Embed Size (px)
Citation preview
GRA Implementations using Open Source Technologies
Mark Perbix and Yogesh ChawlaSEARCH
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 2
Goals
Quick review of Global Standards and Initiatives
Describe projects that have adopted and successfully implemented various Global Standards
Discuss advantages of using Open Source software
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 3
Global Standards and Initiatives
Global Reference Architecture (GRA)
Global Federated Identity and Privilege Management (GFIPM)
Global Technical Privacy Framework
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 4
Global Standards and Initiatives
Global Reference Architecture (GRA)National Information Exchange Model (NIEM)Governance – Policy and Technical Standards
Global Federated Identity and Privilege Management (GFIPM)Single Sign OnAccess Control
Global Technical Privacy FrameworkPrivacy Policy Rules Enforcement
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 5
Focus
Global Reference Architecture (GRA)National Information Exchange Model (NIEM)Governance – Policy and Technical Standards
Global Federated Identity and Privilege Management (GFIPM)Single Sign OnAccess Control
6
GIST - Where does it all fit in?
MessagingData Architecture Access Control Authentication Federation
< Data >
Payload
Data
Transport
Structural Design
& IS Enablement
Data Disclosure
& Auditing
User Identification
& Credentialing
Security
Management
Underlying
Technology
Standard
Global Adaptation
of Standard
Enablement of
Interoperability
Manifestation in
Your
Implementation
XML
NIEM
IEPDs
IEPs
WS*
TCIP/IP
HTTP & HTTP/S
GRA
SSPs
Adapters &
Connectors
BPEL/XSLT
ebXML
Global Technical Privacy Framework
SIPs
Intermediary &
Service Registry
XACML/SAML
GFIPM
GFIPM Metadata
SP Services
AD & LDAP
Crypto
Trust Model
GFIPM Trust Model
IdP Services
Trust Federation
Federation & FMO
Definition
Participation in
Federation
Communication Profiles
Services
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 7
GRA - Technical Components
IntermediaryConnector Adapter
Workflow
Intermediaries
Shared Execution Context
Apache Camel/ CXF Component
Apache Camel/ CXF Component
Apache Camel/ CXF Component
JusticeLine of Business
System
JusticeLine of Business
System
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 8
GRA Implementation Projects
Notification Service Interstate Compact for Adult Offender
Supervision (ICAOS)Maine State Police Incident Reporting
Subscription Notification Hawaii Integrated Justice Information System
(HIJIS)
Federated Query/Response with GFIPMVermont Integrated Justice Information
System Portal
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 9
ICAOS
Business RequirementsNotify fusion centers (and potentially other
law enforcement agencies) when a probation or parole offender relocates to another state.
OutcomeSend notification through existing fusion
center network infrastructureNotifications sent from outside the fusion
center environment meeting security requirements
10
Relocation Notification Flow
11
Add SIRS Flow
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 12
Maine State Police Incident Reporting
Business Requirements Incident Reports sent to N-DExCase Referrals sent to Prosecutor
OutcomesSingle Incident Record sent by police
agencies to FBI and/or Prosecutor
13
Maine State PoliceS
tate
Po
lice
Adapter/Connector Container
Incident Reporting Service Connector
N-DEx Submission Web Service
DA Case Management System Staging Database
Adapter/Connector Container
Charge Referral (?) Service AdapterIntermediary Host*
( aka Maine Justice Broker)
Incident Reporting
Service
Router Intermediary
Transform Intermediary
Transform Intermediary
Simple XMLME Incident Report (N-Dex Conformant)
Incident Data (MEDATS format)
Incident Data(N-Dex format)
Insert into staging databaseCumberland County SO(Spillman)
Portland/S.Portland PD
(SunGard)
Adapter/Connector Container
Incident Reporting Service Connector
ME Incident Report(N-Dex Conformant)
Red = activities funded thru GRA grant and within current scope of work with SEARCH
Black – activities funded thru grants administered by Tom Jewett and involving
SEARCH
Maine Incident Reporting System
09/21/2012
DA Case Management System
Program to update Case Mgmt. System
PPD/SSPD(SunGard Staging
database)
Insert into staging Database
Simple XML
CCSO(Spillman staging
database)
Insert into staging database
Green – work funded thru grants/sources available to Tom Jewett, but not involving
SEARCH responsibility
Simple XML
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 14
HIJIS Notification of Re-arrest
Business RequirementNotify probation and parole officers when
an offender is arrested for a new offense
OutcomeMonitor statewide booking process and
send a notification to parole and probation officers
Subscriptions are automatically loaded from Parole and Probations systems
15
Subscription/Notification Flow
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org 16
Vermont Federated Query
Business RequirementProvide access to incident records from all
law enforcement agenciesSupport Single Sign-On access
OutcomesEnable users to access records in other
agency RMSs using native credentials Implement Entity Resolution capabilities to
merge persons or vehicles that do not have unique identifiers
17
Federated Query with Entity Resolution
Single Sign On
18
19
System-to-System Authentication
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org
Open Source Technology Option
Apache FoundationServiceMixCamelCXF
AdvantagesCompliance with StandardsNo upfront licensingBroad community of supportNo vendor “lock-in”Maintainability
20
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org
Sustainability Options
Develop internal expertiseRely on outside resourcesWhy?Many options
Shared support - cooperative
21
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org
What is the OJBC?
Non-profit consortium of state and local jurisdictions to support reuse and sharing of technologyStates of Hawaii, Vermont and Maine are the initial membersGoals of the consortium: Integrate contributions from member states
into a single, reusable platformProvide shared expert staff resourcesEnable use of low-cost, open source
technology
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org
Benefits of the OJBC
Commonality across states creates significant opportunity for reuseDon’t reinvent the wheelLearn from one anotherSave time and money
National standards create the basis for a common technology platformTechnology is powerful, but complex and costly to own and operate in isolationContinues a long tradition of collaboration among jurisdictions
SEARCH, The National Consortium for Justice Information and Statistics | www.search.org
Questions?
24
“The only one thing you can always count on is that everything
will always change”- UnknownContact Information
Mark PerbixDirector, Information Sharing [email protected]
Yogesh ChawlaInformation Sharing Architecture [email protected]
