Computational Swarms (enxames computacionais), consistindo da integração de sensores e atuadores inteligentes no nosso mundo conectado, possibilitam uma extensão da info-esfera no mundo físico. Nós chamamos esta info-esfera extendida, cíber-física, de Swarm. Este trabalho propõe uma visão de Swarm onde dispositivos computacionais cooperam dinâmica e oportunisticamente, gerando redes orgânicas e heterogêneas. A tese apresenta uma arquitetura computacional do Plano de Controle do Sistema Operacional do Swarm, que é uma camada de software distribuída embarcada em todos os dispositivos que fazem parte do Swarm, responsável por gerenciar recursos, definindo atores, como descrever e utilizar serviços e recursos (como divulgá-los e descobrí-los, como realizar transações, adaptações de conteúdos e cooperação multiagentes). O projeto da arquitetura foi iniciado com uma revisão da caracterização do conceito de Swarm, revisitando a definição de termos e estabelecendo uma terminologia para ser utilizada. Requisitos e desafios foram identificados e uma visão operacional foi proposta. Esta visão operacional foi exercitada com casos de uso e os elementos arquiteturais foram extraídos dela e organizados em uma arquitetura. A arquitetura foi testada com os casos de uso, gerando revisões do sistema. Cada um dos elementos arquiteturais requereram revisões do estado da arte. Uma prova de conceito do Plano de Controle foi implementada e uma demonstração foi proposta e implementada. A demonstração selecionada foi o Smart Jukebox, que exercita os aspectos distribuídos e a dinamicidade do sistema proposto. Este trabalho apresenta a visão do Swarm computacional e apresenta uma plataforma aplicável na prática. A evolução desta arquitetura pode ser a base de uma rede global, heterogênea e orgânica de redes de dispositivos computacionais alavancando a integração de sistemas cíber-físicos na núvem permitindo a cooperação de sistemas escaláveis e flexíveis, interoperando para alcançar objetivos comuns. / Computational swarms, consisting of integrating smart networked sensors and actuators into our connected world, enable an extension of the info-sphere into the physical world. We call this extended cyber-physical info-sphere as the Swarm. This work proposes a Swarm vision with computational devices cooperating dynamically and opportunistically, generating organic and heterogeneous networks. This thesis proposes the computational architecture of the Swarm Operating System Control Plane that is the distributed software layer, embedded in all Swarm devices, responsible for managing Swarm resources, defining actors, how to describe and use services and resources, how to advertise and discover them, how to do transactions, content adaptation and multi-agent cooperation. The design of the architecture started with the review of the Swarm characterization itself, revisiting term definitions and establishing a terminology to be used. Requirements and challenges were identified and an operational vision was designed. This operational vision has been exercised with use case scenarios. The architectural elements were extracted from this vision and organized into an architecture that was tested against use cases, generating architectural reviews. Each of the architectural elements generated a state of the art review. A proof of concept of the framework was implemented and a demonstration was proposed and implemented. The selected demostration was the Smart Jukebox that exercises the distributed aspect and the dynamicity of the system. This work presents the vision of the emerging computing Swarm and presents a suitable framework. The evolution of this architecture may be the basis of a global heterogeneous and organic computer network leveraging cyberphysical systems to the cloud, and allowing the emergence of scalable and flexible systems to interoperate to achieve common goals.

