Service-based Architecture Research Articles

Integrating process management and event processing in smart factories: A systems architecture and use cases

The developments of new concepts for an increased digitization of manufacturing industries in the context of Industry 4.0 have brought about novel system architectures and frameworks for smart production systems. These range from generic frameworks for Industry 4.0 to domain-specific architectures for Industrial Internet of Things (IIoT). While most of the approaches include a service-based architecture for selective integration with enterprise systems, a close two-way integration of the production control systems and IIoT sensors and actuators with Process-Aware Information Systems (PAIS) on the management level for automation and mining of production processes is rarely discussed. This fusion of Business Process Management (BPM) with IIoT can be mutually beneficial for both research areas, but is still in its infancy. We propose a systems architecture for IIoT that shows how to integrate the low-level hardware components–sensors and actuators–of a smart factory with BPM systems. We discuss the software components and their interactions to address challenges of device encapsulation, integration of sensor events, and interaction with existing BPM systems. This integration is demonstrated within several use cases regarding process modeling, automation and mining for a smart factory model, showing benefits of using BPM technologies to analyze, control, and adapt discrete production processes in IIoT.

Micro-service-based radio access network

The convergence of information, communication, and data technologies (ICDT) has been identified as one of the developing trends of the sixth generation(6G) network. Service-based architecture (SBA) as one of the promising information technology, has been preliminarily introduced into the fifth generation (5G) core network (CN) and successfully commercialized, which verifies its feasibility and effectiveness. However, SBA mainly focuses on the control plane of CN at present and the SBA-CN user plane is being studied by the industry. In addition to further evolving the SBA-CN, SBA radio access network (RAN) should also be considered to enable an end-to-end SBA, so as to meet more comprehensive and extreme requirements of future applications, as well as support fast rollout requirements of RAN devices.

Service Based Virtual RAN Architecture for Next Generation Cellular Systems

Service based architecture (SBA) is a paradigm shift from Service-Oriented Architecture (SOA) to microservices, combining their principles. Network virtualization enables the application of SBA in cellular systems. To better guide the software design of this virtualized cellular system with SBA, this paper presents a software perspective and a positional approach to using fundamental development principles for adapting SBA in virtualized Radio Access Networks (vRANs). First, we present the motivation for using an SBA in cellular radio systems. Then, we explore the critical requirements, key principles, and components for the software to provide radio services in SBA. We also explore the potential of applying SBA-based Radio Access Network (RAN) by comparing the functional split requirements of 5G RAN with existing open-source software and accelerated hardware implementations of service bus, and discuss the limitations of SBA. Finally, we present some discussions, future directions, and a roadmap of applying such a high-level design perspective of SBA to next-generation RAN infrastructure.

Holistic service-based architecture for space-air-ground integrated network for 5G-advanced and beyond

The Service-based Architecture (SBA) is one of the key innovations of 5G architecture that leverage modularized, self-contained and independent services to provide flexible and cloud-native 5G network. In this paper, SBA for Space-Air-Ground Integrated Network (SAGIN) is investigated to enable the 5G integration deployment. This paper proposes a novel Holistic Service-based Architecture (H-SBA) for SAGIN of 5G-Advanced and beyond, i.e., 6G. The H-SBA introduces the concept of end-to-end servicebased architecture design. The "Network Function Service", introduced in 5G SBA, is extended from Control Plane to User Plane, from core network to access network. Based on H-SBA, the new generation of protocol design is proposed, which proposes to use IETF QUIC and SRv6 to substitute 5G HTTP/2.0 and GTP-U. Testing results show that new protocols can achieve low latency and high throughput, making them promising candidate for H-SBA.

