Bien que la technologie de composition de services Web soit considérée comme l’une des technologies les plus prometteuses pour l’intégration des sources de données hétérogènes et multiples ainsi que pour la réalisation d’opérations complexes, la question de la protection des données personnelles demeure l’une des préoccupation majeure liés à cette technologie. Ainsi, lors d’un processus de composition, l’échange de données entre toutes les entités – tels que, les services Web recueillant et fournissant des données, les individus dont les données peuvent être fournies et gérées par les services Web, les systèmes qui composent les services Web et les clients finaux des services – est une étape nécessaire et indispensable pour répondre à des requêtes complexes. En conséquence, des données personnelles sont échangées et manipulées entre toutes les entités du système. Notre objectif dans cette thèse est la conception et le développement d’un cadre permettant d’améliorer la composition des services Web avec des mécanismes de protection des données personnelles. Pour atteindre cet objectif, nous avons proposé une approche générale composée de trois éléments. Premièrement, nous avons proposé un modèle formel de confidentialité pour permettre aux services Web de décrire leurs contraintes de confidentialité liées aux données personnelles. Notre modèle permet une spécification des contraintes de confidentialité relative non seulement au niveau des données manipulées, mais aussi au niveau des opérations invoquées par les services. Deuxièmement, nous développons un algorithme de compatibilité qui permet de vérifier formellement la compatibilité entre les exigences et les politiques de confidentialité de tous les services lors d’un processus de composition. Troisièmement, dans le cas où certains services dans la composition sont incompatibles par rapport à leur spécification de confidentialité, nous avons introduit une nouvelle approche basée sur un modèle de négociation dans la perspective de trouver une composition compatible (c’est-à-dire, d’obtenir la compatibilité de toutes les spécifications de confidentialité des services impliqués dans la composition). Enfin, nous avons mis en œuvre les techniques présentées dans cette thèse au sein du prototype PAIRSE et mené une étude de performance sur les algorithmes proposés / While Web service composition technologies have been beneficial to the integration of a wealth of information sources and the realization of complex and personalized operations, the issue of privacy is considered by many as a major concern in services computing. Central to the development of the composition process is the exchange of sensitive and private data between all parties: Web services collecting and providing data, individuals whose data may be provided and managed by Web services, systems composing Web service to answer complex queries, and requesters. As a consequence, managing privacy between all parties of the system is far from being an easy task. Our goal in this thesis is to build the foundations of an integrated framework to enhance Web service composition with privacy protection capabilities. To this aim, we firstly propose a formal privacy model to allow Web services to describe their privacy specifications. Our privacy model goes beyond traditional data-oriented models by dealing with privacy not only at the data level but also service level. Secondly, we develop a compatibility-matching algorithm to check privacy compatibility between privacy requirements and policies within a composition. Thirdly, in the case where some services in the composition are incompatible regarding their privacy specifications, we introduce a novel approach based on a negotiation model to reach compatibility of concerned services (i.e. services that participate in a composition which are incompatible). Finally, we conduct an extensive performance study of the proposed algorithms. The techniques presented in this dissertation are implemented in PAIRSE prototype

Compte tenu de l’environnement économique globalisé et de plus en plus concurrentiel, les entreprises et en particulier les PME/PMI, pour rester compétitif,doivent développer de nouvelles stratégie de collaborations (intra et inter-entreprises) et se restructurer pour rendre leur organisation et le système d’information agile. Alors que jusqu'à présent le Web 2.0 permettait de collaborer sur les données elles-mêmes, nous proposons de passer à une logique de « process 2.0 » permettant de rechercher / composer sémantiquement des services existants pour collaborer directement en partageant des fonctionnalités et non plus seulement des données. Couplé au développement du Cloud Computing, facilitant l’hébergement, une telle stratégie permettrait de coupler plus fortement les niveaux SaaS et PaaS. Toutefois, ceci pose d’évidents problèmes de gestion des contraintes de sécurité. Le développement de stratégies de sécurité est usuellement basé sur une