現今企業在建置企業入口網站時，往往面臨到入口網站相關安全標準與技術眾多且繁雜，缺乏一個整合式安全機制建置解決方案來遵從，造成企業在規劃與佈署入口網站之安全性時，產生巨大成本及導入障礙。而服務導向架構概念的出現，其分散性、組合式、標準化之特色，使得企業入口網站安全機制可以在使用網路服務技術的服務導向架構環境中，被當成一種服務呈現，並透過網際網路來公布、發現與利用。 本研究的主要探討分析服務導向架構安全性與安全服務之相關文獻，針對企業入口網站之安全需求與現有安全性基礎結構做整合，提出一個服務導向企業入口網站安全服務架構，並利用二個企業入口網站個案來檢視此架構的安全涵蓋範圍，使企業能將服務導向式安全服務導入企業入口網站整合應用，拉高安全層級，建立一個備受使用者安全信賴的企業入口網站，進而提升企業競爭力。 本研究的成果及效益包括：(1)分析探討企業入口網站在服務導向架構應用下所衍生的不同安全需求(2)提出一個以服務導向企業入口網站為主的安全服務架構。(3)此架構可完整支援服務導向企業入口網站安全功能，並具有因應日後企業安全需求增加的擴充彈性，能持續強化企業入口網站安全性。 / To develop Enterprise Portal System, most enterprises always meet the problem of satisfying numerous security standards and dealing with complicated programming languages. It still lacks an integrated security solution which could provide enterprises an easy way to complete this task. Therefore, this technical problem leads to an entrance barrier and significant corresponding cost to enterprises when deploying their portal. Service-Oriented Architecture is a promising framework to improve the situation. Service-Oriented Architecture framework is distributed, combinable, standardized which and develop the security mechanisms security mechanisms in Service-Oriented Architecture environment. Considering the advantage of Service-Oriented Architecture, this study explores the possibility of building Security Services for Service-Oriented Enterprise Portal. This study analyzes Service-Oriented Architecture security and security services. In addition, the authors propose a Service-Oriented security service prototype architecture for enterprise portal to meet its security requirements. This architecture can integrate service-oriented security services into enterprise portal applications and improve security level. Accordingly, it could develop a highly reliable enterprise portal and create a better competitiveness. The work done by this study includes (1) analyzes the security requirements in a service-oriented enterprise portal, (2) proposes a new framework for enterprise portal service-oriented security services, and (3) demonstrate this framework can support complete security functions for enterprise portal, be flexibility to increase security functions for demands in the future and continue to strengthen the enterprise portal security. By considering this new framework, the design a Enterprise Portal System could be more convenient and secure and it will benefit the development of enterprise in the future.

Le travail de recherche présenté dans ce mémoire s'intéresse aux problèmes d'interopérabilité dans le domaine du Product Lifecycle Management (PLM) et vise à proposer une méthodologie capable d'y remédier. Nous définissons l'objectif stratégique du PLM comme la maîtrise de la complexité qui caractérise le développement et le suivi des produits. Dans ce cadre, l'objectif de l'interopérabilité est le contrôle des interactions entre constituants de ce système complexe PLM. Nous montrons que cet objectif est atteint si on assure la continuité et la conservation du flux sémantique qui circule dans le système. Notre étude est restreinte aux seuls domaines de la conception et de la production, mais a l'ambition de pouvoir s'appliquer à d'autres domaines. La continuité du flux sémantique est assurée par une architecture que nous avons baptisée « médiation multi-échelle orientée services ». Le cœur de cette architecture, le médiateur, se charge d'orienter les flux sémantiques vers les systèmes concernés, et met en correspondance sémantique les informations échangées en s'appuyant sur un méta-modèle d'unification. Nous montrons que pour assurer la robustesse, la flexibilité et l'agilité du système ainsi constitué, il faut privilégier le choix d'un méta-modèle standard générique et extensible. A cet effet, nous proposons une cartographie du standard STEP permettant de choisir le méta-modèle pertinent. Nous illustrons le choix et la définition de ce méta-modèle dans le cas de deux problèmes d'interopérabilité des domaines de la conception et de la production : l'interopérabilité CAO/PDM et l'interopérabilité PDM/ERP. Nous expliquons notre démarche dans la mise en œuvre de la norme PLCS. Par ailleurs, nous introduisons un modèle d'annotations sémantiques du produit qui permet de reconstruire des vues multiples correspondant à différents besoins métiers. Un ensemble de démonstrateurs permet de valider nos propositions et nos résultats.

