© 2012 IBM Corporation IBM Worklight Mobile Platform Technical Overview Jane Fung – WebSphere Client Technical Professional
© 2012 IBM Corporation2 Agenda Worklight Mobile Platform Technical Overview –Development –Deployment –Worklight Architecture and Features
© 2012 IBM Corporation3 Technical Session Agenda Technical Topics –OfflineMode (Jane) –EncryptedCache (Jane) –Localization(Jane) –SQL Adapter (Jane) –HTTP Adapter (Jane) –Authentication (Jane) –Skins (Gary) –Combining Native and Web(Gary) –PhoneGap plugin (Gary) –Push Notification (Gary) Download the samples from here connections.ibm.com/wikis/home?lang=en_US#/wiki/W86a2db3e6b95_4af7_8ed8_95f21e525958/page/G etting%20Started%20with%20Mobile connections.ibm.com/wikis/home?lang=en_US#/wiki/W86a2db3e6b95_4af7_8ed8_95f21e525958/page/G etting%20Started%20with%20Mobile
© 2012 IBM Corporation4 Mobile Device Management (MDM) Mobile Space In-House Mobile App Development Consumer Apps (public) Enterprise Apps (private) e.g. w3 app, bank advisor Distribution via Public App Store Distribution via Enterprise App Store Distribution via Mobile Device Management (MDM) Consumers’ Devices Mobile Enterprise Application Platform (MEAP) Write Once Run Anywhere - Build mobile applications Connect to, and run backend systems in support of mobile Manage mobile applications Reusable and Extensible Resources & Skills, Speed to Market & Agile to change Manage mobile devices and applications e.g over the air distribution Secure mobile devices e.g. wipe device, remote locking Access to enterprise resources e.g. vpn Employees’ Devices (with agents) Enterprise Related Devices (with/without agents) 3 rd Party Packaged Apps (e.g. Virus scan, Lotus Traveler, Word Editor)
© 2012 IBM Corporation5 Worklight At a Glance Apps Development –Build once. Run anywhere. –Android, iOS, Blackberry, Microsoft, iGoogle, Facebook app, Adobe AIR – Runtime Skins for different resolutions – Standards based language – Application Lifecycle Management – Centralized Build Process Security – Secured offline access – On device encryption of user data – Single sign-on mechanism – SSL encryption – Protection against reverse engineering vulnerabilities – Multi-factor authentication Enterprise Integration – Direct access to back-end systems – Leverage existing SOA services – Server-side caching Application Management – App distribution – App Version management – Remote disabling apps – Direct Update – Push Notification service management – Analytics and Usage report Middleware – WebSphere Application Server ND – Reliable, Highly Available and Scalable
© 2012 IBM Corporation6 Worklight Server Mobile middleware offering unified push notifications, version management, security and integration Worklight Console A web-based console for real-time analytics and control of your mobile apps and infrastructure Worklight Studio The most complete, extensible development environment with maximum code reuse and per-device optimization Worklight Overview Worklight Runtime Components Extensive libraries and client APIs that expose and interface with native device functionality and the Worklight Server ←
© 2012 IBM Corporation7 Supported Application Types Supports a variety of application types Mobile –iPhone –iPad –Android –BlackBerry –Windows Phone Desktop –Windows 7 and Vista –Adobe AIR –Mac OS Dashboard Web Applications –Facebook –iGoogle –Embedded web page –Mobile web app
© 2012 IBM Corporation8 What are Hybrid Apps? Can be uploaded to Apple AppStore, Google Play Store and other app stores –For iOS, it will have an IPA file extension –For Android, it will have an APK file extension Worklight Runtime Component –It’s a Common Framework –Performs things like: Check-in with Server on Startup Check for updates Authentication framework Push notification framework Sending Statistic Device API etc Worklight Runtime Component (Common Framework) Web Code <!DOCTYPE html PUBLIC <! - - created XYZ</title Device APIs Deployable App
© 2012 IBM Corporation9 Single Shared Codebase Common code placed in primary file Environment optimization code is maintained separately
© 2012 IBM Corporation10 Integrating Best-in-class Tools Worklight is compatible with prominent HTML5 libraries and tools:
© 2012 IBM Corporation11 Full access to device features Integration of 3 rd -party libraries, JavaScript and PhoneGap Plugins Application store ready A variety of application types: Downloadable apps Mobile Web apps Desktop gadgets and Web widgets Open Standard and Extensible – Unlimited Capabilities 11
