Core language for web applications

Trabalho apresentado no âmbito do Mestrado em Engenharia Informática, como requisito parcial para obtenção do grau de Mestre em Engenharia Informática

Evaluating Code Duplication to Identify Rich Business Objects from Data Transfer Objects

Java Enterprise Applications (JEAs) are complex software systems written using multiple technologies. Moreover they are usually distributed systems and use a database to deal with persistence. A particular problem that appears in the design of these systems is the lack of a rich business model. In this paper we propose a technique to support the recovery of such rich business objects starting from anemic Data Transfer Objects (DTOs). Exposing the code duplications in the application's elements using the DTOs we suggest which business logic can be moved into the DTOs from the other classes.

Secure, dynamic and distributed access control stack for database applications

In database applications, access control security layers are mostly developed from tools provided by vendors of database management systems and deployed in the same servers containing the data to be protected. This solution conveys several drawbacks. Among them we emphasize: 1) if policies are complex, their enforcement can lead to performance decay of database servers; 2) when modifications in the established policies implies modifications in the business logic (usually deployed at the client-side), there is no other possibility than modify the business logic in advance and, finally, 3) malicious users can issue CRUD expressions systematically against the DBMS expecting to identify any security gap. In order to overcome these drawbacks, in this paper we propose an access control stack characterized by: most of the mechanisms are deployed at the client-side; whenever security policies evolve, the security mechanisms are automatically updated at runtime and, finally, client-side applications do not handle CRUD expressions directly. We also present an implementation of the proposed stack to prove its feasibility. This paper presents a new approach to enforce access control in database applications, this way expecting to contribute positively to the state of the art in the field.

Secure, dynamic and distributed access control stack for database applications

In database applications, access control security layers are mostly developed from tools provided by vendors of database management systems and deployed in the same servers containing the data to be protected. This solution conveys several drawbacks. Among them we emphasize: (1) if policies are complex, their enforcement can lead to performance decay of database servers; (2) when modifications in the established policies implies modifications in the business logic (usually deployed at the client-side), there is no other possibility than modify the business logic in advance and, finally, 3) malicious users can issue CRUD expressions systematically against the DBMS expecting to identify any security gap. In order to overcome these drawbacks, in this paper we propose an access control stack characterized by: most of the mechanisms are deployed at the client-side; whenever security policies evolve, the security mechanisms are automatically updated at runtime and, finally, client-side applications do not handle CRUD expressions directly. We also present an implementation of the proposed stack to prove its feasibility. This paper presents a new approach to enforce access control in database applications, this way expecting to contribute positively to the state of the art in the field.

Desenho e desenvolvimento de um Sistema de Informação em Oracle ADF

Um Sistema de Informação consiste num sistema capaz de armazenar, organizar e estruturar dados para ajudar a responder às necessidades das empresas, passando também pela capacidade de resposta às questões diárias das empresas. Assim, um Sistema de Informação pode ser definido como o software que ajuda a organizar e analisar dados, tendo como objetivo fornecer informação útil na altura certa para que possa ser utilizada para a tomada de decisões ou para uma gestão mais eficiente dos diversos fluxos que uma empresa pode conter. Neste sentido, o projeto apresentado centra-se no desenho e construção de um Sistema de Informação capaz de gerir o negócio de uma empresa do setor alimentar, mais propriamente do setor da transformação de carnes. Foi desenvolvido em Oracle ADF, de forma a aproveitar as vantagens inerentes à tecnologia e ao desenvolvimento web. Sendo uma tecnologia relativamente nova no mercado e dominada por poucos, a sua utilização neste momento pode tornar-se uma grande vantagem. Para o desenvolvimento da aplicação foi realizado o levantamento e análise de requisitos, foi criada a base de dados capaz de suportar o funcionamento do software e desenvolvido um sistema de login, capaz de gerir as sessões de cada utilizador. Foi implementado um processo de introdução e edição de informação, nomeadamente o registo de entradas, transformações e saídas. Contemplou-se também uma secção com dados mestre da empresa com a possibilidade de inserção, atualização e/ou remoção. Além disso, foram incorporadas validações em todos os processos que são usados pelos utilizadores, de modo a evitar a existência de dados incoerentes ou duplicados. Relativamente à lógica de negócio, foi embutida na aplicação de forma a permitir consultar a informação de forma clara, rápida e em diversos lugares, reduzindo tempo e tarefas ao colaborador/utilizador, visto que os processos foram automatizados. Com a implementação deste Sistema de Informação, a empresa pode usufruir de um sistema integrado capaz de gerir e controlar todo o seu processo produtivo, reduzindo custos e desperdícios, aumentando a produtividade e eficiência.

