Mobile transactions have been in development for around ten years. More and more initiatives and efforts are invested in this area resulting in dramatic and rapid development and deployment of mobile technologies and applications. However, there are still many issues that hinder wider deployment and acceptance of mobile systems, especially those handling serious and sensitive mobile transactions. One of the most important of them is security.This dissertation is focused on security architecture for mobile environments. Research issues addressed in this dissertation are based on three currently important groups of problems: a) lack of an open, comprehensive, adaptable and secure infrastructure for mobile services and applications; b) lack of standardized solutions for secure mobile transactions, compliant with various regulatory and user requirements and applicable to different types of popular mobile devices and hardware/software mobile platforms; and c) resource limitations of mobile devices and mobile networks.The main contribution of this dissertation is large-scale, secure service-oriented architecture for mobile environments. The architecture structures secure mobile transaction systems into seven layers, called trusted stack, which is equivalent to ISO/OSI layered networking model. These layers are, starting from the bottom: 1) secure element (chip) layer, 2) applets layer, 3) middleware layer, 4) mobile applications layer, 5) communication layer, 6) services broker layer, and 7) mobile service provider layer. These seven layers include all necessary components required for implementation and operations of secure mobile transaction systems and therefore provide a framework for designing and implementing such systems.Besides the architecture, four types of security services necessary and critical for serious mobile transactions, have also been designed and described in the dissertation. These services are: (1) mobile registration and identity management; (2) mobile PKI; (3) mobile authentication and authorization; and (4) secure messaging. These services are lightweight, therefore suitable for mobile environments, technologies and applications, and also compliant with existing Internet security standards.Finally, as the proof of correctness of the proposed concept and methodology, a prototype system was also developed based on the designed security architecture. The system provides comprehensive security services mentioned above to several types of mobile services providers: mobile banking, mobile commerce, mobile ticketing, and mobile parking. These types of providers have been selected only as currently the most popular and representative, since the architecture is applicable to any other type of mobile service providers.

In today’s volatile business environments, collaboration between information systems, both within and across company borders, has become essential to success. An efficient supply chain, for example, requires the collaboration of distributed and heterogeneous systems of multiple companies. Developing such collaborative applications and building the supporting information systems poses several engineering challenges. A key challenge is to manage the ever growing design complexity. In this article, we argue that software architecture should play a more prominent role in the development of collaborative applications. This can help to better manage design complexity by modularizing collaborations and separating concerns. State of the art solutions, however, often lack proper abstractions for modeling collaborations at architectural level or do not reify these abstractions at detailed design and implementation level. Developers, on the other hand, rely on middleware, business process management, and Web services, techniques that mainly focus on low-level infrastructure. To address the problem of managing the design complexity of collaborative applications, we present Macodo. Macodo consists of three complementary parts: (1) a set of abstractions for modeling adaptive collaborations, (2) a set of architectural views, the main contribution of this article, that reify these abstractions at architectural level, and (3) a proof of concept middleware infrastructure that supports the architectural abstractions at design and implementation level. We evaluate the architectural views in a controlled experiment. Results show that the use of Macodo can reduce fault density and design complexity, and improve reuse and productivity. The main contributions of this article are illustrated in a supply chain management case.

<p>Detta examensarbete behandlar Service Oriented Architecture (SOA) och dess implementeringar Jini och Web services. SOA beskriver hur applikationsintegration mellan olika plattformar skall ske och innebär att applikationer designas som tjänster för att enkelt integreras med andra applikationer. Dynamisk lokalisering av tjänster via en registertjänst används för att applikationer skall finna andra applikationer. Vi designar och implementerar en mekanism i Web services som gör det möjligt att byta en tjänst under exekvering. Ett sådant byte kan vara intressant av två skäl, tjänster kan registreras utan att vara tillgängliga, eller att det uppstår ett fel under exekvering som gör att tjänsten blir otillgänglig.</p> / <p>This degree project is about Service Oriented Architecture (SOA) and its implementations Jini and Web services. SOA is a description of how application integration between different platforms can be carried out by designing applications as services, which implies an easier integration with other applications. Dynamic location of services is carried out by consultation with a register service so that applications can find other applications. We design and implement a mechanism in Web services that makes it possible to change service during execution. A change of service can be interesting for two reasons, the service might be registered but not available or there might be some sort of fault during execution that makes the service unavailable.</p>

