IBM Worklight Leandro Martins Ceccato IT Specialist

Apresentação em tema: "IBM Worklight Leandro Martins Ceccato IT Specialist"— Transcrição da apresentação:

1 IBM Worklight Leandro Martins Ceccato IT Specialist lmc@br.ibm.com
IBM Mobile Foundation Overview IBM Worklight Leandro Martins Ceccato IT Specialist

2 Mobile - O próximo passo na evolução da computação
Mobile/Wireless/Cloud Web/Desktop Cliente/Servidor Host/Mainframe Mobile é diferente: Transformação no modelo de negócios Ciclos mais rápidos, mais interativos Novos ambientes para suportar Key message: Computing continues to extend it’s reach and mobile is the latest extension to become fully embedded in the fabric of enterprise IT. But it does bring with it some unique characteristics. From a business perspective it is really transforming and creating new business models. These models must adapt to consumer mobile expectations and work on the end consumer’s own private device Mobile apps have much faster lifecycles and they are much more iterative than traditional applications There is a high degree of fragmentation of devices, OSs, form factors, networks, and languages, etc. that is forcing movement toward open standards that are cross-platform by default, e.g. HTML5. On top of the classic security threats, the mobile channel introduces new risks that are associated with the ease of which a device can be stolen or lost, jailbroken and rooted devices, etc. From a technological perspective, the mobile landscape continues to quickly evolve and, with no clear leader, companies are struggling to find a single promising standard to bet their mobile strategy on and protect their investment.

3 Mobile é uma prioridade das empresas
Crescimento dos dispositivos conectados na Internet Volume Unitário (Milhões) 600 1200 2010 2011 2012E 2013E 2014E 2015E WW Notebooks WW Media Tablets WW Smartphones WW PCs Mobile is an enterprise priority. The chart on the left is from a recent Well Fargo Securities report indicating the rapid growth in the number of smart phones worldwide as presented by the blue bar. On the right side we are reminded of key findings from the recent IBM Global CIO study indicating that mobile and cloud are the top spending priorities for CIOs. And by 2020 more than 10 billion mobile connected devices are expected to be in use. We see that mobile data traffic exceeded voice in 2010 and will continue to grow according to The Yankee Group “Less than five years ago, mobile data traffic made up less than about 15 percent of all total mobile revenue. “ Source: (August 26, 2010) Gartner predicts that by 2015, 50% of all online revenue will be generated from social and mobile apps. Source: Wells Fargo Securities, January 23, 2012 “Fostering the People: The Shift to Engagement Apps”

4 Mobilidade apresenta muitas oportunidades…
Business to Enterprise Business to Consumer Aumento de produtividade Agilidade em processos de aprovação Aumento de vendas devido ao comprometimento da equipe Extenção de aplicações existentes para funcionários mobile e para os clientes Reduz custos com transporte, manutenção que são relevantes para determinadas empresas Aumento da responsabilidade do funcionário Melhora na satisfação do cliente Comprometimento e maior fidelidade Venda personalizada de produtos Serviço ao consumidor Aumento de competitividade The mobile space presents large and varied opportunities for our customers including the business-to-enterprise benefits to an organization of increasing worker productivity, improving processing times, and efficiencies gained through extending existing applications to mobile workers and customers. In addition, mobile offers opportunities in the business-to-consumer or B2C space with benefits such as improved customer satisfaction, opportunities to deepen customer engagement and drive increased sales and levels of customer service allowing them to differentiate themselves. 4