A Software-Defined Networking Solution for Interconnecting Network Functions in Service-Based Architectures

Mobile core networks handle critical control functions for delivering services in modern cellular networks. Traditional point-to-point architectures, where network functions are directly connected through standardized interfaces, are being substituted by service-based architectures (SBAs), where core functionalities are finer-grained microservices decoupled from the underlying infrastructure. In this way, network functions and services can be distributed, with scaling and fail-over mechanisms, and can be dynamically deployed, updated, or removed to support slicing. A myriad of network functions can be deployed or removed according to traffic flows, thereby increasing the complexity of connection management. In this context, 3GPP Release 16 defines the service communication proxy (SCP) as a unified communication interface for a set of network functions. In this paper, we propose a novel software-defined networking (SDN)-based solution with the same role for a service mesh architecture where network functions can be deployed anywhere in the infrastructure. We demonstrated its efficiency in comparison with alternative architectures.

ГЕОІНФОРМАЦІЙНИЙ ПОРТАЛ ЯК СКЛАДОВА ЄДИНОГО ГЕОІНФОРМАЦІЙНОГО СЕРЕДОВИЩА ЗБРОЙНИХ СИЛ УКРАЇНИ

The modern views on armed struggle, their impact on the tactics of using troops (forces) in the war with the russian federation, new asymmetric threats to Ukraine's national security, as well as reforming the Armed Forces of Ukraine require a review of information requirements. perform geoinformation support of the Armed Forces of Ukraine. The importance and necessity of the implementing and using of geographic information systems for military purposes is due to the general increase in the requirements of troops (forces) to the efficiency, completeness and quality of information support of the management process. The armed aggression of the russian federation against Ukraine creates new challenges to the information security of the state and leads to the revision of the requirements for information support in general and for geoinformation support in particular. It's determined that the foundation of the Unified Geoinformation Environment of the Armed Forces should be service-oriented architecture (SOA) of distributed geodatabases, that provides a common platform for all entities and users to access the resources of Unified Automated Control System of the Armed Forces of Ukraine. The Unified Geoinformation Environment (UGIE) of the Armed Forces of Ukraine should be formed as an combination (network) of interconnected geoportals, the purpose of that is to consolidate information on available in the Unified Automated Control System of the Armed Forces spatial data. user entry points into this environment. The UGIE of the Armed Forces of Ukraine should provide access to data stored in the system of distributed geodatabases. The format and use of services should be based on the use of national, international and military standards, that are the only agreed and approved set of standards for data, interfaces and computer programs developed on the basis of service-oriented architecture.

A Systematic Analysis of 5G Networks With a Focus on 5G Core Security

After many years of work, 5G standards are still under development and the corresponding technical specifications continue to evolve on the fly. At this moment, several countries have started to deploy 5G networks, and most of them have been following a Non-Standalone (NSA) path to incorporate the existing 4G and other legacy networks. Despite all the advertisement efforts, many people still do not have a clear view on how 5G can power all the promised mission-critical applications in a secure manner. In this paper, we bridge this gap by providing a concise review of some 5G’s new features, including the Service Based Architecture (SBA) and key Network Functions (NFs), the new security features in User Equipment (UE) and Radio Access Network (RAN), the new trust model and security mechanisms (e.g. the 5G AKA protocol), and the newly introduced common API framework (CAPIF). Along with the review of new features, we provide our observations on the potential security concerns accompanied with the relevant research results in the literature. We finally point out some new research directions.

TempTracker: A Service Oriented Temporal Natural Language Processing Based Tool for Document Data Characterization and Social Network Analysis

With the advent of Web 2.0 based technology, news sites and micro-blog sites have become popular and have attracted the attention of people around the world. Existing textual data captured by these sites is highly beneficial for extracting (a) new information to analyze, and (b) temporal course of change in entities, topics and sentiment for differing granularities. This has been demonstrated by the study described in this paper. After collecting the data, several directions have been investigated in order to demonstrate its effectiveness under the umbrella of entity extraction, topic and sentiment analysis using Natural Language Processing (NLP) tools, temporal social media analysis, and time varying trend results of entity and sentiment aspect of entities. A service-based architecture has been proposed to process text data with NLP tools and to enrich the data. Text data is collected and processed via NLP tools. It is retrieved upon request for data analysis. The reported results illustrate the applicability and effectiveness of the conducted study.

