Service-Oriented Architecture (SOA) Compass Business Value, Planning, and Enterprise Roadmap

by Bieberstein, Norbert; Bose, Sanjay; Fiammante, Marc; Jones, Keith; Shah, Rawn

• ISBN13: 9780131870024
• ISBN10: 0131870025
• Edition: 1st
• Format: Hardcover
• Copyright: 2005-10-25
• Publisher: IBM Press

Summary

The well-written, practical guide to SOA - a perfect blend of principles AND 'how to' transition IT infrastructure toward the SOA model.

Author Biography

Norbert Bieberstein is a solution architect for the IBM Enterprise Integration team and is responsible for the team's worldwide communication. In his dual role, he gained first-hand experiences from customer projects in various industries striving to migrate to SOA-based On Demand solutions. He currently is completing his MBA at Henley Management College in the United Kingdom. In his communication role, he is delivering insight and best practices to IBM and customers in various forms. Norbert co-authored the IBM Redbooks Introduction to Grid Computing with Globus (SG24-6895-01) and Enabling Applications for Grid Computing with Globus (SG24-6936-00), wrote the textbook CASE-Tools (ISBN: 3446175261), and published several magazine articles on various IT topics. Norbert also worked as a technology manager in the IBM software partner organization, where he led the IBM OMG delegation during UML definition. He also acted as a software engineering (CASE) consultant to the IBM software development labs. Norbert has more than 25 years of experience in information technology and computer sciences. Before joining IBM in 1989, he was an application developer for a regional CIM provider and worked as scientific programmer at Aachen University of Technology (RWTH), where he received his masters in mathematics and geography. He also holds teacher's degrees for higher education in Germany. He lives with his family near Düsseldorf, Germany.

Sanjay Bose is the Design Center leader for the IBM Enterprise Integration team. He has more than 12 years of IT industry experience, primarily focused on creating product architecture and design, articulating technical strategy, and designing enterprise application systems using distributed technologies. He currently leads the design center to identify IBM software portfolio requirements and to develop solution components and assets by engaging enterprise clients and IBM software product development laboratories. His areas of expertise include service-oriented architecture, enterprise service bus, Web services, J2EE, and e-business technologies. Sanjay also worked in product development on the WebSphere Application Server and the WebSphere Portal Server. He has published several technical papers and also has contributed to industry specifications and standards. Sanjay received his bachelor's degree in computer science and engineering from the Indian Institute of Technology (IIT) in Mumbai, India and has completed MBA coursework at the Tepper School of Business, Carnegie Mellon University. He lives and works in Pittsburgh, Pennsylvania.

Marc Fiammante is an IBM Distinguished Engineer, elected to the IBM Academy of Technology in 2003, with wide experience in large project architecture and software development on multiple environments. He is the chief architect of the European, Middle East, Africa, and Asia-Pacific Enterprise Integration Solutions team. Marc has 21 years of experience in IT. He has filed several software domain patents and has published several articles related to e-business technologies. He leads architecture teams in major industry projects. He has architectural and technical expertise with service-oriented architecture, Web services, enterprise application integration, and e-business and object-oriented technologies, including a number of software middleware systems, programming languages, and standards. Marc is a graduate engineer of the Ecole Centrale de Paris.

Keith Jones, PhD, is currently a leading IT architect at IBM Enterprise Integration Solutions, where he focuses on the definition and implementation of service-oriented architectures with leading-edge customers. He has 30 years of experience in the IT industry as a systems engineer, software developer, strategist, systems architect, and author of many middleware publications. Keith's professional interests center on building transactional, message-oriented, and service-oriented middleware infrastructures in support of business processes in a wide range of customer environments. Most recently, these have included infrastructures at major financial services, retail services, automotive manufacturing, online media, and auction enterprises. Keith has a PhD in chemistry and lives with his family in Boulder, Colorado.

Rawn Shah is the Community Editor (and, formerly, the SOA and Web services Zone Editor) for IBM developerWorks. Rawn has 12 years of experience in the IT industry, serving in various roles including positions as a network administrator, an application developer, a vice president of a regional Internet service provider, a columnist, an author, and an editor. He has written more than 280 articles for dozens of technology magazines, including CNN.com, NetworkWorld, JavaWorld, NC World, Windows TechEdge, and LinuxWorld, and he was directly involved in the release of the industry-leading publications JavaWorld and LinuxWorld in the mid-1990s. His interests lie in finding new ways for facilitating the communication and collaboration of technical ideas and processes between distributed audiences and transferring this knowledge in meaningful ways to nontechnical audiences such as business teams. He and his family currently reside in Tucson, Arizona.

© Copyright Pearson Education. All rights reserved.

