Security Issues in a SOA-based Provenance System

Recent work has begun exploring the characterization and utilization of provenance in systems based on the Service Oriented Architecture (such as Web Services and Grid based environments). One of the salient issues related to provenance use within any given system is its security. In a broad sense, security requirements arise within any data archival and retrieval system, however provenance presents unique requirements of its own. These requirements are additionally dependent on the architectural and environmental context that a provenance system operates in. We seek to analyze the security considerations pertaining to a Service Oriented Architecture based provenance system. Towards this end, we describe the components of such a system and illustrate the security considerations that arise within it. Concurrently, we outline possible approaches to address them.

Describing Web Service Architectures through Design-by-Contract

Architectural description languages (ADLs) are used to specify a high-level, compositional view of a software application, specifying how a system is to be composed from coarse-grain components. ADLs usually come equipped with a formal dynamic semantics, facilitating specification and analysis of distributed and event-based systems. In this paper, we describe the TrustME, an ADL framework that provides both a process and a structural view of web service-based systems. We use Petri-net descriptions to give a dynamic view of business workflow for web service collaboration. We adapt the approach of Schmidt to define a form of Meyer's design-by-contract for configuring workflow architectures. This serves as a configuration-level means of constructing safer, more robust systems.

Implantação de tecnologia de monitoramento remoto para e-service: um estudo exploratório

The purpose of this study is to define measures to increase customer satisfaction and company competitiveness using a remote monitoring technology, in an exploratory study of Alpha Elevator Company (nick name chosen to the company by the actor of the dissertation). Regarding the competitive market, the service industry is striving to achieve productivity, following the example of the manufacturing industry. Nevertheless, these efforts are limited by the amount of hours worked per week, month or year, since the sector charges its services based on the hours spent working on the equipment of the client or based on the numbers of visits. This study is based in the overcoming of the traditional paradigm of selling number of hours by a system of selling results and performance. Employing a remote monitoring system, the elevators under the company service are monitored continually and defects are detected and transmitted to the customer care center, via phone line. The customers can access this data through the Internet and obtain information like availability rate of their elevators and call back response time rate, besides being able to buy products on the company¿s home page and to send feedback. The results were obtained by participating in conferences among experts of the company, in Japan and the United States. Through the analysis of the business environment and based on the bibliographic reference, a strategy was developed to implement e-service as a competitive differentiation.

Understanding e-government technology transfer: evidence from the transfer of a patent management system from EPO to INPI

Drawing upon Brazilian experience, this research explores some of the key issues to be addressed in using e-government technical cooperation designed to enhance service provision of Patent Offices in developing countries. While the development of software applications is often seen merely as a technical engineering exercise, localization and adaptation are context bounded matters that are characterized by many entanglements of human and non-humans. In this work, technical, legal and policy implications of technical cooperation are also discussed in a complex and dynamic implementation environment characterized by the influence of powerful hidden agendas associated with the arena of intellectual property (IP), which are shaped by recent technological, economic and social developments in our current knowledge-based economy. This research employs two different theoretical lenses to examine the same case, which consists of transfer of a Patent Management System (PMS) from the European Patent Office (EPO) to the Brazilian Patent Office that is locally named ‘Instituto Nacional da Propriedade Industrial’ (INPI). Fundamentally, we have opted for a multi-paper thesis comprising an introduction, three scientific articles and a concluding chapter that discusses and compares the insights obtained from each article. The first article is dedicated to present an extensive literature review on e-government and technology transfer. This review allowed the proposition on an integrative meta-model of e-government technology transfer, which is named E-government Transfer Model (ETM). Subsequently, in the second article, we present Actor-Network Theory (ANT) as a framework for understanding the processes of transferring e-government technologies from Patent Offices in developed countries to Patent Offices in developing countries. Overall, ANT is seen as having a potentially wide area of application and being a promising theoretical vehicle in IS research to carry out a social analysis of messy and heterogeneous processes that drive technical change. Drawing particularly on the works of Bruno Latour, Michel Callon and John Law, this work applies this theory to a longitudinal study of the management information systems supporting the Brazilian Patent Office restructuration plan that involved the implementation of a European Patent Management System in Brazil. Based upon the ANT elements, we follow the actors to identify and understand patterns of group formation associated with the technical cooperation between the Brazilian Patent Office (INPI) and the European Patent Office (EPO). Therefore, this research explores the intricate relationships and interactions between human and non-human actors in their attempts to construct various network alliances, thereby demonstrating that technologies embodies compromise. Finally, the third article applies ETM model as a heuristic frame to examine the same case previously studied from an ANT perspective. We have found evidence that ETM has strong heuristic qualities that can guide practitioners who are engaged in the transfer of e-government systems from developed to developing countries. The successful implementation of e-government projects in developing countries is important to stimulate economic growth and, as a result, we need to understand the processes through which such projects are being implemented and succeed. Here, we attempt to improve understanding on the development and stabilization of a complex social-technical system in the arena of intellectual property. Our preliminary findings suggest that e-government technology transfer is an inherently political process and that successful outcomes require continuous incremental actions and improvisations to address the ongoing issues as they emerge.

