Proceedings

Abstract:

XML is becoming the de facto business document interchange language for the Internet. Technologies such as SOAP and EBXML have been developed within the XML framework. Digital security standards and techniques are now being applied to XML, and to 'business webs' built using XML and Web Services. This presentation discusses these initiatives and the issues being encountered when applying security principles of confidentiality and non-repudiation to XML. Drawing on practical experience in Vordel projects, this presentation looks at how Web Services can be applied in the Financial Services industry to provide for improved secure partner and customer integration for the delivery of products and services.

Concise Statements

1.How banks and insurance companies use Web Services for secure partner integration

2.Security framework required for XML transmission over public networks

3.How to ensure integrity of XML messages

4.How to abide by regulatory frameworks when transmitting XML

Additional Comments

1.About the customer

Large financial services institutions, with CSOs, CIOs, Security Architects and Senior Business Managers as the main audience.

2.The business need or challenge

To securely extend services, products and expose business processes to trading partners - such as banks and insurance companies. To achieve secure partner integration over the internet rather than via proprietary networks.

3.The solution and its implementation

A secure solution that filters XML data streams based on content and identity delivered by Web Services platforms such as BEA's WebLogic, IBM WebSphere and .Net

4.Business Improvements due to the solution

*Generate increased ROI by leveraging existing security infrastructure

*Facilitate secure integration over open networks

*Quicker route to market for new services requiring security

5.Key issues describing what attendee will learn

*The security challenges associated with using XML

*The inability of traditional security to meet these demands

*How new security standards will complement existing security infrastructures and technologies to provide complete solution.