Table of Contents

Forewords	xxi
Vinton Cerf
Daniel Sabbah
Jason Weisser
Preface	xxv
Acknowledgments	xxvii
About the Authors	xxix
developerWorks and SOA	xxxi
Introducing SOA	1	(10)
SOA to the Rescue	3	(1)
Exploring SOA	4	(3)
The Term ``SOA''	4	(1)
Dimensions of SOA	5	(2)
A Preview of the Service-Oriented Architecture Compass	7	(2)
Summary	9	(1)
References	9	(2)
Explaining the Business Value of SOA	11	(24)
The Forces of Change	12	(4)
Enterprise Reconstruction	13	(1)
Industry Deconstruction	14	(1)
The Impact of the Enterprise Reconstruction and Industry Deconstruction Trends	15	(1)
The Trend Toward Business Components and Services	16	(1)
Common Questions About SOA	16	(5)
What Is SOA?	16	(1)
Why Do Companies Need SOA?	17	(1)
What Benefits Will Businesses Receive if They Implement SOA?	17	(1)
What Opportunities Will Companies Miss if They Don't Implement SOA?	18	(1)
What Is Different with SOA Compared to Previous Approaches?	18	(1)
Rethinking Components for Business and Applications	19	(1)
When Not to Implement an SOA	20	(1)
SOA Value Roadmap	21	(10)
Explaining SOA to Business People	21	(1)
A Checklist for Business Change Agility	22	(9)
The Nine Business Rules of Thumb for SOAs	31	(1)
Summary	32	(1)
References	32	(3)
Architecture Elements	35	(28)
Refining SOA Characteristics	37	(4)
Platform	37	(1)
Location	38	(1)
Protocols	38	(1)
Programming Language	39	(1)
Invocation Patterns	39	(1)
Security	39	(1)
Service Versioning	39	(1)
Service Model	40	(1)
Information Model	41	(1)
Data Format	41	(1)
Applying the SOA Characteristics	41	(1)
Infrastructure Services	41	(2)
Resource Virtualization Services	42	(1)
Service-Level Automation and Orchestration	42	(1)
Utility Business Services	43	(1)
The Enterprise Service Bus (ESB)	43	(4)
Transport	45	(1)
Quality-of-Service-Based Routing	45	(1)
Mediation	46	(1)
Web Services Gateway	47	(1)
SOA Enterprise Software Models	47	(10)
Industry Models	47	(1)
Platform-Independent Realization	48	(1)
Platform-Specific Realization	49	(1)
J2EE Realization	50	(1)
Services Integration on the WebSphere Application Server	50	(3)
The Information Management Domain	53	(4)
The IBM On Demand Operating Environment	57	(3)
Summary	60	(1)
Links to developerWorks	61	(1)
References	61	(2)
SOA Project Planning Aspects	63	(22)
Organizing Your SOA Project Office	63	(2)
SOA Adoption Roadmap	65	(3)
The Need for SOA Governance	68	(7)
SOA Governance Motivation and Objectives	68	(1)
An SOA Governance Model	69	(1)
Strategic Direction and SOA Governance Principles	69	(1)
Empowerment and Funding	70	(1)
Managing the Risk of an SOA Roadmap	70	(2)
SOA Governance Processes	72	(1)
Launching the Governance Model	73	(1)
Hints and Tips for Success	74	(1)
SOA Technical Governance	75	(1)
Reducing Impact by Modularization	75	(1)
Achieving Middleware Independence with Explicit Process State	75	(1)
Business Exceptions Monitoring and Handling	75	(1)
SOA Project Roles	76	(6)
The Function of Roles	76	(1)
Roles and Skills	77	(1)
Project Phases	77	(1)
Examining and Adapting Roles	77	(1)
A Look at Existing Roles	78	(1)
A Look at New Roles	79	(2)
Integrating Existing and New Roles	81	(1)
Summary	82	(2)
Links to developerWorks	84	(1)
References	84	(1)
Aspects of Analysis and Design	85	(18)
Service-Oriented Analysis and Design	85	(10)
On Modeling	86	(1)
Layers of Abstraction	86	(3)
Reuse	89	(1)
Service Encapsulation	90	(1)
Loose-Coupling	91	(1)
Strong Cohesion	92	(2)
Service Granularity	94	(1)
Well-Designed Services	94	(1)
Service-Oriented Analysis and Design---Activities	95	(4)
Identifying Services	95	(2)
Categorization of Services	97	(1)
Specification of Services	97	(1)
Realization of Services	98	(1)
Summary	99	(1)
Links to developerWorks	99	(1)
References	100	(3)
Enterprise Solution Assets	103	(20)
Architect's Perspective	104	(2)
Selecting the Architectural Methodology	104	(1)
Formalizing Architectural Decisions	104	(1)
Identifying Architectural Best Practices	105	(1)
Performing the Product and Package Mappings	105	(1)
Enterprise Solution Assets Explained	106	(1)
A Catalog of Enterprise Solution Assets	106	(1)
How Does an ESA Solve Enterprise Problems?	107	(1)
Selecting an Enterprise Solution Asset	108	(1)
Using an Enterprise Solution Asset	108	(1)
Multitiered Disconnected Operation	108	(7)
Problem Synopsis	108	(1)
