DataPower Outlines Plan To Horizontal-ize Vertical Web Services Standards
02/06/2004
DataPower Technology, which says it created the intelligent XML-Aware Network (XAN) infrastructure, announced a program that addresses the need to bind specific, XML-based vertical industry standards to more general standards that are essential for any Web service deployment.
DataPower says its program “provides financial services companies a solution for "Snap-In" XML Web service security that is transparent to existing applications and easy to deploy by offering a starter-kit of pre-built DataPower XS40 XML security gateway policies that bind today's critical vertical standards, like Market Data Definition Language (MDDL) for the interchange of information to trade financial instruments of the world's markets, to "horizontal" Web services standards, like WS-Security that is critical for message integrity, confidentiality, and authentication within a Web service.
“Based on real-world deployments within the financial services marketplace that includes The Principal Financial Group, GFKL, RouteOne and a number of leading Fortune 100 Bank and Securities firms yet to be announced, DataPower's Financial Services program is the first of its kind and continues DataPower's longstanding results for the pragmatic adoption of XML Web services.
“With customers such as (just-signed) Principal Financial, RouteOne, GFKL and a number of Fortune 100 banks and insurance firms, DataPower has been a key piece of infrastructure in web services deployments in financial services since 1999. The DataPower device can rapidly bind financial services XML applications to horizontal web services security standards, resulting in a rapid, highly secure web services deployment with lower operational complexity and management costs. This combination is well suited to the risk-averse financial services market with the end result of simplifying development efforts and rapidly improving time to market of sensitive, complex transactions using web services.”
“The use of vertical XML standards in financial services is on the rise. However, for XML standards such as MDDL, XBRL, RIXML to achieve widespread adoption, robust security for privacy, non-repudiation, trust and message integrity will be critical," said Mary Knox, principle analyst, Financial Services at Gartner. "Horizontal Web services standards like WS-Security, XML Encryption, XML Digital Signatures and SAML are all key enablers to the increased use of XML in financial services."
"DataPower used their XML-based policies to rapidly integrate Web service security into eReinsure messages transmitting data between the eReinsure reinsurance platform and one of our major insurance industry customers," said Dave Hersom, CTO at eReinsure.com. "This method of applying horizontal security to financial services applications is fast, flexible and scaleable. We are excited to see this approach helping to simplify security issues that might otherwise slow XML adoption in financial services."
"In the last 2 years we've seen many organizations within all sectors of the Financial Services industry take advantage of DataPower's XML-Aware network devices ability to provide the most robust, easy to use security solution for Web services without the need for additional custom coding. While companies are developing the expertise for security standards like WS-Security, XML encryption, XML digital signatures, and XML-based PKI and access control, we take the burden off the developer for implementation." said Eugene Kuznetsov, CTO and chairman at DataPower. "As a result, DataPower has created this first-of-its-kind Financial Services program that binds today's vertical standards, being driven by numerous business and regulatory demands, to the technology-driven standards and thereby ensure rapid, interoperable and successful Web service deployments."
The program is offered to no charge to any financial services company. Targeted at architects, developers, security officers and network administrators, the program provides, as DataPower puts it:
- Pre-built policies for "drop in" security for XBRL or MDDL messages
running through a DataPower device
- Deployment scenarios on meshing the vertical XML standards with the
horizontal XML standards within the financial services industry
- Case studies on companies that have successfully secured web service
implementations.
- Whitepapers detailing how to recognize and mitigate the increased
operational and security exposure for network teams and security officers
- Technical notes on integrating other enterprise consoles into an
overall management solution for web services
- Technical notes on security web service standards WS-Security, SAML,
XML Encryption and XML Digital Signatures.