analyse systématique des risques afin de les réduire en adoptant des contre-mesures. Ces approches sont lourdes, complexes à mettre en œuvre et sont souvent rendues caduques car les risques sont évalués dans un monde « fermé », ce qui n’est pas le cas d’une approche par composition de services métier réutilisable où le contexte d’utilisation des différents services au niveau métier et plateforme est inconnu a priori. Dans ce type d’approche, le contexte au niveau métier évoque à la fois les fonctionnalités apportées par chaque service, l’organisation (Qui fait à quoi ?) et l’enchainement de ces services ainsi que les types de données (d’ordre stratégique ou pas,..) que manipulent ces services. Au niveau plateforme, le contexte dépend de l’environnement (privé, public,..) dans lequel les services vont s’exécuter. C’est donc sur la base de l’analyse du contexte que l’on peut définir les contraintes de sécurités propres à chaque service métier, pouvoir spécifier les politiques de sécurités adéquates et mettre en œuvre les moyens de sécurisation adaptés. En outre, il est aussi nécessaire de pouvoir propager les politiques de sécurités sur tout le processus afin d’assurer la cohérence et une sécurité globale lors de l’exécution du processus. Pour répondre à ces enjeux, nous proposons d’étudier la définition des politiques de sécurité à base de « patrons » apportant une réponse graduée en fonction de la confiance que l’on a sur l’environnement. Ainsi des patrons de sécurité qui répondent à des besoins de sécurité métiers et à des besoins de sécurité plateforme seront définis et permettront d’exprimer l’ensemble des politiques de sécurité. La sélection et de mise en œuvre de ces politiques de sécurités se feront à partir de patrons de contexte. Notre proposition simple à appréhender par des non spécialistes, permettra, par des transformations de modèles, d’intégrer ces politiques au niveau technologique afin de garantir un niveau de qualité de protection constant quel que soit l’environnement de déploiement. / To fit the competitive and globalized economic environment, companies and especially SMEs / SMIs are more and more involved in collaborative strategies, requiring organizational adaptation to fit this openness constraints and increase agility (i.e. the ability to adapt and fit the structural changes). While the Web 2.0 allows sharing data (images, knowledge, CV, micro-blogging, etc...) and while SOA aims at increasing service re-using rate and service interoperability, no process sharing strategies are developed. To overcome this limit, we propose to share processes as well to set a "process 2.0" framework allowing sharing activities. This will support an agile collaborative process enactment by searching and composing services depending on the required business organization and the service semantics. Coupled with the cloud computing deployment opportunity, this strategy will lead to couple more strongly Business, SaaS and PaaS levels. However, this challenges security constraints management in a dynamic environment. The development of security policies is usually based on a systematic risks analysis, reducing them by adopting appropriate countermeasures. These approaches are complex and as a consequence difficult to implement by end users. Moreover risks are assessed in a "closed" and static environment so that these methods do not fit the dynamic business services composition approach, as services can be composed and run in different business contexts (including the functionalities provided by each service, the organization (Who does what?), the coordination between these services and also the kind of data (strategic or no...) that are used and exchanged) and runtime environment (public vs private platform…). By analyzing these contextual information, we can define specific security constraints to each business service, specify the convenient security policies and implement appropriate countermeasures. In addition, it is also necessary to be able to propagate the security policies throughout the process to ensure consistency and overall security during the process execution. To address these issues, we propose to study the definition of security policies coupling Model Driven Security and Pattern based engineering approach to generate and deploy convenient security policies and protection means depending on the (may be untrusted) runtime environment. To this end, we propose a set of security patterns which meet the business and platform related security needs to set the security policies. The selection and the implementation of these security policies will be achieved thank to context-based patterns. Simple to understand by non-specialists, these patterns will be used by the model transformation process to generate these policies in a Model@Runtime strategy so that security services will be selected and orchestrated at runtime to provide a constant quality of protection (independent of the deployment).

