An open standard for the exchange of information in the Australian timber sector

The purpose of this paper is to describe business-to-business (B2B) communication and the characteristics of an open standard for electronic communication within the Australian timber and wood products industry. Current issues, future goals and strategies for using business-to-business communication will be considered. From the perspective of the Timber industry sector, this study is important because supply chain efficiency is a key component in an organisation's strategy to gain a competitive advantage in the marketplace. Strong improvement in supply chain performance is possible with improved business-to-business communication which is used both for building trust and providing real time marketing data. Traditional methods such as electronic data interchange (EDI) used to facilitate B2B communication have a number of disadvantages, such as high implementation and running costs and a rigid and inflexible messaging standard. Information and communications technologies (ICT) have supported the emergence of web-based EDI which maintains the advantages of the traditional paradigm while negating the disadvantages. This has been further extended by the advent of the Semantic web which rests on the fundamental idea that web resources should be annotated with semantic markup that captures information about their meaning and facilitates meaningful machine-to-machine communication. This paper provides an ontology using OWL (Web Ontology Language) for the Australian Timber sector that can be used in conjunction with semantic web services to provide effective and cheap B2B communications

On Secure Implementation of an IHE XUA-Based Protocol for Authenticating Healthcare Professionals

The importance of the Electronic Health Record (EHR) has been addressed in recent years by governments and institutions.Many large scale projects have been funded with the aim to allow healthcare professionals to consult patients data. Properties such as confidentiality, authentication and authorization are the key for the success for these projects. The Integrating the Healthcare Enterprise (IHE) initiative promotes the coordinated use of established standards for authenticated and secure EHR exchanges among clinics and hospitals. In particular, the IHE integration profile named XUA permits to attest user identities by relying on SAML assertions, i.e. XML documents containing authentication statements. In this paper, we provide a formal model for the secure issuance of such an assertion. We first specify the scenario using the process calculus COWS and then analyse it using the model checker CMC. Our analysis reveals a potential flaw in the XUA profile when using a SAML assertion in an unprotected network. We then suggest a solution for this flaw, and model check and implement this solution to show that it is secure and feasible

Contextualized B2B Registries

Abstract. Service discovery is a fundamental concept underpinning the move towards dynamic service-oriented business partnerships. The business process for integrating service discovery and underlying registry technologies into business relationships, procurement and project management functions has not been examined and hence existing Web Service registries lack capabilities required by business today. In this paper we present a novel contextualized B2B registry that supports dynamic registration and discovery of resources within management contexts to ensure that the search space is constrained to the scope of authorized and legitimate resources only. We describe how the registry has been deployed in three case studies from important economic sectors (aerospace, automotive, pharmaceutical) showing how contextualized discovery can support distributed product development processes

Open Government Architecture: The evolution of De Jure Standards, Consortium Standards, and Open Source Software

Conducted for the Treasury Board of Québec, this study seeks to present recent contributions to the evolution, within an enterprise architecture context, of de jure and de facto standards by various actors in the milieu, industrial consortia, and international standardization committees active in open source software. In order to be able to achieve its goals of delivering services to citizens and society, the Government of Québec must integrate its computer systems to create a service oriented open architecture. Following in the footsteps of various other governments and the European Community, such an integration will require elaboration of an interoperability framework, i.e. a structured set of de jure standards, de facto standards, specifications, and policies allowing computer systems to interoperate. Thus, we recommend that the Government of Québec: Pursue its endeavours to elaborate an interoperability framework for its computer systems that is based on open de jure and de facto standards. This framework should not only reflect the criteria enumerated in this study and apply to internal computer systems, but it should also extend to Web services supplied to organizations outside of the government. This framework should explicitly prioritize open source de jure and de facto standards and include a policy covering free software. The interoperability framework should initially draw on that of the state of Massachusetts. In the medium term, is should be as comprehensive as that of the British government. Integrate this interoperability framework into its enterprise architecture. Publish this interoperability framework with its enterprise architecture. Specify this interoperability framework in its calls for tenders. Elaborate a policy of compliance with this framework for all new applications.

Asynchronous instant messaging using service-oriented architectures (aimsoa), 2005

Instant messengers suffer from poor scalability, flexibility, security, and interoperability. This study attempts to solve these problems using the strengths of Service-Oriented Architectures. The key components to achieve these improvements include several Java related technologies such as JAX-RPC, JAXM, SOAP, WSDL, J2EE servlets and Enterprise Java Beans. SOAP provides a universal messaging protocol that heterogeneous parties can understand. JAX-RPC provides synchronous SOAP messaging, as well as a loosely coupled design that allows for a very flexible distributed architecture. JAXM provides asynchronous SOAP messaging. When used together, applications can implement robust instant messaging functionality. Registration, login, and other instant messaging configuration operations can be fulfilled through the use of JAX-RPC while JAXM can be used to fulfill requirements such as send and receive. Servlets and Enterprise Java Beans augment the benefits of Service-Oriented Architectures with the former being extremely scalable, portable, and modular. AIMSOA encapsulates these components to provide an instant messaging architecture solution that will augment the weaknesses of current instant messaging architectures by providing a solution for better scalability, flexibility, and interoperability

ebXML: Global Standard for Electronic Business

Business-to-business integration is transforming the market and has already begun to increase the efficiency of those companies involved. EDI (Electronic Document Interchange) became very popular during 1970’s; Today EDI transactions total about $750 billion year. EDI is being used by 90% of Fortune 1000 companies. It has indeed become a dominant technology for the largest companies, on the other hand it has been adopted by less than 5% of small and medium sized companies in general and, of these, many use EDI only because their larger customers require it. The reason behind is that EDI is a difficult, complex technology to implement usually comes with high transactional cost. Hence it is suitable for large companies with large volume of transactions. EDI uses fixed, rigid and compressed data format that is difficult to decipher and debug. The data exchange in EDI happens in proprietary VAN (value added network) which is an expensive solution. EbXML (Electronic Business XML) envisioned creating a single global electronic marketplace where enterprises of any size and in any geographic location can meet and conduct business with each other through exchange of xml based messages. The XML (the Extensible Markup Language) has rapidly imposed itself as a popular format for exchange of information on the web. The very nature of XML is that it is a structured document format, in that it represents not only the information to be exchanged, but the metadata encapsulating its meaning. XML technology has potential to solve the existing problems in current EDI systems. Using ebXML, companies have a standard method to exchange business messages, conduct trading relationships, communicate data in common terms and define and register business processes. EbXML is designed to provide a simple way for companies to find one another and conduct business over the Web, allowing those with different platforms to speak a common language. EbXML targets to provide low cost solutions for small and medium enterprises as well as complex solution for large enterprises. This project attempts to implement a prototype of ebXML messaging service as per ebXML specification to obtain the insight look of feasibility and suitability of XML solution for EDI