Transparent access to relational, autonomous and distributed databases using semantic web and service oriented technologies

With the constant grow of enterprises and the need to share information across departments and business areas becomes more critical, companies are turning to integration to provide a method for interconnecting heterogeneous, distributed and autonomous systems. Whether the sales application needs to interface with the inventory application, the procurement application connect to an auction site, it seems that any application can be made better by integrating it with other applications. Integration between applications can face several troublesome due the fact that applications may not have been designed and implemented having integration in mind. Regarding to integration issues, two tier software systems, composed by the database tier and by the “front-end” tier (interface), have shown some limitations. As a solution to overcome the two tier limitations, three tier systems were proposed in the literature. Thus, by adding a middle-tier (referred as middleware) between the database tier and the “front-end” tier (or simply referred application), three main benefits emerge. The first benefit is related with the fact that the division of software systems in three tiers enables increased integration capabilities with other systems. The second benefit is related with the fact that any modifications to the individual tiers may be carried out without necessarily affecting the other tiers and integrated systems and the third benefit, consequence of the others, is related with less maintenance tasks in software system and in all integrated systems. Concerning software development in three tiers, this dissertation focus on two emerging technologies, Semantic Web and Service Oriented Architecture, combined with middleware. These two technologies blended with middleware, which resulted in the development of Swoat framework (Service and Semantic Web Oriented ArchiTecture), lead to the following four synergic advantages: (1) allow the creation of loosely-coupled systems, decoupling the database from “front-end” tiers, therefore reducing maintenance; (2) the database schema is transparent to “front-end” tiers which are aware of the information model (or domain model) that describes what data is accessible; (3) integration with other heterogeneous systems is allowed by providing services provided by the middleware; (4) the service request by the “frontend” tier focus on ‘what’ data and not on ‘where’ and ‘how’ related issues, reducing this way the application development time by developers.

Applying DEMO to model and automate a process in a workflow system: a case study in a city hall

Organizations are Complex systems. A conceptual model of the enterprise is needed that is: coherent the distinguished aspect models constitute a logical and truly integral comprehensive all relevant issues are covered consistent the aspect models are free from contradictions or irregularities concise no superfluous matters are contained in it essential it shows only the essence of the enterprise, i.e., the model abstracts from all realization and implementation issues. The world is in great need for transparency about the operation of all the systems we daily work with, ranging from the domestic appliances to the big societal institutions. In this context the field of enterprise ontology has emerged with the aim to create models that help to understand the essence of the construction and operation of complete systems; more specifically, of enterprises. Enterprise ontology arises in the way to look through the distracting and confusing appearance of an enterprise right into its deep kernel. This, from the perspective of the system designer gives him the tools needed to design a successful system in a way that’s reflects the desires and needs of the workers of the enterprise. This project’s context is the use of DEMO (Design and Engineering Methodology for Organizations) for (re)designing or (re)engineering of an enterprise, namely a process of the construction department of a city hall, the lack of a well-founded theory about the construction and operation of this processes that was the motivation behind this work. The purpose of studying applying the DEMO theory and method was to optimize the process, automating it as much as possible, while reducing paper and time spent between tasks and provide a better service to the citizens.

De touch: extending service channels in an airport through touch technologies

This project aimed to create a communication and interaction channel between Madeira Airport and its passengers. We used the pre-existent touch enabled screens at the terminal since their potential was not being utilised to their full capacity. To achieve our goal, we have followed an agile strategy to create a testable prototype and take advantages of its results. The developed prototype is based on a plugin architecture turning it into a maintainable and highly customisable system. The collected usage data suggests that we have achieved the initially defined goals. There is no doubt that this new interaction channel is an improvement regarding the provided services and, supported by the usage data, there is an opportunity to explore additional developments to the channel.

