Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries,...
Transcript of Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries,...
![Page 1: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/1.jpg)
© CGI Group Inc.
Fontys Colloqium Ditigal Authentication / ESB Coupling
Nils Heyer (CGI), Georg Fleischer (CGI)
September 2016
DENK GROTER
![Page 2: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/2.jpg)
Your team for today...
Your team
NILS
HEYER
GEORG
FLEISCHER
Software
developer
Fontys bachelor
(2016)
Software architect
Project manager
Fontys bachelor
(2011)
2
![Page 3: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/3.jpg)
Agenda
3
![Page 4: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/4.jpg)
Agenda
4
![Page 5: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/5.jpg)
CGI: 5th largest independent IT and business
process services firm in the world
5
65,000 professionals
75% shareholders
95% on-time, within budget delivery
400 locations
9/10 client satisfaction score
150+ mission-critical
IP-based solutions
$10.3B annual revenue
$21.5B backlog countries
40
Statistics verified as of January 27, 2016.
![Page 6: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/6.jpg)
A few of our clients
6
Financial Services Health Government Communications Utilities
Oil & Gas Manufacturing Transportation Post & Logistics Retail &
Consumer Services
Over 5,000 commercial and government organizations worldwide
![Page 7: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/7.jpg)
Agenda
7
![Page 8: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/8.jpg)
8
Context
• Currently unsafe security methods in Public & Healthcare
• Easy Identity theft as test shown
• Possible new authentication methods:
8
nPA (neuer Personalausweis)
Source(https://de.wikipedia.org/wiki/Datei:Muster_des_Perso
nalausweises_VS.jpg)
eGK (elektronische Gesundheitskarte)
Source(http://www.aerztenetz-
brb.de/aktuelles/krankenversichertenkarte.html)
![Page 9: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/9.jpg)
Project Goals
• Research the digital authentication possibilities of eGK & nPA
• On which system they can be used
• Hardware needed for the authentication
• Implementation of an authentication prototype
9
![Page 10: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/10.jpg)
Project organization
• Scrum as an agile approach
• Scrum Master & Scrum Team: Nils Heyer
• Product Owner: Georg Fleischer
• Daily stand-up meetings are ommited
10
Source(http://www.zenexmachina.com/what-we-do/applications-development/index.html)
![Page 11: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/11.jpg)
Research
• Both cards contain personal data, certificates & PINs
• The nPA offers extra security functions:
• Pseudonym login
• Age validation
• Residence validation
• QES (Qualified electronical signature)
• Authentication with eGK currently not possible
• Online function not available
11
![Page 12: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/12.jpg)
Citizen Portal Description
• Portal for the
administrative services of
corporations or
administrative districts
• Use the nPA to
authenticate and fill
applications
• All the nPA functions
integrated
12
![Page 13: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/13.jpg)
Authentication Module Description
• Part of the Citizen Portal
• Implements the eID-Framework
• Handle the Authentication with
the nPA
• Uses SOAP and SAML to
authenticate
• Reusable in other projects
13
Source(https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publika
tionen/TechnischeRichtlinien/TR03130/TR-03130_TR-eID-
Server_Part1.pdf)
![Page 14: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/14.jpg)
Architecture decision
eService
14
Tomcat
MySQL
JSF Primefaces
Citizen Portal
Hibernate Authentication module Callback Interface
SOAP
SAML
Cache
![Page 15: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/15.jpg)
Design Authentication Module Architecture Decisions
15
Authentication module
SLF4J
Google Guice Google Guava
Cache
Apache WSS4J
Servlets Callback
Interface
Apache Common
Config SAAJ SOAP
SAML
![Page 16: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/16.jpg)
16
Source (https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03130/TR-03130_TR-eID-
Server_Part1.pdf)
Demo Environment Real Environment
![Page 17: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/17.jpg)
Summary and Evaluation
• The authentication with the nPA is possible
• With the Authentication Module a library for the nPA was designed
• Through the complication Authentication Module not completely
implemented
• The Citizen Portal shows use cases for authentication with the nPA
17
![Page 18: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/18.jpg)
Agenda
18
![Page 19: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/19.jpg)
What is a Enterprise Service Bus (ESB)
• Middleware between different services/applications
• The task of an ESB are :
• Establish Connectivity
• Transform Data
• Routing
• Handles Security aspects
• Handles with aspects of the service reliability
• Manages the services
• Provides possibilities to monitor, protocol and debug the services
19
![Page 20: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/20.jpg)
Example of multiple ESB
20
Webservice
ESB
Java
Appl. Local
Appl. Local
Appl.