© 2012 IBM Corporation12 Reuse Your Web Skill Natural uplift for a web developer Reuse web skills Access Device API using Javascript
© 2012 IBM Corporation13 How to Create an Mobile App in Worklight 1 Create a Worklight Project and App 2 Put in the app logic and css display 3 Build and deploy to Server 4 Preview the Mobile App
© 2012 IBM Corporation14 Step 1 – Creating Worklight Project and Application
© 2012 IBM Corporation15 Step 2 – Build your App Logic and display
© 2012 IBM Corporation16 Step 3 – Build and Deploy
© 2012 IBM Corporation17 Step 4 – Preview the App
© 2012 IBM Corporation18 Preparing the Deployment for Various Environment After you are satisfied with the common resources and want to create the environments 1 Define environments (e.g. iOS, Android, Blackberry, mobile web etc) 2 (Optional) Optimization and Skinning per environments 3 Build and Deploy 4 Validate on vendor’s emulators 5 Generate deployable packages
© 2012 IBM Corporation19 Step 1 – Define your Environments
© 2012 IBM Corporation20 Step 2 – (Optional) Optimization and Skinning per Environment
© 2012 IBM Corporation21 Step 3 – Build and Deploy Build all and Deploy Create the vendor project Deploy server portion of the app to Worklight server
© 2012 IBM Corporation22 Step 4 – Validate on Vendor’s Emulators
© 2012 IBM Corporation23 Step 5 – Generate Deployable Packages The generation the deployable packages can be incorporated as part of your build process.
© 2012 IBM Corporation Worklight Features and Architectures
© 2012 IBM Corporation25 Runtime Skinning – Use Cases Different Screen Sizes Different Input Method Different Screen Densities Support for HTML5 The runtime skin is selected the first time the application is started. SkinLoader.js –Encapsulate the rules and condition on how to determine which skins to use.
© 2012 IBM Corporation26 Example Mobile Skin on Android
© 2012 IBM Corporation27 Example Mobile Skin on iPAD
© 2012 IBM Corporation28 Connectivity Status and Heartbeat APIs for checking server connectivity –Connection failure exception handling –Heart beat with customizable interval –Device network information –Foreground event e.g. when the app is brought back into the foreground
© 2012 IBM Corporation29 Encrypted Offline Cache Worklight provides encrypted cache RSA Public Key Crytography Standard (PKCS) Based on PKCS #5 Password-based Cryptography Can operate in offline mode Usage examples: –Do a connectivity check when the app is bring to the foreground –Store offline data to populate views –Store offline invocation sequence and replay to server once connected –Offline authentication
© 2012 IBM Corporation30 Worklight Mobile Platform Firewall ENTERPRISEAPPLICATIONSENTERPRISEAPPLICATIONS Worklight Server Existing Integration Hub backend integration Worklight Runtime Component Web Code Device APIs HTTP Leverage Existing Backend Integration Database WebService REST JMS MQ File FTP SAP Seibel etc JDBC Web Service JMS JSON
© 2012 IBM Corporation31 Firewall Worklight Server Worklight Runtime Component Web Code Device APIs HTTP Adapters – Enable connectivity to Enterprise Applications JSON Account Adapter getAccountInfo() Adapters will get the most minimal set of useful information and filter into the JSON format such that the Mobile app can display. Save network bandwidth by using JSON format Consolidated entry point for all apps Loosely Coupled between apps and backend Convenience FirstName: Jane LastName: Fung AccountID: XML DB Result Set Backend Systems
© 2012 IBM Corporation32 Direct Update – On-device Logic Worklight Server Worklight Runtime Pre-packaged resources 1 Download 4 Update web resource App Store Web resources Cached resources 1.Web resources packaged with app to ensure initial offline availability 2.Web resources transferred to app's cache storage 3.App checks for updates On startup On foreground 4.Updated web resources downloaded when necessary 2 Transfe r 3 Check for updates
© 2012 IBM Corporation33 Firewall Worklight Server Worklight Runtime Component Web Code Device APIs HTTP Authentication Scenario JSON AccountAdapter getAccountInfo() XML DB Result Set Backend Systems Scenario: Users to login before getting to the account information My Account Authentication required & OnDemand 1.Present a login form to user (customizable) 2.User logins 3.Authentication framework validate using the login modules 4.If OK, realm is validated. Users is validated for this realm in this session. Call the backend.