A QUALITY MANAGEMENT SYSTEM FOR POSITIONING WITH GNSS TECHNOLOGY

This paper presents a proposal for a Quality Management System for a generic GNSS Surveying Company as an alternative for management and service quality improvements. As a result of the increased demand for GNSS measurements, a large number of new or restructured companies were established to operate in that market. Considering that GNSS surveying is a new process, some changes must be performed in order to accommodate the old surveying techniques and the old fashioned management to the new reality. This requires a new management model that must be based on a well-described procedure sequence aiming at the Total Management Quality for the company. The proposed Quality Management System was based on the requirements of the Quality System ISO 9000:2000, applied to the whole company, focusing on the productive process of GNSS surveying work.

THE SERVICE LIFE of IMPLANT-RETAINED OVERDENTURE ATTACHMENT SYSTEMS

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Quality of service control for rt-VBR connections in ATM networks

Nowadays, networks must support applications such as: distance learning, electronic commerce, access to Internet, Intranets and Extranets, voice over IP (Internet Protocol) and many others. These new applications, employing data, voice, and video traffic, require high bandwidth and Quality of Service (QoS). The ATM (Asynchronous Transfer Mode) technology, together with dynamic resource allocation methods, offers network connections that guarantee QoS parameters, such as minimum losses and delays. This paper presents a system that uses Network Management Functions together with dynamic resource allocation for provision of the end-to-end QoS parameters for rt-VBR connections.

Development of an open case-based decision-support system for diagnosis in oral pathology

Making diagnoses in oral pathology are often difficult and confusing in dental practice, especially for the lessexperienced dental student. One of the most promising areas in bioinformatics is computer-aided diagnosis, where a computer system is capable of imitating human reasoning ability and provides diagnoses with an accuracy approaching that of expert professionals. This type of system could be an alternative tool for assisting dental students to overcome the difficulties of the oral pathology learning process. This could allow students to define variables and information, important to improving the decision-making performance. However, no current open data management system has been integrated with an artificial intelligence system in a user-friendly environment. Such a system could also be used as an education tool to help students perform diagnoses. The aim of the present study was to develop and test an open case-based decisionsupport system.Methods: An open decision-support system based on Bayes' theorem connected to a relational database was developed using the C++ programming language. The software was tested in the computerisation of a surgical pathology service and in simulating the diagnosis of 43 known cases of oral bone disease. The simulation was performed after the system was initially filled with data from 401 cases of oral bone disease.Results: the system allowed the authors to construct and to manage a pathology database, and to simulate diagnoses using the variables from the database.Conclusion: Combining a relational database and an open decision-support system in the same user-friendly environment proved effective in simulating diagnoses based on information from an updated database.

PMUs optimized allocation using a tabu search algorithm for fault location in electric power distribution system

Phasor Measurement Units (PMUs) optimized allocation allows control, monitoring and accurate operation of electric power distribution systems, improving reliability and service quality. Good quality and considerable results are obtained for transmission systems using fault location techniques based on voltage measurements. Based on these techniques and performing PMUs optimized allocation it is possible to develop an electric power distribution system fault locator, which provides accurate results. The PMUs allocation problem presents combinatorial features related to devices number that can be allocated, and also probably places for allocation. Tabu search algorithm is the proposed technique to carry out PMUs allocation. This technique applied in a 141 buses real-life distribution urban feeder improved significantly the fault location results. © 2004 IEEE.

Chronological Monte Carlo-based assessment of distribution system reliability

Regulatory authorities in many countries, in order to maintain an acceptable balance between appropriate customer service qualities and costs, are introducing a performance-based regulation. These regulations impose penalties, and in some cases rewards, which introduce a component of financial risk to an electric power utility due to the uncertainty associated with preserving a specific level of system reliability. In Brazil, for instance, one of the reliability indices receiving special attention by the utilities is the Maximum Continuous Interruption Duration per customer (MCID). This paper describes a chronological Monte Carlo simulation approach to evaluate probability distributions of reliability indices, including the MCID, and the corresponding penalties. In order to get the desired efficiency, modern computational techniques are used for modeling (UML -Unified Modeling Language) as well as for programming (Object- Oriented Programming). Case studies on a simple distribution network and on real Brazilian distribution systems are presented and discussed. © Copyright KTH 2006.

Business development service centres in Italy. An empirical analysis of three regional experiences: Emilia Romagna, Lombardia y Veneto

Includes bibliography