http://www.whitehouse.gov/omb/egov/documents/FEA_CRM_v23_Final_Oct_2007.pdf Technical Reference Model, Federal Enterprise ArchitectureFEA TRMThe Technical Reference Model (TRM) provides a foundation to categorize the standards, specifications, and technologies to support the construction, delivery, and exchange of business and application components (Service Components) that may be used and leveraged in a Component-Based or Service-Oriented Architecture. The TRM unifies existing Agency TRMs and E-Gov guidance by providing a foundation to advance the re-use of technology and component services from a government-wide perspective. Access Channels 1 Collaboration Communications[Provide for the] electronic exchange of messages, documents, or other information Access Channels 1.1 E-mail Electronic mail Email (Electronic mail) is the exchange of computer generated and stored messages by telecommunication. An email can be created manually via messaging applications or dynamically/programmatically such as automated response systems.Access Channels 1.2FaxFacsimileA fax is the digitized image of text and/or pictures, represented as a series of dots (bit map). Faxes are sent and received through telecommunication channels such as telephone or Internet.Access Channels 1.3KioskKioskA kiosk is a small physical structure (often including a computer and a display screen) that displays information for people walking by. Kiosks are common in public buildings. Kiosks are also used at trade shows and professional conferences. Define the forms of electronic exchange of messages, documents, or other information. Electronic communication provides efficiency through expedited time-of-delivery.Access Channels 2Other Electronic ChannelsOther various mediums of information exchange and interface between a user and an applicationAccess Channels 2.1System to System System to System involves at least two computers that exchange data or interact with each other independent of human intervention or participation.Access Channels 2.2Web ServiceServices that are made available from a business's web server for webusers or other web-connected programsWeb services (sometimes called application services) are services (usually including some combination of programming and data, but possibly including human resources as well) that are made available from a business's web server for webusers or other web-connected programs.Access Channels 2.3Uniform Resource Locator (URL)The global address of documents and other resources on the World Wide Web URL is the global address of documents and other resources on the World Wide Web. The first part of the address indicates what protocol touse (i.e. “http://”), and the second part specifies the IP address or the domain namewhere the resource is located (i.e. “www.firstgov.gov”).Define the other various mediums of information exchange and interface between a user and an application.Access Channels 3Web BrowserServe as your front end to the World Wide Web on the InternetAccess Channels 3.1Internet ExplorerMicrosoft Internet Explorer (MSIE)Microsoft Internet Explorer (MSIE) is the most widely used WorldWide Web browser.Access Channels 3.2Communicator Netscape CommunicatorNetscape is the second most widely used World Wide Web browser. Define the program that serves as your front end to the World Wide Web on the Internet. In order to view a site, you type its address (URL) into the browser’s location field.Access Channels 4Wireless / PDA Transmission via the airwavesAccess Channels 4.1Palm Operating System Palm Personal Digital Assistant (PDA). Palm is the leading Personal Digital Assistant (PDA). Version 5 of Palm OS provides multitasking and other capabilities that will provide an improved platform for E-Gov solutions.Access Channels 4.2BlackberryBlackberry email-enabled wireless device The leading email-enabled wireless device with wide use in several agencies.Access Channels 4.3Pocket PC Phone EditionPocket PC Phone Edition Microsoft’s environment for Internet-capable cellular phones.Access Channels 4.4Pocket PC 2000Pocket PC 2000Microsoft’s environment for PDA level devices.Access Channels 4.5Symbian EpocSymbian Epoc A leading environment for web capable cellular phones. Technology that uses transmission via the airwaves. A Personal Digital Assistant (PDA) is a handheld computer that serves as an organizer for personal information. It generally includes at least a name and address database, to-do list and note taker.Delivery Channels 1ExtranetA private network that uses the Internet protocol and the public telecommunication system to securely share part of a business’s information or operations with suppliers, vendors, partners, customers, or other businessesDelivery Channels 1.1None specified An extranet is a private network that uses the Internet protocol and the public telecommunication system to securely share part of a business’s information or operations with suppliers, vendors, partners, customers, or other businesses. An extranet can be viewed as part of a company’s intranet that is extended to users outside the company.Delivery Channels 2InternetA worldwide system of computer networks in which users at any one computer can, if they have permission, get information from any other computerDelivery Channels 2.1None specifiedThe internet is a worldwide system of computer networks in which users at any one computer can, if they have permission, get information from any other computer.Delivery Channels 3IntranetA private network that is contained within an enterpriseDelivery Channels 3.1None specified An intranet is a private network that is contained within an enterprise. It may consist of many inter-linked local area networks and is used to share company information and resources among employees.Delivery Channels 4Peer to Peer (P2P)Applications that operate outside the DNS system and have significant or total autonomy from central servers, that take advantage of resources available on the InternetDelivery Channels 4.1None specified Peer to Peer is a class of applications, that operate outside the DNS system and have significant or total autonomy from central servers, that take advantage of resources available on the Internet.Delivery Channels 5Virtual Private Network (VPN) A Private Data Network that makes use of the public telecommunication infrastructure, maintaining privacy through the use of a tunneling protocol and security proceduresDelivery Channels 5.1None specified A Private Data Network that makes use of the public telecommunication infrastructure, maintaining privacy through the use of a tunneling protocol and security procedures.Service Requirements 1Authentication / Single Sign-on (SSO)Provide users with the ability to log-in one time, getting authenticated access to all their applications and resourcesService Requirements 1.1None specified Refers a method that provides users with the ability to log-in one time, getting authenticated access to all their applications and resources.Service Requirements 2HostingManage and provide availability to a web site or applicationService Requirements 2.1Internal (within agency)Host a web site or application within an agency The hosting of a web site or application within an agency. The agency is responsible for the maintenance, support and availability of the web site or application.Service Requirements 2.2External (ISP/ASP/FirstGov) Outsource a web site or application with a managed service providerThe outsourcing of a web site or application with amanaged service provider. An Internet Service Provider (ISP) provides telecommunications circuits, server collocation, and web site and application hosting. An Application Service Provider (ASP) offers software-based services for high end business applications and specific needs applications such as payroll, sales force automation, and human resources. FirstGov is the official managed service provider for the federal government. [Editorial note: FirstGov is now USA.gov]Refers to the service provider who manages and provides availability to a web site or application, often bound to a Service Level Agreement (SLA). The Hosting entity generally maintains a server farm with network support, power backup, fault tolerance, load-balancing, and storage backup.Service Requirements 3Legislative / ComplianceThe pre-requisites that an application, system or service must have mandated by congress or governing bodiesService Requirements 3.1Section 508 [Make] electronic and information technology accessible to people with disabilities, including employees and members of the publi.Section 508 requires that federal agencies' electronic and information technology is accessible to people with disabilities, including employees and members of the public.Service Requirements 3.2Web Content Accessibility[Implement] hardware and software that helps people who are physically or visually impairedWeb Content Accessibility refers to hardware and software that helps people who are physically or visually impaired.Service Requirements 3.3Security Protect data against unauthorized access, use,disclosure, disruption, modification or destructionPolicy and procedures that protect data against unauthorized access, use, disclosure, disruption, modification or destruction.Service Requirements 3.4Privacy - P3PAllow users' web browsers to automatically understand web sites' privacy practicesA specification that will allow users' web browsers to automatically understand web sites' privacy practices. Privacy policies will be embedded in the code of a web site. Browsers will read the policy, and then, automatically provide certain information to specific sites based on the preferences set by the users. For instance, if the site is an e-commerce site, the browser will automatically provide shipping info. If the site is requesting demographic info, then the browser will know to provide it anonymously. The P3P specification was developed by the W3C P3P Syntax, Harmonization, and