IT 620 Enterprise Systems Integration January 31, 2002

Hitachi Quadrasis Vendor Product Analysis Presented by: Rick Jimenez Annie Myers Jason Richards Steven Rosen Ray Vaughan

Costs Requirements to run a Quadrasis system: All three types of middleware runs on a number of different platforms: Microsoft windows NT 4.0, W2K Sun Solaris 7,8 Hewlett-Packard HP-UX 11.0 IBM AIX 4.3.2

Costs Licensing Fees: Per-user – N/A In-house developer – None Per Site – N/A Training – Depending on the complexity of the system Monthly On going All users will be included in training costs

Costs Candidates for training: All members of the staff from managers to data entry personnel (as needed)

Scalability Degree to which the software will support a wide variety of Enterprise-wide System Sizes ranging from small work groups to enterprise-wide solutions

Compatibility All of Hitachi’s middleware offerings are built on top of the TPBroker ORB. Among these offerings is the Hitachi Enterprise Application Manager (HiEM), a distributed application management tool that monitors and controls distributed CORBA applications

Compatibility TPBroker allows the gradual migration of applications towards enterprise-wide computing by preserving co-existence with legacy client and server applications using X/Open’s DTP model TPBroker supports the TX and XA interfaces. Through the use of X/Open XA interfaces, TPBroker provides connectivity to commercial databases such as Oracle® and Microsoft’s SQL Server™

Compatibility Quadrasis’s EASI (Enterprise Application Security Intergration) framework is the perfect complement to EAI solutions that address end- to-end integration requirements The EASI framework links together multiple security technologies and creates a common security infrastructure that avoids potentially less secure and costly custom-built security applications

Compatibility Quadrasis offers the first comprehensive suite of services that provide true Enterprise Application Security Integration and meets e- business security requirements across multiple industries, including: Financial services Telecommunications Manufacturing Pharmaceuticals and others

Compatibility

Documented Performance s/hss1.pdf corner/hitachi.html detail?id= _944&type=RES &src=FEATURE_SPOTLIGHT&x=

Functionality & Industry Focus Hitachi Security Service (HSS): CORBA Security Service Software for Enterprise-Wide Security Management: Administrators manage and maintain security across distributed application environment Enables developers to create secure applications

Functionality & Industry Focus Key Features: Single Point Administration Multiple Authentication Methods Password RSA Secure ID Flexible Access Control Auditing Legacy Integration OMG Standards

Components, Functions and Enhancements Manager and Administrative Console SDK (C++ and JAVA Libraries) Runtime Services

Business Functions Supported All sectors which need secure distributive environments

Enterprise Application Security Framework (EASI) Distributed enterprise protection from end-to-end Secure data access and resource management across enterprise E-business dictates access to intranet data B2B, B2C, & remote access Firewall inadequacies

Enterprise Application Security Framework (EASI) EASI Framework Links multiple security technologies Creates common security infrastructure

Enterprise Application Security Framework (EASI)

Key Features: End-to-End Security within enterprise Common Infrastructure Open Standards Integration of future solutions Increased deployment speed of best-of-breed security technologies Reduced management cost

Functions & Enhancements Meets wide range of e-business requirements across many industries : Financial Manufacturing Telecommunications Pharmaceuticals

Functions and Enhancements Pre-built security integration components: Wrapper Interceptors Bridges Context Managers

Hitachi TP Broker Messaging Middleware for Enterprise Application Integration Enterprise-class infrastructure for transaction management Foundation for EAI

Hitachi TP Broker Key Features: ORB based CORBA 2.1 environment Inter-ORB Protocol (IIOP) Interoperability with development tools and best-of-breed technologies Object Oriented foundation Load Balancing Connection management Reduce time-to-market

Hitachi TP Broker Components, Functions and Enhancements: TP Broker C++ TP Broker Java Distributed objects Smart Agent Architecture Single or Multi-thread Processing Connection management IDL Mapping Flexible Transaction Management Distributed OTS Dedicated Daemon Two –phase commit (Data Integrity) Tools for managing sessions and system process

Security Facilities Profile Manager Security Association Security Proxy Services

Tools Authentication Authorization Cryptography Accountability Security Administration

Aware Applications Security Aware Applications Uses security APIs to access and validate the security policies Security Unaware Applications Need interceptors that call security on behalf of the application Security Self-reliant Does not need or want framework security

Type of Solution Soup to nuts From APIs to total integration Standard API (EJB and (CORBA) Custom Security API (no standard available) Vendor Security API (proprietary)

Usability Factors Provides centralized and remote security control over a distributed environment, with an easy-to-use GUI console for definition and management of the companies security policy Access to operation, interfaces and objects can be authorized by groups or individuals

Mature System Other than a few s from the company staff, NO buzz in the industry If you were doing Security, would you brag about it? Would you want your customers to open up about it? Suspect this is limited to a very few companies with severe security issues

Product Classification This enterprise-class solution provides a means of controlling application/system access in a distributed environment. Complies with and exceeds the OMG CORBA security service specifications C++ & Java

Conclusion EAI with Security as the driving force All levels of the system Not a simple solution, but then again, not a simple problem to solve When you think about it, linking everything with EAI will connect hackers with your data in all new ways. Let the Link be the Security too !