Actuellement, la technologie des services Web évolue rapidement, en étant soutenue par les grands acteurs du domaine des systèmes d'information. Les applications basés sur services Web sont faiblement couplées et utilisables de façon automatique via l'utilisation d'un ensemble de normes basées sur XML. Hormis la description syntaxique des messages, il est nécessaire d’avoir une description sémantique du comportement des services. En effet, lors de la conception d'un service ou lors d'une composition de services, il est important de vérifier la conformité avec un cahier des charges. L’enrichissement des descriptions des services par l’inclusion de leurs comportements est de plus en plus important. Ce comportement peut être décrit par des protocoles métier représentant les séquences possibles d'échanges de messages. Les services Web utilisent des politiques de contrôle d'accès (ACP) pour restreindre l'accès à des consommateurs autorisés. Ces politiques doivent faire partie de la description du service. Dans cette thèse, l'analyse d'interopérabilité en termes de contrôle d’accès après la formalisation des services Web annotés avec les politiques de contrôle d’accès est réalisée. Nous présentons une approche pour intégrer les outils de vérification dans l'architecture de contrôle d’accès de façon à garantir une interaction sans erreurs. Les politiques et les crédits sont présentés comme une ontologie afin de bénéficier de la flexibilité offerte par subsomption sur des concepts. La chorégraphie des services Web est utilisée dans la phase de conception d’applications pair à pair complexes dans lesquelles chaque pair peut être implémenté par un service Web. Par conséquent, la sélection des services Web pour l’implémentation de chorégraphie en utilisant l’approche de vérification de compatibilité avec contrôle d'accès est l'un des objectifs de notre recherche. Dans ce travail, les modèles de protocole métier du service Web sont étendus en ajoutant des informations au message sur chaque transition du service dans lequel ce message sera envoyé ou reçu. Nous définissons et vérifions la compatibilité des services Web afin de voir si (et comment) plusieurs services peuvent avoir des interactions en fonction de leurs protocoles. Cette approche aidera les concepteurs à choisir des services Web de manière simple et à vérifier s’ils peuvent mettre en œuvre la chorégraphie nécessaire en vérifiant la compatibilité avec notre approche / Currently, Web services technology is rapidly move forward supported by major players in the field of information systems. Web services applications are loosely coupled and usable in an automatic way via the use of a set of standards based on XML. Beside the syntactic description of messages, there is a need for the semantic description of the behavior of services. Indeed, whether in the design of a service or composition of services, it is important to check compliance with a set of specifications. Enriching services descriptions by including their behaviors is becoming more and more important. This behavior can be described by business protocols representing the possible sequences of message exchanges. Web services use access control policies (ACP) to restrict the access to authorized consumer. These policies should be a part of the service description. In this thesis, the interoperability analysis in terms of AC after the formalization of the Web services annotated with the access control (AC) is performed. In addition, we present an approach for embedding the checking tools in the AC enforcement architecture to guarantee the errors free interaction. The ACP and the credentials are presented as ontology in order to benefit from the flexibility offered by subsumption on concepts. Web services choreography is used in the design phase of complex peer-to-peer applications in which each peer can be implemented by a Web service. Therefore, selecting Web services for choreography implementation using the compatibility checking approach with access control is one of the objectives of our research. In this work, the business protocol models of the Web service are extended by adding information to the message on each transition about the service in which this message will sent to or received from. We define and verify Web service compatibility in order to see if (and how) several services can have interactions based on their protocols. This approach will help the designers to select Web services in an easy way and verify if they can implement the required choreography or not by checking the compatibly using our approach

[pt] Este trabalho apresenta uma plataforma para aplicações baseadas em serviços. Esta plataforma foi concebida para dar suporte ao compartilhamento de informações serviços usando diferentes dispositivos. Através do uso de padrões abertos e de uma abordagem totalmente distribuída, Everyware permite que os usuários finais possam disponibilizar serviços sem necessidade de configuração ou administração. Estes serviços podem ser marcados semanticamente e integrados à Web semântica, o que permite que sejam processados automaticamente por máquinas. A plataforma ainda oferece uma arquitetura padrão para o desenvolvimento de aplicações e uma API para o desenvolvimento de mecanismos de coordenação de serviços que integra os diversos aspectos presentes em aplicações baseadas em serviços. / [en] This work addresses issues on the development of service- oriented web applications on the semantic web. It presents a platform conceived to support information sharing among different services accessed by different devices and hardware infraestructure. Using open standards and a totally distributed approach, everyware allows users to publish their services without need to configuration and administration. Services can also be semantically tagged and integrated to the Semantic Web, so they can be easily preocessed by machines. Everyware platform offers a standard architecture to application development and an API to the development of coordination mechanisms. It integrates most concerns that are present in service- oriented applications.