Protocol Working Groups, including W3C Member organizations and experts in the field of web privacy. P3P is based on W3C specifications that have already been established, including HTTP, XML and Resource Description Framework (RDF). Privacy is policy that deals with the degree to which an individual can determine which personal information is to be shared with whom and for what purpose.Service Requirements 3.5Privacy - Liberty Alliance Deliver and support a federated network identity solution for the Internet that enables single signon for consumers as well as business users in an open, federated way The Liberty Alliance Project is an alliance formed to deliver and support a federated network identity solution for the Internet that enables single signon for consumers as well as business users in an open, federated way. A federated network identity model will enable every business or user to manage their own data, and ensure that the use of critical personal information is managed and distributed by the appropriate parties, rather than a central authority. Privacy is policy that deals with the degree to which an individual can determine which personal information is to be shared with whom and for what purpose. Defines the pre-requisites that an application, system or service must have mandated by congress or governing bodies.Service Transport 1Service TransportDefine the format and structure of data and information that is either accessed from a directory or exchanged through communicationsService Transport 1.1Transport Control Protocol (TCP) Provide transport functions, which ensures that the total amount of bytes sent is received correctly at the destinationTCP provides transport functions, which ensures that the total amount of bytes sent is received correctly at the destination.Service Transport 1.2Internet Protocol (IP)Accept packets from TCP, adds a header and deliver a "datagram" to the data link layer protocol This is the protocol of the Internet and has become the global standard for communications. IP accepts packets from TCP, adds its own header and delivers a "datagram" to the data link layer protocol. It may also break the packet into fragments to support the maximum transmission unit (MTU) of the network.Service Transport 1.3Hyper Text Transfer Protocol (HTTP)Connect to servers on the World Wide Web The communications protocol used to connect to servers on the World Wide Web. Its primary function is to establish a connection with a web server and transmit HTML pages to the client browser.Service Transport 1.4Hyper Text Transfer Protocol Secure (HTTPS)Access a secure web server The protocol for accessing a secure web server. Using HTTPS in the URL instead of HTTP directs the message to a secure port number rather than the default web port number of 80. The session is then managed by a security protocol.Service Transport 1.5Wireless Application Protocol (WAP)Empower users of digital mobile phones, pagers, personal digital assistants and other wireless devices to securely access and interact with Internet/intranet/extranet content, applications, and services The Wireless Application Protocol (WAP) is an open, global specification that empowers users of digital mobile phones, pagers, personal digital assistants and other wireless devices to securely access and interact with Internet/intranet/extranet content, applications, and services.Service Transport 1.6File Transfer Protocol (FTP)Transfer files over a TCP/IP network A protocol used to transfer files over a TCP/IP network (Internet, UNIX, etc.). For example, after developing the HTML pages for a Web site on a local machine, they are typically uploaded to the Web server using FTP.Service Transport 1.7IP Security (IPSEC)Secure IP packet exchange A set of protocols used to secure IP packet exchange. Tunnel and Transport are the two (2) modes supported by IPSEC. IPSEC uses certificates and Public Keys to authenticate and validate the sender and receiver. These consist of the protocols that define the format and structure of data and information that is either accessed from a directory or exchanged through communications.Service Transport 2Supporting Network ServicesDefine the format and structure of data and information that is either accessed from a directory or exchanged through communicationsService Transport 2.1Internet Message Access Protocol / Post Office Protocol (IMAP / POP3) Allow a client to access and manipulate electronic mail messages on a server and/or permit manipulation of remote message folders, called "mailboxes", in a way that is functionally equivalent to local mailboxes. IMAP allows a client to access and manipulate electronic mail messages on a server. IMAP permits manipulation of remote message folders, called "mailboxes", in a way that is functionally equivalent to local mailboxes. IMAP also provides the capability for an offline client to resynchronize with the server. POP3 is the most commonly used protocol for retrieving email from a mail host.Service Transport 2.2Multipurpose Internet Mail Extensions (MIME)Allow non-U.S. American Standard Code for Information Interchange (ASCII) textual messages, non textual messages, multipart message bodies, and non US ASCII information in message headers MIME extends the format of Internet mail to allow non-U.S. American Standard Code for Information Interchange (ASCII) textual messages, non textual messages, multipart message bodies, and non USASCII information in message headers. MIME support allows compliant email clients and servers to accurately communicate embedded information to internal and external users.Service Transport 2.3Simple Mail Transfer Protocol (SMTP)Facilitate transfer of electronic mail messages SMTP facilitates transfer of electronic mail messages. It specifies how two systems are to interact, and the messages format used to control the transfer of electronic mail.Service Transport 2.4Extended Simple Mail Transfer Protocol (ESMTP)Allow new service extensions to SMTP to be defined and registered with Internet Assigned Numbers Authority (IANA) ESMTP allows new service extensions to SMTP to be defined and registered with Internet Assigned Numbers Authority (IANA).Service Transport 2.5T.120Provide support for real-time, multipoint data communications T.120, an International Telecommunications Union (ITU) standard, contains a series of communication and application protocols and services that provide support for real-time, multipoint data communications. These multipoint facilities are important building blocks for collaborative applications, including desktop data conferencing, and multi-user applications.Service Transport 2.6H.323Address Video (Audiovisual) communication on Local Area Networks H.323, an International Telecommunications Union (ITU) standard, addresses Video (Audiovisual) communication on Local Area Networks, including Corporate Intranets and packet switched networks generally.Service Transport 2.7Simple Network Management Protocol (SNMP)Eliminate security vulnerabilities SNMP eliminates several of thesecurity vulnerabilities in earlier version.Service Transport 2.8Lightweight Directory Access Protocol (LDAP)An information model and a protocol for querying and manipulating it LDAP is a subset of X.500 designed to run directly over the TCP/IP stack. LDAP is, like X.500, both an information model and a protocol for querying and manipulating it. LDAPv3 is an update developed in the IETF(Internet Engineering Task Force), which address the limitations found during deployment of the previous version of LDAP.Service Transport 2.9Directory Services (X.500)Discover and identify resources on a network and make them accessible to users and applications This is a network service that discovers and identifies resources on a network and makes them accessible to users and applications. The resources include users, email addresses, computers, mapped drives, shared folders, and peripherals such as printers and PDA docking stations. Users and computers access these resources without the needing to know how or where the resources are connected.Service Transport 2.10Dynamic Host Configuration Protocol (DHCP)Assign dynamic IP addresses to devices on a network A protocol for assigning dynamic I Paddresses to devices on a network. A device can receive a different IP address for every connection. Dynamic addressing provides reduced network administration over deploying and connecting user and peripheral devices.Service Transport 2.11Domain Name System (DNS)Translate domain names to their respective IP addresses A protocol used for translating domain names (i.e.www.feapmo.gov) to their respective IP addresses. DNS is collectively a network of devices which store query results. As one DNS server or device cannot provide the translated IP address, it queries other DNS devices. This process is invisible to the user.Service Transport 2.12Border Gateway Protocol (BGP)Exchange routing information between routers on a network, enabling more efficient routing of data Refers to a routing protocol used to exchang erouting information between routers on a network, enabling more efficient routing of data .BGP is part of RFC 1771.Service Transport 2.13X.400Email message addressing and transporting An ISO and ITU standard for email message addressing and transporting. X.400 supports Ethernet, X.25, TCP/IP and dialup transport methods. These consist of the protocols that define the format and structure of data and information that is either accessed from a directory or exchanged through communications.Database / Storage 1DatabaseA collection of information organized in such a way that a computer program can quickly select desired pieces of dataDatabase / Storage 1.1Database 2 (DB2)Provide an open database environment that runs on a wide variety of computing platforms DB2 is a family of relational database products offered by IBM. DB2 provides an open database environment that runs on a wide variety of