© 2012 IBM Corporation34 Extensible with PhoneGap Plugin New features can be delivered through phonegap plugins
© 2012 IBM Corporation35 Receiving Notification on the Device Push Notification
© 2012 IBM Corporation36 Want Notification? How does Unified Push Notification work? Worklight server will store the device token mapped with the user and the apps. Support multiple devices per user and multiple apps per device If device token expires, the worklight server will ask the device to obtain another token from the vendor push service. Worklight Runtime Component Web Code Device APIs YesNo 2. Obtain the Device Token 1. Contact the Vendor Push Service Vendor Push Service (e.g. Apple APN, Google C2DM) Worklight Server 3. Send Token to Worklight Server UserDevice Token Applications ABC MyApp CCC MyApp IBMApp MyApp Event Source Adapter IBMApp Event Source Adapter Backend System 1 Backend System 2 5. Poll at an interval for notification update 6. Backend calls the adapter when they want to send notifications 7. Send the notification package with device token to push service 8. Send the notification to device
© 2012 IBM Corporation37 Worklight Unified Push Notification API Worklight Runtime Component Web Code Device APIs Worklight Server MyApp Event Source Adapter IBMApp Event Source Adapter Backend System 1 Backend System 2 Client API WL.Client.Push.registerEventSourceCallback() WL.Client.Push.subscribe() Server API WL.Server.getActiveUser() WL.Server.notifyAllDevices (user) Worklight provides unified push notification API and automatically performs most of the notification steps. Worklight console to manage of all the event source and push notifications
© 2012 IBM Corporation38 Application SecurityRobust Authentication and Authorization Streamline Corporate Security Process Protecting data on the device Authentication integration framework Data protection realms Using device id as 2 nd factor Shell as organizational sandbox Code obfuscation SSL with server identity verification Proven platform security Securing Mobile Apps Jailbreak and malware detection App authenticity testing Encrypted offline cache Offline authentication Secure challenge- response on startup Encrypted offline cache Offline authentication Secure challenge- response on startup Encrypted offline cache Offline authentication Jailbreak and malware detection Secure challenge- response on startup Encrypted offline cache Offline authentication App authenticity testing Compatible with Jailbreak and malware detection SW Secure challenge- response on startup Encrypted offline cache Offline authentication Enforcing Security Updates Remote disable Direct update
© 2012 IBM Corporation39 Dynamic Control of Deployed Apps Centralized control of all installed applications and adapters Remotely disable apps by device and version Customize user messages
© 2012 IBM Corporation40 Advanced Reporting Functionality
© 2012 IBM Corporation41 Centralized Build Worklight Build System Source Code Repository
© 2012 IBM Corporation42 Worklight Architecture Overview
© 2012 IBM Corporation Topology Example
© 2012 IBM Corporation44 Worklight Server – Topology Example Worklight Server IHS DR Site Primary Site DB DMZ Load Balancer Worklight Server DB Mobile Web
© 2012 IBM Corporation45