A implantação de composições de serviços web de grande escala apresentam vários desafios, tais como falhas corriqueiras na infraestrutura, heterogeneidade tecnológica, distribuição do sistema por diferentes organizações e atualização frequente dos serviços em operação. Nesta dissertação, estudamos como uma implantação automatizada baseada em middleware pode auxiliar na superação de tais desafios. Para isso, desenvolvemos o CHOReOS Enactment Engine, um sistema de middleware que possibilita a implantação distribuída e automatizada de composições de serviços web em uma infraestrutura virtualizada, operando no modelo de computação em nuvem denominado Plataforma como um Serviço. O middleware desenvolvido é avaliado qualitativamente em comparação a abordagens de implantação ad-hoc e quantitativamente pela sua escalabilidade em relação ao tempo de implantação das composições de serviços. / The deployment of large-scale service compositions presents several challenges, such as infrastructure failures, technological heterogeneity, distributions across different organizations, and continuous services updating. In this master thesis, we study how the automated deployed supported by middleware can help in overcoming such challenges. For this purpose, we developed the CHOReOS Enactment Engine, a middleware system that enables the distributed and automated deployment of web service compositions in a virtualized infrastructure, operating in the cloud computing model known as Platform as a Service. The developed middleware is evaluated qualitatively by comparing it with ad-hoc deployment solutions, and it is also evaluated quantitatively by its scalability regarding the deployment time of service compositions.

O planejamento de experimentos em sistemas computacionais não é uma tarefa trivial, pois envolve diversas etapas tais como, o planejamento propriamente dito, a execução dos experimentos e a análise dos resultados. A definição e a utilização de metodologias adequadas para cada uma destas etapas facilita a obtenção dos resultados de um experimento em um sistema computacional. Neste trabalho são apresentados mecanismos para auxiliar o planejamento e execução de experimentos em sistemas orientados a serviços. O planejamento de experimento é realizado a partir de um modelo baseado nos conjuntos de entradas comuns a arquiteturas orientadas a serviço. A execução deste planejamento é feita em um ambiente colaborativo real, a qual auxilia a identificação de gargalos que não estão presentes em simulações ou modelos analíticos. Um estudo de caso aplicado na arquitetura WSARCH, possibilitou avaliar seu desempenho e identificar problemas de configuração / The design of experiments in computational systems is not a trivial task as it involves several steps such as planning and execution of the experiments and the analyse of the results. The use of appropriate methodologies for each of these steps makes it easier obtain the experiment results of a computer system. In this dissertation, mechanisms to assist the planning and execution of experiments in service-oriented systems are presented. The planning of the experiment is made according to a model based on a set of common entries for service-oriented architectures. The experiment execution is performed in a real collaborative environment, which helps to identify bottlenecks that are not found in simulations or analytical models. A study case applied in WSARCH architecture, enables to evaluate the performance and identify configuration problems

Servicos web sao componentes de software fracamente acoplados projetados para promover a comunicacao interoperavel entre aplicacoes na Internet. O acesso a servicos web da-se de maneira padronizada (via protocolos definidos pelo W3C), independente da linguagem de programacao, sistema operacional ou plataforma em que sao desenvolvidos. Devido a essas caracteristicas, servicos simples podem ser combinados em servicos mais completos. Coreografia consiste em uma abordagem descentralizada para a composicao de servicos. Diferentemente de orquestracoes, abordagem na qual servicos distribuidos sao coordenados de modo centralizado, a interacao entre os servicos de uma coreografia e colaborativa e a coordenacao descentralizada. Apesar das vantagens, o desenvolvimento de coreografias, incluindo as atividades de testes, nao e algo consolidado. O objetivo desta dissertacao foi desenvolver uma arcabouco de teste que facilite o uso de Desenvolvimento Guiado por Testes (Test-Driven