1 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Oracle Communications Services Gatekeeper Technical Presentation Presenter(s) 2 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Presentation Overview Market Trends Service Provider Challenges Service Exposure Opportunities Oracle Communications Services Gatekeeper Overview Focused Solutions Technical Details Development and Extensions 3 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Cross Industry Collaboration and Innovation … more than 50 carriers have now implemented integrated carrier billing on the BlackBerry App World™ storefront for their customers. - “BlackBerry App World Integrated Carrier Billing Now Implemented with More Than 50 Carriers”, Blackberry website, November 26, 2012 the Wall Street Journal reported that ESPN has talked to at least one major carrier about paying to enable customers to access ESPN Mobile without exceeding their data limits - “Analyst Angle: OTT as a revenue source for carriers”, Jeffery Wang, IBB Consulting, RCR Wireless, May 15, 2013 4 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Europe’s telecoms and media companies must embrace innovation in key areas such as mobile, cloud computing and big data, as well as forge strong strategic relationships with other industry players… IDATE’s Didier Pouillot said: “Telcos do have certain leverage to deal with this change, starting with creating more value from network access now that OTT services are increasing user consumption. “NGN technologies allow telcos to increase speeds and to introduce noticeable quality improvements, both of which can differentiate their offerings. But it is clear 2013 is a pivotal year and telcos must embrace innovation. A simple Darwinian case of evolve or die!” “2013 a ‘Darwinian tipping point’ for Europe’s telcos, Jamie Beach, May 31, 2013, Telecoms.com” Industry Service Exposure • Make money – • Save money – • Google Maps 300% growth vs 20% MapQuest Go anywhere – 5 SmugMug saves > $500K/year with Amazon S3 Storage Build brand – • 60% of all listings on eBay.com added via their APIs Netflix now available on over 250 devices Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Service Exposure through APIs Enabling Innovation and Collaboration June, 2013 9,300 Aug, 2012 7000 “Henry Ford said customers would have asked him not for a car, but a faster horse. Similarly, users don’t ask for APIs. They want technology that works and integrates well with other technologies.” - Adam DuVander, Programmable Web, April 30th, 2013 Feb, 2012 5000 Mar, 2011 3000 Dec, 2005 105 Nov, 2008 1000 “Telephony” 279 “Messaging” 272 Other CSP enable API’s in other categories Source: http://blog.programmableweb.com/2013/04/30/9000-apis-mobile-gets-serious/ 6 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Telecom Network API’s Becoming the CSP’s second revenue stream APIs allow carriers to disseminate a wealth of internal information and resources to third parties Today: 24% of Web and 15% of mobile apps use APIs By 2018: Apps using APIs are expected to exceed 68% Source: MindCommerce: Public advertisement for “Telecom Network API Marketplace: Strategy, Ecosystem, Players and Forecasts 2013-2018”, June 2013 7 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Presentation Overview Market Trends Service Provider Challenges Service Exposure Opportunities Oracle Communications Services Gatekeeper Overview Focused Solutions Technical Details Development and Extensions 8 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Inefficiently Exposing Network and Service Assets Telco Developer Partner 1 Application 1 Application 2 Application N Partner 2 Application 3 Slow time to market with new network & IT services Limited control of service utilization by partners High operational costs due to Service Platform 3 Service Platform 1 Service Platform 2 9 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. manual partner management Service Platform N Service Provider Challenges Slow deployment of new services Over-the-top competition Underutilized competitive assets 10 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. 12-18 months Concept to Launch Presentation Overview Market Trends Service Provider Challenges Service Exposure Opportunities Oracle Communications Services Gatekeeper Overview Focused Solutions Technical Details Development and Extensions 11 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Service Exposure Market Segments Internal Developers Revenue Service Exposure Partners (MVNOs, Aggregators, etc) Core Services Enterprises 3rd Party Developers Opening to 3rd parties Number of Services/Developers 12 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Network API Revenue Opportunity $115B opportunity by 2015 $1.5 $2.6 $2.0 $1.0 $1.0 Click to call, meet me at my number, alerting, etc $5.9 Payment across goods & services $3.0 USSD in developing markets $4.0 Advertising with user profile under customer control $42.0 $4.5 Presence & location enabled call centers Number provisioning Messaging enabled customer service & business processes $7.5 Directory services IVR / voice store / other voice related VAS Machine to machine $14.0 Unified communications & collaboration Content delivery $26.0 Source: Alan Quayle Business and Service Development, April 