Making Sense Of Web Services

Making Sense of Web Services and Microsoft’s Roadmap Jorgen Thelin Connected Systems Division Microsoft Corporation

Interoperability Applications working together Different platforms Different languages Different companies Different versions

Microsoft’s Commitment to Interoperability Bill Gates’ Executive E-mail - Building Software That Is Interoperable By Design – 03-Feb-2005 http://www.microsoft.com/mscorp/execmail/2005/02-03interoperability.asp “ However, the definition of well-designed [WS-*] protocol architecture is just part of the challenge. As part of this collaborative effort, Microsoft and other companies have invested significant resources to ensure that Web services implementations from different companies really are interoperable . This has involved industry workshops, extensive testing, revision of specifications in the face of experience , and even setting up an industry body known as WS-I to help ensure interoperability.”

Microsoft’s Strategy for Interoperability Open, Interoperable Protocol Framework – WS-* Invest in WS-* for Service Orientation Ensure all the pieces work together Enable WS-* interoperability with industry partners Easy to use development platform – Indigo Adopt WS-* as the underlying wire format Easy to use development environment – Visual Studio Facilitate design and deployment of distributed web services applications Distributed IT infrastructure Systems Management, Connected Devices, Identity Management User Experience Office/InfoPath, InfoCard

Web Services Architecture Indigo Network App Other Stack Application App Other MSFT App WSE Activation and Hosting WAS Avalon *.EXE NT Service COM+ Messaging HTTP Channel TCP Channel UDP Channel X-Proc Channel Queue Channel SOAP Security Channel SOAP Reliability Channel Text/XML Encoder Binary Encoder Service Runtime Contracts Throttling Behavior Transaction Behavior Activation Behavior Concurrency Behavior Cmd/Control Facilities Error Behavior Metadata Behavior Instance Behavior Inspection Facilities Data Contract Message Contract Service Contract Policy and Binding Assurances Messaging SOAP WS-Security MTOM WS-Addressing Metadata WS-Policy WSDL UDDI WS-Metadata Exchange XML Schema WS-Reliable Messaging WS-Coordination WS-Atomic Transaction WS-Business Activity WS-Trust WS-Secure Conversation Infrastructure and Profiles WS-Management WS-Federation Devices Profile Foundation SOAP / HTTP MIME XML Infoset XML 1.0 XML Namespaces WS-* Protocols

What is WS-*? A protocol framework Layered, factored, composable, extensible Interoperability baked in XML, HTTP, URI Uniform data model – XML Infoset Metadata-driven Self describing and dynamic Collaborative engineering process Quality, time to market, industry support

WS-* 101 Endpoints send messages that conform to contracts Application messages and/or Infrastructure messages and headers enable security, reliability, transactions, ... Endpoints are described with metadata A ddress on the “network” URL or Endpoint Reference B inding capabilities and requirements Policy C ontract for structure and behavior WSDL and XML Schema

WS-* Architecture Assurances Messaging SOAP WS-Security MTOM WS-Addressing Metadata WS-Policy WSDL WS-Discovery UDDI WS-Metadata Exchange WS-Transfer WS-Enumeration WS-Eventing XML Schema WS-Reliable Messaging WS-Coordination WS-Atomic Transaction WS-Business Activity WS-Trust WS-Secure Conversation Profiles and Infrastructure WS-Management WS-Federation Devices Profile Foundation SOAP / HTTP SOAP / UDP MIME XML Infoset XML 1.0 XML Namespaces

WS-* Specifications Process Step 2 Broader Community Participation Step 1 Initial Development Process reconciles conflicting goals Quality of engineering Time to market Breadth of industry support Step 3 Standardization Step 4 Profiling Increasing Industry Participation Specification Published Feedback and Interop Workshops Revise spec Standards Org WS-I Idea

80+ WS-* Workshop Participants Actional Fujitsu Newisys Sharp Labs AMD Grand Central Nokia Siebel American Megatrends Hewlett-Packard Oasis Semiconductor Software AG ANL IBM Oblix Sonic Software Apache Project iDesign OPC Foundation Sun Axalto Intel OpenNetwork Systinet BEA Intermec Oracle Tibco Blue Titan Iona OSA Technologies Toshiba Boeing IPO Group Peerless Tyco Safety Systems Brother Jboss Ping Identity Univ of Sydney Canon JibxSoap Printronix VeriSign Choreology KnowNow QuickTree Veritas CommerceOne Layer 7 Tech Quovadx Visa Computer Associates Lexmark Reactivity Vitria Content Guard Lockheed Martin Ricoh WRQ Cornell University Microsoft Roxio webMethods Dell Motive RSA Security WSO2 Epson NEC SAP Xerox Exceptional Innovation NEON Schneider Electric Zoran Feature Software Netegrity SeeBeyond Unaffiliated