Development, TDD) em coreografias de servicos web. Rehearsal, o arcabouco proposto, fornece funcionalidades para o teste automatizado de (i) servicos web atomicos (teste de unidade); (ii) composicao de servicos (teste de integracao) e (iii) uma parte ou toda a coreografia (teste de aceitacao). Esses testes podem ser implementados utilizando funcionalidades do arcabouco, tais como a criacao dinamica de clientes para servicos web, o interceptador de mensagens e a abstracao da coreografia em objetos Java. Alem disso, Rehearsal facilita a criacao e uso de Mocks de servicos web, uma importante pratica de TDD. Além de avaliar o arcabouco desenvolvido, um estudo ex- ploratorio qualitativo foi conduzido com estudantes de Ciencia da Computacao. De acordo com os resultados obtidos, as funcionalidades do Rehearsal mostraram-se adequadas para a utilizacao de TDD em coreografias de servicos web. / Web services are loosely-coupled software components designed to support interoperable machine- to-machine interaction over the Internet. To achieve such interoperability, web services are accesible through W3C web standards, independently of which language, operating system, or hardware platform they are developed. Due to these characteristics, simple web services can be combined in more complex ones. Choreographies are a distributed approach for composing web services. Compared to orchestrations, which have a centralized approach to distributed service management, the interaction among the choreographed services is collaborative with decentralized coordination. Despite the advantages, choreography development, including the testing activities, is not consolidated. The goal of this research is to develop a testing framework to support Test-Driven Development (TDD) of choreographies. Rehearsal, the proposed framework, provides features for automating the testing of (i) atomic web services (unit testing); (ii) their integration in the choreography (integration testing); and (iii) part of or the entire choreography (acceptance testing). These several levels of testing are implemented by using framework features such as the dynamic generation of web service clients, message interception, and the abstraction of the choreography into Java objects. In addition, Rehearsal supports important practices of TDD such as service mocking. To assess the developed framework, we conducted a qualitative exploratory study with Computer Science students. According to the results obtained, the features of Rehearsal were adequate for applying TDD to web service choreography development successfully.

Estudos de expressão gênica geralmente envolvem a realização de processos de análise integrados para a obtenção de respostas biológicas de interesse. A realização destes processos frequentemente requer o uso combinado de uma série de ferramentas de software. No entanto, o processo de integração manual de ferramentas pode ser demorado e propenso a erros devido ao crescente número de ferramentas e formatos de dados disponíveis no domínio. De modo a automatizar o processo de integração, algumas abordagens têm sido propostas tanto para a adaptação das ferramentas de análise existentes como serviços web semânticos, quanto para o desenvolvimento de ambientes de suporte à integração (composição) de serviços web semânticos. Embora estas abordagens representem avanços, nenhuma solução adequada para o desenvolvimento e composição de serviços foi especificamente definida para o domínio de genômica funcional. Neste contexto, o principal objetivo deste projeto foi investigar uma solução completa para o desenvolvimento e composição de serviços web semânticos para a análise de expressão gênica. Como parte da solução proposta, definimos uma metodologia integrada para a implementação de serviços web semânticos criados a partir de ferramentas de software existentes e para a anotação semântica destes serviços. Nossa metodologia fornece diretrizes concretas para o desenvolvimento sistemático de serviços, considerando também os principais aspectos técnicos associados ao processo de desenvolvimento. Esta metodologia foi aplicada a um conjunto representativo de serviços que fornecem suporte às principais atividades de análise realizadas em diferentes tipos de dados de expressão gênica. De forma complementar, definimos uma solução completa para a composição semântica de serviços no domínio de análise de expressão gênica. A solução proposta foi implementada em uma plataforma de suporte semi-automático à composição de