Towards a Reference Architecture for Service-Oriented Cross Domain Security Infrastructures

Cross domain communication has been a long-discussed subject in the field of web-based application, especially for any sort of mashups where a single web app combines resources from different locations. This issue becomes more important in the Web of Things context, where every physical resources are exposed to the Web and mashed up by other web applications. In this paper we demonstrate a use case in which cross domain communication is applied in the Web of Things using the HTML5 Cross Document Messaging API (HTML5CDM). In addition, we contribute an advanced implementation of HTML5CDM that brings RESTful communication model to HTML5CDM and supports better concurrent message exchange, which we believe will be of much benefit to web developers. In addition, a time/space evaluation that measures CPU and Memory usage for the developed HTML5CDM library is carried out and the results has proved our implementation's practicability.

An important trend of software engineering is that systems are in transition from component based architectures towards service centric ones. However, software product line engineering techniques can help in a quality based and systematic reuse. The content of this paper addresses the issue of how to perform design and quality analysis of cross domain reference architecture. The reference architecture is designed based on the domains requirements and features modelling. We propose a service based approach for cross-domain reference architecture development. Throughout the sections we try to introduce an innovative way of thinking founded on bridging concepts from software architecture, service orientation, software product lines, and quality analysis with the purpose to initiate and evolve software systems.KeywordsSoftwareCross domain reference architectureServiceDesignAnalysisQualityScenarios

Over the previous years, many service-oriented (SO) solutions have been proposed by European research projects for the technological advancement of industrial systems. These projects typically include a software reference architecture (RA) based on the concepts of service-oriented architectures (SOA) and, often-times, an accompanying technology stack to guarantee system-wide interoperability. In this paper, we survey and outline the specific approaches, standards, and specifications applied by five such projects in their pursuit of SO solutions to specific manufacturing and production problems.

In order to achieve agility and shorter concept‐to‐market timescales for new products and services, ICT service providers and their corporate customers alike increasingly adopt a collection of technologies, concepts and capabilities which come under the banner of the Service Oriented Architecture (SOA). The Service Oriented Infrastructure (SOI) approach complements SOA by enabling the optimal use of virtualised infrastructure services and resources via the network, and their integration in tailored solutions that meet customer needs and adapt to their growth pattern.In this paper we focus on the business and technological challenges relating to security and service dependability for SOI. In particular the paper studies challenges in the security areas of (i) identity federation, (ii) distributed usage and access management, (iii) context‐aware secure messaging, routing and transformation and (iv) SOA security governance. It gathers requirements and it proposes an architecture comprising design patterns and a governance framework that address these challenges. An example case‐study presents an implementation of the proposed architecture's SOI security capabilities aiming at the practical validation of the proposed architectural concepts. Copyright © 2010 John Wiley & Sons, Ltd.

Many Programs of Record are using Service Oriented Architecture (SOA) approaches and supporting technologies to realize net-centricity requirements. Furthermore, emerging solutions offer data sharing across adjacent security enclaves for these programs, including Cross Domain Joint Battlespace Infosphere (XJBI) by AFRL, Cross Domain Web Services Gateway by DISA, and the Cross Domain Collaborative Information Environment and Collaboration Gateway by the Joint Forces Command (JFCOM). While these solutions address the specific environment, it has proved insufficient to meet all the use cases of net-centricity requirements. This paper describes approaches that supplement the existing solutions by incorporating existing and emerging multi-domain technologies, primarily Multiple Independent Levels of Security (MILS) and Multi-Level Security (MLS).

Since the Internet of Things (IoT) will be entwined with everything we use in our daily life, the consequence of security flaws escalates. Smart objects will govern most of the home appliances and car engines yielding potential disaster scenarios. In this context, successful attacks could lead to chaos and scary scenarios (www.darkreading.com). Unprotected personal information may expose sensitive and embarrassing data to the public and attacks may threaten not only our computers and smart devices, but our intimacy and perhaps our lives too. Because persons and objects will be bonded with each other, user consent becomes critical. Therefore, thing, object, and user Identity will be the focus of future IoT security solutions, yielding a Trust, Security, and Privacy (TSP) paradigm, which may constitute the Achilles' heel of IoT. While security issues are quite straightforward, mainly from background knowledge, privacy issues are far more complex. Privacy constitutes a rather challenging task, even for the m...

Digital Health Care (DHC) reform suggests a new consumer paradigm in data and information processing: from Electronic Health Record (EHR) ownership to consumption of Personal Health Record (PHR); from distributed access of networked collaborative cares to centralized repository of portable records; from private information retrieval to security access control. All aspects of the new paradigm shall impose new challenges in the underlying consumer healthcare communication and network infrastructure. In this paper, I will introduce the solution utilizing a converged network layer, as well as adopting service-layer interfaces between DHC systems in an end-to-end solution (reference architecture). I also present a solution framework that incorporates service management, handheld on-demand access and consultation, quality-of-service accounting, and end-to-end system interconnection solutions.

Over the last years Wireless Sensor Networks (WSN) have been becoming increasingly applicable for real world scenarios and now production ready solutions are available. In the same period the upcoming combination of Service-oriented Architectures and Web Service technology demonstrated a way to realize open standardized, flexible, service component based, loosely coupled and interoperable cross domain enterprise software solutions. But those solutions have been too resource-intensive and complex to be applicable for limited devices like wireless sensor nodes or small-sized embedded systems. Thus, more and more research investigations have been launched to bring the aspect of cross domain interoperability to the field of embedded battery powered devices. The proposed laboratory assistance solution in this paper demonstrates the benefits of Web Service enabled WSNs for process monitoring and disaster management by extending an existing system in the Life Science Automation domain. Especially, the capability to provide location based services in industrial automation environment represents a beneficial feature of the presented integration approach and results in high-quality information delivery bundled with specific data about the locational origin of the capturing sensor.