computingplatforms.Database / Storage 1.2Oracle Support the SQL languageRelational database product; the first to support the SQL language.Database / Storage 1.3SQL ServerManage data with a server product developed by Microsoft Data management server product developed by Microsoft.Database / Storage 1.4SybaseManage and synchronize data with server products developed by Sybase Data management and synchronization server products developed by Sybase. Refers to a collection of information organized in such a way that a computer program can quickly select desired pieces of data. A database management system (DBMS) is a software application providing management, administration, performance, and analysis tools for databases.Database / Storage 2StorageProvide shared storage access across a networkDatabase / Storage 2.1Network Attached Storage (NAS)A NAS device is a server that is dedicated to nothing more than file sharing A NAS device is a server that is dedicated to nothing more than file sharing.Database / Storage 2.2Storage Area Network (SAN)A machine that contains nothing but a disk or disks for storing data A SAN is a high-speed sub network of shared storag edevices. A storage device is a machine that contains nothing but a disk or disks for storing data. Storage devices are designed to provide shared storage access across a network. These devices provide extended storage capabilities to the network with reduced costs compared to traditional file servers.Delivery Servers 1Application ServersA separate computer (application server) performs the business logic, although some part may still be handled by the user's machineDelivery Servers 1.1None specified In a three-tier environment, a separate computer (application server) performs the business logic, although some part may still be handled by the user's machine. After the Web exploded in the mid 1990s, application servers became Web based.Delivery Servers 2Media ServersProvide optimized management of media-based files such as audio and video streams and digital imagesDelivery Servers 2.2Windows Media ServicesDeliver streaming media and dynamic digital content over intranet and internet delivery channels Part of Windows Server (2000 and .Net) optimized to deliver streaming media and dynamic digital content over intranet and internet delivery channels.Delivery Servers 2.1Real AudioStreaming media server solution designed to supply desktop and mobile content Streaming media server solution designed to supply desktop and mobile content. Provide optimized management of media-based files such as audio and video streams and digital images.Delivery Servers 3Portal ServersProvide integration and single-source corporate informationDelivery Servers 3.1None specified Portals represent focus points for interaction, providing integration and single-source corporate information.Delivery Servers 4Web ServersA computer that provides World Wide Web services on the InternetDelivery Servers 4.2Internet Information ServerWeb server software from Microsoft that runs under Windows NT, Windows 2000, and Microsoft.Net Web server software from Microsoft that runs under Windows NT, Windows 2000, and Microsoft.Net. It supports Netscape's SSL security protocol and turns an NT based PC into a web site. Microsoft's Web browser, Internet Explorer, is also included.Delivery Servers 4.1ApacheA widely used public domain, UNIX based web server A widely used public domain, UNIX based web server from the Apache Group (www.apache.org). It is based on, and is a plug-in replacement for, NCSA's HTTP server Version 1.3. The name came from a body of existing code and many "patch files."A computer that provides World Wide Web services on the Internet. It includes the hardware, operating system, Web server software, TCP/IP protocols and the Web site content (Web pages). If the Web server is used internally and not by the public, it may be known as an “intranet server.”Hardware / Infrastructure 1Embedded Technology DevicesVarious devices and parts that make up a Server or Computer as well as devices that perform specific functionality outside of a Server or ComputerHardware / Infrastructure 1.1Random Access Memory (RAM)Access computer memory randomly A type of computer memory that can be accessed randomly; that is, any byte of memory can be accessed without touching the preceding bytes. RAM is the most common type of memory found in computers and other devices, such as printers.Hardware / Infrastructure 1.2Hard Disk DriveStore data on a computer Refers to the area of a computer that where data is stored.Hardware / Infrastructure 1.3MicroprocessorA CPU A silicon chip that contains a CPU. In the world of personal computers, the terms microprocessor and CPU are used interchangeably. At the heart of all personal computers and most workstations sits a microprocessor.Hardware / Infrastructure 1.4Redundant Array of Independent Disks (RAID)An assembly of disk drives that employ two or more drives in combination for fault tolerance and performance An assembly of disk drives that employ two or more drives in combination for fault tolerance and performance. RAID disk drives are used frequently on servers but aren't generally necessary for personal computers. RAID is generally configured as mirrored or striped. Mirrored RAID (Level 1) provides a failover drive. Striped RAID (Levels 0, 3, and 5) write data across multiple disk drives so that a single disk failure can be recovered from the data on the remaining drives. There are three (3) types of RAID systems: failure resistant disk systems (that protect against data loss due to disk failure), failure tolerant disk systems (that protect against loss of data access due to failure of any single component), and disaster tolerant disk systems (that consist of two or more independent zones, either of which provides access to stored data). [T]his refers to the various devices and parts that make up a Server or Computer as well as devices that perform specific functionality outside of a Server or Computer.Hardware / Infrastructure 2Local Area Network (LAN)A network that interconnects devices over a geographically small areaHardware / Infrastructure 2.1EthernetUse a bus or star topology and support data transfer rates of 10 Mbps, 100 Mbps (Fast Ethernet) or 1 Gbps (gigabit Ethernet) Local Area Network (LAN) architecture that uses a bus or star topology an dsupports data transfer rates of 10 Mbps, 100 Mbps (Fast Ethernet) or 1 Gbps (gigabi tEthernet). The Ethernet specification served as the basis for the IEEE 802.3 standard ,which specifies the physical and lower software layers. Ethernet uses the CSMA/CD access method to handle simultaneous demands. It is one of the most widely implemented LAN standards.Hardware / Infrastructure 2.2Token RingA type of computer network in which all the computers are arranged (schematically) in a circle A type of computer network in which all the computers are arranged (schematically) in a circle. A token, which is a special bit pattern, travels around the circle. To send a message, a computer catches the token, attaches a message to it, and then lets it continue to travel around the network.Hardware / Infrastructure 2.3Virtual LAN (VLAN)A network of computers that behave as if they are connected to the same wire even though they may actually be physically located on different segments of a LAN Short for virtual LAN, a network of computers that behave as if they are connected to the same wire even though they may actually be physically located on different segments of a LAN. VLANs are configured through software rather than hardware, which make them extremely flexible. One of the biggest advantages of VLANs is that when a computer is physically moved to another location, it can stay on the same VLAN without any hardware reconfiguration. A network that interconnects devices over a geographically small area, typically in one building or a part of a building. The most popular LAN type is Ethernet. LANs allow the sharing of resources and the exchange of both video and data.Hardware / Infrastructure 3Network Devices / StandardsA group of stations (computers, telephones, or other devices) connected by communications facilities for exchanging informationHardware / Infrastructure 3.1HubConnect segments of a LAN A common connection point for devices in a network. Hubs are commonly used to connect segments of a LAN. A hub contains multiple ports. When a packet arrives at one port, it is copied to the other ports so that all segments of the LAN can see all packets.Hardware / Infrastructure 3.2SwitchFilter and forward packets between LAN segments In networks, a device that filters and forwards packets between LAN segments. Switches operate at the data link layer (layer 2) and sometimes the network layer (layer3) of the OSI Reference Model and therefore support any packet protocol. LANs that use switches to join segments are called switched LANs or, in the case of Ethernet networks, switched Ethernet LANs.Hardware / Infrastructure 3.3RouterFind the best route between any two networks, even if there are several networks to traverse A device or setup that finds the best route between any two networks, even if there are several networks to traverse. Like bridges, remote sites can be connected using routers over dedicated or switched lines to create WANs.Hardware / Infrastructure 3.4Network Interface Card (NIC)Connect a computer to a network Often abbreviated as NIC, an expansion board you insert into a computer so the computer can be connected to a network. Most NICs are designed for a particular type of network, protocol, and media, although some can serve multiple networks.Hardware / Infrastructure 3.5TransceiversTransmit and receive analog or digital signals Short for transmitter receiver, a device that both transmits and receives analog or digital signals. The term is used most frequently to describe the Component in local area networks (LANs) that actually applies signals onto the