2012 13 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Other Presentation Overview Market Trends Service Provider Challenges Service Exposure Opportunities Oracle Communications Services Gatekeeper Overview Focused Solutions Technical Details Development and Extensions 14 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Built-In API Management Service access to secure and protected REST & SOAP based services Service Exposure – Simplified access to telecom service infrastructure implemented on standard WebLogic Server platfrom Policy Control – Enforce service level agreements against traffic flow with the network in a controlled and determined manner Security – Ensure trusted access of applications to network resources using well defined authorization and authentication models Partner Management – Automatically on board service and content partners providing intranet and extranet portals to service delivery Service Creation – Easily develop new applications and extend the Oracle Communications Services Gatekeeper platform with new value added service features 15 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Developers B2B Partners Enterprises 3rd Party Developers RESTful/SOAP Interfaces Access Control & Policy Management Oracle Communications Services Gatekeeper Network Interfaces Operator Services 3rd Party Services Network Protection, Throttling and Policy Control Core functions and principles Applications System Mgmt Oracle Communications Services Gatekeeper Service Exposure OSS Policy Control and Budgeting SCE Network Abstraction BSS Extensions Oracle RAC Integration Oracle SDP SDK SMSC PCRF GMLC Network 16 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Custom … Service Facades Simple and secure service access REST Façade & SOAP Façade – Simplified, Secure, Controlled Service exposure of Network Capabilities and services – Out of the box support for OneAPI (REST) and Parlay X (SOAP) SOA Façade – Simple integration with business process with Oracle Service Bus – Telecom enable Business Services & promote Loosecoupling (extensibility/flexibility) Native Façade – – 17 Allows Operators to Enforce SLA and Policy Control over Native Clients providing High Availability, Scalability, Security etc. Allows Operator to attract MVNOs Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Service Facades REST Facade SOAP Facade SOA Facade Native Facade Network Services MESSAGING PRESENCE @ QOS STATUS PROFILE LOCATION CHARGING SIP Network Integration and interoperability Unparalleled support for network elements out of the box Oracle Communications Services Gatekeeper Applications is integration tested with Oracle’s products in every release including online charging, network policy, mediation, application server, etc. Enabling Oracle to offer complete solutions for many business problems. Oracle Communications Services Gatekeeper Access Control & Policy Management PCRF Diameter Communication Services Oracle Communications Services Gatekeeper, being built on standards and engineered for integration with existing network, has succefully been deployed and proven to interoperate with over 50 different network elements from vendors including Ericsson, Nokia, ALU, ZTE, Huawei etc. SMSC 18 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Diameter LDAP Network Plug-ins SMPP SMSC MLP LIF MM7 UCP MMSC WAP GW Location Server Dir Server MAP SIP INAP PAP MSC Parlay X-CSCF Billing Parlay GW Protocol HLR Custom Oracle Communications Services Gatekeeper Overview Oracle Communications Services Gatekeeper A OAUTH Authentication & Access Control RESTful Web Services Service Facades Partner Relationship Management Call Notification Audio Call Subscriber Profile Terminal Location Device Capabilities SMS Bulk MMS Email WAP SOAP USSD Native Interfaces Key Features Container Services Communication Services Third Party Call SOA Web Services REST Terminal Status QoS Payment Subscr Mgmnt Presence Address List Management A ACR Interceptors Policy Storage Providers Budget Geo Redundancy Account Alarms & Statistics EDR/CDR Configuration Store OA&M Billing Platform Development Studio & SDK SOAP Web Services Reports Resource Manager SMPP 19 UCP MM7 PAP SMTP INAP Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Parlay SIP MLP MAP LDAP Diameter • Open, standards-based network gateway and policy enforcement platform enabling CSPs to expose network services to deliver innovative and revenue-generating applications and services SOAP REST • Multiple service facades - SOAP, SOA, REST, Native – including OneAPI support • 24 pre-built communication services • Multi-channel authorization support with OAuth 2.0 • Comprehensive policy, SLA and network resource management • Easily customized and extended including REST to REST and SOAP to SOAP support • Geographically distributed SLA enforcement • Highly available and scalable • Customizable, lightweight SDK High Availability, Scalability, & Reliability Fastest, most reliable solution available High availability through load balancing & session synchronization Applications Applications Load Balancer Load Balancer Unlimited horizontal scalability Highly reliable with geographic Access 1 Access n+1 Sync Access 1 Access n+1 redundancy Network 1 Network 2 Network n+1 Domain1 20 