OMG Internet SIG Minutes of Meeting #5 (original) (raw)
[Attached is a draft of the Minutes of Meeting #5 for OMG Internet SIG. Speakers are invited to revise the notes on their presentations sending revisions to Craig Thompsonand also to provide Shel Suttonan online presentation. These should be available as a revision of these minutes.]
Minutes of Meeting #5
Omni Sheraton, Washington D.C.
June 3-4, 1996
Summary
- Internet SIG completed an Internet Services RFIand requested ORBOS Task Force to issue it. ORBOS agreed. The OMG TC voted to do so by white ballot.
- Internet SIG deferred for at least two meetings any decision to request to become a task force. We want to know the outcome of the RFI and whether the work can be partitioned among CFTF and ORBOS before creating yet another task force.
- This was a joint meeting of the Internet SIG and the DoD Intelink Engineering Board and so several presentations cover the work of thesegroups.
Agenda
- Attendees
- Presentations
- Welcome, Introductions, & Opening Remarks, Shel Sutton
- Intelink: an Information Service for the Intelligence Community, Robert Johns
- About OMG and Internet SIG, Craig Thompson
- DARPA, CORBA, and the Internet, Mike Dean
- Lessons Learned from Web*, V. "Juggy" Jagannathan
- DISCUS: Imagery, CORBA and the Internet, Dwight Brown
- Inter-Language Unification System (ILU), William Janssen
- Handles, Objects, and the Web at CNRI, William Arms
- Modeling and Simulation in the Internet Environment with CORBA, Donald
- CORBAnet, Kerry Raymond
- Databases and the Internet, Bhavani Thuraisingham
- A Semantic Interoperability Framework, Rainer Kossman
- Transitioning to the Future, David Lehman
- Objects and the World Wide Web, Bob Marcus
- The Common Imagery Information Facility, Ron Burns
- Intelligent Agents, Mobile Agents, and CORBA, Sankar Virdhagriswaran
- Sun's New NEO, Maurice Balick
- Internet SIG Business
- Following the Meeting
Attendees
- Bill Arms - CNRI - warms@cnri.reston.va.us
- Denis Bagsby - SBC - db7338@sauron.sbc.com
- Don Belisle - IBM - belisle@austin.ibm.com
- David Bentz - TRW -
- David Berkowitz - CI Labs - david@cilabs.org
- Steve Brown - Mitre - jsbrown@mitre.org
- Lorraine Cash - Raytheon - waldbuss@ediray.com
- Dan Chang - IBM - dtchang@vnet.ibm.com
- Thomas P. Chen - AT&T - tpc@qsun.ho.att.com
- Wei Chiang - Nokia - wei.chiang@research.nokia.com
- Michael Jesse Chonoles - Lockheed Martin Advanced Concepts Center - chonoles.michael@acc.mds.lmco.com
- Thomas Chu - AT&T - tpc@qsun.ho.att.com
- Bruce Cottman - I-Kinetics - bhc@i-kinetics.com
- Fred Cummins - EDS - Cummins@ae.eds.com
- Massimo Actis Dato - DEC - actis_dato@impero.enet.dec.com
- Mike Dean - BBN - mdean@bbn.com
- Daniel DePrez - Hughes - deprez@ultranet.com
- Peter Donich - NRaD - donich@nosc.mil
- Deb Dunaway - NRO
- Don Faatz - Mitre - dfaatz@mitre.org
- L. Fezio - USAir - wlfezio@usair.com
- Scott Foshee - BATT - foshee_scott@bah.com
- Dave Gamble - Micro Focus - davg@mfltd.co.uk
- Karl Gardner - Raytheon - fkg@swl.msd.ray.com
- Anup K. Ghosh - Reliable Software Technologies - anup@rstcorp.com
- John Gordon - Dept of Air Force SAM-GAPF - john.gordon@comm.hq.af.mil
- John Hildebrant - DoD Australia - johnhild@erols.com
- Jan Hite - NSA (DoD) - hite@romulus.ncsc.mil
- Rob Hyland - MITRE - hyland@mitre.org
- Richard Hovey - Digital Equipment Corp - hovey@wnpv01.enet.dec.com
- Sridhar Iyengar - Unisys - sridhar.iyengar@mv.unisys.com
- V."Juggy" Jagannathan - CERC, WVU - juggy@cerc.wvu.edu
- Rainer Kossmann - Nortel Technologies - kossmann@nortel.ca
- Frederick Kuhl - MITRE - fkuhl@mitre.org
- Jeff Kyser - Kurt Salmon Associates - jeff@kurtsalmon.com
- Tom Lawrence - Rome Lab - lawrence@cliff.rl.af.mil
- Jonathan Legh-Smith - BT - jleghsmi@@jungle.bt.co.uk
- David Lehman - MITRE - dbl@mitre.org
- Guangxing Li - Nortel Technology - gxl@nortel.co.uk
- Hui-Lan Lu - AT&T/Lucent - huilan.lu@lucent.com
- Denise Lynch - UTC - Lynchdc@pweh.com
- Greg Mack - Booz Allen - gmack@bah.com
- Frank Manola - GTE Labs - fm02@gte.com
- Carl-Uno Mamres - Xerox Corp - manres@cp10.es.xerox.com
- Bob Marcus - AMS - bob_marcus@mail.amsinc.com
- Donald Marks - DoD - dgm@tycho.ncsc.mil
- John Marsh - Concept 5 - jmarsh@concept5.com
- Nancy McCarley - Mitre - nem@mitre.org
- Hays W. McCormick III - MITRE - skipm@mitre.org
- Robert Mickley - Cyborg Systems - Robert_Mickley@cyborg.com
- Naohiko Mori - Nippon CALS Research Partnership - mori@ncals.cif.or.jp
- Tom Mowbray Esq - MITRE - mowbray@www.serve.com
- Carlton Neville - Neville and Associates - cneville@nev.com
- Maunao Papa - U Tulsa - papama@euler.mcs.utulsa.edu
- Ajegt Parhar - Telstra - parhar@trl.telstra.com.au
- Nicolas Pascarella - EDS - pascarella@edsug.com
- Lee Patton - CACI, Inc-Federal - lpatton@std.caci.com
- Larry Perlstein - CI Labs - larry@cilabs.org
- Richard Pledereder - Sybase - Richard.Pledereder@sybase.com
- Donald Ponikvar - DMSO Support (SAIC) - ponikvar@msis.dmso.mil
- Bob Potterudd - HP - b_potterudd@fc.hp.com