network wire and detects signals passing through the wire. For many LANs, the transceiver is built into the network interface card (NIC). Some types of networks, however, require an external transceiver.Hardware / Infrastructure 3.6GatewayPoints of entrance to and exit from a communications network Gateways are points of entrance to and exit from a communications network. Viewed as a physical entity, a gateway is that node that translates between two otherwise incompatible networks or network segments.Hardware / Infrastructure 3.7Integrated Services Digital Network (ISDN)Allow data to betransmitted simultaneously across the world using end to end connectivity via digital phone connections ISDN is a system of digital phone connections which has been available for over a decade. This system allows data to betransmitted simultaneously across the world using end to end digital connectivity.Hardware / Infrastructure 3.8T1/T3Deliver 1.544 of 45 Mbps of voice or data T1 service delivers 1.544 Mbps. Typically channel into 24 DS0s, each capable of carrying a single voice conversation or data stream. The European T1 or E1 transmission rate is 2.048 Mbps. A T3 circuit communicates at 45 Mbps, or 28 T1 lines.Hardware / Infrastructure 3.9Digital Subscriber Line (DSL)All types of digital subscriber lines Refers collectively to all types of digital subscriber lines, the two main categories being ADSL and SDSL. Two other types of DSL technologies are High data rate DSL (HDSL) and Very high DSL (VDSL).Hardware / Infrastructure 3.10Firewall Prevent unauthorized access to or from a private networkThis refers to the network device that is designed to prevent unauthorized access to or from a private network. Firewalls can be implemented in both hardware and software, or a combination of both. Firewalls are frequently used to prevent unauthorized Internet users from accessing private networks connected to the Internet, especially intranets. There are several types of firewall techniques and firewalls may implement one or more simultaneously. Packet filtering inspects inbound and outbound packets, validating against defined business rules. Application gateways apply security rules against applications. Circuit level gateways apply security rules against physical connection attempts to and from the network. Proxy servers mask the internal requestor by inspecting and augmenting the packet header. Four common architectures of firewalls include the packet filtering router, the screened host firewall system, the dual homed host firewall, and the screened subnet firewall (with a DMZ), which is one of the most secure implementations.A group of stations (computers, telephones, or other devices) connected by communications facilities for exchanging information. Connection can be permanent, via cable, or temporary, through telephone or other communications links. The transmission medium can be physical (i.e. fiber optic cable) or wireless (i.e. satellite).Hardware / Infrastructure 4PeripheralsComputer devices that are not part of the essential computerHardware / Infrastructure 4.1PrinterPrint text or illustrations on paper Devices that print text or illustrations on paper. There are many different types of printers.Hardware / Infrastructure 4.2ScannerRead text or illustrations printed on paper and translate the information into a form the computer can use Device that can read text or illustrations printed on paper and translate the information into a form the computer can use. A scanner works by digitizing an image dividing it into a grid of boxes and representing each box with either a zero or a one, depending on whether the box is filled in. Computer devices that are not part of the essential computer (i.e. the memory and microprocessor). Peripheral devices can be external and internal.Hardware / Infrastructure 5Servers / ComputersVarious types of programmable machines which are capable of responding to sets of instructions and executing programsHardware / Infrastructure 5.1Enterprise ServerManage network resources and shared applications for multiple users A computer or device on a network that manages network resources and shared applications for multiple users.Hardware / Infrastructure 5.2MainframeSupport hundreds, or even thousands, of users simultaneously A very large computer capable of supporting hundreds, or even thousands, of users simultaneously. Mainframes support simultaneous programs.This refers to the various types of programmable machines which are capable of responding to sets of instructions and executing programs.Hardware / Infrastructure 6Video ConferencingCommunication across long distances with video and audio contact that may also include graphics and data exchangeHardware / Infrastructure 6.1BridgeConnect three or more conference sites so that they can simultaneously pass data, voice, or video A bridge connects three or more conference sites so that they can simultaneously pass data, voice, or video. Video conferencing bridges are often called MCUs (multipoint conferencing units).Hardware / Infrastructure 6.2CODECConvert analog video signals from a video camera to digital signals for transmission over digital circuits, and then convert the digital signals back to analog signals for display A video codec converts analog video signals from a video camera to digitalsignals for transmission over digital circuits, and then converts the digital signals back toanalog signals for display.Hardware / Infrastructure 6.3ReceiverEenable a particular videoconference signal to be separated from all others being received by an earth station, and convert the signal format into a format for video, voice or data An electronic device which enables a particular videoconference signal to be separated from all others being received by an earth station, and converts the signal format into a format for video, voice or data. Communication across long distances with video and audio contact that may also include graphics and data exchange. Digital video transmission systems typically consist of camera, codec (coder-decoder), network access equipment, network, and audio system.Hardware / Infrastructure 7Wide Area Network (WAN)A data network typically extending a LAN outside a building or beyond a campusHardware / Infrastructure 7.1Frame RelayConnect devices on a Wide Area Network (WAN) A packet switching protocol for connecting devices on a Wide Area Network (WAN). Frame Relay networks in the U.S. support data transfer rates at T1 (1.544 Mbps) and T3 (45 Mbps) speeds.Hardware / Infrastructure 7.2Asynchronous Transfer Mode (ATM)Packet switching and transmission integrating multiple data types (voice, video, and data) A high bandwidth, high speed, controlled delay, fixed size packet switching and transmission system integrating multiple data types (voice, video, and data). Uses fixed size packets also known as "cells" (ATM is often referred to as "cell relay"). A data network typically extending a LAN outside a building or beyond a campus. Typically created by using bridges or routers to connect geographically separated LANs. WANs include commercial or educational dial-up networks such as CompuServe, InterNet and BITNET.Software Engineering 1Integrated Development Environment (IDE)Hardware, software and supporting services that facilitate the development of software applications and systemsSoftware Engineering 1.1Web Sphere StudioBuild Java, web, and web services applications Integrated Java (J2EE) environment for programmers building Java, web, and web services applications – and the successor to IBM Visual Age.Software Engineering 1.2Visual StudioProvide the tools for analyzing and modeling all aspects of an application before a single component is built so that developers can design efficient architectures and reduce time to marketA complete development system providing the tools for analyzing and modeling all aspects of an application before a single component is built so that developers can design efficient architectures and reduce time to market. Developers can choose the programming language they know best and the language that is best suited to the solution, including Microsoft Visual Basic, Visual C++, Visual J++, and Visual FoxPro. Visual Studio is used to build scalable, data driven Web sites and applications.Software Engineering 1.3Visual Studio.NetRapidly build and integrate XML web services, Microsoft Windows–based applications, and web solutionsA comprehensive tool set for rapidly building and integrating XML web services, Microsoft Windows–based applications, and web solutions. This is the successor to Visual Studio.This consists of the hardware, software and supporting services that facilitate the development of software applications and systems.Software Engineering 2ModelingRepresent entities, data, business logic, and capabilities for aiding in software engineeringSoftware Engineering 2.1Unified Modeling Language (UML)Specify and visualize complex software, especially large, object-oriented projects A general-purpose notational language for specifying and visualizing complex software, especially large, object-oriented projects.Software Engineering 2.2Case ManagementProvide a development environment for programming teams Computer Aided Software Engineering (CASE) software that provides a development environment for programming teams. CASE systems offer tools to automate, manage and simplify the development process. The process of representing entities, data, business logic, and capabilities for aiding in software engineering.Software Engineering 3Software Configuration ManagementAll aspects of software development from design to delivery specifically focused on the control of all work products and artifacts generated during the development processSoftware Engineering 3.1Version ManagementTrack and control versions of files Refers to tracking and controlling versions of files. Version Management includes capabilities such as labeling, branching, merging, version