serviços web semânticos, chamada SemanticSCo. Esta plataforma fornece suporte flexível a todas as atividades envolvidas no processo de composição de serviços, incluindo a criação, publicação, requisição, descoberta, seleção, composição e execução de serviços. Além disto, a plataforma SemanticSCo foi projetada para prover suporte adequado a diferentes tipos de usuários, incluindo biologistas e bioinformatas. Neste sentido, a plataforma fornece aos usuários um alto nível de abstração para a definição de seus processos de análise, permitindo que os mesmos se concentrem mais nas questões de pesquisa biológicas do que nos aspectos subjacentes do processo de composição. Adicionalmente, a plataforma SemanticSCo suporta a definição e incorporação não apenas de serviços simples, definidos em termos de uma única operação, mas também de serviços complexos, definidos em termos de um conjunto de condições que restringem a ordem de invocação de suas operações. Finalmente, de modo a avaliar a plataforma de suporte desenvolvida, definimos diferentes cenários de composição para a análise (integrada) de dados de expressão gênica. O uso da plataforma SemanticSCo facilitou a definição destes cenários, permitindo assim a reprodução dos resultados obtidos a partir de diferentes estudos de expressão gênica previamente documentados na literatura / Gene expression studies usually involve the creation of integrated analysis processes for obtaining responses for a biological question. The creation of such processes often require the combined use of a number of software tools. However, the manual integration of tools can be cumbersome and error prone due to the increasing number of tools and data formats available in the domain. In order to automate the integration process, some approaches have been proposed for the adaptation of existing analysis tools as semantic web services as well as for the development of software environments to support the integration (composition) of semantic web services. Although these approaches present advances, to the best of our knowledge, no suitable solution has been proposed for the development and composition of web services in the functional genomics domain. In this context, this project aimed at investigating a complete solution for the development and composition of semantic web services to support gene expression analysis. As part of the proposed solution, we have defined an integrated methodology for the implementation of semantic web services created from existing software tools and the semantic annotation of such services. Our methodology provides concrete guidelines for the systematic development of services, also taking into account the main technical aspects associated with the development process. This methodology has been applied in the development of a representative set of services that support the main analysis activities performed on different types of gene expression data. Complementary to our methodology, we have defined a complete solution for the semantic composition of web services in the gene expression analysis domain. The proposed solution has been implemented in a software platform to support the semi-automatic composition of semantic web services, named SemanticSCo. This platform provides flexible support to all activities involved in the service composition process including service creation, publication, request, discovery, selection, composition and execution. Additionally, the SemanticSCo platform has been designed to support different types of users, including biologists and bioinformaticians. In this sense, the platform provides users with a high level of abstraction in the definition of their analysis processes, thus allowing them to focus more on biological research issues rather than on underlying details of the composition process. In addition, the SemanticSCo platform supports not only the definition and incorporation of (simple) services defined in terms of a single operation, but also (complex) services defined in terms of a set of conditions that constrain the order in which service operations should be invoked. Finally, in order to evaluate the developed support platform, we have defined a number of composition scenarios for the (integrated) analysis of gene expression data. The use of the SemanticSCo platform has facilitated the definition of these scenarios, thus allowing the reproduction of the results obtained from different gene expression studies previously documented in the literature.