The emergence of Grid computing infrastructures enables researchers to shareresources and collaborate in more efficient ways than before, despite belongingto different organizations and being geographically distributed. While the Gridcomputing paradigm offers new opportunities, it also gives rise to newdifficulties. This thesis investigates methods, architectures, and algorithmsfor a range of topics in the area of Grid resource management. One studiedtopic is how to automate and improve resource selection, despite heterogeneityin Grid hardware, software, availability, ownership, and usage policies.Algorithmical difficulties for this are, e.g., characterization of jobs andresources, prediction of resource performance, and data placementconsiderations. Investigated Quality of Service aspects of resource selectioninclude how to guarantee job start and/or completion times as well as how tosynchronize multiple resources for coordinated use through coallocation.Another explored research topic is architectural considerations for frameworksthat simplify and automate submission, monitoring, and fault handling for largeamounts of jobs. This thesis also investigates suitable Grid interactionpatterns for scientific workflows, studies programming models that enable dataparallelism for such workflows, as well as analyzes how workflow compositiontools should be designed to increase flexibility and expressiveness. We today have the somewhat paradoxical situation where Grids, originally aimed tofederate resources and overcome interoperability problems between differentcomputing platforms, themselves struggle with interoperability problems causedby the wide range of interfaces, protocols, and data formats that are used indifferent environments. This thesis demonstrates how proof-of-concept softwaretools for Grid resource management can, by using (proposed) standard formatsand protocols as well as leveraging state-of-the-art principles fromservice-oriented architectures, be made independent of current Gridinfrastructures. Further interoperability contributions include an in-depthstudy that surveys issues related to the use of Grid resources in scientificworkflows. This study improves our understanding of interoperability amongscientific workflow systems by viewing this topic from three differentperspectives: model of computation, workflow language, and executionenvironment. A final contribution in this thesis is the investigation of how the design ofGrid middleware tools can adopt principles and concepts from softwareengineering in order to improve, e.g., adaptability and interoperability.

Die Strukturierung und Nutzung von unternehmensinternen IT-Infrastrukturen auf Grundlage dienstorientierter Architekturen (SOA) und etablierter XML-Technologien ist in den vergangenen Jahren stetig gewachsen. Lag der Fokus anfänglicher SOA-Realisierungen auf der flexiblen Ausführung klassischer, unternehmensrelevanter Geschäftsprozesse, so bilden heutzutage zeitnahe Datenanalysen sowie die Überwachung von geschäftsrelevanten Ereignissen weitere wichtige Anwendungsklassen, um sowohl kurzfristig Probleme des Geschäftsablaufes zu identifizieren als auch um mittel- und langfristige Veränderungen im Markt zu erkennen und die Geschäftsprozesse des Unternehmens flexibel darauf anzupassen. Aufgrund der geschichtlich bedingten, voneinander unabhängigen Entwicklung der drei Anwendungsklassen, werden die jeweiligen Anwendungsprozesse gegenwärtig in eigenständigen Systemen modelliert und ausgeführt. Daraus resultiert jedoch eine Reihe von Nachteilen, welche diese Arbeit aufzeigt und ausführlich diskutiert. Vor diesem Hintergrund beschäftigte sich die vorliegende Arbeit mit der Ableitung einer konsolidierten Ausführungsplattform, die es ermöglicht, Prozesse aller drei Anwendungsklassen gemeinsam zu modellieren und in einer SOA-basierten Infrastruktur effizient auszuführen. Die vorliegende Arbeit adressiert die Probleme einer solchen konsolidierten Ausführungsplattform auf den drei Ebenen der Dienstkommunikation, der Prozessausführung und der optimalen Verteilung von SOA-Komponenten in einer Infrastruktur.

The service-oriented architecture supports the dynamic assembly and runtime reconfiguration of complex open IT landscapes by means of runtime binding of service contracts, launching of new components and termination of outdated ones. Furthermore, the evolution of these IT landscapes is not restricted to exchanging components with other ones using the same service contracts, as new services contracts can be added as well. However, current approaches for modeling and verification of service-oriented architectures do not support these important capabilities to their full extend.In this report we present an extension of the current OMG proposal for service modeling with UML - SoaML - which overcomes these limitations. It permits modeling services and their service contracts at different levels of abstraction, provides a formal semantics for all modeling concepts, and enables verifying critical properties. Our compositional and incremental verification approach allows for complex properties including communication parameters and time and covers besides the dynamic binding of service contracts and the replacement of components also the evolution of the systems by means of new service contracts. The modeling as well as verification capabilities of the presented approach are demonstrated by means of a supply chain example and the verification results of a first prototype are shown. / Service-Orientierte Architekturen erlauben die dynamische Zusammensetzung und Rekonfiguration komplexer, offener IT Landschaften durch Bindung von Service Contracts zur Laufzeit, starten neuer Komponenten und beenden von veralteten. Die Evolution dieser Systeme ist nicht auf den Austausch von Komponenten-Implementierungen bei Beibehaltung der Service-Contracts beschränkt, sondern das Hinzufügen neuer Service-Contracts wird ebenfalls unterstützt. Aktuelle Ansätze zur Modellierung und Verifikation Service-Orientierter Architekturen unterstützen diese wichtigen Eigenschaften, wenn überhaupt, nur unvollständig. In diesem Bericht stellen wir eine Erweiterung des aktuellen OMG Vorschlags zur Service Modellierung mit UML - SoaML - vor, die diese Einschränkungen aufhebt. Unser Ansatz erlaubt die Modellierung von Service Contracts auf verschiedenen Abstraktionsniveaus, besitzt eine fundierte formale Semantik für alle eingeführten Modellierungskonzepte und erlaubt die Verifikation kritischer Eigenschaften. Unser kompositionaler und inkrementeller Verifikationsansatz erlaubt die Verifikation komplexer Eigenschaften einschließlich Kommunikationsparameter und Zeit und deckt neben der dynamischen Bindung von Service Contracts sowie dem Austausch von Komponenten auch die Evolution des gesamten Systems durch das Hinzufügen neuer Service Contracts ab. Die Modellierungs- als auch die Verifikationsfähigkeiten unseres vorgestellten Ansatzes werden durch ein Anwendungsbeispiel aus dem Bereich des Lieferkettenmanagements veranschaulicht.