- Andy Poupart - Apple - poupart@apple.com
- Shiye Qiu - CERC, WVU - qui@cerc.wvu.edu
- Paul Rabin - OSF - rabin@osf.org
- Alice Schafer - MITRE - als@mitre.org
- Lite Schuerfeld - IBM - schuerf@unca.ibm.com
- Colin Scott - Anderson Consulting - colin.t.scott@ac.com
- David Smith - Deere & Co - ds60160@deere.com
- Larry Smith - IBM - slsmith@vnet.ibm.com
- Kent Steffen - Anderson Consulting - kent.a.steffen@ac.com
- Seldon Stewart - NIST - seldon@nist.org
- Scott Surer - MITRE - surer@mitre.org
- Shel Sutton - MITRE - shel@mitre.org
- Craig Thompson - Object Services and Consulting, Inc. - thompson@objs.com
- John Tisaranni - Mitre - jtisaran@mitre.org
- Petri Tuominen - Nokia - Petri.Tuominen@ntc.nokia.com
- Steve Turner - TRW - srt@acm.fp.trw.com
- Doug Vandermade - Mitre - dwv@mitre.org
- Steve Van Noort - Cyborg Systems - steve_van_noort@cyborg.com
- Kim Walls - NPIC/NEL - kimtw@ucia.gov
- Bob Walter - I-Kinetics - rhw@i-kinetics.com
- Robert H. Walter - I-Kinetics - rhw@i-kinetics.com
- Harvey Waxman - ATT/Lucent - hwaxman@lucent.com
- Richard Weatherly - MITRE - weather@mitre.org
- Rick Wessman - Oracle -rwessman@usoracle.com
- Ron Zahavi - Concept Five - rzahavi@concept5.com
Presentations
These are notes taken during the meeting and may contain some inaccuracies. On line presentations will be available soon for most or all presentations.
Welcome, Introductions, & Opening Remarks, Shel Sutton, MITRE
Shel Sutton (OMG Internet SIG co-chair, MITRE) opened the meeting by stating that this is a joint meeting with the DoD Intelligence community's Intelink Engineering Board. Shel introduced speakers during the presentational part of the meeting and Craig Thompson (OMG Internet SIG co-chair, OBJS) took minutes.
Intelink: an Information Service for the Intelligence Community, Robert Johns, Intelink Engineering Board
In 1993 work began to apply Internet to Intelligence community problems. The Deputy Director of Defense co-authored a memo that Intelink would be the key strategic backbone for military intelligence. Secretary Perry's memo in 1993 and the Woolsey/Deutsch memo in 1994 establish Intelink as strategic for the intelligence community (e.g., "go use it"). Today, the Intelligence Systems Board and Intelligence Systems S.. (IISB/ISS) derive their authority from the Chief of the Intelligence Community and DEPSECDEF/ASD (C3I). Panels do the work via member organizations. IEB makes policies for Internet technology standards within the intelligence community. Intelink is not yet the DoD's service of first choice.
The larger context is: DoD has lots of standalone (isolated) and stove pipe systems with diverse interfaces. There are need-to-know, cultural, mission-specific, geographic, quality of service, and downsizing issues. Interoperability is the key need and the approach is to use Internet and Web technologies and maybe object technologies if they fit. Requirements are any-to-any connectivity, subject to the rules of security, single interface to the community (producer and consumer), with the goal of information sharing within these constraints.
There are four Intelink systems:
- Intelink-P -- small policy network, top secret, available to policy makers, managed by CIA
- Intelink-TS -- runs over JWICS (15,000 users),
- Intelink-S -- SIPRnet, explosive growth, much information at this level, sensitive but not secret
- fourth new one not shown on chart for security reasons
Intelink is a service (application on top of JWICS stack). In implementation, it uses existing networks (JWICS). They did not have to build new infrastructure but just add on to what was there. Intelink is one of the front ends for Global Command and Control System (GCCS).
A main goal is information transfer. Statistics: 45 gigabytes per year, 150,000 accesses per week. 80% of NSA production available within 2 hours. Intelink-S is growing 50% a month. From initial 19 sites there are now 70 sites and 109 servers with 50,000 users.
Intelink uses a subset of normal Internet tools (web, ftp, gopher, ...). It uses a common set or profile or stack of (COTS where possible and GOTS) standards:
- search
- visualization
- profiles
- virtual room
- conferencing
- workflow
- asynchronous information
- ...
- Showme
- Web
- Gopher,
- Oracle, other DBMS
- comm. level standards
Intelink Challenges:
- maintain adequate security (#1 technical problem)
- communities of interest (not unduly restricting access)
- increase bandwidth -- hard in overseas environments with poor infrastructure
- maintain currency -- must be affordable and stay competitive
- improve the knowledge base of producers and users -- ease of use
- work smarter and not harder -- collaborate with industry - open systems - huge amount of modern technology as well as legacy systems = ball and chain -- must still support 60s and 50s technology - teletype and 300 baud
- Chaos is goodness, it encourages innovation and good ideas. There is a continuous need to manage evolution.