5 … e traz grandes desafios para área TI
Mudanças no modelo corporativo Novas oportunidades de negócio baseado em geo-localização Qualquer hora, qualque lugar, transações comerciais em qualquer lugar Importancia das mídias sociais nos negócios Ciclo de desenvolvimento complexo Complexidade de multiplataformas com fragmentos Web, nativo, e modelo hybrido Conectar nos serviços corporativos de forma segura e escalavel Requerimentos únicos para mobile (interface de usuário, modo conectado/disconectado, atualização de versão, etc) Segurança e Gerenciamento Proteção de informaçào pessoal e confidencial Uso do próprio dispositivo do usuário Visibilidade, segurança & e gerenciamento dos requerimentos Top Considerações para Mobile: Segurança/privacidade (53%) Custo para desenvolvimento multi-plataforma (52%) Integração de serviços na nuvem para dispositivos moveis (51%) While the opportunities mobile presents are significant and mobile has become an enterprise requirement, there are a number of challenges clients face: First, at a business level, the basic models are changing in the way the business interacts and transacts with customers, employees and partners. Full business transactions need to be enabled with low latency request/response characteristics 24x7 from anywhere in the world at anytime. Knowledge of location can be important and utilized as part of the interaction. Social business interactions add opportunities and complexity to the space. Second, as we mentioned earlier the app development lifecycle is more complicated. In addition to being faster and more iterative, you have to deal with multiple device platforms and development styles. You have to securely integrate into back-end enterprise services and cloud and be ready to scale appropriately – even when demand occurs in less predictable patterns. On top of all that you have unique mobile requirements like a user interface that has significant restrictions in terms of real-estate. Third, you need to figure out how to protect your confidential information and the privacy of the participants – all while you are enabling connection through devices owned privately by the participants themselves and not controlled by the enterprise. You also have to figure out how to manage all the elements effectively from the device to the back-end platform. These are real challenges. Our recent Tech Report indicated the top three mobile adoption concerns: security/privacy, cost of development, integrating with cloud. Source: IBM Tech Trends Report

6 IBM Mobile Foundation V5.0
Um conjunto abrangente de produtos móveis, que fornece os elementos essenciais necessários para o desenvolvimento móvel, implantação e gestão. Mobile Foundation componentes: IBM Worklight Desenvolvimento de aplicativos móveis IBM WebSphere Cast Iron Hypervisor Edition Conexão avançada para cloud e integração com o back end. IBM Endpoint Manager for Mobile Devices Solução para o gerenciamento de dispositivo mobile(MDM) Solução completa para desenvolvimento móvel, gestão de dispositivos e conectividade IBM Mobile Foundation delivers a range of app development and management capabilities that support a wide variety of mobile devices and mobile app types, while leveraging existing web technologies skills and investments. The IBM Mobile Foundation family of products includes: IBM Worklight:  to build, run and manage cross-platform mobile apps WebSphere CastIron: to connect mobile apps to a variety of Cloud and back-end systems IBM Endpoint Manager: to control and manage end-user mobile devices

7 Desenvolvimento de aplicações multi-plataforma IBM Worklight V5.0
Desenvolvimento flexível, integração de back-end e gerenciamento de aplicações utilizando tecnologias baseadas em padrões e ferramentas. Middleware otimizado para plataforma mobile trazendo uma camada de serviços para atender as necessidades de mobilidade para funcionários e consumidores. Principais funcionalidades: Abordagem aberta para integração de bibliotecas de 3 ª Forte estrutura de autenticação Dados criptografados em modo offline Conectividade corporativa com back-end Push unificado Coleta de informações para análise Atualizações remotas e desativação remota Desenvolvimento rápido e de baixo custo, integração e gerenciamento de aplicações ricas e multi-plataforma IBM Worklight V5.0 enables rich, cross-platform application development to meet the needs of the mobile enterprise. Leveraging standard technologies and tools such as HTML5, CSS and JavaScript, its open approach allows organizations to develop rich HTML5, hybrid and native apps for a wide spectrum of smartphones and tablets, while helping reduce time to market, cost of development and ongoing maintenance efforts. IBM Worklight V5.0 includes mobile-optimized middleware that serves as the gateway between the app, enterprise back-end systems and cloud services. It is designed to integrate with the existing infrastructure of the organization and leverage its existing resources and processes. Among the various capabilities of this product, our customers can benefit from: Leveraging the existing enterprise authentication facilities and user credentials, enabling support for employee-owned devices and helping developers lower the overall cost and complexity of authentication integration. Offline availability of the application that is enabled by encryption of locally stored data and offline user authentication. Back-end connectivity mechanisms supported by various security mechanisms. A unified push notification framework and an administrative console for centralized management of all push rules and event sources. Built-in and customizable data collection and reports that are exportable to the organization’s BI systems. Direct update of web and hybrid applications from sever to client enabling version control and access management of deployed apps. Runtime skins packaged with the application file to ensure the app’s optimized performance on different devices of the same operating system (supporting scenarios such as different form-factors, touch vs. tactile interfaces, different levels of HTML support, etc.).