The planning work prior to implementing an SOA migration project is very important for its success. Up to now, most of this kind of work has been manual work. An SOA migration planning approach based on intelligent information processing methods is addressed to semi-automate the manual work. This thesis will investigate the principle research question: 'How can we obtain SOA migration planning schemas (semi-) automatically instead of by traditional manual work in order to determine if legacy software systems should be migrated to SOA computation environment?'. The controlled experiment research method has been adopted for directing research throughout the whole thesis. Data mining methods are used to analyse SOA migration source and migration targets. The mined information will be the supplementation of traditional analysis results. Text similarity measurement methods are used to measure the matching relationship between migration sources and migration targets. It implements the quantitative analysis of matching relationships instead of common qualitative analysis. Concretely, an association rule and sequence pattern mining algorithms are proposed to analyse legacy assets and domain logics for establishing a Service model and a Component model. These two algorithms can mine all motifs with any min-support number without assuming any ordering. It is better than the existing algorithms for establishing Service models and Component models in SOA migration situations. Two matching strategies based on keyword level and superficial semantic levels are described, which can calculate the degree of similarity between legacy components and domain services effectively. Two decision-making methods based on similarity matrix and hybrid information are investigated, which are for creating SOA migration planning schemas. Finally a simple evaluation method is depicted. Two case studies on migrating e-learning legacy systems to SOA have been explored. The results show the proposed approach is encouraging and applicable. Therefore, the SOA migration planning schemas can be created semi-automatically instead of by traditional manual work by using data mining and text similarity measurement methods.

A distributed business process is executed in a distributed computing environment. The service-oriented architecture (SOA) paradigm is a popular option for the integration of software services and execution of distributed business processes. Entailment constraints, such as mutual exclusion and binding constraints, are important means to control process execution. Mutually exclusive tasks result from the division of powerful rights and responsibilities to prevent fraud and abuse. In contrast, binding constraints define that a subject who performed one task must also perform the corresponding bound task(s). (authors' abstract)

Next Generation Networks (NGNs) aim to provide a unified network infrastructure to offer multimedia data and telecommunication services through IP convergence. NGNs utilize multiple broadband, QoS-enabled transport technologies, creating a converged packet-switched network infrastructure, where service-related functions are separated from the transport functions. This requires significant changes in the way how networks are managed to handle the complexity and heterogeneity of NGNs. This thesis proposes a Service Oriented Architecture (SOA) based management framework that integrates heterogeneous management systems in a loose coupling manner. The key benefit of the proposed management architecture is the reduction of the complexity through service and data integration. A network management middleware layer that merges low level management functionality with higher level management operations to resolve the problem of heterogeneity was proposed. A prototype was implemented using Web Services and a testbed was developed using trouble ticket systems as the management application to demonstrate the functionality of the proposed framework. Test results show the correcting functioning of the system. It also concludes that the proposed framework fulfils the principles behind the SOA philosophy.

Os principais trabalhos existentes de identificação de serviços na Arquitetura Orientada a Serviços (Service Oriented Architecture - SOA) deixam claro a importância de alinhar os serviços com os processos de negócios e também a necessidade de torná-los mais reusáveis possível. Contudo, na prática, foi observado que os métodos existentes são complexos ou detalham pouco os passos para se alcançar tais objetivos. Neste contexto, o Método de Identificação de Serviços baseado em Linguagem de Padrões (MISLP) buscou identificar os serviços através de atividades padrão de processos de negócio de um determinado domínio. Estas atividades padrão foram detalhadas seguindo-se os princípios de SOA e utilizando-se os Padrões de Projeto SOA, os quais estabelecem os critérios para obtenção de serviços reusáveis. Foram definidos critérios para avaliar os serviços resultantes da aplicação do método, com os serviços definidos de forma ad-hoc no desenvolvimento de três sistemas reais. / The main existing works about services identification make clear the importance of aligning services with business processes and also the need to make them more reusable as possible. However, in practice, the existing methods are either complex or they provide low details about the steps to achieve these goals. In this context, the Pattern Language-based Method for Service Identification (PLMSI) sought to identify services through standard activities from business processes of a given domain. These standard activities were detailed according to the principles of Service Oriented Architecture (Service Oriented Architecture - SOA) and using SOA Design Patterns, which establish the criteria for obtaining reusable services. Criteria were defined to evaluate output services from the method, comparing with services defined on an ad-hoc development of three real systems.