Q: do your standards integrate security or wrap? A: The vision is flow down and up of information of various security classifications. Right now, however, we use standard COTS tools not specially augmented with multilevel security (since these tools do not provide the right hooks). Different levels of security are provided by different physical levels of security so upgrading and downgrading information between security levels is an issue.
About OMG and Internet SIG, Craig Thompson, OBJS
As an introduction to OMG for the Intelink community, Thompson explained the overall OMG OMA architectureincluding ORB and ORB interoperability, Object Services, Common Facilities, Domain Objects, Application Objects, and how we might add Internet Services to the horizontal OMG services. He describedthe progress of the Internet SIG to dateas well as responsibilities of OMG SIGs and Task Forces. Finally, he requested attendees to read and provide feedback on a draft OMG Internet Task Force Missions Statement and RFI that we will be proposing to the OMG Platform Technical Committee to reconstitute OMG Internet SIG as a Task Force. [See section After the Meetingbelow-we did issue the RFI but deferred indefinitely the request to become a task force.
DARPA, CORBA and the Internet, Mike Dean (BBN)
Internet SIG hosted presentations by the DoD Command and Control JTF/ATD program at Meeting #3in San Diego in January 1996. JTF is addressing command and control in a new era - the problem areas are smaller, come-as-you-are situations, both military and humanitarian.
Many DARPA and Rome projects funnel their technology into JTF. In general, R&D moves to Advanced Technology Demonstrations then to Advanced Concept Technology Demonstrations then to the ARPA/DISA program office then to Global Command and Control Systems (GCCS).
Mike reviewed the overall JTF architecture (overall emphasis is planning).
- Data Server -- uses OO model and OQL from ODMG, has query cache, resolve conflicts at different levels, ... and really is a service in the OMG sense rather than a server.
- Web Server - describes how new data (complex object graphs are stored). It looks like the relationship service and provides persistence and replication.
- Plan, Situation, Map, and Model server -- others they are working on.
Their work is WAN based. They use CORBA, C++, Web, and now Java. They note a progression: Stove Pipe --> frontend + app + backend data access --> component based. In their environment, bandwidth is a scarce resource -- applications become aware of QoS and negotiate this in a circuit oriented or datagram oriented way. [Note: OMG needs a QoS service along this line. -cwt]
Mike described their experiences with OMG technology:
- With 2000 fine-grained C2 schema classes, using straight CORBA and making ORB calls is not practical. This breaks IDL translators and even C++ compilers.
- The classes are implemented by different JTF servers. They need ORBstreams and passing objects by value. They are using an externalization service now.
- The CORBA event service requires IDL and requires recipient be a CORBA server. Many apps are X/Motif or data or Comm service or Unix signals - they defined their own unified Trigger Architecture which provides a common protocol for servers and is specialized for clients.
- IP Multilist is attractive. OrbixTalk is attractive.
- Asynchronous comm. is needed in WANs. CORBA deferred synchronous is available only thru DII. Need more.
- Windows NT is important.
- Implementation strategy: Noah's ark approach -- two of everything. The are using Orbix and Corbus. There are tradeoffs -- COTS and GOTS.
- Concerns: CORBA services only beginning to emerge, can't integrate services, specs flowing faster than implementations, code portability across ORBs.
JTF/ATD is influencing DII/GCCS and is on the bleeding edge. Emergence of Java is making them re-think some of their architecture and separating hype from reality is an issue.
Q: what is pain size for applet size? A: bandwidth limited.
Lessons Learned from Web* -- Smart Browser, Dumb Browser, Juggy Jugannathan, CERC, U W Virginia
Web* is a $14MR&D project to develop a patient information environment. Goals of the project are to leverage heterogeneous information systems and connect via CORBA and Web. The first generation architecture and implementation are deployed in two clinics in two hospitals. Now they are on the second round.
The use the Web as a front end and CORBA on the server. They started using Orbix when it came out in June 1993. Web*'s architecture is based on CGI script. But healthcare is session oriented where http is stateless. So they developed a State Survival feature; now Netscape has cookies. They also developed TclDii -- they intersperse Tcl into HTML and a CGI interpreter expands. The backend communicates to DBMSs. TclDii interfaces to TCL Library, Scheme, and CORBA libraries.
The approach they took was successful and provides a uniform interface to the entire clinic via forms.
Juggy recommends burying CGI.
- can't check arguments and needs to be faster - Java does this better now but is by itself it is a Band-Aid.
- event notification is painful
- sessions and state is painful
- consistency checks and BACK button anomaly
- need standardized control and session management
- performance, performance, performance
The competition is, a doctor can scan an entire patient record in 10 seconds versus the 5 seconds per each page that Web pages take. So they prefetched patient record by hacking Mosaic. But saving dictation still takes too long. The current implementation saves dictation to Oracle directly but CORBA sets up the negotiation.
HTTP 1.1 is adding session state. Java moves session state to client side. They really want an implementation of COSS (CORBAservices) in Java. An alternative is a plug-in approach. They want Java migration, like Obliq. How much to do in Java, Javascript, HTML? If no complex interactions then use HTML else use Java. They want a security enabled infrastructure. CORBA standards are evolving, implementations lag. HTTP is OK for static dissemination but for anything else use CORBA/Java. For now, use Java, Black Widow, OrbixWeb with plugins.
Not every ORB claiming IIOP is so at present. Juggy suggests making IIOP into another protocol supported by the Web and major vendors. He suggests IIOP URL as an object reference. So how does client side proxy make use of this?