content comparisons, and security and permission management across version controlled projects.Software Engineering 3.2Defect TrackingIdentify, assign, and manage discovered defects within an application, product or solution Refers to the identification, assignment, and management of discovered defects within an application, product or solution. Defect tracking tools provide searchable defect data to identify urgent and related defects or bugs. The architecture should be built to facilitate the pushing of software patches across the enterprise.Software Engineering 3.3Issue ManagementManage business, technical, and infrastructure issues throughout the entire lifecycle of a project Refers to the management of business, technical, and infrastructure issues throughout the entire lifecycle of a project.Software Engineering 3.4Task ManagementTransform requirements, testing, and issues assignments into prioritized tasks Requirements, testing, and issues assignments are transformed into prioritized tasks. Task Management tools provide automation features for managing, delivering, assigning, reminding, and collaborating task management and execution.Software Engineering 3.5Change ManagementManage application code and content changes across the software development lifecycles Refers to the management of application code and content changes across the software development lifecycles.Software Engineering 3.6Deployment ManagementDeliver software to remote networked desktops, servers, and mobile devices across an enterprise Refers to the capability of software delivery to remotene tworked desktops, servers, and mobile devices across an enterprise. Deploymen tautomation tools provide centralized and accelerated delivery of applications to users vi apush technologies, eliminating the need for manual installation and configuration.Software Engineering 3.7Requirements Management and TraceabilityDiscover,capture, store and disseminate information Consists of information discovery,capture, storage and dissemination. Requirements management reduces software development costs and associated risks through documenting, measuring, and analyzing deviations to project requirements. Traceability refers to tracking requirements artifacts to their source, and changes in requirements to include the impact analysis of the change. Requirements traceability is an integral component in quality software implementation and the management of document succession. Applicable to all aspects of software development from design to delivery specifically focused on the control of all work products and artifacts generated during the development process. Several solutions on the market provide the integration of the software configuration management functions.Software Engineering 4Test ManagementAll testing activities and resultsSoftware Engineering 4.1Functional TestingTest any requirements that can be traced directly to use cases (or business functions), business rules, and design This type of test focuses on any requirements that can be traceddirectly to use cases (or business functions), business rules, and design.Software Engineering 4.2Business Cycle TestingEmulate activities performed over a period of time that is relevant to the application under testRefers to the emulation of activities performed over a period of time that is relevant to the application under test.Software Engineering 4.3Usability Testing (508 Testing)Test to ensure that the application navigation, functionality, and GUI allow a user to effectively and efficiently do their work in a way that they are satisfied with the application Refers to a test to ensure that the application navigation, functionality, and GUI allow a user to effectively and efficiently do their work in a way that they are satisfied with the application.Software Engineering 4.4Performance ProfilingMeasure and evaluate response times and transaction ratesRefers to a performance test that measures and evaluates response times and transaction rates.Software Engineering 4.5Load/Stress/Volume TestingMeasure and evaluate how a system performs and functions under varying workloads, large amounts of data and/or resource utilization Refers to tests that measure and evaluate how a system performs and functions under varying workloads, large amounts of data and/or resource utilization.Software Engineering 4.6Security and Access Control TestingTest the technical, administrative and physical security controls that have been designed into the system architecture in order to provide confidentiality, integrity and availability Focuses on the technical, administrative and physical security controls that have been designed into the system architecture in order to provide confidentiality, integrity and availability.Software Engineering 4.7Reliability TestingVerify that failover methods are invoked properly and the system recovers properlyRefers to the verification that failover methods are invoked properly and the system recovers properly.Software Engineering 4.8Configuration TestingTest to ensure that the application or system canhandle all hardware and software variables and requirements that have been defined Refers to a test to ensure that the application or system can handle all hardware and software variables and requirements that have been defined.Software Engineering 4.9Installation TestingVerify that the software installation process works properly in different environments and among varying conditions Refers to the verification that the software installation process works properly in different environments and among varying conditions. The consolidation of all testing activities and results. Test Management activities include test planning, designing (test cases), execution, reporting, code coverage, and heuristic and harness development.Supporting Platforms 1Platform DependentProgramming languages and methods for developing software on a specific operating system or platformSupporting Platforms 1.1Windows 2000Look like Windows 95/98 but add considerably more features,dialogs and options Also known as "Win2K" and "W2K," it is a major upgrade to Windows NT 4. Launched in February 2000, Windows 2000 comes in one client and three server versions. Windows 2000 looks like Windows 95/98, but adds considerably more features,dialogs and options.Supporting Platforms 1.2Windows.NetSupport a wide range of languages but primarily tied to the Microsoft Windows operating system and Intel hardware Microsoft’s .Net and Sun’s J2EE are the two dominant distribute dcomputing architecture frameworks. .Net supports a wide range of languages but is primarily tied to the Microsoft Windows operating system and Intel hardware.Supporting Platforms 1.3Mac OS XUNIX based operating system based on industry standards Mac OS X is Apple's UNIX based operating system based on industry standards. Launched in March 2001, OS X has advanced built-in security functions and complete interoperability with both Internet standards and Microsoft products. Consists of the programming languages and methods for developing software on a specific operating system or platform.Supporting Platforms 2Platform IndependentProgramming languages that are able to execute and run on any platform or operating systemSupporting Platforms 2.1Java 2 Platform Enterprise Edition (J2EE)Provide portability of a single language (Java) over multiple operating systems and hardware platforms Sun’s J2EE and Microsoft’s .Net are th etwo dominant distributed computing architecture frameworks. J2EE provides portability o fa single language (Java) over multiple operating systems and hardware platforms.Supporting Platforms 2.2LinuxAn open source operating system that runs on multiple hardware platforms Linux is an open source operating system that runs on multiple hardware platforms. With the ability to run on many platforms, including the PC and Macintosh, Linux has become an alternative to proprietary systems. Defines the programming languages that are able to execute and run on any platform or operating system.Supporting Platforms 3Wireless / MobileRadio transmission via the airwavesSupporting Platforms 3.1Java 2 Platform, Micro Edition (J2ME)A relatively portable environment for those using Java Sun’s Java environment for devices. It promises a relatively portable environment for those using Java for other tiers of the architecture.Radio transmission via the airwaves. Various communications techniques are used to provide wireless transmission including infrared line of sight, cellular, microwave, satellite, packet radio and spread spectrum.Business Logic 1Platform DependentProgramming languages and methods for developing software on a specific operating system or platformBusiness Logic 1.1Visual BasicDevelop Windows applications A version of the BASIC programming language from Microsoft specialized for developing Windows applications.Business Logic 1.2Visual Basic .Net (VB.Net)Develop Windows applications within Microsoft’s.NET environment A version of the BASIC programming language from Microsoft specialized for developing Windows applications that is used within Microsoft’s .NET environment.Business Logic 1.3C-Sharp (C#)Object-oriented programming based on C++ with elements from Visual Basic and Java An object-oriented programming language from Microsoft that is basedon C++ with elements from Visual Basic and Java.Business Logic 1.4Scripting in a subset of Visual Basic for use on the web for both client processing within a web page and server side processing in Active Server Pages (ASPs)A scripting language from Microsoft. A subset of Visual Basic, VBScript iswidely used on the web for both client processing within a web page and server sideprocessing in Active Server Pages (ASPs). Consists of the programming languages and methods for developing software on a specific operating system or platform.Business Logic 2Platform IndependentSoftware languages that are able to execute and run on any type