmic analytics.     

An Internet-based distributed multiple-telerobot system

Internet-based telerobotic systems have been evolving rapidly in recent years. Using Web-based technology, telerobotic systems have been shown to have an increasing potential for a variety of applications including remote control, manufacturing, surgery, training, and education. In this paper, we present an Internet-based distributed, multiple-telerobot system that enables operators to use remote robots in order to perform cooperative tasks. Several multiple-telerobot demonstration programs have been designed, including a single telerobot training program, a multiple-telerobot "group object-handling" program, and pairs of telerobots serving Internet participants playing with a Rubik's Cube to illustrate Internet-based interaction and collaboration. Experimental tests have been performed on three demonstration programs that are presented in this paper.     

Expert system to match robots and to synchronize their operations to pick and place large parts

The operation of pick and place large parts is a very common operation on the manufacturing floor. The efficiency of the pick and place operation affects the efficiency of the entire manufacturing floor. Large parts in terms of this research are parts which must be transported by two robots.This paper concludes the development of an expert system and a numerical simulation to assign two available robots to perform the pick and place operations of large parts.The developed expert system consists of a knowledge-base structured in interrelated frames to define large manufacturing systems and an inference-engine to perform the robots matching and their performances monitoring. Matching robots considerations can not be performed by numerical algorithms in real time systems, because they are major computation time consumers. Therefore, unmatched robots can be assigned by the numerical algorithms to perform inefficient pick and place operations. The expert system and the numerical simulation were programmed, and many computer runs were performed to explore the efficiency of the two systems in a large variety of manufacturing systems.The achieved results show that the expert system has no advantage in assigning matched robots to perform the pick and place operations in systems characterized by very short machine process times (0.5 moment to 1 moment). If such short machine process times are relevant, the knowledge-base is updated very frequently, and the inference-engine reasoning processes can not be initiated. For longer machine process times, the frequency of knowledge-base changes is reduced, and the inference-engine reasoning processes can be initiated without delays. Therefore, the advantages of the expert system become significant if machine process times are extended.     

TCP/IP networking in process control plants

This paper refers to the utilization of Transmission Control Protocol/Internet Protocol (TCP/IP) in process control plants. Pertinent characteristics of classical control systems are presented, as a base to comparison with TCP/IP control systems. The advantages and shortcomings of adopting the latter one are pointed out. Integration with Internet-based technologies and systems management is explained next. Some products that provide these features are also presented as well as common components used in corporate networks, which can fully exploit and enhance the versatility of these control networks. Finally, economical aspects of this design are briefly commented.     

A GUI for Jess

The paper describes JessGUI, a graphical user interface developed on top of the Jess expert system shell. The central idea of the JessGUI project was to make building, revising, updating, and testing Jess-based expert systems easier, more flexible, and more user friendly. There are many other expert system building tools providing a rich and comfortable integrated development environment to expert system builders. However, they are all either commercial or proprietary products. Jess and JessGUI are open-source freeware, and yet they are well suited for building even complex expert system applications, both stand-alone and Web-based ones. An important feature of JessGUI is its capability of saving knowledge bases in XML format (in addition to the original Jess format), thus making them potentially easy to interoperate with other knowledge bases on the Internet. Jess and JessGUI are also used as practical knowledge engineering tools to support both introductory and advanced university courses on expert systems. The paper presents design details of JessGUI, explains its links with the underlying Jess knowledge representation and reasoning tools, and shows examples of using JessGUI in expert system development. It also discusses some of the current efforts in extending Jess/JessGUI in order to provide intelligent features originally not supported in Jess.     

Hybrid expert systems: A survey of current approaches and applications

This paper is a statistical analysis of hybrid expert system approaches and their applications but more specifically connectionist and neuro-fuzzy system oriented articles are considered. The current survey of hybrid expert systems is based on the classification of articles from 1988 to 2010. Present analysis includes 91 articles from related academic journals, conference proceedings and literature reviews. Our results show an increase in the number of recent publications which is an indication of gaining popularity on the part of hybrid expert systems. This increase in the articles is mainly in neuro-fuzzy and rough neural expert systems’ areas. We also observe that many new industrial applications are developed using hybrid expert systems recently.     

A review of Bayesian belief networks in ecosystem service modelling

A wide range of quantitative and qualitative modelling research on ecosystem services (ESS) has recently been conducted. The available models range between elementary, indicator-based models and complex process-based systems. A semi-quantitative modelling approach that has recently gained importance in ecological modelling is Bayesian belief networks (BBNs). Due to their high transparency, the possibility to combine empirical data with expert knowledge and their explicit treatment of uncertainties, BBNs can make a considerable contribution to the ESS modelling research. However, the number of applications of BBNs in ESS modelling is still limited. This review discusses a number of BBN-based ESS models developed in the last decade. A SWOT analysis highlights the advantages and disadvantages of BBNs in ESS modelling and pinpoints remaining challenges for future research. The existing BBN models are suited to describe, analyse, predict and value ESS. Nevertheless, some weaknesses have to be considered, including poor flexibility of frequently applied software packages, difficulties in eliciting expert knowledge and the inability to model feedback loops.     