Java IDL plugins -- part of JOE. All IDL to Java mappings and OrbixWeb mapping and all are slightly different. Problem is getting locked into client process and portability. JavaSoft has distanced from SunSoft -- way different. Being beta for JOE is what you are looking for.
DISCUS - Imagery, CORBA, and the Internet, Dwight Brown, US Government
The DISCUS project does R&D into OO software infrastructure (4-5 years, 1-2 M per year). They have several Government users and do tech transfer into NSA, NIMA, others, as well as injecting government requirements into commercial use.
The 1993 view of DISCUS was as an interoperability backbone. The system was demoed in 1994. Discus provides three special services for imagery, map, and text. 1995 work ties in the Intelink web browser to access CORBA via DISCUS wrappers. Now they are beginning to define applets for functionality. They define DWO = discuss web objects.
They commissioned a study on DISCUS and OLE/COM and concluded that investment in CORBA is worthwhile for the next 5 years. Work in progress is on DISCUS/Microsoft integration.
With respect to Tech Transfer, many contractors have the DISCUS framework. All source is given to tech transfer partners. New versions appear in a 1-1.5 year cycle. The next version of DISCUS will appear in October 96. It uses Orbix 2.0 and ObjectBroker.
Challenges: can't share object services across ORB implementations; OMG is not interoperable with Microsoft; must solve DCE integration issue; Java binding, availability of commercial products with IDL.
Interlanguage Unification (ILU), Bill Jannsen
Reference: ftp://ftp.parc.xerox.com/pub/ilu/ilu.com
The ILU project use a central object model and generates stubs to it. They took this approach to generate their own IDL and then support many RPCs. Also, they support many transport protocols. They decided not to make new standards of their own. They wanted to define existing services and talk to it via ILU (e.g., framemaker, printer, ...) so each service preserves semantics and bit patterns. So ILU should work efficiently within same environment and/or optimized across different cases. Result: they have the only ORB that works across multiple languages. ILU supports POSIX, Windows, MacOS (decayed), and provides a free ORB.
ILU ISL is IDL plus some other things.
- Optional which is a typed union or NIL.
- networked GCas singleton classes to support native RPC.
- "sibling" qualifier to allow two items that have stronger unspecified relationship.
- asynchronous message -- heavily used.
- Functional methods can be memoized in client side cache. Can use ILUs default main loop or user level thread or kernel level thread packages.
- IDL use of extensions is different and leads to non-portability so ILU encapsulates ISL and restricts IDL to hide these extensions.
ILU's CORBA IIOP protocol works well and can find bugs in other IIOP implementations. ILU has run-time registration for new RPC protocols.
Transport protocols use a streams layering approach and layers can be composed, e.g., rfc1831rm | security | rfc1831rm | tcp. New transport protocols can be added at runtime.
The ILU team has written seven name services - their conclusion is, name services are application specific. So they provided simple binding to find a name service object. So people use that as a name service!
CORBA IDL has deficiencies due to its C++ heritage, e.g., optionality and /include is bad idea.
ILU extends CORBA with ... long list including different languages in same address space.
The ILU team is planning to add real attributes and client-side caching. They want to support call-by-value. They don't want to support any (a bad idea).
ILU uses standard C due to portability and standard compilers.
Many different projects use ILU including the W3C (Jim Gettys) super efficient RPC in http-NG.
Handles, Objects, and the Web, William Arms, Corporation for National Research Initiatives, CNRI
Three Digital Libraries projects are using ILU. Some places to start on the web are
http://www.dlib.org/dlib/december95/
The key problem in Digital Libraries is large scale decentralized management. The architecture they have settled on distinguishes digital library objects, how to name Internet resources, and how to talk to them in repositories (repository access protocol).
DLO (digital library objects) involve name + metadata + content blob(s) + signature + security model. Naming is discussed at IETF meetings (location independence, globally unique, persistence of name over long time, fast resolution, decentralized admin. and control). A client interacts with handle and repository systems independently. Mirroring, caching, ... is the difference between working and not working. The Internet security model is important. So combining negotiated access combining access and security is a main idea.
They completed design work done during the summer, 1995 and a demo system was completed in Dec95. They used ILU 1.8 (and are moving to 2.0), Shore (from Wisconsin), C++, Netscape CGI, and Python script. The system has been bug free and productivity gains are apparent.
Issues:
- bits on the wire -- want to interoperate with repositories implemented any way they were or will be implemented. So what do messages look like?
- security model -- definitely a CORBA security model but not sure how it interoperates with non-OMG security models.
Q: how are addresses resolved for known items. A: first with DLS and then CORBA.
Q: how to integrate this into web crawler. How is meta data made available to web crawler? A: Much of work is in D-Lib magazine (www.dlib.org).
Q: about meta data A: Warwick framework was the conclusion from a recent workshop. Suggested decentralized meta data.
CORBA and the DoD High Level Architecture for Modeling and Simulation, Defense Modeling and Simulation Office, Dr. Donald, SAIC, for Dr. Judith Dahmann, DMSO
The master plan for modeling and simulation has yielded Common Technical Framework, which applies to Weapons simulation as well as engineering simulation.
The process started in 1994 to identify a next generation simulation architecture for DoD. It is folded with several other ARPA architectures. Now the work is handed to the DDR&E architecture group to go through a set of prototypes, so it is tested and usable across domains.
In the recent past, simulations made interoperable were so idiosyncratically. Now the move is toward a distributed operating environment run time infrastructure consisting of
- federation architecture
- object management
- declaration management
- ownership management
- time management
The object model template documents two kinds of object models. Federation of simulations. So federation has its own object model, includes a contract of shared runtime information. The Simulation object model (different sort of OM) is a brochure of meta data telling about a given simulation. These become available via libraries on the Internet.