of operating system or platformBusiness Logic 2.1Enterprise Java Beans (EJB)Provide a pure Java environment for developing and running distributed applications A software component in Sun's J2EE platform, which provides a pure Java environment for developing and running distributed applications.Business Logic 2.2C, C++An object-oriented version of C that has been widely used to develop enterprise and commercial applications C is a procedure programming language. C++ is an object-oriented version of C that has been widely used to develop enterprise and commercial applications.Business Logic 2.3JavaScriptRun a scripting language within a web browser A scripting language that runs within a web browser.Business Logic 2.4Java Servlet (JSR 53)Reuse web components in portals Java Servlets provide reusable web components that can be incorporated into portals.Business Logic 2.5Java Portlet API (JSR 168)Enable interoperability between Portlets and Portals Java Portlet API enables interoperability between Portlets and Portals by defining APIs that address the areas of aggregation, personalization, presentation and security.Business Logic 2.6Web Services for Remote Portals (WSRP)Allow the plug and play of visual, user facing web services with portals or other intermediary web applications WSRP defines an XML and web services standard that will allow the plug and play of visual, user facing web services with portals or other intermediary web applications. Consists of all software languages that are able to execute and run on any type of operating system or platform.Data Interchange 1Data ExchangeSend data over a communications network and define data communicated from one application to anotherData Interchange 1.1XMIEnable easy interchange of metadata between modeling tools (based on the OMG UML) and metadata repositories (OMG MOF based) in distributed heterogeneous environments Enables easy interchange of metadata between modeling tools (based on theOMG UML) and metadata repositories (OMG MOF based) in distributed heterogeneous environments. XMI integrates three key industry standards: XML, UML, and MOF. The integration of these three standards into XMI marries the best of OMG and W3C metadata and modeling technologies, allowing developers of distributed systems to share object models and other metadata over the Internet.Data Interchange 1.2XQueryProcess and evaluate XML data A language used for processing and evaluating XML data. The XQuery language provides results of expressions allowing the use of evaluations to the implementation of XQuery.Data Interchange 1.3Simple Object Access Protocol (SOAP)Provide HTTP/XML based remote procedure call capabilities for XML Web Services SOAP provides HTTP/XML based remote procedure call capabilities for XML Web Services.Data Interchange 1.4Electronic Business using XML (eb-XML)Enable enterprises to conduct business over the Internet: exchanging business messages, conducting trading relationships, communicating data in common terms and defining and registering business processes A modular suite of specifications that enables enterprises to conduct business over the Internet: exchanging business messages, conducting trading relationships, communicating data in common terms and defining and registering business processes.Data Interchange 1.5Resource Description Framework (RDF) Provide a lightweight ontology system to support the exchange of knowledge on the webRDF provides a lightweight ontology system to support the exchange of knowledge on the web. It integrates a variety of web-based metadata activities including sitemaps, content ratings, stream channel definitions, search engine data collection (web crawling), digital library collections, and distributed authoring, using XML as interchange syntax. RDF is the foundation for the Semantic Web envisioned by Tim Berners-Lee – an extension of the current web in which information is given well-defined meaning, to better enable computers and people to work in cooperation.Data Interchange 1.6Web Services User Interface (WSUI)Use a simple schema for describing a WSUI "component" that can be used in a portal to call backend SOAP and XML services WSUI uses a simple schema for describing a WSUI "component" that can be used in a portal to call backend SOAP and XML services. WSUI uses XSLT style sheets to construct user facing views to enable users to interact with the services. Data Exchange is concerned with the sending of data over a communications network and the definition of data communicated from one application to another. Data Exchange provides the communications common denominator between disparate systems.Data Management 1Database ConnectivityConnect an application to a data store or data baseData Management 1.1Java Database Connectivity (JDBC)Provide access to virtually any tabular data source from the Java programming language JDBC provides access to virtually any tabular data source from the Java programming language. It provides cross-DBMS connectivity to a wide range of SQL databases, and other tabular data sources, such as spreadsheets or flat files.Data Management 1.2Open Database Connectivity (ODBC)Provide a common language for Windows applications to access databases on a network A database programming interface from Microsoft that provides a common language for Windows applications to access databases on a network. ODBC is made up of the function calls programmers write into their applications and the ODBC drivers themselves.Data Management 1.3Active Data Objects (ADO)Provide an interface to OLE DB A programming interface from Microsoft that is designed as "the" Microsoft standard for data access. First used with Internet Information Server, ADO is a set of COM objects that provides an interface to OLE DB. The three primary objects are Connection, Command and Record set.Data Management 1.4Active Data Objects .Net (ADO.Net)Provide an extensive set of classes that facilitate efficient access to data from a large variety of sources, enable sophisticated manipulation and sorting of data ADO.Net is the data access component of th eMicrosoft’s .NET Framework. It provides an extensive set of classes that facilitat eefficient access to data from a large variety of sources, enable sophisticated manipulatio nand sorting of data.Data Management 1.5Object Linking and Embedding/Database (OLE/DB)Provide connections to different data sources A Microsoft low-level API designed to provide connections to different data sources. OLE/DB allowed connectivity to ODBC-based SQL providers/sources as well as other formats such as text and comma delimited.Data Management 1.6Data Access Objects (DAO)Access Microsoft Jet engine data sources such as Microsoft Office based applications DAO is the Microsoft library for accessing Microsoft Jet engine data sources such as Microsoft Office based applications. DAO is replaced by ADO and ADO.Net.Data Management 1.7DB2 ConnectorAccess DB2 sources An IBM connectivity API to access DB2 sources. Defines the protocol or method in which an application connects to a data store or data base.Data Management 2Reporting and Analysis Tools, languages and protocols used to extract data from a data store and process it into useful informationData Management 2.1Extensible Business Reporting Language (XBRL)Use XML-based data tags to describe financial statements for both public and private companies Extensible Business Reporting Language (XBRL is an open specification which uses XML-based data tags to describe financial statements for both public and private companies.Data Management 2.2Java Online Analytical Processing (JOLAP) Support the creation and maintenance of OLAP data and metadata, in a vendor independent mannerJOLAP is a Java API for the J2EE environment that supports the creation and maintenance of OLAP data and metadata, in a vendor independent manner.Data Management 2.3Online Analytical Processing (OLAP)Allow the user to quickly analyze information that has been summarized into multidimensional views and hierarchies Decision support software that allows the user to quickly analyze information that has been summarized into multidimensional views an dhierarchies.Data Management 2.4XML for AnalysisUse the Simple Object Access Protocol (SOAP) to let Web browser based programs access backend data sources for data analysis XML for Analysis uses the Simple Object Access Protocol (SOAP) to let Web browser based programs access backend data sources for data analysis. The specification allows companies to build online analytical processing (OLAP) and data mining applications that work over the web.Consist of the tools, languages and protocols used to extract data from a data store and process it into useful information.Presentation / Interface 1Content RenderingSoftware and protocols used for transforming data for presentation in a graphical user interfacePresentation / Interface 1.1Dynamic HTML (DHTML)Allow web pages that are more animated and more responsive to user interaction than previous versions of HTML A collective term for a combination of new Hypertext Markup Language (HTML) tags and options, style sheets, and programming that will allow web pages that are more animated and more responsive to user interaction than previous versions of HTML.Presentation / Interface 1.2Extensible HTML (XHTML)The next generation of HTML The W3C’s recommendation for the next generation of [text missing]Presentation / Interface 1.3Cascading Style Sheets (CSS)Format HTML documents A style sheet format for HTML documents endorsed by the World Wide Web Consortium. CSS1 (Version 1.0) provides hundreds of layout settings that can be applied to all the subsequent HTML pages that are downloaded. Presentation / Interface 1.4 Extensible 3D Graphics (X3D) Real-time 3D computer graphics The ISO standard for real-time 3D computer graphics which features the ability to encode a scene in an XML syntax. This defines the software and protocols used for transforming