Despite the growth of the digital economy in many developing countries, rural communities are still marginalized in the current digital business ecosystems, which are highly urban-oriented. To address this issue, we have proposed in our previous works a reference architecture of a digital platform based on the principles of service orientation. In this paper, we evaluate the real-world applicability of the proposed reference architecture by using a technical action research approach in the West Java province of Indonesia. Our study demonstrates the feasibility of implementing the proposed architecture in a real-world setting, and analyzes its effectiveness in improving the economic climate in rural areas.KeywordsSmart ruralService-oriented architectureDigital business ecosystems

Many multimedia systems are focusing on the techniques of teleconferencing applications and discussing the general reference architectures. Generally speaking, a distributed multimedia application is constructed of four layers: the interactive layer, the data composition layer, the network transport layer and the database management system (DBMS) layer. Although these layers are the well-known reference architectures, the connections (multimedia modeling, module operations, and module communications) between them still need to be solved. To allow users easily, flexibly, and dynamically to create, query, and present multimedia documents, the authors propose five modules as an integration solution; they are, interactive user interface module, multimedia object manipulation module, object dynamically mapping module, network transport control module, and physical object file manipulation module. These modules are the essences of the behaviorally object-oriented distributed multimedia environment. Based on these modules, the multimedia object modeling, the query processing and the presentation schema are elaborated. >

A storage-area (SAN) comprises computers (initiators), storage block devices (targets), and a controller(s). Most SANs use the SCSI protocol over various communication infrastructures. Presently, all initiator-target traffic must pass through the controller, severely limiting scalability. We extend the SCSI-3 transport layer to support distribution, and combine this with SCSIs support for data-control split to create DSDC, a novel architecture that can be used over any networking infrastructure: data may be sent directly between initiators and targets, relieving the controller communication bottleneck; the use of multiple paths for data moreover relieves traffic bottlenecks on network links; finally, passing all commands through the Controller retains simplicity. DSDC thus enables the construction of much larger SANs while retaining the simplicity of a single controller. A prototype SAN using Ethernet and Linux nodes, with DSDC implemented in the iSCSI transport layer protocol and in the controller's SCSI application layer, has been constructed.

The widespread adoption of real-interactivity, fuelled with developments in wireless communication infrastructures, such as sixth generation (6G), made augmented reality (AR) a possibility in a range of vertical applications. AR integrates the digital visuals into a virtual space that emulates the real-world feedback for the user. It supports a range of haptic and interactive communication and thus has attracted the interest of the research community to provide useful AR frameworks. However, as the user-private data is communicated through open channels, it raises privacy and security concerns. In parallel, decentralized computing has shifted resource provisioning to near device interactions that support the real-time connectivity of AR. To preserve privacy and induce trust among AR stakeholders, blockchain (BC)-based AR use cases are presented by researchers. However, the existing surveys have not focused on reference architectures and implementation challenges. Motivated by the research gap, the paper presents a systematic survey of the integration of BC to induce data privacy in AR ecosystems. A comparative analysis is presented, and the potential application of BC-based AR is discussed. A case study on VoRtex enterprise is presented, and a supporting architectural framework is discussed. The survey intends to present the readers deep insights about BC adoption in AR that would motivate industry practitioners, academicians and researchers to propose scalable BC-integrated solutions in AR/VR-based ecosystems.KeywordsAugmented realityBlockchain6GData privacySecurity

Since Si‐based Moore's law is physically limited, 2D semiconductors are proposed as successors to continue shrinking the transistor size for more Moore electronics. However, limited by experimental technology bottlenecks, the theoretical predicted superiorities of the 2D transistors over the state‐of‐the‐art Si transistors have been lacking concrete evidence for a decade. In this review, recent exciting experimental breakthroughs for 2D transistors are presented, including gate length miniaturization to a sub‐1 nm limit, electrode contact optimization to the resistance quantum limit, high‐quality dielectric fabrication with an equivalent oxide thickness to sub‐0.5 nm, novel architecture form (2D fin field‐effect transistor), and back‐end‐of‐line integration of directly grown 2D materials on Si complementary metal‐oxide‐semiconductor circuits. Remarkably, an ultrashort channel, Ohmic contact, ballistic transport, and ultrathin dielectric layer are simultaneously satisfied in the 2D InSe transistor, and device performances approaching the theoretical limit are observed. The measured key figures of merit of the ideal 2D InSe transistor are comparable to or even surpass those of the Si transistors. Finally, the challenges and outlook on more Moore electronics based on 2D transistors are highlighted.

The mission of the BEinGRID project was to generate knowledge, technological improvements, business demonstrators and reference case studies to help companies and other organizations to establish effective routes to foster the adoption of Grid and Cloud Computing, which are often summarized under the term Service Oriented Infrastructures (SOI)1, and to stimulate research to help realize innovative business models using these technologies (for more details about the BEinGRID project see chapter 2). In terms of technology innovation, the BEinGRID team has analysed and classified the technical issues involved and the generic solutions developed by and for the Business Experiments (BE). The technological advancements and innovations considered in the BEinGRID project have been categorized in thematic areas that were witnessed by BEs either significant challenges that inhibit widespread commercialization and adoption of the technology or where the anticipated impact of the innovation is particularly high. The technological innovation results were provided in different output formats: common technical requirements, common capabilities, design patterns, reference implementations, integration and validation scenarios as well as best practice guidelines.

Computational design principles for bioactive dendrimer based constructs as antagonists of the TLR4-MD-2-LPS complex