


NOTE: Each document been created in Adobe Acrobat
8.0, and is best viewed using Acrobat Reader 8.0 or later. If you do not have Acrobat
8.0, you can download a free copy from the Adobe Web site:
http://www.adobe.com/products/acrobat/readermain.html To aggregate structured data
to form community defined semantics;
Technologies
Common Object Interoperability Layer (COIL)
COIL is an ASMG developed toolkit for the implementation of a policy (architecture /rules / metadata) driven information interoperability with integrated information protection (filters, guards and tag/label processing). COIL delivers the core capabilities described by the Object Management Group' (OMG) Shared Operational Picture Exchange Services (SOPES) and Information Exchange Framework (IEF) initiative. COIL generalizes and implements the SOPES/IEF concepts in a manner that enables controlled release-ability of semantically complete data between commercial, public, military and security application environments. COIL provides a programmable, distributable policy enforcement service that enforces agency specified release specifications using community defined semantics and reusable data patterns. COIL's use of standard UML Class diagrams, and a modeling profile integrated into the OMG SOPES IEDM and UPDM 2.0 standard.
COIL features include the ability to:
To de-aggregate data sets into structured sub-elements;
To integrate or marshal data elements into community defined data patterns (semantics);
To filter data based on domain values (e.g., category codes, tags, labels, ranges, other);
To guard data based on information patterns, simple or complex, including multiple domain values and filters;
To manage the release of information (semantics) based on their association to
Information exchange Requirements (IER),
Information Exchange Agreements (IEA),
Service Level Agreements (
Communities of Interest (CoI);
To marshal data to service an application program interface (API) that connects to user selected data store technologies;
To marshal data to service an application program interface (API) that channels data to user selected distribution technologies and protocols;
To trigger the aggregation and
release of information, with or without user intervention, providing event
triggered global update of information to each participant to an IER, IEA,
Common Object Interoperability Layer and OMG SOPES
Common Object Interoperability Layer Overview
Common Object Interoperability Layer Policy Models Overview
Common Object Interoperability Layer Policy Lifecycle
Modeling Communities of Interests/Practice (New - Sept 2010)
Modeling Information Semantics
Modeling reusable Data Patterns (Transactionals)
Modeling a Data Transformations
Integrating COIL into Middleware Solutions
Integrating COIL into a User application
COIL as a Data Service
COIL Application Program Interface (API)
COIL/SOPES Interoperability Demonstration Presentation
COIL Open Source Community being developed
Information Protection is practice of managing risks related to the use, processing, storage, release and transmission of information or data and the systems and processes used for those purposes. ASMG focuses practices and tools focus on the enforcement of policies related to preparation of datasets (business Objects) and controlled release of information. ASMG focuses on architecture drive strategies, practices and tools that yield the data needed to support security assessment, certification and accreditation of information interoperability solutions.
2007 OMG Presentation on Tag and Label Processing
Modeling a Static Security Filter as a COIL Policy
Modeling a Dynamic Security as a COIL Policy
Modeling a Semantic Guard Filter as a COIL Policy
Modeling Information Protection into Contracts
Architecture driven modernization as a process of using architecture as the foundation for evolving existing software assets for the purpose of:
Software improvement;
Modifications;
Interoperability;
Refactoring;
Restructuring;
Reuse;
Porting;
Translation into another
language;
Enterprise application
integration;
Service-oriented
architecture; and
Migration (via Model
Driven Architecture (MDA))
Architecture Driven Modernization starts where existing practices fail to
deliver against business objectives.
ADM enables:
The capture and retention
of institutional knowledge
Increasing the fidelity of
modernization plans (cost and schedule)
ADM offerings are described in:
ASMG and TSRI Team to Address Information System Modernization
Architecture Driven Information System Modernization
ASMG has been actively involved in in the development of the SOPES IEDM Specification; scheduled for Adoption by the OMG in the Fall or 2010). The specification is currently subject to the final votes of the Domain Technology Committee.