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Network 1 Network 2 Network n+1 Domain2 Geographic Redundancy Oracle Communications Services Gatekeeper supports geographically- redundant deployment – Each geo-graphically dispersed site will host an OCSG domain Domains are deployed and managed independently Efficient Synchronization of Configuration, Runtime Information between geo-redundant domains Failover monitoring – Health monitoring mechanisms between the two domains – Alarms are fired when health problems are detected App App IP Backbone Load Balancer Access 1 Access n NT Node 1 NT Node 2 NT Node n Domain1 E.g. San Francisco 21 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. App App Load Balancer Sync Access 1 Access n NT Node 1 NT Node 2 NT Node n Domain2 E.g. Denver Typical Deployment • Typically divided in two tiers. An Access Tier where the service facades resides and a Network Tier where the Service Enables, Policy Control, Container services etc. reside. • Firewall usually deployed between Access & Network Tiers for Access 1 secure access Access 2 Access n DMZ • Secure channel protects traffic between Access Tier & Network Tier Nodes • The Access tier is optimized for use in the OCSG and hence can provide significant performance improvements AT modules exposing Web Service interfaces are custom built for specific WSDL & resolve XML Network 2 to native protocol mapping at compile time thereby avoiding expensive runtime XSLT/XPATH transformations • Oracle Communications Services Gatekeeper access tier nodes do not perform any dynamic data transformation or XML processing (XPath etc) and thereby eliminate message processing overheads 22 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Network 1 Network 3 Network n Core Network Core Features POLICY CONTROL 23 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Policy Enforcement Features SLA based policy enforcement 24 Only allow access to a limited set of traffic paths e.g. only allow access to SMS and Terminal Location. Restrict traffic rate based on budget Restrict parameter values e.g. SMS sender name must be “Oracle”. Filter returned information e.g. remove “phone number” in returning data High priority request (guarantee) determines what request are rejected at overload Black list methods e.g. deny sending SMS ring tone Override network protocol parameters i.e. tunnel parameter to affect plug-in Time of day contract i.e. date, day of week and time of day Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Service Provider group 1 Service Provider 1 Application group 1 Appl. Account 1 Service Provider 2 Application group 2 Appl. Account 2 Appl. Account 1 Appl. Account 2 Appl. Instance 1 Appl. Instance 3 Appl. Instance 2 Appl. Instance 4 OCSG Policy Roles Network-centric Resource protection Application Intelligent routing and utilization Application-centric SLA Subscriber QoS Oracle Communications Services Gatekeeper Subscriber-centric Privacy SLA Billing Personalization 25 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Network SLA Billing Subscriber Composed Service Level Agreement • Features SLA Structure • Allows defining Service Level Agreement (SLA) on virtually defined communication services • For example, define messaging SLA by combining Px SMS, Native SMPP, Native UCP communication services • Can be defined in Application and Service Provider SLAs • Applicable to custom communication services as wells • Functionality • Any traffic request belong to a composed service results in budget increase of individual and composed service rate/quote • Enforced in Geo-redundant fashion 26 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Service Interceptors A Service Interceptor is an implementation of a specific interface, that may be triggered during normal traffic flow through the Oracle Communications Services Gatekeeper Enables the modularization of container work flow and provide Facade customization points for extensions Plugin Manager Provide the ability to write customizations for network integration through POJOs (Plain Old Java Objects) – Applicable to both application & network initiated traffic EJB Centralized policy enforcement and management FilterPlugin RoundRobinList The Interceptor makes a decision whether to permit or deny a request through the Oracle Communications Services Gatekeeper based on evaluation of a service function EnforceNodeBudget EnforceBlackList Plugin Communication Service 27 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. ProfileInterceptor Core Features MONITORING 28 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. EDR, CDR & Alarms Event Data Records (EDR) are triggered when events happen within Oracle Communications Services Gatekeeper Communication Service (no id) Type of EDRs EDR Service – Raw EDRs 7654* Event Data Records that record activities in the OCSG JMS Topic – CDRs Charging Data Records used for charging based on either time used or access of certain services – Alarms Records reporting a warning or an issue 29 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. 