This thesis establishes an information system which combines three credit risk models through Service-Oriented Architecture (SOA). The system requires the bank user inputting finance-related data and selecting options to generate a series of credit risk related results, including the probabilities of default, the recovery rates, the expected market value of assets, the volatilities of the expected market value of assets, the default points, the default distances, and four indexes from principal components analyses. In addition to exhibiting the numerical results, graphical results are also available for the user. Three credit risk models joining this system are the Moody¡¦s KMV Model with Default Point Modified, the Risk-Neutral Probability Measure Model, and the Time-Varying Jointly Estimated Model. Several previous researches have demonstrated the validity of these credit risk models, hence the purpose of this study is not to examine the practicability of these models, but to see if these models are capable of connecting each other effectively and eventually establishing a process to evaluate the credit risk of enterprises and industries by the use of testing samples. Testing samples are data from Taiwan Small and Medium Enterprise Credit Guarantee Fund. The finance-related data includes the loan amounts, the book value of assets, the data used to calculate the default point threshold (such as the short-term debt and the long-term debt), and the financial ratios with regard to growth ability (such as the revenue growth rate and the profit growth rate before tax), operation ability (such as the accounts receivable turnover rate and the inventory turnover rate), liability-paying ability (such as the current ratio and the debt ratio), and profitability (such as the return on assets and the return on equity). In addition to inputting the finance-related data, the system also require the user selecting the industrial category, the default point threshold, the way data being weighted, the data period, and the borrowing rates from the option page for every enterprise in order to acquire the results. Among the computing process, user is required to select weighted average method, either weighted by loan amounts or weighted by market value of assets, to obtain ¡§the weighted average probability of default of the industry¡¨ and ¡§the weighted average recovery rate of the industry¡¨ which are both used by the Time-Varying Jointly Estimated Model. This study also makes use of quartiles to simulate the situation when the user is near the bottom and top of the business cycle. Furthermore, the ¡§Supremum Strategy¡¨ and the ¡§Infimum Strategy¡¨ are added to this study to let the user realize the best condition and the worse condition of the ¡§Time-Varying Industrial Marginal Probabilities of Default¡¨.

Although service oriented architecture has reached a particular maturity level especially in the technological dimension, there is a lack of common and acceptable approach to design a software system through composition and integration of web services. In this thesis, a service oriented system design approach for Service Oriented Architecture based software development is introduced to fill this gap. This new methodology basically offers a procedural top-down decomposition of a given software system allowing several abstraction levels. At the higher levels of the decomposition, the system is divided into abstract nodes that correspond to process models in the decomposition tree. Any node is a process and keeps the sequence and the state information for the possible sub-processes in this decomposition tree. Nodes which are defined as process models may include some sub-nodes to present details for the intermediate levels of the model. Eventually at the leaf level, process models are decomposed into existing web services as the atomic units of system execution. All processes constructing the system decomposition tree are modeled with BPEL (Business Process Execution Language) to expose the algorithmic details of the design. This modeling technique is also supported with a graphical modeling language referred to as SOSEML (Service Oriented Software Engineering Modeling Language) that is also newly introduced in this thesis.