Context	109	(1)
Forces	110	(1)
Solution	110	(4)
Consequences	114	(1)
Request Response Template	115	(5)
Problem Synopsis	115	(1)
Context	116	(1)
Forces	116	(1)
Solution	117	(2)
Consequences	119	(1)
Summary	120	(1)
Links to developerWorks	120	(1)
References	120	(3)
Determining Non-Functional Requirements	123	(12)
Business Constraints	123	(1)
Operating Ranges	124	(1)
Legal Constraints	124	(1)
Industry Business Standards	124	(1)
Technology Constraints	124	(3)
Operating Environment Constraints	126	(1)
Technical Model Constraints	127	(1)
Access Constraints	127	(1)
Expertise Constraints	127	(1)
Runtime Qualities	127	(4)
Performance NFRs	127	(3)
Scalability NFRs	130	(1)
Transactional Integrity NFRs	130	(1)
Security NFRs	131	(1)
Nonruntime Qualities	131	(2)
Manageability NFRs	131	(1)
Version Management NFRs	132	(1)
Disaster-Recovery NFRs	132	(1)
Summary	133	(1)
Links to developerWorks	133	(1)
References	133	(2)
Securing the SOA Environment	135	(28)
Architectural Considerations for an SOA Security Model	135	(2)
Concepts and Elements of Security	137	(7)
Integrity	137	(1)
Confidentiality	137	(1)
Identity and Authentication	138	(1)
Message Authentication	138	(1)
Session Management	139	(1)
Authorization	139	(2)
Privacy	141	(1)
Non-Repudiation	141	(1)
Cryptography	142	(1)
Trust	143	(1)
Federation	144	(1)
Implementation Requirements for SOA Security	144	(3)
Managing Security Policies	144	(1)
Defining Transport Security Policies	144	(1)
Defining Message Layer Security Policies	145	(1)
Defining Data Protection Policies	146	(1)
Defining Security Token Policies	146	(1)
Defining Cryptographic Key Policies	147	(1)
Coordinating Policies Between Business Partners	147	(1)
Standards and Mechanisms for SOA Security	147	(6)
The Basic Security Standard: WS-Security	148	(2)
Trust Domains: WS-Trust	150	(1)
Federated Security: WS-Federation	150	(1)
Session Management: WS-SecureConversation	151	(1)
Authorization and Policies: WS-Policy	152	(1)
Implementing Security in SOA Systems	153	(3)
Implementing Basic Security Services	153	(1)
Implementing Point-of-Contact Services	154	(1)
Implementing Message Layer Security Services	155	(1)
Implementing Trust Services	155	(1)
Implementing a Federation	155	(1)
Non-Functional Requirements Related to Security	156	(2)
The Performance Impact of Security	156	(1)
Managing Security	157	(1)
Technology and Product Mappings	158	(1)
Transport Layer Point of Contact	158	(1)
Web Services Layer Point of Contact	158	(1)
Trust Services	159	(1)
Federation Services	159	(1)
Summary	159	(1)
Links to developerWorks	160	(1)
References	160	(3)
Managing the SOA Environment	163	(18)
Distributed Service Management and Monitoring Concepts	163	(4)
Event-Driven Management	164	(1)
Levels of SOA-Driven Management	164	(3)
Key Services Management Concepts	167	(2)
Managing the Enterprise Service Bus	168	(1)
Evolving Standards	169	(1)
Operational Management Challenges	169	(3)
Challenges with Respect to Management Perspectives	170	(1)
Phases of Deployment	171	(1)
Service-Level Agreement Considerations	172	(1)
SOA Management Products	173	(5)
Business Performance and Business Service Management	173	(1)
IT Application and Resource Management	174	(2)
Other Areas of Management	176	(2)
External Product Relationships	178	(1)
Summary	178	(1)
Links to developerWorks	178	(1)
References	179	(2)
Case Studies in SOA Deployment	181	(14)
Case Study: SOA in the Insurance Industry	181	(8)
IT and Business Challenges	182	(1)
Solution Implementation	182	(4)
Impact of the Project	186	(2)
Lessons Learned	188	(1)
Case Study: SOA in Government Services	189	(4)
IT and Business Challenges	189	(1)
Technical Implementation	190	(1)
Impact of the Project	190	(2)
Lessons Learned	192	(1)
Summary	193	(2)
Navigating Forward	195	(8)
What We Learned	195	(2)
Guiding Principles	197	(1)
Future Directions	198	(3)
Technology Standards	199	(1)
Web Services Monitoring and Visualization	199	(1)
Semantic Web Services	199	(1)
Open Development Platforms	199	(1)
Services Assets	200	(1)
SOA Programming Models	200	(1)
Virtual Services Platform	200	(1)
Event-Driven Architectures	200	(1)
Model-Driven Architectures	201	(1)
Utility Services	201	(1)
Industry Adoption	201	(1)
Summary	201	(1)
Links to developerWorks	202	(1)
Glossary	203	(18)
Index	221