ARMADA Middleware and Communication Services

Real-time embedded systems have evolved during the past several decades from small custom-designed digital hardware to large distributed processing systems. As these systems become more complex, their interoperability, evolvability and cost-effectiveness requirements motivate the use of commercial-off-the-shelf components. This raises the challenge of constructing dependable and predictable real-time services for application developers on top of the inexpensive hardware and software components which has minimal support for timeliness and dependability guarantees. We are addressing this challenge in the ARMADA project.ARMADA is set of communication and middleware services that provide support for fault-tolerance and end-to-end guarantees for embedded real-time distributed applications. Since real-time performance of such applications depends heavily on the communication subsystem, the first thrust of the project is to develop a predictable communication service and architecture to ensure QoS-sensitive message delivery. Fault-tolerance is of paramount importance to embedded safety-critical systems. In its second thrust, ARMADA aims to offload the complexity of developing fault-tolerant applications from the application programmer by focusing on a collection of modular, composable middleware for fault-tolerant group communication and replication under timing constraints. Finally, we develop tools for testing and validating the behavior of our services. We give an overview of the ARMADA project, describing the architecture and presenting its implementation status.     

Telerobotic systems design based on real‐time CORBA

A new class of telerobotic applications is making its way into research laboratories, fine arts or science museums, and industrial installations. Virtual laboratories and remote equipment maintenance are examples of these applications, which are built exploiting distributed computing systems and Internet technologies. Distributed computing technologies provide several advantages to telerobotic applications, such as dynamic and multiuser access to remote resources and arbitrary user locations. Nonetheless, building these applications remains a substantial endeavor, especially when performance requirements must be met. The aim of this paper is to investigate how mainstream and advanced features of the CORBA object‐oriented middleware can be put to work to meet the requirements of novel telerobotic applications. We show that Real‐Time CORBA extensions and asynchronous method invocation of CORBA services can be relied upon to meet performance and functional requirements, thereby enabling teleoperation on local area networks. Furthermore, CORBA services for concurrency control and large‐scale data distribution enable geographic‐scale access for robot teleprogramming. Limitations in the currently available implementations of the CORBA standard are also discussed, along with their implications. The effectiveness and suitability for telerobotic applications of several CORBA mechanisms are tested first individually and then by means of a software framework exploiting CORBA services and ensuring component‐based development, software reuse, low development cost, fully portable real‐time and communication support. A comprehensive telerobotic application built based on the framework is described in the paper and evaluated on both local and wide area networks. The application includes a robot manipulator and several sensory subsystems under concurrent access by multiple competing or collaborating operators, one of which is equipped with a multimodal user interface acting as the master device. © 2005 Wiley Periodicals, Inc.     

An expert system for design for robotic assembly

In recent years, due to the various advantages associated with automation and robotics, much work has been done in developing robotic systems for assembly operations. Since part design plays a major role in assembly, this paper deals with the design of parts for ease of robotic assembly. Considerable knowledge is available in the form of design for robotic assembly rules. In addition, a large amount of data is required for decisions regarding suitability of parts for robotic assembly. The implementation of design for robotic assembly rules would be much easier with the help of an expert system, which would guide the designer toward choosing the design alternative that can best facilitate ease of assembly from a robotic point of view.To this end, a prototype expert system for design for robotic assembly is developed and presented in this paper. The expert system was implemented as a production system, which consists of rules and Object-Attribute-Value (O-A-V) triplets to represent domain knowledge. In order to best utilize the domain specific knowledge, a state space search-based inference mechanism was employed. The implementation of the prototype system is illustrated with examples.     

Expert system problem selection: A domain characteristics approach

The first generation of commercial expert systems based on AI technology are now available in the market place. But in the available literature, one can find hardly any material on expert system problem selection. In this paper a number of popular and successful expert systems are analyzed. Domain-dependent and domain-independent problem characteristics have been identified, based on the analysis. To test our contention that these characteristics significantly contribute to the success of expert systems, a questionnaire survey involving a number of expert system developers was conducted. Based on this, a domain characteristic approach for expert system problem selection is presented.     

