XML’s Role as a Standard for Building Automation Patrick Gannon President & CEO Patrick Gannon President & CEO CABA XML Symposium Orlando, 9 February 2005

n Future Shock – “De-perimiterization” n Information Technology Trends n Service Oriented Architecture n Key Directions in XML & Web Services Standards n What your company can do Open Standards for Building Automation

Businesses have to deal with “Future Shock” daily!

Orderly business systems suffer…

De-perimiterization

A smooth sailing business environment is transformed…

Into a fight for your business survival

It’s enough to make you want to…

Information Technology Trends Technology & Business Economic Trends

Consumer Services Sales and Distribution Internet Based Delivery Business-to-BusinessProcesses The eBusiness Tidal Wave

Tidal Wave of Business Shift n Classic 1900’s Companies l Control Delivery l Control Services l Control Information l Have expensive acquisition processes and static relationships l Managed pricing and expectations n Information Age 21 st Century l Consumer is empowered by information access l Businesses win by being open l Businesses win by leveraging new mechanisms to drive their own costs down. l Dramatic lower overall cost potential, higher level of services.

Competitive Marketplace 1980s – 1990s Globalization Outsourced Manufacturing Multiple Distribution Channels Increased Partnering Declining Customer Loyalty Shorter Product Lifecycles Tighter Delivery Deadlines Product Sophistication Inventory Constraints Margin Erosion Internet Strategy New Markets New ways to reach customers/suppliers New systems required Structural Changes Increasing Competition Internet Business Models Source: BancBoston Robertson Stevens 1990s – 2000s 2000s – 2010s

 New business model requires highly customizable content  Enterprise support view requires self-maintaining components Business Partners ,000 Number of Business Interfaces / Services Complexity Customer Service View

Business Needs n Link traditional data exchanges (EDI or new XML) to business applications n Create business processes based on smart documents n Provide means for trading partners to quickly and easily locate re-usable components n Provide means for trading partners to customize methods to their own internal systems n Implement low cost server and client based solutions

Products XML driven Service Oriented Architecture Content Data Services XML Business Enterprise Information Services Layer Open Web Service Interface Business Systems Process Integration Customers

Future Vision for a Service Oriented Architecture

The Dawn of a New Era Built on Service Oriented Architecture

Vision of a Service-Oriented Architecture n A place where services are ubiquitous and organically integrated into the way we think and work. n A place where both users and providers of information interact through a common focus on services. n A world where technology is implemented within industry frameworks that operate on a global scale, enabled by open, interoperable standards.

A Common Web Service Framework Is Essential n To provide a sustainable foundation, n That will allow end-user companies to achieve the payback they require, n To invest widely in the service-oriented architecture.

Achieving Sustainable Business Benefits through a Open Standards for Web Services In this post-dot-com era, end user companies are expecting more liquidity and longevity of their assets. To achieve the ROI, Cost Reduction and Service Expansion benefits expected; the widespread deployment of standards-based Web services is essential.

Leading the Adoption of Web Services Standards

OASIS drives the development, convergence and adoption of e-business standards. of e-business standards. OASIS Mission

Current Members n Software vendors n User companies n Industry organisations n Governments n Universities and Research centres n Individuals n And co-operation with other standards bodies

OASIS Members Represent the Marketplace

International Representation

n OASIS is a member-led, international non-profit standards consortium concentrating on structured information and global e-business standards. n Over 650 Members of OASIS are: l Vendors, users, academics and governments l Organizations, individuals and industry groups n Best known for web services, e-business, security and document format standards. n Supports over 65 committees producing royalty- free and RAND standards in an open process.

Key Directions in OASIS Standards for Web Services

Approved OASIS Standards for Web Services n UDDI: Universal Description, Discovery & Integration l Defining a standard method for enterprises to dynamically discover and invoke Web services. n WSRP: Web Services for Remote Portlets l Standardizing the consumption of Web services in portal front ends. n WS-Reliability l Establishing a standard, interoperable way to guarantee message delivery to applications or Web services. n WSS: Web Services Security l Delivering a technical foundation for implementing integrity and confidentiality in higher-level Web services applications.