THE SOPES IEDM is The SOPES IEDM specification formalizes a platform independent set of data patterns for the construction, parsing and processing of JC3IEDM semantics for situational awareness and collaborative planning. The data patterns apply directly to a set of transactions for the MIP Joint Consultation, Command and Control Information Exchange Data Model (JC3IEDM: version 3.1 c ratified December 2007). The specification provides this set of data patterns as building blocks for the exchange of information that is applicable to a wide range of operational communities, including:
First Responders (e.g., Police, Fire Department and Emergency Medical Personnel);
Government Agencies (Federal, Provincial/State, and Municipal);
Non-Governmental Organizations (NGOs);
Other Government Department (OGD);
Private Volunteer Organizations (PVOs);
Para-military and security agencies; and
Military (Joint, land, maritime, air, space and coalition).
2008 OMG Presentation on SOPES
September 2008 SOPES Status Report
2010 OMG Presentation SOPES Overview
2010 SOPES Modeling Profile Overview (Annex A)
SOPES IEDM V1 Enterprise Architect File (ZIP)
SOPES Profile integrated into UPDM
SOPES Profile Demonstration using the LC2IEDM
SOPES Open Source community site being developed
The objective of Information Exchange Framework (IEF) Policy is provide capabilities to enhance the ability of government, military and private sector organizations to interoperate and exchange the quality information needed by decision makers. Increasingly, public, private and military organizations are requires collaborate in the delivery of operational outcomes. This imposes a broad set of requirements for organizations to dynamically expose their information to selected partners, while providing adequate protections for sensitive, private, confidential or legally significant information. For this to occur, these agencies need mechanisms to accurately describe the rules of information exchange in a manner that enable the resulting systems to be certified and accredited for use.
The IEF Information Exchange Policy Language (IEPL) RFP seeking to provide a policy (specification) language to define the rules governing the release and exchange of information exchange between parties to a information sharing agreement, Memorandum of understanding or service level agreement. The intent is to define an open policy language that can be ingested, executed and enforced by software applications and services; and can be tied back into enterprise and system architectures through a Model Driven Architecture Process.
The Information Exchange Policy-based Packaging Service (IEPPS) is seeking to specify a policy (or architecture) based service that applies executable policies to aggregate data with the appropriate filters, transformations and tear-lines to enable the selective sharing of semantically complete information between collaborating organizations. This service will enable increased fidelity in an organization's ability enforce security and privacy policy.
The operational need for information is subject to change based on operational context: Escalation of the event; Combination of multiple events; Location; Combination of partner agencies; or changes in threat-levels. This requires an ability for operators to modify information exchange policies during the course of and operation while assuring that information security, protection and privacy policies continue to be enforced. The Information Exchange Policy Management Service will provide operators/users with this capability.
Based on discussions at the December 2011 Technical Meeting, the IEF is seeking to develop specifications for:
IEPV extension to include Privacy Policy Specification and Design
IEPV extension to include Security Policy Specification and Design
Security Policy Automation and Enforcement Service
Privacy Policy automation and Enforcement Service
Identity, Credentials and Access Management (ICAM) Policy Specification and Automation
Security Assertion Modeling Language (SAML) PSM for the IEPV
eXtensible Access Control Mark-up Language (XACML) PSM for IEPV
Resourcing, scheduling and configuration of these efforts will be discussed at the OMG Technical Meeting in Reston VA - 19-23 March 2012
Information Exchange Policy-based Packaging Service (IEPPS) - OMG approved the issuance of the RFP at the December 2011 Technical Meeting in Santa Clara, CA.
Information Exchange Policy Vocabulary (IEPV) RFP (Mar 2011)
Information Exchange Policy-based Packaging Service RFP(IEPPS) (Dec 2011)
IE Policy Management Service (IEPMS) (June 2012)
IE Policy-based Authorization Service (IEPAS) RFP (June 2012)
IEPV PSM For SAML and XACML (TBD)
IEPV UML Profile for UPDM (TBD)
IEF discussion model (initial Draft)
IE Policy Vocabulary Model (HTML Version) Draft 2012-01-10
IE Policy Vocabulary Model (HTML Version) Draft 2012-02-01
IE Policy Vocabulary Specification Initial Submission MARS/2012-02-xx
One of the outcomes from a
NIEM-PMO/PM-ISE/OMG workshop held in Washington on 18th
October 2010 and held in Washington DC, was an action to engage with this broad NIEM
community of practice and open standards groups to exchange ideas pertaining to
operational/business/technical needs and capabilities.
The stated goal included:
1. The identification specific areas for ISE and NIEM enabling standards for tools supporting:
a. Information Exchange Package Documentation (IEPD)
b.