Com a crescente adoção do conceito de Arquitetura Orientada a Serviços (SOA) pelas organizações, torna-se necessário solucionar um dos principais desafios trazidos por este estilo arquitetural, que é a análise e projeto de serviços. Alguns métodos de análise e projeto de soluções orientadas a serviços vêm sendo propostos, mas ainda estão longe de convergir em direção a uma padronização. Este trabalho realiza uma avaliação crítica dos métodos existentes e levanta um conjunto de requisitos de análise e projeto orientado a serviços. Baseado nesta análise, é proposto um método para unificar as boas práticas dos métodos existentes e atender aos requisitos levantados. Para verificar a aplicabilidade do método, dois estudos de caso foram conduzidos em projetos reais. / With the growing adoption of Service-Oriented Architeture (SOA) by the organizations, it becomes necessary to address one of the main challenges imposed by this architetural style, which is services analysis and design. Some service-oriented applications analysis and design methods have been proposed, but have not yet converged towards standardization. This work performs a critical assessment of existing methods and describes a set of requirements of service-oriented analysis and design. Based on that study, a new method is proposed to unify the best practices of existing methods and satisfy the gathered requirements. In order to verify the applicability of the method, two case studies were conducted in real projects.

Com a crescente adoção do conceito de Arquitetura Orientada a Serviços (SOA) pelas organizações, torna-se necessário solucionar um dos principais desafios trazidos por este estilo arquitetural, que é a análise e projeto de serviços. Alguns métodos de análise e projeto de soluções orientadas a serviços vêm sendo propostos, mas ainda estão longe de convergir em direção a uma padronização. Este trabalho realiza uma avaliação crítica dos métodos existentes e levanta um conjunto de requisitos de análise e projeto orientado a serviços. Baseado nesta análise, é proposto um método para unificar as boas práticas dos métodos existentes e atender aos requisitos levantados. Para verificar a aplicabilidade do método, dois estudos de caso foram conduzidos em projetos reais. / With the growing adoption of Service-Oriented Architeture (SOA) by the organizations, it becomes necessary to address one of the main challenges imposed by this architetural style, which is services analysis and design. Some service-oriented applications analysis and design methods have been proposed, but have not yet converged towards standardization. This work performs a critical assessment of existing methods and describes a set of requirements of service-oriented analysis and design. Based on that study, a new method is proposed to unify the best practices of existing methods and satisfy the gathered requirements. In order to verify the applicability of the method, two case studies were conducted in real projects.

Os principais trabalhos existentes de identificação de serviços na Arquitetura Orientada a Serviços (Service Oriented Architecture - SOA) deixam claro a importância de alinhar os serviços com os processos de negócios e também a necessidade de torná-los mais reusáveis possível. Contudo, na prática, foi observado que os métodos existentes são complexos ou detalham pouco os passos para se alcançar tais objetivos. Neste contexto, o Método de Identificação de Serviços baseado em Linguagem de Padrões (MISLP) buscou identificar os serviços através de atividades padrão de processos de negócio de um determinado domínio. Estas atividades padrão foram detalhadas seguindo-se os princípios de SOA e utilizando-se os Padrões de Projeto SOA, os quais estabelecem os critérios para obtenção de serviços reusáveis. Foram definidos critérios para avaliar os serviços resultantes da aplicação do método, com os serviços definidos de forma ad-hoc no desenvolvimento de três sistemas reais. / The main existing works about services identification make clear the importance of aligning services with business processes and also the need to make them more reusable as possible. However, in practice, the existing methods are either complex or they provide low details about the steps to achieve these goals. In this context, the Pattern Language-based Method for Service Identification (PLMSI) sought to identify services through standard activities from business processes of a given domain. These standard activities were detailed according to the principles of Service Oriented Architecture (Service Oriented Architecture - SOA) and using SOA Design Patterns, which establish the criteria for obtaining reusable services. Criteria were defined to evaluate output services from the method, comparing with services defined on an ad-hoc development of three real systems.