web services new

7/31/2019 Web Services New

1/22


2/22

Who Was First? What company first proposed the web

services concept? Hewlett-Packard's e-Speak in 1999 was an enabler for e-services

Microsoft introduced the name "web services" inJune 2000

MS "bet the company" on its web servicesstrategy

now every major vendor is a player


3/22

Open, Standard Technologies XML tagging data such that it can be

exchanged between applications and

platforms

SOAP messaging protocol for transportinginformation and instructions between

applications (uses XML)


4/22

Open, Standard Technologies WSDL a standard method of describing

web services and their specific capabilities

(XML)

UDDI defines XML-based rules forbuilding directories in which companies

advertise themselves and their webservices


5/22

Advantages Open, text-based standards

Modular approach

Inexpensive to implement (relatively)

Reduce the cost of enterprise applicationintegration

Incremental implementation


6/22

The Big Picture

Client

UDDI Registry WSDLDocument

Web Service Code

Client queriesregistry to locateservice

Registry refers client to WSDLdocument

Client sends SOAP-message request

Web service returns SOAP-message response


7/22

XML Developed from Standard Generalized

Markup Method (SGML)

XML widely supported by W3C Essential characteristic is the separation

of content from presentation

XML describes only dataAny application that understands XML

can exchange data


8/22

XML XML parser checks syntax

If syntax is good the document is well-

formed XML document can optionally reference

a Document Type Definition (DTD), also

called a Schema If an XML document adheres to the

structure of the schema it is valid


9/22

SOAP SOAP enables between distributed

systems

SOAP message has three parts envelope wraps entire message and

contains header and body

header optional element with additionalinfo such as security or routing

body application-specific data beingcommuicated


10/22

WSDL Web services are self-describing

Description is written in WSDL, an XML-

based language through which a webservice conveys to applications themethods that the service provides andhow those methods are accessed

WSDL is meant to be read byapplications (not humans)


11/22

UDDI UDDI defines an XML-based format that

describes electronic capabilities and businessprocesses

Entries are stored in a UDDI registry

UDDI Business Registry (UBR) "white pages" contact info, description

"yellow pages"

classification info, details "green pages" technical data

uddi.microsoft.com


12/22

OASIS Not competition to W3C

Ensure that businesses acquire e-business tools that meet their needs

United Nations Centre for TradeFacilitation and Electronic Business

produced Electronic Business XML(ebXML)


13/22

SOAP

WS-Security

WS-Policy WS-Trust WS-Privacy

WS-SecureConversation WS-Federation WS-Authorization

Web Services

SecurityArchitecture


14/22SOAP

WS-Security



WS-SecurityDescribes how to attach signature and encryption headers toSOAP messages; how to attach security tokens such as X.509certificates and Kerberos tickets


15/22

WS-Policy

SOAP

WS-Security



Describes the capabilities and constraints of the securityand business policies on intermediaries and endpoints


16/22

WS-Trust

SOAP

WS-Security



Framework for trust models that enables web services tointeroperate securely.


17/22

WS-Privacy

SOAP

WS-Security



Model for how web services and requesters state privacypreferences and organizational privacy practice statements


18/22

WS-Secure Conversation

SOAP

WS-Security



Manage and authenticate message exchanges between parties,including security context exchange and establishing and derivingsession keys


19/22

WS-Federation

SOAP

WS-Security



Manage and broker trust relationships in a heterogeneousfederated environment, including support for federated identities.


20/22

WS-Authorization

SOAP

WS-Security



Manage authorization data and authorization policy.


21/22

Fundamentals of Security


22/22

web services new

Documents