Sistema per gestionar les incidències d'un servei d'informàtica amb una arquitectura J2EE distribuïda en tres nivells

Tant en la meva etapa d’estudiant com en la meva curta vida laboral, he participat en el desenvolupament de varies aplicacions de gestió, tant d’escriptori com web, que majoritàriament sempre estaven dividides en tres capes però en dos nivells: la base de dades i l’aplicació, que contenia tant la lògica de negoci com la vista. Des de fa temps he tingut la curiositat i la necessitat d’intentar desenvolupar una aplicació de gestió que estigui distribuïda en tres o més nivells, separant el model de dades i la lògica de negoci de la vista. Crec que el treball de fi de carrera és idoni per desenvolupar-la. L’aplicació a desenvolupar anirà destinada a la gestió d’un servei d’informàtica, que s’encarrega de resoldre les incidències, inventariar i realitzar el manteniment preventiu dels equips informàtics d’una o de varies empreses. Es crearà una aplicació que contindrà el model de dades i la lògica de negoci. També es crearan dues aplicacions clients: una aplicació d’escriptori que donarà accés a totes i cadascuna de les funcionalitats del sistema i una aplicació web que oferirà un accés lleuger i des de qualsevol ubicació a les funcionalitats d’explotació del sistema. Per últim, també es crearà una altre aplicació web que s’encarregarà de generar els llistats sol•licitats per les dues aplicacions clients. D’aquesta manera també es centralitzarà la gestió dels llistats de les aplicacions del sistema. Per desenvolupar el sistema, s’utilitzarà la plataforma J2EE de Java, i es comptarà amb l’ajuda de marcs de treball com, per exemple, Oracle ADF o JasperReports. Com a conclusió general, puc assegurar que si es distribueixen les tres capes d’un sistema en tres nivells s’obtenen beneficis en l’administració, en el manteniment, en l’escalabilitat, en la flexibilitat i en la reutilització de les aplicacions. El principal inconvenient és el possible augment de lentitud en les aplicacions clients.

The business model ontology a proposition in a design science approach

The goal of this dissertation is to find and provide the basis for a managerial tool that allows a firm to easily express its business logic. The methodological basis for this work is design science, where the researcher builds an artifact to solve a specific problem. In this case the aim is to provide an ontology that makes it possible to explicit a firm's business model. In other words, the proposed artifact helps a firm to formally describe its value proposition, its customers, the relationship with them, the necessary intra- and inter-firm infrastructure and its profit model. Such an ontology is relevant because until now there is no model that expresses a company's global business logic from a pure business point of view. Previous models essentially take an organizational or process perspective or cover only parts of a firm's business logic. The four main pillars of the ontology, which are inspired by management science and enterprise- and processmodeling, are product, customer interface, infrastructure and finance. The ontology is validated by case studies, a panel of experts and managers. The dissertation also provides a software prototype to capture a company's business model in an information system. The last part of the thesis consists of a demonstration of the value of the ontology in business strategy and Information Systems (IS) alignment. Structure of this thesis: The dissertation is structured in nine parts: Chapter 1 presents the motivations of this research, the research methodology with which the goals shall be achieved and why this dissertation present a contribution to research. Chapter 2 investigates the origins, the term and the concept of business models. It defines what is meant by business models in this dissertation and how they are situated in the context of the firm. In addition this chapter outlines the possible uses of the business model concept. Chapter 3 gives an overview of the research done in the field of business models and enterprise ontologies. Chapter 4 introduces the major contribution of this dissertation: the business model ontology. In this part of the thesis the elements, attributes and relationships of the ontology are explained and described in detail. Chapter 5 presents a case study of the Montreux Jazz Festival which's business model was captured by applying the structure and concepts of the ontology. In fact, it gives an impression of how a business model description based on the ontology looks like. Chapter 6 shows an instantiation of the ontology into a prototype tool: the Business Model Modelling Language BM2L. This is an XML-based description language that allows to capture and describe the business model of a firm and has a large potential for further applications. Chapter 7 is about the evaluation of the business model ontology. The evaluation builds on literature review, a set of interviews with practitioners and case studies. Chapter 8 gives an outlook on possible future research and applications of the business model ontology. The main areas of interest are alignment of business and information technology IT/information systems IS and business model comparison. Finally, chapter 9 presents some conclusions.

