TotalMobile Service Definition TotalMobile 1. TotalMobile from BT BT is working with TotalMobile to provide a field force automation solution comprising of a number of core components which are combined to deliver specific mobile solutions across the organisation. These are under-pinned by a layer of services which manage the synchronisation of data and integration between back office systems and mobile devices. TotalMobile from BT provides Native Apps which are installed on the mobile device either over the air or via the Marketplace and provide a ‘consumer grade experience’ taking advantage of rich functionality native to the device. These are designed to run on multiple platforms giving you and your users a choice to match technology with business needs. The aim is to ensure customers always have support for leading platforms and plenty of device choice. These include: Windows Mobile 6.5. iPad and iPhone version 4.2 upwards. Android tablets and smartphones above version 2.1. Windows XP and Windows 7 tablets and laptops. Blackberry 5, 6 and 7 Smartphones. Apps provide the same functionality but offer the user a different experience depending on the mobile device. Apps are specific to the individual’s needs and their role within the organisation. When setting up TotalMobile solutions are built for each role but users can be assigned to multiple roles if required, e.g. a care worker can have access to the Care solution and also an HR Solution which might include ‘Leave Requests’, Sickness Reports and Request for Mileage and Expenses. The solution has a number of core elements within its structure: TotalMobile 2. Security Before a user may use the app, they must register their device and credentials. This process includes identity verification by the system administrator. Scenarios rather than users are authenticated. This means that a combination of Device ID, Hardware ID, Username and Password must all be correct for a user to successfully authenticate. This provides 2 factor authentication based on the principles of "Something the user has" (the particular device the user is registered with) and "Something the user knows" (their password). A network account for each user is not required. This is important for organisations that are deploying mobile applications to users who would not previously have had access to the corporate network. As mobile working proliferates the creation of numerous network accounts would inevitably provide more opportunities for compromise and increase the complexity of the system administration burden. Devices running BT TotalMobile have no connection to the corporate network and therefore no access to any corporate systems. They only connect via HTTPS to an external web server. Put simply the devices do not have an IP address on the corporate network. Active Directory Authentication Support is offered for Active Directory authentication whereby users can authenticate to TotalMobile from BT using their existing network account. Authentication will be subject to the password policies in force. Protecting Data on the Device TotalMobile from BT ensures data is protected through a number of measures. All data is encrypted using an AES256 algorithm. Data can only be accessed by the registered user of the device, on the correct device, authenticated via the application. Any photos taken using TotalMobile from BT are not stored within the device camera roll. They are stored in the encrypted storage area on the device and are only available to the TotalMobile from BT app. At any time the System Administrator can deactivate a user’s account. This will prevent the user from authenticating and make all data inaccessible. Once transactions such as visits have been completed and processed a server side archiving process will automatically remove them from the database and devices. This can be favourably compared with the “normal” level of exposure presented by carrying paper files but with the additional safeguards of encrypted storage, authentication, automatic removal and control over who has what. Network Security Data Traffic is AES128 or 256 bit encrypted using SSL with an RSA 2048 key on the server meaning that data cannot be snooped in transit. It should be noted that TotalMobile from BT secures its own data and does not require Mobile Device Management software or specific network measures to be deployed securely. However the application can be expected to work with these measures where they are in place. Data stored on the Server will be subject to the security policies of the hosting organisation. TotalMobile 3. Integration The solution has been developed with ease of integration at the forefront of our minds. TotalMobile from BT provides a lightweight integration server that can deliver and receive its messages via various endpoints including file system, http and SOAP. Adapter API TotalMobile from BT provides an adapter API which allows 3rd party developers to write integration components which will run within the integration server to implement real time bidirectional integration with external systems. This allows solution builders to write completely custom code which will run as part of TotalMobile Server from BT. Custom adapters may be installed and implemented on site and the solution developer retains intellectual property rights to the adapter. Generic Adapters are provided and allow partners and customers to configure and implement the following adapters for all of the applications messages: Outbound: Inbound: Send Message as Email or to Web Service. Receive via Web Service. Write message as File. Receive as a file. Publish as RSS. POST Plain Old XML (POX). FTP message. In order to assist with the rapid development of web service based integration with external systems utilising the generic adapters, the SDK includes WSDL files for use with the incoming and outgoing application web services. These WSDL files can then be implemented by the web service based integration solution developed by the provider of the external system and allows the generic adapters to be used to transmit data between systems in the application message format. TotalMobile 4. On-Boarding / Project Implementation Description TotalMobile from BT has developed its Project Management Methodology to provide a structured approach to the delivery of all Software and Services purchased, including those of its Partners and Suppliers. This methodology takes it principles and processes from PRINCE2 and our project managers are PRINCE2 accredited. The implementation process details the tasks and deliverables required to ensure that both the Client and TotalMobile achieve a successful outcome to this process and provides an excellent start to build upon throughout the lifetime of the contract. Client resource is required and must be sufficiently empowered to be able to carry out those activities identified in the project plan as being the responsibility of the Client. TotalMobile 5. Training Training encompasses the following: Training Needs Analysis. The Training Project Plan. Lesson (End User) Training. ‘Train-the-Trainer’ Training: Delivered by a TotalMobile trainer, to client trainers, who train client trainees. Clinic (Refresher) Training. Training Material. Comprehensive training manuals are provided for each individual lesson. Training is conducted against a standard database. TotalMobile 6. Disaster Recovery IT Infrastructure DR and business continuity is provided through two world class data centre sites linked by fibre. The data centres are capable of handling local government data at IL2/IL3 as well as patient identifiable data (PID). Contact: For more information on this service please contact Liz Colmer at elizabeth.colmer@bt.com