Business Scenario
development;
c.
NIEM and ISE Eco-system;
and
d.
Applications for Model
Driven Architecture.
2.
Inform the NIEM/ISE community about applicable standards
and standards related activities that are being undertaken by the OMG
membership:
a.
UML Profile for DODAF and
MODAF;
b.
Information Exchange
Framework (IEF);
c.
Model Drive Architecture;
and
d. IEPD Standardization (@
OASIS).
3.
The identification of gaps
and priorities for standards development.
4.
The identification of
opportunities for standardization and commercial products.
The next session was held on March 24th 2011 as part of the
quarterly
OMG Technical Committee meeting.
Information Sharing Environment
Homepage
ASMG is a proud member of the Object Management Group (OMG) UPDM initiative to develop a modeling standard that supports both the USA Department of Defense Architecture Framework (DoDAF) and the UK Ministry of Defence Architecture Framework (MODAF). The modeling standard is called the Unified Profile for DoDAF and MODAF (UPDM). The UPDM Group was setup to:
- Significantly enhance the quality, productivity, and effectiveness associated with enterprise
and system of systems architecture modeling
- Promote architecture model reuse and maintainability
- Improve tool interoperability and communications between stakeholders
- Reduce training impacts due to different tool implementations and semantics
- Improve the integration between system of systems modeling and system modeling to
support post acquisition life cycle design modeling
The UPDM Group consists of many companies distributed around the world. You can see a list of these companies in the member section on this web site.
Department of Defence Architecture Framework (DODAF)
Ministry of Defence Architecture Framework (MODAF)
NATO Architecture Framework (NAF)
Public Security Architecture Framework (PSAF)
Department of National Defence Architecture Framework (DNDAF)
Unified Profile for DODAF and MODAF (UPDM)
International Defence Enterprise Architecture Specification Group (IDEAS)
Common Object Interoperability Layer and UPDM (Coming soon)
The Emergency Management System Interoperability Framework (EMSIF) was a PSTP project Sponsored by Public Safety Canada, funded under a PSTP contract by Defence Research by Development Canada (DRDC) Centre for Security Sciences (CSS) and executed and delivered by ASMG Ltd. Other participating agencies included DND, TBS, CSEC, DRDC Atlantic, DRDC Ottawa, RCMP, et al
EMSIF Vision (DRAFT - for community comment)
Regulatory Compliance and Policy Management Programs are no longer the sole province of finance and legal communities. Reporting for compliance has assures that quality information is now the life blood of the modern enterprise. The constant expansion of regulations to assure the quality of financial reports and the strict management of access to personal and confidential data is a huge challenge in both the public and private domains. These regulation are challenging even the most effective data and information management programs.
The Information Management (IM) and Information Technology (IT) departments have been forced to assume a central role in this new environment. While the General Counsel and CFO still govern the practice, IM/IT are responsible for the gathering, integrating and reporting to an increasingly stringent set of requirements. As more organizations adopt a risk-based approach to management, issues related to compliance and the ramifications of failure become central management concerns. The Global Regulatory Information Database (GRIDTM) is an open database of rules, regulations, standards, and government guidance documents that require IT action, and a survey of the regulatory climate around the world.
ASMG is proud to be a member of the OMG, and actively participates in setting trusted information exchange approaches and standards by participating in the work of various committees and working groups. The Object Management Group (OMG) is an international, open membership, not-for-profit computer industry standards consortium. OMG member companies write, adopt, and maintain its standards following a mature, open process. OMG's standards implement the Model Driven Architecture™ (MDA™), maximizing ROI through a full-lifecycle approach to enterprise integration that covers multiple operating systems, programming languages, middleware and networking infrastructures, and software development environments. OMG's standards include: UML™ (Unified Modeling Language™ ); CORBA® (Common Object Request Broker Architecture); CWM™ (Common Warehouse Metamodel); and industry-specific standards for dozens of vertical markets. All OMG standards may be downloaded without charge at www.omg.org, which also provides additional information about OMG and its activities. For information on joining the OMG or other questions, please contact OMG by email at info@omg.org, by phone at +1-781-444 0404, or by fax at +1-781-444 0320.