C
Appl.
Gateway
Webservice
ESB
Ext.
Appl.
Ext.
Appl.
ESB
SAP
Appl. Local
Appl.
![Page 21: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/21.jpg)
Information LANUV
• For consumer protection all groceries, cosmetics and commodities
need to be non-hazardous to health
• The rules for animal health, animal protection need to be checked
• Feed, fertilizer and seeds need to checked
• In NRW has the responsibility the state agency for nature,
environment & consumer protection (LANUV)
• Development of an integrated data processing system (IDV)
• Currently Migration from Tibco 5 to Tibco 6
21
![Page 22: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/22.jpg)
Further ESBs:
• Sample Data
• Livestock Farming
• Rapid Alert System
22
IS-TSK EWDB MadBW TSN
BALVI K *
Tibco EMS & BW / OperationalMasterData-XSD
BALVI L ** IDV-SFDB HIT/ZID
LANUV ESB
![Page 23: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/23.jpg)
23
Migration Strategies
• Low Risk
• Platforms can be
developed
independent from
each other
• Migration from
Message Types
instead of services
• Minimal Risk
• Iterative Migration
• Rollback of single
service possible
• High Risk
• Changing
requirements
• High test and
integration effort
• Rollback only
complete possible
Big Bang Parallel Parallel with
Coupling
• Low Costs
• Migration in
one step
• No costs for
second
platform
• Medium Cost
• Second platform need
to be maintained
• Higher Costs
• Bridge need to be
developed and
maintained
• Second platform need
to be maintained
![Page 24: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/24.jpg)
Tibco 5
COS
SFDB
Tibco 6
Databridge
Databridge Tibco 5 - 6
24
![Page 25: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/25.jpg)
Databridge Tibco 5 - 6
25
Tibco 5
COS
Old
SFDB
Tibco 6
COS
New Databridge
![Page 26: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/26.jpg)
Databridge Tibco 5 - 6
26
Tibco 5
COS
Old
SFDB
Old
Tibco 6
COS
New
SFDB
Databridge
![Page 27: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/27.jpg)
Databridge Concept
27
Q.Data-
bridge.
out
T.Data-
bridge.in
T.Proben
T.Stamm
daten
T.Proben
T.Stamm
daten
Routes.conf Routes.conf
REST
API
JMS
Receiver
JMS
Sender
Mapper Mapper
Http
Sender
Http
Receiver
![Page 28: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/28.jpg)
Sending Implementation Tibco 5
28
![Page 29: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/29.jpg)
Receiving Implementation Tibco 6
29
![Page 30: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/30.jpg)
Agenda
30
![Page 31: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/31.jpg)
Resistence is futile – Bachelor thesis @ CGI
• Setup
• Starts in february
• 6 months
• Clear requirements / aim definition
• Topics
• Software development
• Business Informatics
• Domains
• Public government
• Telecommunications
• Your Chance =>
• Work on industry relevant topics
• Combine personal interest an company value
• Get in touch with domain and technology experts
31
Contact:
![Page 32: Fontys Colloqium - fontysvenlo.org · Information LANUV • For consumer protection all groceries, cosmetics and commodities need to be non-hazardous to health • The rules for animal](https://reader034.fdocuments.in/reader034/viewer/2022051322/6011c6455ac264211b4fb41d/html5/thumbnails/32.jpg)
Our commitment to you We approach every engagement with one
objective in mind: to help clients succeed