data for presentation in a graphical user interface.Presentation / Interface 2Dynamic / Server-Side DisplaySoftware that is used to create graphical user interfaces with the ability to change while the program is runningPresentation / Interface 2.1Java Server Pages (JSP)Present dynamically generated web content JSP is part of Sun’s J2EE architecture and provide template capabilities for presenting dynamically generated web content. ASPs are text files written in a combination of standard HTML tags, JSP tags, and Java code.Presentation / Interface 2.2Active Server Pages (ASP)Allow for the creation of dynamic, interactive sessions with the user A web server technology from Microsoft that allows for thecreation of dynamic, interactive sessions with the user.Presentation / Interface 2.3Active Server Pages .Net (ASP.Net)Build web applications and XML web services ASP.NET is a set of technologies in the Microsoft.NET Framework for building web applications and XML web services. ASP.NET pages execute on the server and generate markup such as HTML, WML or XML that is sent to a desktop or mobile browser. This consists of the software that is used to create graphical user interfaces with the ability to change while the program is running.Presentation / Interface 3Static DisplaySoftware protocols that are used to create a pre-defined, unchanging graphical interface between the user and the softwarePresentation / Interface 3.1Hyper Text Markup Language (HTML)Create web documents The language used to create web documents and a subset of Standard Generalized Markup Language (SGML) Portable Document Framework (PDF/A, /X) Represent two dimensional documents in a device independent and resolution independent format An open standard file format for representing two dimensional documents in a device independent and resolution independent format. Static Display consists of the software protocols that are used to create a pre-defined, unchanging graphical interface between the user and the software.Presentation / Interface 4Wireless / Mobile / VoiceSoftware and protocols used for wireless and voice-enabled presentation devicesPresentation / Interface 4.1Wireless Markup Language (WML)A protocol for wireless devices An XML-based protocol designed for Wireless devices.Presentation / Interface 4.2XHTML Mobile Profile (XHTMLMP) Extend XHTML Basic with modules, elements and attributes to provide a richer authoring languageXHTMLMP is designed for resource-constrained web clients that do not support the full set of XHTML features, such as mobile phones, PDAs, pagers and set top boxes. It extends XHTML Basic with modules, elements and attributes to provide a richer authoring language. XHTML replaces the Wireless Markup Language (WML).Presentation / Interface 4.3Voice XML (VXML)An XML vocabulary for specifying IVR (Integrated Voice Response) Systems VXML is an XML vocabulary for specifying IVR (Integrated Voice Response) Systems. Consists of the software and protocols used for wireless and voice-enabled presentation devices. Security 1Certificates / Digital SignatureSoftware used by a certification authority (CA) to issue digital certificates and secure access to informationSecurity 1.1Digital Certificate AuthenticationControl access to network and internet resources through managing user identification Authentication implementation for controlling access to network and internet resources through managing user identification. An electronic document, digital certificate, is issued and used to prove identity and public key ownership over the network or internet.Security 1.2FIPS 186Specify a digital signature algorithm (DSA) appropriate for applications requiring a digital, rather than written, signature The Digital Signature Standard (DSS) specifies a digital signature algorithm (DSA) appropriate for applications requiring a digital, rather than written, signature. The DSA authenticates the integrity of the signed data and the identity of the signatory. The DSA may also be used to prove that data was actually signed by the generator of the signature. Additional references: Draft ANSI X9.30199x Part 1 and ISO/IECJTC1/SC27/WG2, Project 1.27.08 Digital Signature with Appendix.Security 1.3Secure Sockets Layer (SSL)Secure data communications across computer networks An open, nonproprietary protocol for securing dat acommunications across computer networks. SSL is sandwiched between the applicatio nprotocol (such as HTTP, Telnet, FTP, and NNTP) and the connection protocol (such a sTCP/IP, UDP). SSL provides server authentication, message integrity, data encryption ,and optional client authentication for TCP/IP connections. Software used by a certification authority (CA) to issue digital certificates and secure access to information.Security 2Supporting Security ServicesProtocols and components to be used in addition to certificates and digital signaturesSecurity 2.1Secure Multipurpose Internet Mail Extensions (S/MIME)Provide a consistent way to send and receive secure MIME data Provides a consistent way to send and receive secure MIME data. Based on the Internet MIME standard, S/MIME provides cryptographic security services for electronic messaging applications: authentication, message integrity and nonrepudiation of origin (using digital signatures) and data confidentiality (using encryption). S/MIME is not restricted to mail; it can beused with any transport mechanism that transports MIME data, such as HTTP.Security 2.2Transport Layer Security (TLS)Provide communications privacy over the Internet Standard for the next generation SSL. TLS provides communications privacy over the Internet. The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery.Security 2.3Web Services Security (WS Security)Provide message integrity, message confidentiality, and single message authentication Describes enhancements to SOAP messaging to provide message integrity, message confidentiality, and single message authentication. These mechanisms can be used to accommodate a wide variety of security models and encryption technologies including X.509, Kerberos, and SAML.Security 2.4Security Assertion Markup Language (SAML)Exchange security information expressed in the form of assertions about subjects An XML-based framework for exchanging security information expressed in the form of assertions about subjects, where a subject is an entity (either human or computer) that has an identity in some security domain. SAML is expected to play a key role in the federal-wide E-Authentication initiative, and is supported by both the Liberty Alliance and WS Security.Security 2.5Simple Key Management Protocol (SKIP)Handle key management across IP networks and VPNs A protocol developed by Sun Microsystems to handle key management across IP networks and VPNs.(http://www.networksorcery.com/enp/rfc/rfc2356.txt) Security 2.6Secure Shell (SSH)Perform client authentication A strong method of performing client authentication. Because it supports authentication, compression, confidentiality and integrity, SSH is used frequently on the Internet. SSH has two important Components, RSA certificate exchange for authentication and Triple DES for session encryption.These consist of the different protocols and components to be used in addition to certificates and digital signatures.Integration 1Enterprise Application IntegrationProcesses and tools specializing in updating and consolidating applications and data within an enterpriseIntegration 1.1Business Process ManagementDefinition and management of cross application business processes across the enterprise and/or between enterprises This process is responsible for the definition and management of cross application business processes across the enterprise and/or between enterprises.Integration 1.2Application ConnectivityProvide reusable, noninvasive connectivity with packaged software This process provides reusable, noninvasive connectivity with packaged software. This connectivity is provided by uni- or bidirectional adapters.Integration 1.3Transformation and FormattingConversion of data, message content, information structure, and syntax to reconcile differences in data amongst multiple systems and data sources This process is responsible for the conversion of data, message content, information structure, and syntax to reconcile differences in data amongst multiple systems and data sources.Refers to the processes and tools specializing in updating and consolidating applications and data within an enterprise. EAI focuses on leveraging existing legacy applications and data sources so that enterprises can add and migrate to current technologies.Integration 2MiddlewareLink or “glue” two otherwise separate applicationsIntegration 2.1Remote Procedure Call (RPC)Allow a program on a client computer to invoke a program on a server computer RPC is a protocol allowing a program on a client computer to invoke a program on a server computer.Integration 2.2Message Oriented Middleware (MOM): IBM WebSphere MQProvide APIs, queue management, message routing, automatic failover, and workload balancing Software solution providing APIs, queue management, message routing, automatic failover, and workload balancing. Message Oriented Middleware (MOM) is software residing in both sides of the client/server architecture providing support for asynchronous calls, or messages, between applications. Message queues are used to track and store requests waiting for execution by the source application. Messaging allows otherwise complex programming and networking details to be abstracted from the developer.Integration 2.3Message Oriented Middleware (MOM): Microsoft Message Queue (MSMQ)Provide synchronous and asynchronous message queuing, routing, and security Software technology providing synchronous and asynchronous message queuing, routing, and security. Message Oriented Middleware (MOM) is software residing in both sides of the client/server architecture providing support for asynchronous calls, or