Research of the methods of creating content aggregation systems

The subject of this research is the key methods for creating the architecture of information aggregators, methods for increasing scalability and effectiveness of such systems, methods for reducing the delay between the publication of new content by the source and emergence of its copy in the information aggregator. In this research, the content aggregator implies the distributed high-load information system that automatically collects information from various sources, process and displays it on a special website or mobile application. Particular attention is given to the basic principles of content aggregation: key stages of aggregation and criteria for data sampling, automation of aggregation processes, content copy strategies, and content aggregation approaches. The author's contribution consists in providing detailed description of web crawling and fuzzy duplicate detection systems. The main research result lies in the development of high-level architecture of the content aggregation system. Recommendations are given on the selection of the architecture of styles and special software regime that allows creating the systems for managing distributed databases and message brokers. The presented architecture aims to provide high availability, scalability for high query volumes, and big data performance. To increase the performance of the proposed system, various caching methods, load balancers, and message queues should be actively used. For storage of the content aggregation system, replication and partitioning must be used to improve availability, latency, and scalability. In terms of architectural styles, microservice architecture, event-driven architecture, and service-based architecture are the most preferred architectural approaches for such system.

An Integrity Measurement Scheme for Containerized Virtual Network Function

The deployment of virtual network function (VNF) in the container can realize the 5G service-based architecture (SBA) with high flexibility. The container carrying the VNF has poor isolation and low protection capabilities, and there is a security risk of being tampered and replaced. Current security protection technologies such as access control, intrusion detection, and virus detection cannot ensure that the container is not illegally modified. In order to fundamentally protect the integrity of containerized VNFs, this paper proposes a containerized VNF trust measurement scheme container integrity measurement (CIM). The scheme extends the chain of trust to bare metal containers and virtual machine containers, and experiments are carried out in a containerized VNF communication environment. The results show that the integrity measurement protection scheme is effective. Compared with ordinary containers, the average CPU usage of trusted containers has increased by 26%, and the average memory usage growth rate is less than 1%, the performance overhead caused by CIM is acceptable.

Micro service-based architecture design method for ship industrial software

Micro service-based architecture design method for ship industrial software

A Sensor-Based mHealth Platform for Remote Monitoring and Intervention of Frailty Patients at Home.

Frailty syndrome is an independent risk factor for serious health episodes, disability, hospitalization, falls, loss of mobility, and cardiovascular disease. Its high reversibility demands personalized interventions among which exercise programs are highly efficient to contribute to its delay. Information technology-based solutions to support frailty have been recently approached, but most of them are focused on assessment and not on intervention. This paper describes a sensor-based mHealth platform integrated in a service-based architecture inside the FRAIL project towards the remote monitoring and intervention of pre-frail and frail patients at home. The aim of this platform is constituting an efficient and scalable system for reducing both the impact of aging and the advance of frailty syndrome. Among the results of this work are: (1) the development of elderly-focused sensors and platform; (2) a technical validation process of the sensor devices and the mHealth platform with young adults; and (3) an assessment of usability and acceptability of the devices with a set of pre-frail and frail patients. After the promising results obtained, future steps of this work involve performing a clinical validation in order to quantify the impact of the platform on health outcomes of frail patients.

Rural smart tourism under the background of internet plus

Rural tourism under the background of internet plus needs to improve the tourism model and improve the modernization process of rural tourism. In order to improve the efficiency of rural tourism, this paper constructs a rural smart tourism system under the background of internet plus, combines the actual situation of rural tourism to improve the traditional rural tourism model, and analyzes the application of internet plus technology in the architecture of smart tourism system. Moreover, this paper builds a cloud service-based rural tourism cloud data system architecture, and discusses how to build related systems, including the introduction of the cloud data center architecture and functions, the introduction of the architecture, composition and functions of the cloud business management platform, the introduction of the architecture and functions of the tourist behavior intelligent analysis system, etc. finally, this paper analyzes the performance of the rural smart tourism system through experiments. From the experimental research results, we can know that the rural smart tourism system constructed in this paper has certain effects.

