Step 2: Scenario 2: Find a Service providing Aviation Data in a specified Area

78 Copyright © 2010 Open Geospatial Consortium, Inc. rim:Valueowsrim:Value rim:Valueows7rim:Value rim:Valueows 7rim:Value rim:Valueows-7rim:Value rim:Valuewrsrim:Value rim:Valueebrimrim:Value rim:Valueogcrim:Value rim:Valueweb servicerim:Value rim:ValueList rim:Slot rim:Slot name=Topics slotType=urn:oasis:names:tc:ebxml-regrep:DataType:String rim:ValueList rim:Valuenotamrim:Value rim:Valueweatherrim:Value rim:ValueList rim:Slot rim:Slot name=Extent slotType=urn:ogc:def:dataType:ISO-19107:2003:GM_Envelope wrs:ValueList wrs:AnyValue gml:Envelope xmlns:gml=http:www.opengis.netgml srsName=urn:ogc:def:crs:EPSG::4326 gml:lowerCorner48.2244 -123.662gml:lowerCorner gml:upperCorner53.8783 -114.9169gml:upperCorner gml:Envelope wrs:AnyValue wrs:ValueList rim:Slot rim:Name rim:LocalizedString value=Sample AIM Event service 1 rim:Name rim:Description rim:LocalizedString value=Sample AIM Event service with two event channels and full Filter 2.0.0 support. rim:Description ... rim:Classification id=urn:uuid:cb92bb97-6edf-43e3-95fd- 6fb95adbfad6 lid=urn:uuid:cb92bb97-6edf-43e3-95fd-6fb95adbfad6 objectType=urn:oasis:names:tc:ebxml- regrep:ObjectType:RegistryObject:Classification status=urn:oasis:names:tc:ebxml-regrep:StatusType:Submitted classifiedObject=urn:x-ows7:def:event-service:aim:ex-01 classificationNode=urn:x-ogc:def:rim-scheme:fes-2.0- ops:spatial:bbox rim:Classification ... rim:Classification id=urn:uuid:e9c17a5f-a740-4872-9b29- 0280565adbee lid=urn:uuid:e9c17a5f-a740-4872-9b29-0280565adbee objectType=urn:oasis:names:tc:ebxml- regrep:ObjectType:RegistryObject:Classification status=urn:oasis:names:tc:ebxml-regrep:StatusType:Submitted Copyright © 2010 Open Geospatial Consortium, Inc. 79 classifiedObject=urn:x-ows7:def:event-service:aim:ex-01 classificationNode=urn:ogc:serviceType:AimEventService:0.1 rim:Classification ... rim:ServiceBinding id=urn:uuid:5f0a72e8-07c3-46ae-b4bd- f5d3dcf6555b lid=urn:uuid:5f0a72e8-07c3-46ae-b4bd-f5d3dcf6555b objectType=urn:oasis:names:tc:ebxml- regrep:ObjectType:RegistryObject:ServiceBinding status=urn:oasis:names:tc:ebxml-regrep:StatusType:Submitted service=urn:x-ows7:def:event-service:aim:ex-01 accessURI=http:www.foo-bar.neteventsaim rim:ServiceBinding rim:Service SearchResults GetRecordsResponse

7.6 Sample Event Service objects

Two sample Service objects were used to construct and test the above scenario queries. These are also available in the OWS-7 demonstration registry as indicated by the links in the table below. Table 34: Links to sample services used in the event service discovery scenarios Service Description Service Link AIM Service ~ 2 event channels Notam, Weather, full OGC Filter support http:registry.galdosinc.comows7query?request=GetRecordByIdElementSet Name=fullview=urn:x-indicio:csw- ebrim:def:registry:transformation:RegistryBrowserid=urn:x-ows7:def:event- service:aim:ex-01 SFE Service ~ 2 event channels CameraPositions, DetectedChanges, full OGC Filter support http:registry.galdosinc.comows7query?request=GetRecordByIdElementSet Name=fullview=urn:x-indicio:csw- ebrim:def:registry:transformation:RegistryBrowserid=urn:x-ows7:def:event- service:sfe:ex-01

7.7 Discovery challenges:

In order to perform the scenarios illustrated here, clients must: construct an OGC Filter suitable for CSW-ebRIM services. understand the Event Service Discovery model well enough to formulate non- trivial queries. Ideally, a suitable registry client would be available to hide many of the details visible in these discovery scenarios. Specifically: 80 Copyright © 2010 Open Geospatial Consortium, Inc. it should not necessary to hand-craft XML queries to perform searches it should not be a requirement that one has extensive knowledge of a given registry model in order to effectively query against it. 8 Quality of service considerations This section discusses Quality of Service aspects relevant in an Event Architecture. Emphasis is laid on security. Reliability is discussed shortly as well.

8.1 Event Security

8.1.1 Introduction

During OWS-7, initial work on Event Service Security was performed. The resulting discussions and findings are summarized in the following sections. Note that the presented results represent the start of much more intensive investigation and testing that is needed to achieve a clear understanding of the relevant aspects and solutions for enabling security in an Event Architecture.

8.1.2 General Event Service Security Measures and Threats

The Event Service is an information broker in a SOA environment that routes messages from event sources to information consumers that have expressed interest in a particular type of information by subscribing to it. The Event Service sends the information to the subscribers on behalf of the original event sources. The messages can travel over multiple physical nodes in a network communicating via a mixed LAN and WAN infrastructure using different transport protocols e.g. HTTP, JMS....

8.1.2.1 Security threats and vulnerabilities

A vulnerability in security sense is any weakness that could be exploited to violate a system or the data it contains. A threat can be described as a potential violation of security. The following threats might occur in the event service domain: Data destruction e.g. subscriptions, publications, notifications… Unauthorized creation of malicious subscriptions Unauthorized modification and corruption of data Theft and loss of data Unauthorized disclosure of data