8 Gestão Unificada dos dispositivos IBM Endpoint Manager
Atende às questões de políticas de implantação, segurança e complexidade do aplicativo, políticas BYOD para apoiar uma força de trabalho cada vez mais móvel “Painel único” para dispositivos móveis, laptops, desktops, e servidores que podem ser escalados em algumas horas Principais funcionalidades: Agente e sync baseado em op’~oes de gerenciamento Inventario de Hardware, OS, app e performance dos dados Loja interna para distribuição de app Politicas de segyurança e gerenciamento Controle de informação no dispositivo Portal de auto-atendimento parao funcionario Escalável e com uma estrutura leve Visibilidade em tempo real e controle com flexibilidade para endereçar novos desafios.

9 Sobre a Plataforma Como trabalhar com uma plataforma Mobile de aplicação aberta, completa e avançada para HTML5, os aplicativos híbridos e nativa? 9

10 IBM Mobile Foundation Visão de Arquitetura
1010 IBM Mobile Foundation Visão de Arquitetura Development Lifecycle Tools Firewall or Security Gateway IBM Mobile Foundation IBM Worklight IBM End Point Manager for Mobile Devices Elastic Caching CastIron Hypervisor Edition Mobile threats and security Enterprise Apps SOA & Connectivity (Messaging, ESBs, Cloud Integration, Governance) Analytics Decision Management Business Process Management Social Software

11 Componentes do IBM Worklight
IBM Worklight Studio O mais completo ambiente, extensível com reutilização máxima de código e otimização por dispositivo IBM Worklight Server Notificações Unificadas, skins em tempo de execução, gerenciamento de versão, segurança, integração e entrega IBM Worklight Runtime Components Que Expõe Bibliotecas Extensível e APIs cliente e interfaces com a funcionalidade nativa do dispositivo ← IBM Worklight Console Uma console baseada em Web para análise em tempo real e controle de seus aplicativos mobile e da infraestrutura 11 11

12 Worklight Application Types
Browser Access Web Apps Hybrid Apps - Web Hybrid Apps - Web Hybrid Apps - Mixed Hybrid Apps - Native Apps Native Apps Requer conhecimentos específicos, maior custo e tempo para desenvolver. Pode entregar uma melhor experiência final ao usuario Escreva em HTML5 JavaScript e CSS3. Rápido e barato para desenvolver, porem menos poderoso que o nativo Código HTML5 e bibliotecas do Worklight empacotada na aplicação em native shell. Código WEB com a utilização de código nativo para uso específico, garantindo melhor experiência do usuário. Mobile Browser Web Code <!DOCTYPE html PUBLIC <html> <! - - created <head><title>XYZ</title> </head> <body> </p> </body> </html> Native Shell Web Code <!DOCTYPE html PUBLIC <html> <! - - created <head><title>XYZ</title </head> </body> </html> Device APIs Native Shell Web Native Device APIs <!DOCTYPE html PUBLIC created </p> </body> </html> Native Application Device APIs Browser Access Downloadable Downloadable Downloadable

13 “Downloadable” (Nativo) das Aplicações
Lojas Aplicações Alta qualidade e experiência do usuário no acesso ao dispositivo completo. Plataforma específica, exige conhecimentos únicos, caros para desenvolver e manter. File System (do Dispositivo Mobile) Aplicação Nativa (Java/Objective-C/C#) Sistema Operacional Mobile

14 Aplicações Web Servidor Web
Escrito em JavaScript HTML5 e CSS3. Rápido e barato para se desenvolver. Menos poderoso do que o acesso ao dispositivo de forma nativa e limitada. Browser Mobile Aplicação Nativa (Java/Objective-C/C#) Sistema Operacional Mobile

15 Sistema Operacional Mobile
Aplicações Hibridas Lojas Aplicações Combina o melhor dos dois mundos: Principalmente escrito em HTML5, CSS, JS, permitindo o acesso total aos recursos do dispositivo. File System (Dispositivo mobile) Container Nativo HTML, CSS, JavaScript Sistema Operacional Mobile 15

16 Single Shared Codebase
Common code placed in primary file Environment optimization code is maintained separately

17 WYSIWYG UI Construction - DOJO

18 Preview in browser Perform device specific tests in the Mobile Browser Simulator: supports PhoneGap and Worklight client API

19 Runtime Skins – Casos de uso
Diferentes tamanhos de tela Diferentes Densidades Diferentes Formas de input Suporte para HTML5

