1. Best Practices in Geospatial SOA NSDI Cooperative Agreements Program (CAP) 2008 Best Practices in Geospatial Service Oriented Architecture (SOA) Project Contacts: Neil Devadasan, ndevadas@iupui.edu ndevadas@iupui.edu Jeff Ehman, jeffe@imagemattersllc.com jeffe@imagemattersllc.com Jeff Harrison, jharrison@cubewerx.com jharrison@cubewerx.com

2. Topics Introduction What is SOA? Some Common Definitions Defining Requirements and Processes Designing and Deploying SOA Questions

3. Introduction For the US Federal Government’s Geospatial Line of Business (LoB) effective design and deployment of Service Oriented Architecture (SOA) using Web Services will determine the success of shared access to geospatial data and applications.

4. Geospatial Web Services... Services Oriented Architecture (SOA) Users Citizens Federal Data Providers Maps and location-aware technology Geospatial Assets Governance

5. CAP 2008 Category 2 Projects Government and industry leaders design, deploy, and document reusable geospatial services and applications using SOA. Solutions satisfy multi-agency requirements by modeling business processes & related data and service components. Documents best practices to educate federal agencies on design, implementation, and application of government- wide services for Geospatial LoB.

6. Participants Image Matters and EPA The Polis Center, Indiana University, USGS and NWS CubeWerx and US Army Corps of Engineers (with support from The Carbon Project)

7. Geospatial Web Services... Services Oriented Architecture (SOA) Users Citizens Data Providers Geospatial Assets Governance What’s the best way to deploy SOA for our Geo-Assets?

8. Example of the Challenge Quick look at interagency processes enabled by geospatial SOA For example, regulatory permitting that requires data from US Army Corps of Engineers, EPA, USGS and others…

9. Geospatial Web Services... Services Oriented Architecture (SOA) EPA Analysts EPA & COE Managers USGS NHD WFS Geospatial Assets Governance FWS NWI WFS USGS Contextual Layers WMS

10. What is SOA? SOA is software architecture oriented toward Services Service-oriented architecture (SOA) describes a category of composite applications composed of service provider and service consumer components. SOA segregates business logic and offers location transparency for the service providers and consumers. The SOA approach lets you replace or upgrade individual components in the application without affecting other components or the process as a whole.

11. Common Definitions 1. metadata describing the operations and geographic information available at a server [ISO 19128 draft]

12. Developing geoSOA Model Business ProcessElicit Requirements Design Integrate and Build Test and Deploy Monitor and Manage

13. Services Oriented Architecture (SOA) Users Citizens Data Providers Geospatial Assets Governance Analysis NSDI Project Access-Control NSDI Project Services NSDI Project DefiningRequirements and Processes

14. CONOPs Use Cases

15. Services Oriented Architecture (SOA) Users Citizens Data Providers Geospatial Assets Governance Analysis NSDI Project Access-Control NSDI Project Services NSDI Project

16. Concept of Operations (CONOPs)

17. Use Cases

18. Services Oriented Architecture (SOA) Users Citizens Data Providers Geospatial Assets Governance Analysis NSDI Project Access-Control NSDI Project Services NSDI Project

19. Online stream gauges Geospatial Infrastructure Building and Property Losses Geo-Spatial Flood Maps USGS Water Data Flood planner Concerned Citizen Meteorologist Hydrologist Data/ Service Provider Concept of Operations (CONOPs) Emergency Responder Socio-Demographic Statistics Flood Forecast 1 Flood forecast are issued 2 Geo-Spatial Flood Maps are Generated 3 Building and Property Losses are Generated 4 Socio-Demographic Statistics are Generated Local Government Data Building Property Assessment, Socio-Demographics DEM

20. Use Cases

21. Services Oriented Architecture (SOA) Users Citizens Data Providers Geospatial Assets Governance Analysis NSDI Project Access-Control NSDI Project Services NSDI Project

22. Geospatial Infrastructure Data/ Service Provider Data Provider 1. Publish 2. Discover 3. Access Provider User Agent Data and Services Registry Web Application User NSDI Framework Other SDI Data/ Service Provider User Data/ Service Provider Data/ Service Provider 1 - Authentication 2 - Single Sign-On 3 - Access Control Data/ Service Provider Data/ Service Provider Data/ Service Provider Concept of Operations (CONOPs)

23. USACE Data Provider Portal Provider Security Manager NSDI Data Provider USACE End User ‘Keith’ NSDI End User ‘Jeff’ Manage Users Manage Roles Manage Credentials Manage Groups Manage Access Control Rules Authorize Users Access by Feature Access by Role Deploy Data Access by Geography Update by Feature Update by Role Update by Operation Type Access by Operation Type Use Cases

24. Services Oriented Architecture (SOA) Users Citizens Data Providers Geospatial Assets Governance Analysis NSDI Project Access-Control NSDI Project Services NSDI Project Designing and Deploying SOA

25. Services Oriented Architecture (SOA) Users Citizens Data Providers Geospatial Assets Governance Analysis NSDI Project Access-Control NSDI Project Services NSDI Project

26. Architecture

27. Sequence Diagrams

28. 1.Zoom to AOI 2.Select NWI polys 3.Initiate WPS and name results set 4.View/Add/Save metadata 5.List processed features 6.Examine map 7.Add contextual layers User Steps

29. Web Services in Development ServiceDescription National Wetlands Inventory – Web Feature Service Serves FWS wetland polygons through OGC-compliant WFS; supports Filter Encoding specification to constrain queries Intersection GeoAnalysis – Web Processing Service Find geometric intersection of features from two different sets of vector geometries accessed via WFS Proximity GeoAnalysis – Web Processing Service Finds distances between closest locations of features from two different sets of vector geometries accessed via WFS