Isomorphic transformations of uncertainties for incorporating EMYCIN-style and PROSPECTOR-style systems into a distributed expert system

In the past,expert systems exploited mainly the EMYCIN model and the PROSPECTOR mdoel to deal with uncertaintes.In other words,a lot of stand-alone expert systems which use thse two models are available.If we can use the Internet to Couple them together,their performance will be improved through cooperation.This is because the problem-solving ability of expert systems is greatly improved by the way of cooperation among different expert systems in a distributed expert system.Cooperation between different expert systems with these two heterogeneous uncertain reasoning models is essentially based on the transformations of uncertainties of propositions between these two models.In this paper,we discovered the exactly isomorphic transformations uncertaintis between uncertain reasoning models,as used by EMYCIN and PROSPECTOR.     

Computer networks design using hybrid fuzzy expert systems

 Designing and configuring large computer networks to support a variety of applications and computational environments is difficult, as it not only requires highly specialized technical skills and knowledge, but also a deep understanding of a dynamic commercial market. Hybrid fuzzy expert systems integrate fuzzy expert systems and neural networks methods replacing classical hard decision methods and providing better performance than traditional techniques. In this paper, we present an integrated fuzzy expert system, machine learning, and neural networks approach to large structured computer networks design and evaluation. After presenting an overview of the system and the major research choices, we describe in detail the system's modules and present examples of its potential use.     

Design and development of Distributed Virtual Geographic Environment system based on web services

This paper aims to design and develop a Distributed Virtual Geographic Environment (DVGE) system. A DVGE system is an Internet-based virtual 2D and 3D environment that provides users with a shared space and a collaborative platform for publishing multidimensional geo-data, and for simulating and analyzing complex geo-phenomena. Users logging into the system from different clients can share distributed geo-information resources, including geo-data and geo-models, and can complete collaborative tasks. Web service technology provides effective solutions for constructing DVGE systems because of its ability to support multi-platform, multi-architecture, and multi-program-language interoperability on the Internet, but also because of its ability to share programs, data, and software. This paper analyzes the characteristics, relevant technologies, and specifications of web services, such as grid services, Open Geo-data Interoperability Specifications (OpenGIS), and Geography Markup Languages (GML). The architecture and working mechanisms of the DVGE system based on web services are then elaborated. To demonstrate DVGE systems based on web services, we examine a case study of water pollution in Yangzhou City, Jiangsu Province, China, using a prototype DVGE system that is developed with Jbuilder9.0 and Java3D 1.0 packages, and the Weblogic platform 8.1.     

A Rule-based Extension to the C++ Language

In rule-based systems, sets of rules are applied to known information to generate new, consequential information. The majority of the large number of existing systems¹ has been produced with the objective of ease of use, enforcing an English-like syntax in the rules and hiding the control methods from the developer. The method adopted in the current work aims to provide rule-based facilities while maintaining the flexibility and implementation efficiency of a conventional language. This is achieved by extending the features of C++ to permit the development of rule-based systems whose control is decided by the developer. The design can be tailored to the application unrestricted by the normal constraints of the rule-based system, and a framework is made available for the development of multiple expert systems for use in blackboard system applications. This paper describes the approach adopted in the current work, the operation of the system and describes two example implementations. © 1997 John Wiley & Sons, Ltd.     

基于着色Petri网的Internet电话端系统业务冲突检测

将描述端业务的LESS脚本转换为着色Petri网模型,可以为实现形式化方法检测端业务间的冲突提供基础。本文根据业务逻辑树节点的特性和LESS的定义,提出了通用的转化规则,实现了端业务的形式化建模,从而方便了业务的集成及业务间的离线检测。通过CPN Tools对建立的业务模型进行仿真并分析模型状态空间,检测出端业务之间是否存在冲突。最后,用典型的业务实例验证了所提方法在Internet电话端系统环境中的可行性和有效性。     

An architectural approach towards Future Media Internet

Internet is the most important information exchange means nowadays and has become the core communication environment, not only for business relations, but also for social and human interaction. Yet, the immense success of Internet has created even higher hopes and expectations for new immersive and real-time applications and services. However, there are no guarantees that the current Internet will be able to support them. To face the new requirements coming from these new applications and services, several architectural approaches have been proposed. Evolutionary and clean-slate approaches, based on content-centric architectures, have been proposed for meeting new requirements regarding media. This paper highlights the main architectural functions and presents a revolutionary protocol stack and a holistic architectural approach that targets Future Media Internet (FMI). Among the architectural functions and the holistic approach, the paper presents solutions to overcome the current content delivery limitations, moving intelligence in the network and converting it into a content oriented/centric network, that goes well beyond current CDNs; supporting the functionalities for producing, publishing, caching, finding and consuming content; and a novel Future Media Internet protocol stack and network architecture.