There are various federations -- one includes an engineering federation with people and machines in the simulation loop; another is faster than real time. A goal is a common run time infrastructure across broad DoD.
[Richard Weatherly takes over for the rest of the presentation.]
They are using IDL. DMSO is neutral using CORBA. There is one universal RTI Executive, from which a federation execution object is created. This is used to create or destroy federations. So there are five categories of service. They have several QoS attributes, many outside of today's CORBA. So they have a hybrid. In the comm. layer, the goal is fast comm. so what this gives is setting in place and managing the simulation though running it fast and not in CORBA (so far). They are doing many Inter ORB experiments. Experience has been mixed. ANY is bad. They must go out of the CORBA framework for the visualization community.
Q: Can DMSO simulation result in new OMG SIG. A: there is interest in using OMG as a tech transfer vehicle.
Q: Fortran support for ILU for large simulations. And modsym, c++, ... others. A: Techncial specifications at _http://www.dmso.mil_where there is a wealth of specifications. One stop shopping for DoD DMSO.
CORBAnet, Kerry Redmond, DTSC
Check out: http://corbanet.dstc.edu.au
The purpose of CORBAnet is to demonstrate the interoperability of ORBs. The application shows many companies, each has company meeting room, with set of bookings, each booking is a single meeting. Each company models company, room objects, meetings, ... . The demo shows many ORBs working together. You select whichever you want for your client.
The architectures supported:
- CGI - CORBA client
- Java applet - CORBA client
- client-i talks to server-j
The lessons learned are:
- CORBA 2.0's interoperate (at least at the level of the demo).
- WWW provides a platform independent GUI for CORBA.
- using CGI-bin is OK but using Java ORBs is much better. Benefits are: clients to not have had to purchase CORBA. Avoids hand marshaling and demarshaling code.
- The demo does not use security (currently). OMG has not defined secure interoperability, just APIs.
DTSC has been using Black Widow and Sun JOE recently. The Java language binding will go through OMG as an RFC providing a Java language binding within OMG. But this must happen in Netscape and IETF. Last week, Netscape killed their internal ORB and are moving toward Black Widow's Java binding.
Free software -- students need to have free software. CORBA must be free.
Q: Does CORBAnet use IIOP? A: waiting soft software for outside the firewall. Still has an Orbix only implementation this minute.
Q: How rich is IDL used in demo. A: Not incredibly rich--no _union_or any. Just enums and sequences. Would be interesting to extend it.
Q: What is next? A: Interoperability testing on a number of services. Many ship with naming. No sense in doing this for persistence. But yes for naming, transactions, queries, especially security, ....
Databases and the Internet, Bhavani Thuraisingham (MITRE)
Bhavani's talk identified a lot of research issues for the traditional DBMS community based on recent meetings in Milan and Hong Kong. They want to set up an IEEE conference on DBMS and the Internet and are working on a White Paper for September and a conference by April 1997.
There is increasing demand for accessing DBMS over Internet --- text to date, now relational and OO. But there are outstanding issues. So they are looking at implications of DBMS and ORBs. The picture is Internet connecting many DBMSs. Issues are object management, query management, transaction management, storage management, security management, integrity management, and metadata management. A reference is the June 1996 CACM on electronic commerce.
What is the impact of the Internet on these issues:
- data in SGML, HTML, need to integrate structured and unstructured data and meta data. Do we need a standard data model? So many groups will represent information that no one model is possible. Should we integrate relational. OO and hypertext models?
- global generic schemas -- same as five level federation architecture of last 15 years.
- query language - depends on data model. Various research prototypes. Java access. Mappings between global and local languages. So will there be one or many query languages?
- Query management - in heterogeneous environments, how do you build cost models and open optimizers. Different controls and administrators. Do you need to have central sites for cross-DBMS joins?
- mediation
- agent based query processing.
- transaction management - weak serializability. Multiple users want to buy a product. Coarse grained locking. Multiple users bid item. So don't lock. So need a flexible transaction model with long and short and workflow-based transactions.
- storage representation schemes -- variety needed for Internet - research on B-tree extensions.
- massive DBMS systems like digital libraries. Massive Digital Data Systems Initiatives. 15 projects. Integration of DBMS and mass storage systems.
- security management -- federation and negotiation of multiple security administration policies. Security constraint extensions to SQL. Authentication, Copyright, Plagiarism, multilevel security.
- integrity -- data quality, working with correct version, accuracy of output
- meta data management -- different groups mean different things -- information on tools, resources, ... Need information on history of access patterns. Who owns meta data? Individuals or Internet administrator? IEEE meta data conference 2 months ago. Lots of papers on meta data and WWW. Again next April.
- real-time processing, collaboration, workflow, visualizing responses, data mining, data warehousing, ...
CORBA provides ways to interoperate. But CORBA does not solve DBMS heterogeneity of different data models. Current work is on coarse grained encapsulation of whole data sources but work on fine-grained encapsulation is still needed.
Q: need to add QoS to list if you will playback streaming data.
Comment: CORBA + services = more than a DBMS. So we will see richer architectures.
Semantic Interoperability Framework, Rainer Kossman, Bell Northern Research (now Nortel Technologies)
Rainer's collaborator is V. Ivonnikov (Institute of System Programming, Moscow).
Rainer presented a theory view of how to add behaviors to object technology.