Teleworking is the key to a more flexible design of working time and places of work. To reach the flexibility for working anywhere and anytime a virtual working environment is needed which is reached from any place having a browser and internet access, at home, on the road or in the office. The goal of our activities is to develop a set of technologies fitting in the web architecture in order to bring teleworking applications to their full potential. Our new concept is to combine different web services in a new integrated man-machine environment that enables access to all necessary services. So it will be easier for the teleworker to handle the different applications and techniques. The teleworking portal provides them access to various resources: office applications, multimedia objects and documents, communication tools such as email and conferences, collaboration and group work systems or educational software and training tools. In order to promote interoperability and extensibility among these applications, as well as to allow them to be combined to perform more complex operations, a standard reference architecture for such services is needed. Consequently our approach is based on the Service Oriented Architecture (SOA) and the web service technology. / Telearbeit ist der Schlüssel zu einer flexibleren Arbeitsplatz- und Arbeitszeitgestaltung und eröffnet vielfältige Möglichkeiten und ökonomische Potentiale. Nach zahlreichen Kontroversen über die Vor- und Nachteile haben vor allem die Entwicklung kostengünstiger Informations- und Kommunikationstechniken, aber auch der Handlungsdruck einer zunehmend globalisierten Wirtschaft das Thema Telearbeit in den letzten Jahren neu belebt. Im Rahmen vorangegangener Projekte wurden vielfältige Forschungen zum Thema Telearbeit durchgeführt. Bei der bisherigen Umsetzung von Telearbeit in der Praxis ergaben sich vor allem Probleme im Umgang mit den verschiedenen Arbeitsumgebungen im Büro und am Telearbeitsplatz und dem Abgleich der Arbeitsstände und -ergebnisse. Ziel der Arbeit ist die prototypische Entwicklung einer webbasierten, flexiblen und modular aufgebauten Arbeitsumgebung, die eine effektive Anpassung an die Arbeitsweise des jeweiligen Telearbeiters und Unternehmens ermöglicht. Dabei wurde neben der Definition und Anforderungsanalyse von Telearbeit ein Architekturmodell für eine integrierte Arbeitsumgebung entworfen. Durch die umgesetzte Bausteinarchitektur wird eine flexible Anpassung der Umgebung an die Bedürfnisse der Telearbeiter und der Unternehmen erreicht. Weiterhin werden im Rahmen der Arbeit existierende Ansätze zur Unterstützung von Telearbeit analysiert und klassifiziert, um die eigene Arbeit abzugrenzen. Zur praktischen Umsetzung des Konzeptes wurden vorhandene internetbasierte Protokolle auf ihre Nutzbarkeit für Telearbeitsumgebungen untersucht. Als sehr gut geeignete und innovative Technologien erwiesen sich die Web Services. Deshalb werden die Basisprotokolle und grundlegenden Technologien für Web-Service-Lösungen im Rahmen der Arbeit spezifiziert und auf ihre Nutzbarkeit im Telearbeitskontext untersucht. Abschließend erfolgte eine prototypische Umsetzung der vorgeschlagenen Lösung und eine Validierung in verschiedenen Anwendungsszenarien, um die Praxistauglichkeit des Konzeptes nachweisen zu können.

This thesis presents an approach to design, specify, validate, verify, implement, and evaluate composed web/grid services. Web and grid services can be composed to create new services with complex behaviours. The BPEL (Business Process Execution Language) standard was created to enable the orchestration of web services, but there have also been investigation of its use for grid services. BPEL specifies the implementation of service composition but has no formal semantics; implementations are in practice checked by testing. Formal methods are used in general to define an abstract model of system behaviour that allows simulation and reasoning about properties. The approach can detect and reduce potentially costly errors at design time. CRESS (Communication Representation Employing Systematic Specification) is a domainindependent, graphical, abstract notation, and integrated toolset for developing composite web service. The original version of CRESS had automated support for formal specification in LOTOS (Language Of Temporal Ordering Specification), executing formal validation with MUSTARD (Multiple-Use Scenario Testing and Refusal Description), and implementing in BPEL4WS as the early version of BPEL standard. This thesis work has extended CRESS and its integrated tools to design, specify, validate, verify, implement, and evaluate composed web/grid services. The work has extended the CRESS notation to support a wider range of service compositions, and has applied it to grid services as a new domain. The thesis presents two new tools, CLOVE (CRESS Language-Oriented Verification Environment) and MINT (MUSTARD Interpreter), to respectively support formal verification and implementation testing. New work has also extended CRESS to automate implementation of composed services using the more recent BPEL standard WS-BPEL 2.0.