Network Shared Services

Shared Services –Network Authentication and Authorization Services –Exchange Network Discovery Service –Universal Description and Discovery Integration –Quality Assurance Services –Data Transformation –XML Key Management Services –XML Gateway –Service Monitoring and Management

Shared Tools / Components Node Clients –Windsor –CSC –Node Client 2007 Node Implementations –Next Generation Node Internal Services: Archiving, Logging, Routing,… Data Publishing/Reporting Model –Windsor –CGI/AMS Secure Document Exchange Models Network Software Developer Kit XKMS / XML Encryption/Signature Developer Libraries

CDX / Network Security Architecture

UDDI Operating Model UDDI.EPA.GOV Production Staging UDDI.EPACDXNODE.NET Web interface Web or SOAP interface Approval Authority WSWG/Review Committee Unapproved Content Management Actions Administrator Publishers Owners Replication Approved Content SOAP interface Network Nodes Web Services Partners, Users READ-ONLY Web interface Discover SOAP interface Governance Point Staging/Development EnvironmentProduction Environment Service Consumers Discover/Bind

Quality Assurance Services XML schema validation and business rule validation for data submissions XML Schema Validation –Uses Microsoft.NET Reader –Users can self-test prospective submissions using Test Environment Schematron –Business Rule/Pattern Validation Support synchronous and asynchronous access based on file size dl

XKMS XML Key Management Services A W3C standard, XKMS 2.0 is deployed in NAAS A central key depository with web service interface to PKI PKI solution for public key and certificate management A very simple access model Foundation for Secure Web Services (XML Signature, XML Encryption, XKMS).

XML Gateway XML gateway protects web service assets –Filter incoming Messages –Deliver only trusted and legitimate messages Evaluating use as State Proxy for data transmissions

Service Monitoring

Questions / Comments ?