Aplicações de sistemas computacionais emergentes atribuindo requisitos de resposta na forma de tempo de resposta requerem uma abordagem de sistemas de tempo real. Nesses sistemas, a qualidade de serviço é expressa como garantia das restrições temporais. Um amplo leque de técnicas para provisão de QoS encontram-se na literatura. Estas técnicas são baseadas tanto na diferenciação de serviço (QoS relativa), quanto na especificação de garantia de desempenho (QoS absoluta). Porém, a integração de QoS relativa e absoluta em nível de aplicação não tem sido tão explorada. Este trabalho realiza o estudo, a análise e a proposta de um método de escalonamento de tempo real em um ambiente simulado, baseado em contratos virtuais adaptativos e modelo re-alimentado. O objetivo é relaxar as restrições temporais dos usuários menos exigentes e priorizar usuários mais exigentes, sem degradar a qualidade do sistema como um todo. Para tanto, estratégias são exploradas em nível de escalonamento para o cumprimento dos contratos especificados por requisitos de tempo médio de resposta. Os resultados alcançados com o emprego do método proposto sinalizam uma melhoria em termos de qualidade de serviço relativa e absoluta e uma melhor satisfação dos usuários. Este trabalho também propõe uma extensão para os modelos convencionalmente estudados nesse contexto, ampliando a formulação original de duas classes para n classes de serviços / Emerging computer system application posing responsiveness requirement in the form of response time demand a real-time system approach. In these systems, the quality of service is expressed as guarantees on time constraints. A wide range of techniques for QoS provision is found in the literature. These techniques are based both on either service differentiation (relative QoS) or specification of performance guaranteeS (absolute QoS). However, integrated provision of both relative and absolute QoS at application level is not as well explored. This work conducts the study, analysis and proposal of a real time scheduling method in a simulated environment. This method is based on adaptive virtual contracts and feedback model. The goal is to relax the time constraints of less demanding users and prioritize the time constraints of most demanding users, without degrading the quality of the system as a whole. Strategies toward this goal are exploited in the system scheduling level and are aimed at the problem of fulfulling service-level agreements specifying average response times requirements. The results achieved with the proposed method indicate an improvement in relative and absolute QoS and a better user satisfaction. This work also proposes an extension to the conventional models studied in this context, extending the original formulation of two classes for n classes of services

O objetivo do presente trabalho é a modelagem de um sistema de informação destinado ao registro de dados de rastreabilidade aplicado à indústria do vinho, segundo os conceitos de uma arquitetura computacional orientada a serviços. A importância da pesquisa decorre do fato de ser obrigatória, desde 2005, a manutenção de tais registros por parte de todos os produtores que pretendem exportar seus produtos para países da Comunidade Européia. Além desta exigência legal, os consumidores finais, inclusive brasileiros, têm apresentado uma demanda crescente sobre informações acerca dos produtos alimentícios por eles consumidos. No software modelado, buscou-se uma solução que contemple a indústria coletivamente, através de consórcios ou associações de produtores, visando a diluição de custos e compartilhamento dos benefícios auferidos. A partir do levantamento bibliográfico realizado, efetuaram-se contatos com o setor produtivo vinícola brasileiro, na cidade de Bento Gonçalves, RS, e pesquisaram-se tópicos de tecnologia da informação ligados ao tema. O software foi modelado através da Unified Modeling Language, UML, a partir de modelo de caracterização do processo produtivo do vinho utilizado pelo autor. Criou-se um protótipo funcional. Através de sua utilização, constatou-se que o modelo adotado é viável para atender as necessidades da indústria vinícola, individual ou coletivamente. A continuidade do trabalho poderá transformar o protótipo construído em um produto para utilização comercial. Finalmente, observou-se que a mesma estrutura de modelagem poderá ser utilizada em outros domínios. / The purpose of this project is the modeling of an information system aimed at the maintenance of traceability data in the wine industry, according to the principles of a service oriented architecture. The importance of this issue is due to the fact that, since 2005, traceability data maintenance is mandatory for all food and feed producers intending to export their products to any European Union country. Besides that, final consumers, Brazilians included, have more and more been demanding for information about their food products consumed. In the project, a collective solution intended to be used by producer consortiums or associations, was attempted. The aim was sharing the costs and benefits of such a solution. Starting with an extensive bibliographic review, Brazilian wine industries at Bento Gonçalves, RS, Brazil, were visited and information technology issues related with the theme were researched. The software was modeled with the Unified Modeling Language, UML, through a representation of the wine production process used by the author. A functional prototype was built. Through its utilization, it was possible to perceive that the model adopted is able to fulfill the demands of wine producers considered both individually and collectively. Future development of this work, could transform the built prototype into a full featured product. As a final point, another interesting possibility to be considered is the use of this model in other domains.