Secure Web Services Application

Business Case:

A large packaging institution required an enterprise system to process XML invoices, encrypt the contents of the data, digitally sign the content, and transmit the information over a secure HTTPS connection.  Once the data was confirmed by the receiving party, the processed information needed to be loaded into downstream systems or, in the event of errors and/or failures, notify external systems.

The project had an aggressive time-to-market deadline of 4 weeks in order to be deemed successful.

Solution: 

CapTech designed a J2EE application to process the messages using Java Messaging Service (JMS) to communicate with MQ Series queues.  The business logic was encapsulated using Stateless Session Enterprise Java Beans; whereas, the messages were managed using Message Driven Enterprise (MDB) Java Beans.

The application utilized Web Services to transmit the invoice data over secure HTTPS connections.  The contents of the data were digitally signed using private keys.  The messages were encrypted using the public key and X509 certificates.  The message was then transmitted via a secure Web Service call to the recipient.

Tools: 
  • J2EE technology including:
    • Secure Web Services
    • Enterprise Java Beans (EJB)
    • Java Messaging Service (JMS)
    • Message Driven Beans (MDB)
    • Servlets
  • WebSphere 5.1 Application Server
  • Rational Application Developer
  • WS-Security including public/private keys and X509 certificates
  • MQ Series
Results: 
  • Delivered a completed application within the aggressive project timeline.
  • Enabled institution to gain/participate in additional revenues by releasing the project within the required deadline.
  • Provided additional security management tools.
  • Provided staff with proper background knowledge and complete system documentation to effectively maintain and scale the application as required.