Sistema per gestionar les incidències d'un servei d'informàtica amb una arquitectura J2EE distribuïda en tres nivells

Tant en la meva etapa d’estudiant com en la meva curta vida laboral, he participat en el desenvolupament de varies aplicacions de gestió, tant d’escriptori com web, que majoritàriament sempre estaven dividides en tres capes però en dos nivells: la base de dades i l’aplicació, que contenia tant la lògica de negoci com la vista. Des de fa temps he tingut la curiositat i la necessitat d’intentar desenvolupar una aplicació de gestió que estigui distribuïda en tres o més nivells, separant el model de dades i la lògica de negoci de la vista. Crec que el treball de fi de carrera és idoni per desenvolupar-la. L’aplicació a desenvolupar anirà destinada a la gestió d’un servei d’informàtica, que s’encarrega de resoldre les incidències, inventariar i realitzar el manteniment preventiu dels equips informàtics d’una o de varies empreses. Es crearà una aplicació que contindrà el model de dades i la lògica de negoci. També es crearan dues aplicacions clients: una aplicació d’escriptori que donarà accés a totes i cadascuna de les funcionalitats del sistema i una aplicació web que oferirà un accés lleuger i des de qualsevol ubicació a les funcionalitats d’explotació del sistema. Per últim, també es crearà una altre aplicació web que s’encarregarà de generar els llistats sol•licitats per les dues aplicacions clients. D’aquesta manera també es centralitzarà la gestió dels llistats de les aplicacions del sistema. Per desenvolupar el sistema, s’utilitzarà la plataforma J2EE de Java, i es comptarà amb l’ajuda de marcs de treball com, per exemple, Oracle ADF o JasperReports. Com a conclusió general, puc assegurar que si es distribueixen les tres capes d’un sistema en tres nivells s’obtenen beneficis en l’administració, en el manteniment, en l’escalabilitat, en la flexibilitat i en la reutilització de les aplicacions. El principal inconvenient és el possible augment de lentitud en les aplicacions clients.

Barriers of ESCO Service Business in Finland

The purpose of this study is to determine what are the key barriers hampering ESCO service business success in Finland. Research approach for this study is qualitative. Data was collected using Delphi method with two questionnaire rounds. Internet based tool was applied in carrying out questionnaires. Respondents of the questionnaires were ESCO service experts and researchers, and people working for ESCO service providers. Characteristics of ESCO service and ESCO project implementation are analyzed by using transaction costs theory of service business. In terms of ESCO service in Finland, uncertainty and asset specificity are relevant dimensions of TCE. General uncertainty in world’s economy hinders demand for ESCO service, and asset specificity of ESCO contracts induces slight problems for project financiers. Also bounded rationalism and opportunism are present in Finnish ESCO business. The most significant barriers of success of ESCO service in Finland are problems in legislative and political frameworks, and in customers’ investment processes. ESCO service providers should move more strongly towards service dominant business logic and improve understanding of customer needs. Political barriers are unsuitable procurement processes, unclear and unpredictable laws, and lack of compelling factors in subsidy system. Investment process hurdles are caused by customers’ lack of interest to change course of action. These are things in which ESCOs can have influence in.

Industrial solution business – transition from product to solution offering

The business logic in the manufacturing industry has changed in the 21st century. In the current industrial market, manufacturers are driven to provide more comprehensive offerings that go beyond the traditional product-orientation by providing capacity and availability for their customers. From incidental merchandise, services have become the core of manufacturers’ offerings with long-lasting service agreements over the life-cycles of their products. This change is driven both by the need of providers to grow and gain competitive advantage and by increased customer demand caused by customers’ outsourcing trends. The three key drivers for manufacturers’ service strategies are outsourcing trends, saturation of the installed base, and commoditization in product markets. Thus, manufacturers focus on providing industrial solutions which are delivered through relational processes with customers by using solution-driven business models. In the management of marketing activities, this can be regarded as closer customer relationships, service-dominant business logic, and collaboration in solving customers’ problems. However, there are few studies on comprehensive conceptualizations of a solution offering that include different elements and their roles, especially in the context of capital goods industry. Also the transition process needs further studies in a real life context. This study explores the transition process of an industrial company from product to solution business and, as an aid to managing the solution business, explicates the structure and management of an industrial solution offering. There are two themes, the industrial transition process and industrial solution offering. Regarding the industrial transition process, the aim is to understand the supplier view on the process and its execution and to determine the challenges related to the transition process. The industrial solution offering is discussed by its elements and characteristics, as well as management. Furthermore, a special type of build-own-operate-transfer business model is presented and its suitability in the industrial context analyzed. The study includes findings achieved by qualitative methods and from four case companies. Based on the results, it is tentatively suggested that in the industrial solution business, the transition from product to solution business is not a linear project but an evolving process that varies according to customer needs, which suggests that companies need to possess an ability to develop new business models for different customer needs. The industrial solution offering is dynamic as it evolves in collaboration according to the prevailing and latent customer needs, which suggest restructuring of the organization from a product-centric to a customer-centric one. Furthermore, based on the findings, the concept of industrial solutions is defined as an ongoing relational process to satisfy a customer’s particular business or operational requirements, and the concept of industrial solution offering as an entity comprising the customized goods, services, collaboration, and finance needed to fulfill the industrial solution. Finally, the study offers several managerial implications for industrial managers involved in the transition and management of the solution business and its offering.