WS-* Spec Status Assurances Messaging SOAP WS-Security MTOM WS-Addressing Metadata WS-Policy WSDL WS-Discovery UDDI WS-Metadata Exchange WS-Transfer WS-Enumeration WS-Eventing XML Schema WS-Reliable Messaging WS-Coordination WS-Atomic Transaction WS-Business Activity WS-Trust WS-Secure Conversation Infrastructure and Profiles WS-Management WS-Federation Devices Profile Foundation SOAP / HTTP SOAP / UDP MIME XML Infoset XML 1.0 XML Namespaces Step 4 – Approved Standard Step 3 – Standardization Step 2 – Workshops & Community Dev

Delivering WS-* - Microsoft Microsoft is delivering implementations of all WS-* specs WSE 2.0 / 3.0 Interim coverage of evolving security and policy specs Indigo Full coverage of all SRTP Advanced Web Services specs Security Reliable Messaging Transactions Policy Windows Server 2003 Release 2 WS-Management stack for interoperable system management Windows Longhorn WS-Devices stack for printer and networked device connectivity

Microsoft WS-* Product Roadmap VS 2005 + WSE 3.0 SOAP 1.1, 1.2 WSDL 1.1 MTOM WS-Addressing 2004/08 (or REC) WS-Security 1.0 (U/P, X509, Kerberos) WS-Secure Conversation WS-Trust WS-Policy based Limited wire Interop with WSE 2.0 AD Federation Services in R2 Cross-organizational Identity Federation Web SSO SQL Server 2005 SOAP 1.1,1.2 WSDL1.1 WS-Security 1.0 Management WS-Management VS2003 + Web Services Enhancements (WSE) 2.0 SOAP 1.1 WSDL 1.1 WS-Addressing 2004/03 WS-Security 1.0 (U/P, X509, Kerberos) WS-Secure Conversation 2004/04 WS-Trust 2004/04 WS-Policy based Indigo Wire-level interop with WSE3.0 In addition: MTOM SAML Token Profile 1.0 Security Policy WS-Federation Active Client - Enables easy to build STS WS-RM 2005/02, Policy WS-AT/WS-C 2005/02, Policy WS-Policy/PolicyAttachment WS-MEX Easy to use Digital Identity / InfoCard Active Directory: Federation WSD API: Device Profile Longhorn Wave Windows Server 2003 “ R2” Wave

WS-* - Industry Adoption WS-P Messaging Security Assurances Devices Mgmt Metadata DPWS WS-SecureConv WS-Security WS-Trust WS-RM WS-AT MEX WS-D SOAP / WSDL MTOM © 2003-2006 Microsoft Corporation. All rights reserved. The information contained in this document represents the current view at the time of publication and is subject to change. WS-M WS-XFer / Enum WS-Fed Microsoft   Intel   Sun   Dell   AMD A CA A Sonic A gSOAP  Systinet A WEBM   NetIQ    Released product  Public interop A Co-Author Only Microsoft   IBM   BEA  A Cape Clear  Systinet  Blue Titan  Rogue Wave  Sonic  IONA   JBoss  Choreology  Apache   Tibco  Microsoft     IBM     BEA    A RSA    A Systinet    Apache    Layer7  A  DataPower   CA  A A SUN  SAP  Tibco  IONA  WebMethods  Nokia  Cape Clear  Sonic  gSOAP  Ping ID  A   Netegrity  A A  Verisign  A A A OpenNetwork A A A  Oracle/Oblix     Microsoft   IBM  BEA  SUN   Google  Amazon  eBay  Apache   Whitemesa   gSOAP   Ricoh   Epson   HP   Xerox   Fuji-Xerox   Intel   Canon   Microsoft   Intel   Canon   BEA A WebMethods A Ricoh   Epson   HP   Xerox   Fuji-Xerox   Brother   Toshiba   Exceptional Innovation   Peerless   Schneider   Systinet  gSOAP  Lexmark A Microsoft   IBM A  BEA A  SAP A  Sun A  Verisign A Sonic  Layer 7  Apache  CA A WebMethods A Systinet  gSOAP 