A Process Model for Service-Oriented Development of Embedded Software Systems

The concepts of service-oriented computing (SOC) have previously been used in the embedded systems domain, mostly at the device level in ad hoc manners to achieve advantages of device integration. However, SOC has not been used for the development of embedded software systems (ESS), i.e., software controlling the embedded devices. To fill this gap, a process model is proposed in this article that allows the systematic development of ESS based on SOC concepts. The proposed process consists of analysis and design phases of embedded software development. The analysis phase is concerned with the collection of system information and preparation for system design. Based on this, the service-based software architecture is developed in the design phase. The effectiveness of the proposed process model is demonstrated through its application in the Smart Home case study.

Broadcast Core-Network: Converging Broadcasting With the Connected World

The new ways to consume and deliver media content in a wireless environment have led to a significant increase in the demand for spectrum resources. In addition, the arrival of next-generation wireless communication technologies has encouraged the creating of new verticals targeting novel applications, such as industry IoT, e-health, distance learning, smart city, smart-metering. All these new use cases are centred on an IP-based infrastructure. A promising alternative to satisfy the demand for resources is to incorporate a new delivery mechanism that can alleviate the congestion of classical cell-based point-to-point broadband wireless infrastructures. The best-positioned candidate is the next-generation Digital Terrestrial Television system, which offers a very spectrum efficient one-to-many PHY, and for the first time, native IP support. In ATSC 3.0, the whole system was designed with an IP-centric view, whereas DVB has created standards to deliver services to generic IP devices (DVB-I). Nevertheless, there is still a last missing piece to bring the broadcast infrastructure to the IP-connected world: a Broadcast Core Network (BCN). In this paper, the basics of a BCN are presented with new use cases that are attractive to Broadcast Network Operator (BNO). A possible roadmap towards implementation is described, and a service-based architecture for a BCN is presented and discussed.

Edge-Based Runtime Verification for the Internet of Things

Complex distributed systems such as the ones induced by Internet of Things (IoT) deployments, are expected to operate in compliance to their requirements. This can be checked by inspecting events flowing throughout the system, typically originating from end-devices and reflecting arbitrary actions, changes in state or sensing. Such events typically reflect the behavior of the overall IoT system – they may indicate executions which satisfy or violate its requirements. This article presents a service-based software architecture and technical framework supporting runtime verification for widely deployed, volatile IoT systems. At the lowest level, systems we consider are comprised of resource-constrained devices connected over wide area networks generating events. In our approach, monitors are deployed on edge components, receiving events originating from end-devices or other edge nodes. Temporal logic properties expressing desired requirements are then evaluated on each edge monitor in a runtime fashion. The system exhibits decentralization since evaluation occurs locally on edge nodes, and verdicts possibly affecting satisfaction of properties on other edge nodes are propagated accordingly. This reduces dependence on cloud infrastructures for IoT data collection and centralized processing. We illustrate how specification and runtime verification can be achieved in practice on a characteristic case study of smart parking. Finally, we demonstrate the feasibility of our design over a testbed instantiation, whereupon we evaluate performance and capacity limits of different hardware classes under monitoring workloads of varying intensity using state-of-the-art LPWAN technology.