Enhancing business-to-business relationship through value co-creation in traditional business sector: A case of building services engineering

This study discusses the significance of having service as a business logic, and more specifically, how value co-creation can be seen as an enhancing phenomenon to business-to-business relationships in traditional business sector. The purpose of this study is to investigate how value cocreation can enhance a business-to-business relationship in the heating, ventilation and airconditioning (HVAC) industry of building services engineering, through three sub-objectives: to identify what is value in the industry, how value is co-created in the industry, and what is value in a business-to-business relationship in the industry. The theoretical part this study consists of academic knowledge and literature related to the concepts of value, value co-creation and business-to-business relationships. In order to research value co-creation and business-to-business relationships in HVAC industry of building services engineering both, metaphorical and conceptual thinking of service dominant (S-D) logic and more managerial approach of service logic (SL), contributed to the theoretical part of the study. The empirical research conducted for this study is based on seven semi-structured interviews, which constituted the holistic, qualitative single case study method chosen for the research. The data was collected in September 2014 from CEOs, managers and owners representing six building services engineering firms. The interviews were analysed with the help of transcriptions, role-ordered matrices and thematic networks. The findings of this study indicate that value in HVAC industry consists of client expertise and supplier expertise. The result of applying client expertise and supplier expertise to the business-to- business relationship is characterized as value-in-reputation, when continuity, interaction, learning and rapport of the business relationship are ensured. As a result, value co-creation in the industry consists of mutual and separate elements, which the client and the supplier apply in the process, in addition to proactive interaction. The findings of this study, together with the final framework, enhance the understanding of the connection existing between value co-creation and business-to-business relationship. The findings suggest that value in the HVAC industry is characterized by both value-in-use and value-inreputation. Value-in-reputation enhances the formation of value-in-use, and consequently, value cocreation enhances the business-to-business relationship. This study thus contributes to the existing knowledge on the concepts of value and value co-creation in business-to-business relationships.

Benchmarking de uma aproximação de ticketing as a service (Taas)

Dissertação de natureza científica realizada para obtenção do grau de Mestre em Engenharia de Redes de Computadores e Multimédia

Text2Emotion: un gestor d'experiències SOA : extracció d'emocions per al suport a la gestió de relació amb clients

Customer Experience Management (CEM) se ha convertido en un factor clave para el éxito de las empresas. CEM gestiona todas las experiencias que un cliente tiene con un proveedor de servicios o productos. Es muy importante saber como se siente un cliente en cada contacto y entonces poder sugerir automáticamente la próxima tarea a realizar, simplificando tareas realizadas por personas. En este proyecto se desarrolla una solución para evaluar experiencias. Primero se crean servicios web que clasifican experiencias en estados emocionales dependiendo del nivel de satisfacción, interés, … Esto es realizado a través de minería de textos. Se procesa y clasifica información no estructurada (documentos de texto) que representan o describen las experiencias. Se utilizan métodos de aprendizaje supervisado. Esta parte es desarrollada con una arquitectura orientada a servicios (SOA) para asegurar el uso de estándares y que los servicios sean accesibles por cualquier aplicación. Estos servicios son desplegados en un servidor de aplicaciones. En la segunda parte se desarrolla dos aplicaciones basadas en casos reales. En esta fase Cloud computing es clave. Se utiliza una plataforma de desarrollo en línea para crear toda la aplicación incluyendo tablas, objetos, lógica de negocio e interfaces de usuario. Finalmente los servicios de clasificación son integrados a la plataforma asegurando que las experiencias son evaluadas y que las tareas de seguimiento son automáticamente creadas.

Anàlisi. Disseny i implementació d'una utilitat de Workflow aplicat a una web de gestió d'un centre de Reclamacions i Queixes mitjançant J2EE : una solució amb Struts i EJBs

El treball final de carrera està compost de l¿anàlisi, disseny i implementació d'una utilitat de Workflow que dóna servei a una web per gestionar les reclamacions i queixes d'una empresa. La part del Workflow s'ha pensat per ser totalment configurable a les particularitats d'un determinat aplicatiu i per donar servei a tantes aplicacions com faci falta simultàniament.L'anàlisi i el disseny s'han basat en la metodologia UML dins el paradigma de l'Orientació a Objectes juntament amb diversos patrons de disseny com pot ser el MVC que ha permès separar completament la lògica de negoci (Workflow) de la presentació (Web). Per les 2 parts: Workflow i web s¿ha fet ús d'una arquitectura distribuïda.