OASIS Web Services Infrastructure Work 14+ OASIS Technical Committees, including: n ASAP: Asynchronous Service Access Protocol Enabling the control of asynchronous or long-running Web services. n WSBPEL: Business Process Execution Language Enabling users to describe business process activities as Web services and define how they can be connected to accomplish specific tasks. n WS-CAF: Composite Application Framework Defining an open framework for supporting applications that contain multiple Web services used in combination. n WSDM: Distributed Management Defining Web services architecture to manage distributed resources.

OASIS Web Services Infrastructure Work n WS-Reliability: Reliable Messaging Establishing a standard, interoperable way to guarantee message delivery to applications or Web services. n WSN: Notification Advancing a pattern-based approach to allow Web services to disseminate information to one another. n WSRF: Resource Framework Defining an open framework for modeling and accessing stateful resources.

Standardizing Web Services Implementations For communities and across industries: n ebSOA: e-Business Service Oriented Architecture Advancing an e  Business architecture that builds on ebXML and other Web services technology. n FWSI: Framework for WS Implementation Defining implementation methods and common functional elements for broad, multi-platform, vendor-neutral implementations of Web services for e  Business applications. n oBIX: Open Building Information Xchange Enabling mechanical and electrical systems in buildings to communicate with enterprise applications. n Translation WS Automating the translation and localization process as a Web service.

Security for Web Services n Most e-business implementations require a traceable, auditable, bookable level of assurance when data is exchanged n IT operations demand “transactional” level of reliable functionality, whether it’s an economic event (booking a sale) or a pure information exchange n Dealings between divisions often need security and reliability as much as deals between companies

Security: function by function n Identity authentication n Encryption and protection against interception n Control of access and authority

Approved OASIS Standards for Security n AVDL: Application Vulnerability Standardizing the exchange of information on security vulnerabilities of applications exposed to networks. n SAML: Security Services Defining the exchange of authentication and authorization information to enable single sign-on. n SPML: Provisioning Services Providing an XML framework for managing the allocation of system resources within and between organizations. n XACML: Access Control Expressing and enforcing authorization policies for information access over the Internet. n XCBF: Common Biometric Format Providing a standard way to describe information that verifies identity based on human characteristics such as DNA, fingerprints, iris scans, and hand geometry. n WSS: Web Services Security Advancing a technical foundation for implementing integrity and confidentiality in higher-level Web services applications.

OASIS Security Work n DSS: Digital Signature Services Defining an XML interface to process digital signatures for Web services and other applications. n PKI: Public Key Infrastructure Advancing the use of digital certificates as a foundation for managing access to network resources and conducting electronic transactions. n WAS: Web Application Security Creating an open data format to describe Web application security vulnerabilities, providing guidance for initial threat and risk ratings.

What should your company be doing?

Reducing Risk Reducing Risk in new e-business technologies n Avoid reinventing the wheel l Stay current with emerging technologies n Influence industry direction l Ensure consideration of own needs n Realize impact of interoperability and network effects n Reduce development cost & time l save development on new technologies l share cost/time with other participants

What can your company do? n Participate l Understand the ground rules l Contribute actively Or… n Be a good observer In any case… n Make your needs known l Use cases, functions, platforms, IPR, priorities, availability, tooling n Be pragmatic: standardization is a voluntary process

Contact Information: Patrick Gannon President & CEO n n n

Patrick J. Gannon n OASIS – C.E.O., President, Board Director (2001+) n UNECE – Chair, Team of Specialists for Internet Enterprise Development ( ) n BEA Systems – Sr. VP Strategic Marketing n Netfish Technologies – VP Industry Standards n Open Buying on the Internet (OBI) – Executive Director n RosettaNet – First Project Leader (1998) n CommerceNet – VP Strategic Programs l XML eCommerce Evangelist ( ) l Interoperable Catalog WG ( ) n PIDX, CIAG, PVF Roundtable, CIMIS ( )