Secure Cloud Architecture for 5G Core Network

Service-based architecture (SBA) is a profound advancement in the novel 5G Core network (5GC). Existing studies show that SBA can benefit from cloud computing to achieve extensibility, modularity, reusability, and openness. It also brings security problems (e.g., hypervisor hijacking, and malware injection). To provide secure 5G services, we propose a service-based cloud architecture called Mimicloud for 5GC based on dynamic and heterogeneous techniques. Mimicloud provides flexible reconfiguration mechanisms to protect containers and eliminate all attack knowledge obtained from adversaries. We use multiple containers to execute crucial services and ensure security with crosscheck. Mimicloud employs heterogeneous components to prevent multiple containers from being breached through the same vulnerabilities. Experimental results show that Mimicloud can effectively strengthen the security of the 5GC. The performance overhead is analyzed in order to demonstrate its scalability.

Service Candidate Identification from Monolithic Systems Based on Execution Traces

Monolithic systems increasingly suffer from maintainability and scalability issues as they grow in functionality, size, and complexity. It is widely believed that (micro)service-based architectures can alleviate these problems as each service is supposed to have the following characteristics: clearly defined functionality, sufficient modularity, and the ability to evolve independently. Industrial practices show that service extraction from a legacy monolithic system is labor-intensive and complex. Existing work on service candidate identification aims to group entities of a monolithic system into potential service candidates, but this process has two major challenges: first, it is difficult to extract service candidates with consistent quality; second, it is hard to evaluate the identified service candidates regarding the above three characteristics. To address these challenges, this paper proposes the Functionality-oriented Service Candidate Identification (FoSCI) framework to identify service candidates from a monolithic system. Our approach is to record the monolith's execution traces, and extract services candidates using a search-based functional atom grouping algorithm. We also contribute a comprehensive service candidate evaluation suite that uses interface information, structural/conceptual dependency, and commit history. This evaluation system consists of 8 metrics, measuring functionality, modularity, and evolvability respectively of identified service candidates. We compare FoSCI with three existing methods, using 6 widely-used open-source projects as our evaluation subjects. Our results show that FoSCI outperforms existing methods in most measures.

ESB SOAS Business Based Design Platform in Management Software

An infrastructure that is capable of linking any IT resource is required to merge the old and the new Service-oriented Architecture (SOA). An infrastructure that can rapidly merge and replace facilities to fulfill advanced specifications is essential for being scalable. To be confident, a reliable and secure network is required. The ESB is a network access bus. An ESB is a software interface that enables business components to be combined more efficiently and flexible in a service-based architecture. An ESB enables the complex link, mediation, control and communication of resources.

A Composable Multifactor Identity Authentication and Authorization Scheme for 5G Services

The fifth-generation (5G) mobile communication technology has already deployed commercially and become a global research focus. The new features of 5G include unlimited information exchange, a large variety of connections with independent energy, and diversified high transmission rate services. Collective synergy of services is expected to change the way of life and future generations and introduce new converged services to the ICT industry. Different application services have to meet differentiated security demands. From the perspective of security, in order to support the multiservice of 5G services, it is necessary to consider the new security mechanism driven by the service. Based on 5G massive data stream, the 5G system can provide customized real-world services for potential users and reduce the user experience gap in different scenarios. However, 3GPP Extensible Authentication Protocol (EAP), which is the present entity authentication mechanism for the 5G service layer, is only an individual authentication architecture and unable to fulfill the flexible security objectives of differentiated services. In this paper, we present a new hierarchical identity management framework as well as an adaptable and composable three-factor authentication and session key agreement protocol for different applications in 5G multiservice systems. Finally, we propose an authorization process by combining with the proposed three-factor authentication mechanism and Service-Based Architecture (SBA) proposed by the 3GPP committee. The proposed mechanism can concurrently provide diverse identity authentication schemes corresponding to four different security levels by easily splitting or assembling three-factor authentication protocol blocks. The proposed scheme can be simultaneously applied to a variety of applications to improve the efficiency and quality of service and reduce the complexity of the whole 5G multiservice system, instead of designing or adopting several different authentication protocols. The performance evaluation results indicate that the proposed scheme can guarantee the multiple security of the system with ideal efficiency.