Object covers provide hierarchical nesting of objects_. Identity_ and Location are meta information shared objects in an object space. Cover is the word they use for a context so a location cover fault moves objects across boundaries. Objects are also covered by a class (cover), orthogonal to the other two covers. C++ -> Smalltalk is a class cover fault. Other covers are security covers, persistence, activity, ... Java thread is a possibility. A question was, should type equivalency (e.g., of Fahrenheit and Centigrade) be considered a cover? [Other covers not mentioned in the talk: versions, replication, transactions/concurrency, distribution, --cwt.]
Q: what happens if we transport objects across cover boundaries. Repositories raises the issue: what happens when we ask a query that crosses cover boundaries? Are repositories themselves the same as object engines? They are working on understanding this better.
Q: how do I plan when converting between representations. A: A binding time issue is, binding at design time and statically or dynamically and even via traders. Do we move object to class or class to object?
Q: is this related to transactions? related to optimistic transactions and lazy update.
Managing Transition in Technical Chaos, David Lehman, MITRE
How do you add a new system into an existing environment. As a CIO, when do you commit 50Mtoatechnology,whendoyoumakethattransition?"Godcreatedtheworldinsevendaysbuthadtheadvantageofnoinstalledbasewhenhedidso."DoDCommandandControlSystemofSystemsislikeamultinationalcompanythatiscontinuouslymakingvarioussubsystemsinteroperate−therearemanystovepipesystemsandfundingfiefdoms.Theinteroperabilityproblemis,canapersongettheinformationheneedsthoughthemixandmatchofsystemschangeswithBosnia,Haiti,...OnesolutionisaCommonInfrastructureApproach−−youmandatestandardsbeforetheyaretruestandards(liketheCIOthatbethiscompanyonatechnology).Plus,youneedtoevolvetheinfrastructure.Sohowdoweacquiresystems?Theoldviewwas,YouwriteaspecbutwhenSWisreadytheenvironmenthasevolvedsoyouspend6050M to a technology, when do you make that transition? "God created the world in seven days but had the advantage of no installed base when he did so." DoD Command and Control System of Systems is like a multinational company that is continuously making various subsystems interoperate - there are many stovepipe systems and funding fiefdoms. The interoperability problem is, can a person get the information he needs though the mix and match of systems changes with Bosnia, Haiti, ... One solution is a Common Infrastructure Approach -- you mandate standards before they are true standards (like the CIO that bet his company on a technology). Plus, you need to evolve the infrastructure. So how do we acquire systems? The old view was, You write a spec but when SW is ready the environment has evolved so you spend 60% on maintenance. DoD SW expenditure was 50Mtoatechnology,whendoyoumakethattransition?"Godcreatedtheworldinsevendaysbuthadtheadvantageofnoinstalledbasewhenhedidso."DoDCommandandControlSystemofSystemsislikeamultinationalcompanythatiscontinuouslymakingvarioussubsystemsinteroperate−therearemanystovepipesystemsandfundingfiefdoms.Theinteroperabilityproblemis,canapersongettheinformationheneedsthoughthemixandmatchofsystemschangeswithBosnia,Haiti,...OnesolutionisaCommonInfrastructureApproach−−youmandatestandardsbeforetheyaretruestandards(liketheCIOthatbethiscompanyonatechnology).Plus,youneedtoevolvetheinfrastructure.Sohowdoweacquiresystems?Theoldviewwas,YouwriteaspecbutwhenSWisreadytheenvironmenthasevolvedsoyouspend6033B in '94. A second view is Evolution or chaotic system acquisition.
What you want is interoperability and diversity. It must reduce training and solve user functionality problems. And you need a roadmap or plan to predict future spending. And you need a way to evolve the functionality and replace parts. One idea is a community of interest. Within a group, do what you want but between groups then communicate this way.
The Web with a common interface via CGI or Java to any backend DBMSs gives us a real leg up on interoperability. CORBA encapsulation converts a complex of boxes view into a simpler view of a backplane and a collection of modules (much simpler picture). So the transition for a system-of-systems is (a) web like and (b) CORBA like with system of systems becoming collection of services.
Advantages of OMG architecture are:
- promotes diversity and interoperability
- condones technical innovation
- supports recapitalization plan
- reduces training requirements
- isolates software differences to components of system
- others
Advantages of Web
- reduced training
- integrated queries across multiple DBMS
Challenges
- problems no worse than today
- still must restructure budget across system of systems
- identifying C2 business objects
- when to lead and when to follow and where is the middle ground
- haven't done much about semantics across system
Q: CGI scripts are minutes in investments; CORBA is much, much more--what is the answer?
Objects and the World Wide Web, Bob Marcus
See http://www.amsinc.com or contact Bob via email at bob_marcus@mail.amsinc.com
People with problems currently have many pieces of solutions to choose or fit together: apps, 4GL, Web Browser, Web Server - ORB client - middleware - ORB server - legacy systems, etc. Few will architect the solution, many will develop Perl scripts. So the winner so far is the Web and Mobile code -- rapid implementation. We can expect to wind up with tons of legacy systems.
Bob talked about the upcoming W3C-OMG workshop and about the future of CGI including Netscape extensions, Microsoft extensions, and Oracle (which just crashed its web group).
Bob talked about various Web architectures:
- He pointed out that document management is still via file systems. The DBMS vendors want us to move documents into object databases to get versioning, notification, meta data for documents, security, etc.
- CGI scripts provided cheap way to wrap databases and other applications. But now every interface becomes HTML and HTTP and these are protocols were not meant for APIs.
- Browsers led to helpers (to extend the browser).
- The next idea was to add a back channel from helper to backend app. e.g., can be a CORBA call. So you use the web to launch a back channel, which launches a client-server application.
- Pretty soon you have 20 plug ins and lose track. Plug in can do anything (giant security hole). There is a page of mean applets that grab your computer (obnoxious noises).