30. Services Oriented Architecture (SOA) Users Citizens Data Providers Geospatial Assets Governance Analysis NSDI Project Access-Control NSDI Project Services NSDI Project

31. A SOA solution will provide a very cost effective solution SOA provides a platform to perform complex business processes Without SOA developing a process to cater all partners was unattainable SOA is inherently distributed with multiple services Service applications are heterogeneous It provides synchronous and asynchronous access to PI Complexity of service orchestration is handled by Accepted solution is BPEL Acts like the “middle man” or the “centralized web service” BPEL keeps process state in schema BPEL coordinates synchronous and asynchronous communication BPEL performs Receive, Assign, Invoke and Reply activities BPEL processes are deployed on ESB based on JBI Designing a Geospatial SOA

32. Translating requirements into UML, documenting the process. Design

33. Translating UML into BPEL workflow: service composition and execution. LINK TO BPEL GRAPHICLINK TO BPEL GRAPHIC.

34. Floods cause more death and destruction of property than any other natural hazard in the United States –75% of all federally declared disasters are flood- related. The June 2008 floods in Indiana, Illinois, Iowa, and other parts of the Midwest reinforced the importance of this problem. –<20 deaths but potentially billions of dollars in damage. Flooding

35. Flood planning, forecasting, and emergency response can all be greatly enhanced by integration of online Web services. Existing services include online NWS stream gauges and Weather forecasting services. Our project goal is to couple these to flood modeling services, loss estimation services, and mapping services. Connect these services end-to-end as workflows. –Provide planning capabilities to mitigate extreme events. –Provide alert systems to quickly estimate at-risk areas –Automate and streamline loss estimation to simplify disaster declartations. What can be done?

36. Ravenswood neighborhood of Indianapolis. –Frequent flooding; site of IMA Virginia B. Fairbanks Art and Nature Park –Extensive historical data, detailed elevation data, building inventory Project Study Area

38. Web Services in Development ServiceDescription Inundation Modeling Service Web service wrapping of the USGS FastMECH service. Parcel Information Service Extract land parcel metadata from WFS: IDs, parcel centroids, etc. Building Information Service Extract building structural information, and assessed values from Indiana Department of Local Government and Finance database Loss Estimation Service Uses HAZUS-MH as a backend service to perform Level 2 Analysis Mapping and Plotting Service Export inundation results as KML

39. Services Oriented Architecture (SOA) Users Citizens Data Providers Geospatial Assets Governance Analysis NSDI Project Access-Control NSDI Project Services NSDI Project

40. Identity Management Web Server NSDI Framework site WFS Request& Response Client Scenario 1: NSDI Client accessing a local resource Authentication Login Cookie WFS Response Access Control WFS Request WFS IMS SOA Design and Role-based Access Control

41. Scenario 2: NSDI Client accessing a remote resource Identity Management Web Server Other Client Identity Management Web Server NSDI Framework site WFS Request& Response Client Other SDI (Critical Infrastructure site) Authentication Login Cookie WFS Response WFS Request& Response WFS Request Access Control CI Federation Fine grain Access Control rules: NRCan Client: Feature Constraints Spatial Extent Constraints CI Federation Fine grain Access Control rules: NRCan Client: Feature Constraints Spatial Extent Constraints Access Control WFS IMS WFSIMS SOA Design and Role-based Access Control

42. Demonstration Gaia Viewer HTTPS IMS NSDI WFS (CubeSTOR) WFS Carbon Arc WMS &WFS Access Control Rules WMS Access Control Rules Access Control Rules Architecture CubeSERV ArcGIS 9.2 DesktopAny Windows Desktop

43. Testing - Role-based Access Control Access Control by – Role Geography Feature OGC Operation Roles – NSDI User – ‘Jeff’ EOC User – ‘Keith’ DataProvider – ‘Edric’ WFS to Secure SDI client Jeff Edric Keith Island of Galveston

44. Secure SDI – Geographic Access Control

46. Jeff Secure SDI – Geographic Access Control

47. Jeff Secure SDI – Geographic Access Control

48. Jeff Secure SDI – Geographic Access Control

49. Jeff Secure SDI – Geographic Access Control

50. Jeff Secure SDI – Geographic Access Control

55. Keith Jeff

56. Free Secure SDI client available at www.thecarbonportal.net Secure SDI – Feature Level Security

57. Jeff Secure SDI – Feature Level Security

58. Keith Secure SDI – Feature Level Security

59. Keith Secure SDI – Feature Level Security

60. Secure SDI – By OGC Operation

64. Free Secure SDI client available at www.thecarbonportal.net Secure SDI – By OGC Operation

65. Access Controls Rules

66. Web Services in Development ServiceDescription NSDI Web and Feature Service (available) Serves national-level roads, hydrography, and governmental units through OGC-compliant WMS/WFS; supports Filter Encoding to constrain queries Secure SDI Web Feature Service Implement role-based access control for national-level roads, hydrography, and governmental units via WFS and CubeWerx IMS Identity Management Service Enables development of access control rules, single-sign on, authentication, access control and other security functions

67. Project Deliverables Wiki to all project documents Best Practices Common terms Processes and Models Lessons Learned Working Services and Examples

68. Questions?

69. Best Practices in Geospatial SOA NSDI Cooperative Agreements Program (CAP) 2008 Best Practices in Geospatial Service Oriented Architecture (SOA) Project Contacts: Neil Devadasan, ndevadas@iupui.edu ndevadas@iupui.edu Jeff Ehman, jeffe@imagemattersllc.com jeffe@imagemattersllc.com Jeff Harrison, jharrison@cubewerx.com jharrison@cubewerx.com