ASMG Participation in OMG Task Forces:
- Consultation, Command, Control, Communications and Intelligence (C4I) DTF - Co-Chair
- Unified Profile for DODAF and MODAF Version 2 WG
- Emergency, Crisis, Major Event Management (ECMEM) SIG - Co-Chair
- Information Exchange Framework (IEF) Working Group
UPDM is an Object Management Group (OMG) initiative to develop a modeling standard that supports both the USA Department of Defense Architecture Framework (DoDAF) and the UK Ministry of Defence Architecture Framework (MODAF). The modeling standard is called the Unified Profile for DoDAF and MODAF (UPDM). The UPDM Group was setup to: * Significantly enhance the quality, productivity, and effectiveness associated with enterprise and system of systems architecture modeling * Promote architecture model reuse and maintainability * Improve tool interoperability and communications between stakeholders * Reduce training impacts due to different tool implementations and semantics * Improve the integration between system of systems modeling and system modeling to support post acquisition life cycle design modeling The UPDM Group consists of many companies distributed around the world. You can see a list of these companies in the member section on this web site. The Software Revolution, Inc. (TSRI) provides automated legacy computer
system modernization services to both government and industry. Our low-cost and
low-risk services are derived from a highly advanced artificial
intelligence-based software re-engineering toolset called JANUS
Studio™.
TSRI offers many services, but the four most unique are our ability to: (1)
automatically transform, not just transliterate, a software application written
in a 3GL legacy language into modern, platform-independent and true
object-oriented target languages, such as C++, C#, Java, or J2EE; (2) re-factor
the transformed code to improve that code's structure, performance and
maintainability; (3) generate full UML documentation for both the "As Is" as
well as "To Be" systems; and (4) transform monolithic legacy systems into a
multi-tiered web-based applications.
For more information visit:
TSRI Website Adaptive provides a web based and industry standards compliant Enterprise Knowledge Repository and related "Adaptations" to support Enterprise Architecture for large organizations and governments around the world and to address specific management challenges such as Business Process Management and IT Portfolio Management. Adaptive's technology enables organizations to understand and align critical enterprise assets and capabilities with objectives and strategies, and to reduce the time, cost and risk of adapting to continuous environmental change. For more information visit:
Adaptive Website Artisan® Software Tools is the world’s largest independent supplier of
industrial-grade, collaborative modeling tools for complex, mission-critical
systems and software. Artisan has delivered a stable, robust working environment
to thousands of users across an extensive range of complex applications in
demanding sectors including military, aerospace and defense, automotive,
transportation, telecommunications, electronics and medical. For more information visit:
Artisansoftware Website ATEGO is the leading independent supplier of industrial-grade, collaborative
development tools for engineering complex, mission- and safety-critical
architectures, systems, software and hardware. Atego delivers a stable,
robust working environment to thousands of users across an extensive range of
complex applications in demanding engineering sectors such as aerospace, defense,
automotive, transportation, telecommunications, electronics, and medical. Atego delivers the highly reliable, real-time embedded virtual machine
solution (Aonix PERC®) for running Java™ programs deployed today and has the
largest number of certified Ada applications (Aonix ObjectAda®) at the highest
level of criticality. Atego’s standards-based tool suite, Artisan Studio®,
provides comprehensive support for the leading industry standards, including OMG
SysML, UML and Architectural Frameworks. Atego Workbench™ provides a fully
integrated, collaborative engineering framework for the trouble-free deployment
and maintenance of best-in-class tools for mission and safety-critical systems
and software development. For more information visit:
ATEGO Website Sparx Systems provides award winning UML 2.1 powered, team-based modeling environment embraces the full product development lifecycle, with high-performance visual tools for business modeling, systems engineering, enterprise architecture, requirements management, software design, code generation, testing and much more. A full life cycle tool to integrate your team and bring your shared vision to life. . For more information visit:
Sparxsystems Website
The Voyant Group, LLC is an international consulting company providing
strategic consulting, education and hands-on mentoring assistance to Global
1000 corporations leveraging model-driven approaches throughout their
enterprise. Voyant provides professional consulting, mentoring and educational
services concentrating on a visionary, yet pragmatic, application of Model
Driven Architecture™ (MDA) to address increasingly complete business and
technology needs, including business process management and enterprise
architecture. For more information visit the Voyant Group Website:
http://www.thevoyantgroup.com.
Corporate | Services | Products | Technology | Contact Us