- Black Widow has Java on front and back end. Orbix downloads a CORBA client.
- Another architecture is a web proxy server -- giant cache across Great Britain at one university. Companies are doing this. The purpose is load balancing. ANSA tried a protocol switch with http in and IIOP out. These can do brokers and replication.
- So what next: federated middleware broker architectures. Some want to use messaging or transactions or DBMS or ... but are not wanting to go through a CORBA. People have decided that they will not have one central bus across the company. There will be more than one middleware in your environment.
Bob provided simple definitions for service, server, client, broker (middleware SW that facilitates communication across distributed clients and services), two-tier, three-tier. Things can be brokers and servers at once.
Examples of middleware are Web, ORB, transaction, messaging, data access, agent, trader. These are all the things you can put in the middle of the architecture. Orbix with ISIS as combinations. MQSeries defers messages to later (e.g., at night). Almost all groups want more than a few of these. So a challenge in architecture is how to put together and manage various middlewares.
Web talks to Java/Web client and downloads transaction client or DBMS client via federation of brokers. Now maintenance occurs from the desktop. Use of CORBA in the middle required higher level of training. Right now, no one is saying, the only way to do this is with objects.
Common Imagery Information Facility (CIIF), Ron Burns, Central Imagery Office
The objective is to define a series of APIs specific to the Imagery community (a domain). Standard APIs will enhance interoperability and portability, facilitate sharing imagery and services, and facilitate insertion of low-cost commercial technology. They are avoiding tie to any one technology, even OMG, though they are using IDL and would use OMG services.
They are aiming for open systems but note that no matter how open you think you are, you are a stove pipe to someone else.
They have defined a Reference Architecture. They draw the OMG picture but interpret the Distributed Computing Infrastructure to include CORBA, DCE, Network OLE, ... In their viewgraphs, they use inheritance so Common Facilities inherit from Common Services and Imagery services inherit from both, as appropriate.
Services in the imagery area include collection, processing, dissemination, exploitation, library element (which contains metadata catalog), video imagery and access, profiling of standing queries that are populated as new items appear in the library, mensuration, zoom, histograms, ATR, registration, image understanding, geopositioning, fly through 3D areas, and more.
The plan is to submit these standards to the appropriate standards bodies.
For more information, see http://www.itsi.disa.mil/ismc/ciiwg/ciiwg.html. You can also subscribe to _nitf-request@linus.mitre.org_with message body subscribe nitf name and you can email comments to nitf@linus.mitre.org.
Q: how about a SIG in this area? A: we tried this once before via requesting a GIS SIG and were unsuccessful but the time may be right now. One camp says, it is too late to standardize APIs and OO will be too inefficient. But doing nothing about interoperability is definitely not the answer.
Intelligent Agents, Mobile Agents, and CORBA, Sankar Virdhagriswaran (Crystaliz)
Sankar traced trends - from centralized computing to decentralized mini-computers with the next wave to be agile and web oriented. Agile organizations are project oriented; they cross distance, time, and computing infrastructure boundaries; they are cross functional, cross organizational, intelligent, collaborating communities.
He traced the WWW evolution: apps become WWW-capable, WWW publishing first, then comes collaboration.
Requirements:
- adaptability (content negotiation, moving computational objects) - Java moves to client and Telescript moves to server
- rich interaction
- scaleable across WAN, many web crawlers, now everyone wants to do distributed search (was a workshop on this last week)
- virtual including views on data and meta data
- annotations
Crystaliz is developing a product called LogicWare. Today's focus is information discovery -- to find partners. Companies provide products and agents hold "conversation" about products. In their Virtual Enterprise Transactions, simple agents (autonomous business entities) negotiate costs. Think of an enhancement of EDI. They view task management as change management in a distributed communication environment with agents traveling from server to server. Agents subscribe to other agents that watch for change events.
Sankar identified two approaches for mobile agents:
- homogeneous one language approach. Ex Telescript with an on the wire protocol.
- virtual machine and multiple languages and some protocols for bundling state and on the wire protocols for moving things around. RPC is a point-to-point and we are thinking about a higher level of support for migration. Don't standardize on the language.
OMG has mobile agent facility whose requirements are:
- support autonomous interactions
- let servers cooperate via partnership
- support dynamic subscription of interests and publishing of capabilities
- support facilitation
- support extensibility for specific types of agent server capabilities, for instance, to fork off requirements.
Many of these services must be on the server side. The vision involves mobile code, agents and mediation. The vision involves domain specific generic libraries usable by communities.
Sankar suggests the need for various services:
- networking services
- notification services
- capability services
- facilitation support
Mobile agent is like a mail message - so it is asynchronous and requires queuing and the ability to restart a process.
JOE, Maurice Balick, SunSoft
They have developed the Java ORB (JOE). Several other groups are doing this too. So the mix of a Java environment plus CORBA fit pretty well.
Scenario: a little travel company uses IDL to encapsulate travel services. They have Java ORB classes and stubs on their http server (any stock variety). A "document" is downloaded containing an applet to your client. Now your Java objects that are stubs are talking to your travel app on the server side, directly not via CGI.
The current version uses NEO protocol for JOE in which you have downloaded a CORBA client.
Why a Java ORB? because it extends your CORBA clients to all the machines on the WWW. So this means central maintenance and distributed delivery along with platform transparency.
This decreases the requirement of getting the IDL or application right the first time since it is downloaded over and over.
JOE is a Java ORB. Also provided is a set of productivity classes and advanced development tools. For instance, simple access to naming.