20 Push unificado iOS Dispatcher Notification State Database
Polling Adapters Unified Push API Notification State Database iOS Dispatcher Apple Push Servers (APN) Worklight Client-side Push Services iOS Push API Back-end System Android Dispatcher Android Push API Google Push Servers (GCM) Worklight Client-side Push Services Message-based Adapters User-Device Database Back-end System SMS Dispatcher 3rd Party SMS Gateway SMS API 1 – Dispatching notifications by polling back-end apps or receiving back-end-originated events 2 – Uniform server-side API for pushing notifications via Apple, Android, BlackBerry and SMS 3 – Maintaining push state of each user and device details 4 – Dispatching the notification via the appropriate notification service 5 – Uniform client-side API for subscribing to notifications and handling them on the device 6 – Monitoring and controlling notification delivery; Statistics of notification delivery Administrative Console 20

21 Flexibilidade com Push Notification
Uma aplicação com multiplos dispositivos Multiplos eventos para a mesma aplicação Multiplas aplicações utilizando o mesmo evento Multiplos usuários logados na mesma aplicação

22 Gerenciamento de push

23 Solução IBM de Construção Centralizada
Source Code Repository Worklight Build System Nitobi’s build service is a great solution for developers who need an easy-to-use cloud-based system. For those companies who are looking for a powerful, in-house build system that integrates with existing ALM or continuous integration environments, Worklight offers a “Centralized Build” mechanism which is installed within your own infrastructure. The Worklight build mechanism routes code between computers, so that iOS projects, for examples, are compiled on a mac, whereas Windows Phone apps are compiled on Windows. This mechanism provides a controlled build environment for multiplatform app, that keeps the source code within the boundaries of the organization, and is already integrated with leading ALM solutions, such as IBM’s Rational Team Concert. 23 23

24 Coleção de Dados e Analíticos
24

25 Análises de uso – Relatórios por Plataforma: Total de aparelhos únicos
– Relatórios por Aplicação: Novos aparelhos Acesso por Ambientes Visitas diárias Hits diários

26 Visão Worklight Studio Worklight Server Mobile Device Back-end
Worklight Console

27 Referências Para saber mais sobre mobile corporativa da IBM, visite:
Worklight Developer Edition Free

28 Mobile Security Measures
Mechanism Benefits Details Encrypted offline cache Protect against stealing sensitive information via malware, stolen devices Uses AES256 and PCKS #5 for on-device encrypted storage of app-generated information, with random server-generated numbers for high security Allows user authentication when server is offline Implemented in JS (highly obfuscated) with optional native performance enhancements SSL identity verification for AJAX Protect against man-in-the-middle attacks Client-side AJAX framework automatically verifies Worklight-server credentials Client code attestation Prevent impersonation by phishing apps Protect apps from manipulation by malware Challenge-response based mechanism for proving client-application identity Uses tamper-resistant self-inspecting code Remote code updates Ensure timely propagation of critical security updates to entire install base New versions of the code can be distributed without requiring update of the app (currently JS/HTML) Remote disable of specific versions Server-side console allows configuration of allowed app versions. Administrator can force users to install security updates to the native code Authentication process framework Lower the cost and complexity of robust integration with the authentication infrastructure Server-side architecture for integration with back-end authentication infrastructure based on JAAS, with Authentication realms Client-side framework for asynchronous login requests on session expiration Server-side safeguards Prevention of SQL injection XSRF protection Prepared-statement enforcement Validation of submitted data against session cookie Device identification Prevent account-hijacking Safely report device ID to the server Identifying a user with specific devices

29 Mobile Security Measures (cont’d)
Mechanism Benefits Details Enterprise SSO integration Leverage existing enterprise authentication facilities and user credentials Enable employee-owned devices Client side mechanism obtains and encrypts user credentials, sends to the server with requests Encryption incorporates user-supplied PIN, Server side secret and deviceID Credentials cannot be retrieved from lost or stolen device VPN alternative Enable the secure delivery and operation of mobile applications for employee owned devices or device types not allowed on the corporate network Enable the secure delivery in cases where the installation of VPN client on mobile devices is not possible or complicated to manage Client side and server side framework act as SSL based VPN Network access control and policies pre-configured in the client side framework layer Network access and security measures updated using server side framework On device encrypted storage to prevent compromise of sensitive data