Messaging XML-based message format with simple extension model and support for relays SOAP-based addressing and dispatch Hybrid XML / binary format for SOAP (a.k.a. “attachments”) WS-Addressing MTOM SOAP

Secure Session-based tokens to reduce per-message crypto costs End-to-end security in the face of relays requires more than transport-level security Issuing tokens based on credentials WS-Trust WS-Secure Conversation WS-Security

Reliable and Transacted SOAP-based workflow and compensation End-to-end delivery assurances in the face of relays requires more than transport protocol SOAP-based multi-party protocols SOAP-based two-phase commit WS-Business Activity WS-Coordination WS-Atomic Transaction WS-Reliable Messaging

Metadata UDDI WS-Policy WSDL Description of service contract Parameterized assertions about service capabilities and requirements SOAP-based registry service lookup WS-Metadata Exchange SOAP-based inspection of a service’s metadata

Profiles and Infrastructure WS-Federation SOAP-based identity management Basic Security Profile 1.0 Simple transport and SOAP message security Basic Profile 1.0/1.1 Simple SOAP messaging, description, and discovery Devices Profile SOAP-based discovery, description, control, and eventing of devices WS-Management SOAP-based management of computing systems

Profile Recipe: Staple, Redline, Glue “ Staple” Pull relevant specs into scope “ Redline” Add constraints on use of those specs “ Glue” Define missing bits between specs Some will migrate back into specs ThisModel Metadata ThisDevice Metadata Action Filter Conformance Claim Policy Assertions Policy Assertions SOAP 1.2 WS-Addressing WS-Metadata Exchange WSDL 1.1 WS-Discovery WS-Eventing

Basic Profile 1.0 / 1.1 Conformance claim SOAP 1.1 Faults EncodingStyle HTTP/1.1 POST SOAPAction header 2xx, 3xx, 4xx, 5xx responses Cookies WSDL 1.1 1-way / req-resp <= 1 child of Body Unique input Body type vs element document/rpc literal Faults Extensibility UDDI v2 tModels

Basic Security Profile 1.0 SSL 3.0 / TLS 1.0 Cipher suites WS-Security 1.0 Reference, embed tokens Timestamps Security tokens Username Token Compute digest X509 Token Certificate path SAML REL XML Signature Detached signature Key info Reference signed content Canonicalization Digest and sig algs XML Encryption Reference list Encrypted key, data Encryption algs

Devices Profile for Web Services

Devices Profile Protocol DMR Capabilities DMR Commands DMR Events Protocol IGD Capabilities IGD Commands IGD Events Assurances Messaging SOAP WS-Security MTOM WS-Addressing Metadata WS-Policy WSDL WS-Metadata Exchange XML Schema TLS Foundation SOAP / HTTP MIME XML Infoset XML 1.0 XML Namespaces BP 1.1 Sec. 4 WS-Discovery WS-Eventing Device Extensions SOAP / UDP Protocol Print Capabilities Print Commands Print Events

WS-Management Consistent management of multi-vendor systems Basic operations across compliant platforms Basic operation across OS states Scale down Support low-footprint management controllers Support operations in DMZ Use firewall-friendly transports Data model neutral Map to existing Common Information Model (CIM) Support new System Definition Model (SDM) Inspection of management resources Network discovery is out of scope

WS-Management Assurances Messaging SOAP TLS MTOM WS-Addressing Metadata WSDL XML Schema Foundation SOAP / HTTP MIME XML Infoset XML 1.0 XML Namespaces WS-Eventing WS-Transfer WS-Enumeration BP 1.1 Sec. 4 Management Extensions CIM to XML

Resources L. Cabrera, et al, “Web Services Architecture and Its Specifications”, Microsoft Press MSDN Links MSDN Web Services Developer Center http://msdn.microsoft.com/webservices/ WS-* Specifications index page http://msdn.microsoft.com/webservices/understanding/specs/ WS-* Workshop Process Overview http://msdn.microsoft.com/library/en-us/dnwebsrv/html/wkshopprocess.asp WS-* Workshops home page http://msdn.microsoft.com/webservices/community/workshops/ Microsoft Interoperabilty home page http://www.microsoft.com/interop

Making Sense Of Web Services

More Related Content

What's hot (20)

Viewers also liked (6)

Similar to Making Sense Of Web Services (20)

More from Jorgen Thelin (15)

Recently uploaded (20)

Making Sense Of Web Services