The idea is to make Java simple for programmers. No overhead to think in IDL. An IDL module maps to a Java package. Out parameters map to Java classes called holders. Q: will OMG and the commercial (sun, orbix, postmodern) endorse the bindings. A: The mappings are close now.
Q: as Java ORBs grow in use, should we have mapping of Java VM to OMG? e.g., do you want the mapping to go to the CORBA backbone or go directly through Java VM. Not working on this now, but instead are working on stubs and IIOP. The JOE Development Environment includes IDL to Java mapping
Challenges include:
- firewalls (CORBA across firewalls) - they first try to speak IIOP - then if they are behind a firewall they switch to http encoding and use server a plug-in that retranslates to Java. Your firewall needs customization.
- transient objects can live in Java client to act as server
- downloaded size is 100K-200K or 100-200 classes implementing your ORB. Right now this loading is painfully slow and happens one at a time so people install the library on the client manually. In the near future, this will be solved using JAR files that package several files as one compressed, customized core package.
- much Java will be bundled via ORB vendors.
- initial naming service and bootstrapping
- callback objects -- when you need a transient object on your client you ask the bridge to create it for you and download to you.
- connections restricted to HTTP server - if you give out addresses on other machines. They provide forwarding via a two step connection.
- persistence -- can't make local objects persistent but can do this on remote machine
- signed classes -- guarantee that code came from where it is supposed to come from -- more permissions than from unsigned classes
- bridge servers
- proxy objects and application services
- JDBC -Java Database Connection - set of Java classes that interface to DBMSs including ODBC.
- RMI -- developed by JavaSoft uses low level mapping of Java-Java across servers
- ActiveX
Sun is not making money on Java ORB but on Sun hardware and servers.
Q: what should OMG be doing in standardizing in the next year or two. A: Not helper classes until we have more experience. Yes for firewalls.
Internet SIG Business
We considered three items of business during this half day session:
SIG or Task Force?
We considered the issue of whether to escalate the Internet SIG to become an OMG task force.
Pros are:
- there is clearly a lot of work to do in the area of Internet-enabling OMG specifications as well as encapsulation of some existing and coming Internet tools and utilities
- this area is fast moving and important. OMG needs a forum focused in this area, the sooner the better
Cons are:
- there is likely to be some overlap with ORBOS, CFTF and possibly even domain TFs, though we could handle this in traditional ways by trading relevant services with these other groups if they have the band width to do the work.
Other considerations are:
- are there enough people in Internet SIG to populate a task force? There are typically 30-70 attendees so that is clearly enough. Are they the right people? that is, are they coming because it is a hot topic and to learn or are they informed? A mixture -- we have gotten some excellent speakers, do not have noticeable Netscape or Microsoft participation, but do have participation from other companies working in the area of the web and CORBA integration.
- if we become a SIG will we give up the informational presentations that this group has provided? probably we will go to a 2-day format and many of our briefings will be from RFI or RFP response submitters but we can probably still schedule ½ day of informational briefings
- should we try now to become a TF or wait until Madrid or later? a value in waiting is gathering inputs from key players so they participate in the formation of the group but a value in going ahead is timing (the sooner the better in fast moving field, and timing on when RFI might result in submissions (90 days or in time for the meeting after Madrid to evaluate responses)). Should we wait until the Java and Web - CORBA interfaces settle before trying to architect by committee? probably not, though this group will probably experience more initial change in its architecture due to the huge amount of activity in these areas. The real architecting will be done by respondents.
- should we decouple the RFI from the charter and vet it via the CFTF or ORBOS so it gets issued at this meeting? sounds like a good option in case the TF idea is shot down
We asked Richard Soley if he felt the TF would run into opposition. He was not sure, indicated it would not if its charter was sufficiently distinct from ORBOS and CFTF, but recommended that the group lobby with ORBOS and CFTF to expose as many people as possible to the possibilities of a TF and/or RFI before making a motion on Thursday for these.
Mission Statement
We reviewed a draft strawman mission statement for the proposed OMG Internet TF and spent some time wordsmithing the short document. The result is here.
Internet Services RFI
We reviewed a draft strawman Request for Information (RFI) for the proposed OMG Internet TF and spent some time wordsmithing the document.
Following the ISIG meeting
Subsequent discussions with members of the OMG Architecture Board and others led us to withdraw the idea of recommending a Internet Task Force at this meeting and instead focus on just the Internet Services RFI. It is felt we should make sure there is sufficient interest in the RFI and that the results are sufficiently non-overlapping with ORBOS and CFTF before starting up yet another Task Force.
Based on revisions to the RFI made during the ISIG meeting, Thompson and Sutton revised it, made copies, and developed a short infomational briefing on the RFI for presentation to CFTF and ORBOS TF.
On Wednesday, Thompson made a presentation to CF Task Force on the Internet RFI. That group agreed by a white ballot vote to recommend the RFI to the OMG TC. A number of people felt that the RFI might best be issued by ORBOS since it is at least partly related to plumbing. Following this meeting, Sutton and Thompson made another round of recommended changes that resulted from the meeting (e.g., remove references to the Internet TF).
On Thursday morning, Thompson presented the RFI to ORBOS Task Force. They recommended a few more changes (e.g., take out "quality of service," reference the RFP template) and then voted by white ballot to recommend to the TC that the RFI be issued by ORBOS.
On Thursday at the TC, Thompson made a short report on Internet SIG meeting. Later, Richard Soley, who chairs the Platform TC, called the question on a vote to issue the Internet Services RFI. Bill Jannsen (Xerox PARC) requested some final changes to remove some remaining language that indicated an Internet Task Force would subsequently be formed and RFPs issued by it. Bill Cox (Novel) agreed to help us make the changes and the motion to issue the RFI was passed by white ballot.