messages, between applications. Message queues are used to track and store requests waiting for execution by the source application. Messaging allows otherwise complex programming and networking details to be abstracted from the developer.Integration 2.4Database Access - PL/SQLProvide access to and across multiple database technologies in a distributed environmentOracle's procedural extension to industry standard SQL. Database Access provides access to and across multiple database technologies in a distributed environment. Database Access is provided through the use of native database Application Programming Interfaces (APIs), client side APIs, or server side database gateways.Integration 2.5Database Access: ISQL/wProvide access to and across multiple database technologies in a distributed environment Microsoft's implementation of ANSI SQL. Database Access provides access to and across multiple database technologies in a distributed environment. Database Access is provided through the use of native database Application Programming Interfaces (APIs), client side APIs, or server side database gateways.Integration 2.6Database Access: OPEN ANSI SQL/92) (MSMQ)Promote the portability and interoperability of database application programs and facilitates maintenance of database systems across heterogeneous data processing environmentsSQL is the information processing industry standard language of relational database management systems (RDMS). ANSIX3.1351992 (also referred to as SQL92 and ANSI SQL) is the industry standard for Database Language SQL. This standard promotes the portability and interoperability of database application programs and facilitates maintenance of database systems across heterogeneous data processing environments. SQL92 provides a standardized way for embedding SQL statements into application development languages. Database Access provides access to and across multiple database technologies in a distributed environment. Database Access is provided through the use of native database Application Programming Interfaces (APIs), client side APIs, or server side database gateways.Integration 2.7Database Access: NET8Offer transparent connection from client tools to the database, or from one database to another NET8 (called SQL*NET prior to Oracle8) is Oracle'sclient/server middleware product that offers transparent connection from client tools to the database, or from one database to another. SQL*Net/ Net8 works across multiple network protocols and operating systems. Previous versions referred to as SQL*Net.Database Access provides access to and across multiple database technologies in a distributed environment. Database Access is provided through the use of native database APIs, client side APIs, or server side database gateways.Integration 2.8Transaction Processing MonitorProvide synchronous messaging and queuing along with other transaction management services designed to support the efficient processing of high volumes of transactions Software providing synchronous messaging and queuing along with other transaction management services designed to support the efficient processing of high volumes of transactions. Core services include load balancing, rollback/commit, and recovery. Transaction Processing provides cost-effective scalability to applications and database systems by managing and throttling transactionson behalf of the database system.Integration 2.9Object Request Broker (ORB): Common Object Request Broker Architecture(CORBA)Enable objects to communicate with one another regardless of what programming language they were written in or what operating system they're running on An architecture that enables objects to communicate with one another regardless of what programming language they were written in or what operating system they're running on. Object Request Broker (ORB) is a technology enabling distributed objects to communicate and exchange data with remote objects. ORB encapsulates the locality and implementation of the objects, allowing users to develop applications that leverage components by accessing the Components interface.Integration 2.10Object Request Broker (ORB): Component Object Model (COM)Design and build component-based applications A software architecture created by Microsoft to design and build component-based applications. COM object capabilities are accessible from exposed interfaces. Object Request Broker (ORB) is a technology enabling distributed objects to communicate and exchange data with remote objects. ORB encapsulates the locality and implementation of the objects, allowing users to develop applications that leverage Components by accessing the Components interface.Integration 2.11Object Request Broker (ORB): Distributed Component Object Model (DCOM)Allow COM components tocommunicate across network boundaries An extension of the Component Object Model (COM) that allows COM components to communicate across network boundaries. Traditional COM components can only perform inter-process communication across process boundaries on the same machine. Object Request Broker (ORB) is a technology enabling distributed objects to communicate and exchange data with remote objects. ORB encapsulates the locality and implementation of the objects, allowing users to develop applications that leverage components by accessing the components interface.Integration 2.12Object Request Broker (ORB): Component Object Model + (COM+)Provide a runtime and services that are readily used from any programming language or tool, and enables extensive interoperability between Components regardless of how they were implemented COM+ is an extension of the COM that provides a runtime and services that are readily used from any programming language or tool, and enables extensive interoperability between Components regardless of how they were implemented. Object Request Broker (ORB) is a technology enabling distributed objects to communicate and exchange data with remote objects. ORB encapsulates the locality and implementation of the objects, allowing users to develop applications that leverage components by accessing the components interface. Middleware increases the flexibility, interoperability, and portability of existing infrastructure by linking or “gluing” two otherwise separate applications.Interface 1Service Description / InterfacePublish the way in which web services or applications can be usedInterface 1.1APIApplication Program InterfaceInterface 1.2WSDLWeb Services Description Language Defines the method for publishing the way in which web services or applications can be used.Interface 2Service DiscoveryThe method in which applications, systems or web services are registered and discoveredInterface 2.1UDDIUniversal Description, Discovery, and Integration Defines the method in which applications, systems or web services are registered and discovered.Interoperability 1Data Format / ClassificationDefine the structure of a file Interoperability 1.1 Electronic Data Interchange (EDI) Define the structure for transferring data between enterprises Defines the structure for transferring data between enterprises. EDI is used mainly used for purchase related information. ANSI X.12 refers to the approved EDI standards. Interoperability 1.2 Extensible Markup Language (XML) The standard format for web data and a common data format at all levels of the architecture XML has emerged as the standard format for web data, and is beginning to be used as a common data format at all levels of the architecture. Many specialized vocabularies of XML are being developed to supportspecific Government and Industry functions. Interoperability 1.3 Namespaces Qualified references to URI (Uniform Resource Identifier) resources within XML documents Namespaces are qualified references to URI (Uniform Resource Identifier) resources within XML documents. Interoperability 1.4 XML Linking Language (XLINK) Modify XML documents to include links, similar to hyperlinks, between resources A language used to modify XML documents to include links, similar to hyperlinks, between resources. XLINK provides richer XML content through advanced linking integration with information resources. Defines the structure of a file. There are hundreds of formats, and every application has many different variations (database, word processing, graphics, executable program, etc.). Each format defines its own layout of the data. The file format for text is the simplest.Interoperability 2Data TransformationThe protocols and languages that change the presentation of data within a graphical user interface or application Interoperability 2.1 Extensible Style sheet Language Transform (XSLT) Transform XML documents from one schema into another Transforms XML document from one schema into another. Used for data transformation between systems using different XML schema, or mapping XML to different output devices. Data Transformation consists of the protocols and languages that change the presentation of data within a graphical user interface or application.Interoperability 3Data Types / ValidationIdentify and affirm common structures and processing rules Interoperability 3.1 Document Type Definition (DTD) Restrict and maintain the conformance of an XML, HTML, or SGML document DTD is used to restrict and maintain the conformance of an XML, HTML, or SGML document. The DTD provides definitions for all tags and attributes within the document and the rules for their usage. Alterations to the document are validated with the referenced DTD. Interoperability 3.2 XML Schema (XSD) Define the structure, content, rules and vocabulary of an XML document XML Schemas define the structure, content, rules and vocabulary of an XML document. XML Schemas are useful in automation through embedding processing rules. Refers to specifications used in identifying and affirming common structures and processing rules. This technique is referenced and abstracted from the content document or source data.