7654* JMS listener 7654* JMS listener * ID assigned after filtering SNMP Traps SNMP MIB is generated based on the alarm descriptors MIB file located in $DOMAIN_HOME/snmp/ Communication Service EDR Service .1.3.6.1.4.1.140.627.0.123 IANA-registered Private Enterprises xml filters BEA Oracle alarm Communications identifier Services Gatekeeper SNMP service SNMP trap generates alarm descriptors MIB file SNMP listener 30 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. SNMP listener Turn key solution for On boarding & Partner Management PRM PORTAL AND REPORTS 31 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Partner Relationship Management Comprehensive 3rd party management capabilities Partner Management On-boards & manages large number of partners & applications Registration rapidly Automates partner & app registration, service activation & Account Management provisioning All interfaces also available through web service interfaces – Reporting Integrates easily with existing partner portals Global / Partner Node Provides self service access for account management & service usage statistics Enables fine grain control of app & partner access & utilization through pre-built SLAs Protects subscriber privacy through defined user SLA Delivers highly flexible & extensible policy enforcement through custom SLAs 32 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. SP Group 1 SP Group 2 App Group 1 App Group 3 App App App App App Group 2 App Group 4 App App Portal and Reports - Business Value Complete turnkey solution •GUI based partner on-boarding •Application lifecycle management Reports providing insights into API utilization •Visibility into API usage and activity •Ways to decrease network congestion and increase customer retention Move beyond competition •Built on WebCenter and OBI making it extendable and customizable Central point for on-boarding partners •Automates partner & app registration, service activation & provisioning. •Enables fine grain control of app, partner access & utilization through pre-built SLAs 33 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. PRM Portal PRM portal includes management of Registration SLA API Application Group Short code Concept 34 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Life cycle management for applications and service providers Partner (app developer) creates an application concept (an application for an application) • Api’s and methods are selected • Throughput restrictions can be set 35 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Life cycle management for applications and service providers (cont.) PRM manager reviews an application 1. View details 2. Set/create SLA’s 3. Approve application 36 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Inside the Portal • Total 48 UI pages in Portal Partner Portal Partner Manager Portal • UI Design: ~80 pages • Partner Portal: 14 pages Partner Partner Group API Short Code Application Analytics SLA Customization Register My Application My Account My API ADF Engine ADF Faces WebCenter Services 37 WebCenter Framework Copyright © 2013, Oracle and/or its affiliates. All rights reserved. ADF Controller WebLogic Server ADF Binding • Partner Manager Portal: 34 pages • 70 web service interfaces • Based on Webcenter 11gR1 PRM Portal Portal Architecture Oracle Communications Services Gatekeeper Web Center AT NT MBeans Partner Portal SOAP Partner Manager Portal Web services RMI EJB Storage OCSG DB 38 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. API Analytics • Comprehensive analytics/reports over Oracle Communications Services Gatekeeper service provider, application, API invocations • 360 degree view on application/subscriber requests • ROI analysis on application – SLA breaches – Subscriber usage – Rate guarantee recommendation Reports providing insight into API utilization • Visibility into usage and activity e.g. revenue division by content type, the most popular applications of the month, API usage per application etc. • Enables insight into underutilized assets, ways to decrease network congestion and increase customer retention. 39 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. API business analytics with OCSG and OBI • Based on OBI Suite Enterprise edition Plus 11.1.1.6 • Near real time access to data • Report can be exported to PDF, excel, powerpoint, web archive(.mht), and data file(.csv,.xml) 40 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Analytics Reports Based on Oracle Communications Services Gatekeeper EDRs (traffic history data), it is possible to make data-warehouse level digging and generate useful analytics report for decision making. Analytics shows different report from different perspective, like best used API and methods, best latency traffics and etc. 41 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Inside analytics Report Dashboard API Usage API Response time API Failure App Usage App Response time Region Subscriber App Failure App Subscriber Answers BI Server Oracle BI Dashboard Oracle Database EDR Raw Data 42 API Data Copyright © 2013, Oracle and/or its affiliates. All rights reserved. App Data Subscriber Data Total 31reports • 16 API reports • 12 Application reports • 3 Subscriber reports 2 access points • View reports from within PM Portal • View reports and create new ones from the OBI client. Scalable and performant • Asynchroneous ETL provides scalability and negligable impact on Oracle Communications Services Gatekeeper Use Case 3 - Analytics API name Reports API APP Method Parameter EDR Time period Method name App ID Date & time Subscriber addr Usage & trends Response time & trends Oracle Communications Services Gatekeeper Analytics Failure rate No./region/trends of subs for each app Respond time 5 .HTML Printable Print Failure rate No. of req .MHT 43 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Data Export Analytics value Enable Carriers to: Understand their customers and how they use the APIs • How are the Service providers doing? • How much traffic is it generating? • What services exposed as API’s are making money? Make better business decisions 44 • How about ROI? • Where do they need to expand? • Where do they need to focus? Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Portal and Analytics Deployment Analytics Portal PRM Portal Analytics Report PR Portal Oracle BI DB Service data Management data Account data 45 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. OCSG AT Server AT Server NT Server NT Server JMS SOAP Oracle Web Center DB EDR raw data Report data Presentation Overview Market Trends Service Provider Challenges Service Exposure Opportunities Oracle Communications Services Gatekeeper Overview Focused Solutions Technical Details Development and Extensions 46 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Focused Solutions Preintegrated end to end solutions for the following Use Cases Telecom API Exposure Platform 47 Carrier Billing aaS Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Trusted Identity aaS Network Policy aaS Enterprise Service Access Gateway Machine to Machine Messaging aaS Telecom API Exposure Platform Operators need to boost revenue and protect subscriber base Operators continually try to find new killer app – this is not a sustainable approach! Exposure is the application. Enables web developers to figure out new services and generate the long tail Applications Secure exposure of telecom capabilities via Web Services Secure policy controlled access to telecom resources Service Exposure Policy Control Partner management and on-boarding Network Abstraction Service Level management for partners Access to legacy and NGN telecom resources Network 48 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Telecom API Exposure Platform Solution architecture overview Increase control and End Users Partners reduce cost of managing partners accessing network services Partner & Application Management Enable partners and internal developers to easily create innovative & differentiated services Developer Portal Data Model QoS Billing IT 49 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. BI Service Exposure Establish new revenue streams and enhance customer loyalty Analytics Platform Policy Network Video Telecom API Exposure Platform Carrier Billing aaS Trusted Identity aaS Network Policy aaS Enterprise Service Access Gateway Machine to Machine Messaging aaS CARRIER BILLING AS A SERVICE ORACLE COMMUNICATIONS SERVICES GATEKEEPER AS A CHARGING GATEWAY 50 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Carrier Billing aaS Supports both offline and online charging Direct Carrier Billing Authentication and Payment Gateway Access Control & Policy Management Storefront Authorization Communication Service Refunds Spending Limits Transaction history Both session based (reserved mode) and event based (instant mode) Connectors Supplier End Users Ro Billing/Charging/Rating System Online Mediation Charging & Rating Offline Mediation Customer Data Billing and Settlement 51 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Rf Payment API’s Parlay X and One API One API charging example Standards Compliant 1 App – One API 2.0 and 2.1 3 – Parlay X 3.0 (now complete) 4 2 5 6 Allows Applications to – – – – Charge, ChargeSplitAmount Reserve, Charge Reserve Refund Volume Charge, Reserve Volume Charge OAuth Oracle Communications Services Gatekeeper Pre-integrated with 7 – Oracle Communications Mediation Controller 52 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Billing IT / Network OAuth 2.0 Charging use case App charges on behalf of user 1. User initiates an in-app charge against his operator account for an item 2. 3. Application initiates OAuth conversation for charge by redirecting user to authorization endpoint providing redirect URI and client ID Authorization endpoint re-directs user to authentication end point to authenticate and obtain consent. Oracle Communications Services Gatekeeper presents an authentication and authorization interface to user 4. 5. 6. 7. 53 1 E.g. virtual goods, application, tickets, etc App 3 4 2 5 6 OAuth Form containing username/password, human readable description of resource (charge description) User validates requested charge in browser and submits it to Oracle Communications Services Gatekeeper Oracle Communications Services Gatekeeper redirects user to the Application redirection URI. App obtains access token from Oracle Communications Services Gatekeeper makes charge request with valid token Oracle Communications Services Gatekeeper sends charging record to billing system Copyright © 2013, Oracle and/or its affiliates. All rights reserved. OCSG 7 Billing IT / Network Carrier Billing aaS value • Direct Carrier Billing • Provides fast & easy means of purchasing apps & services • In-Application Charging • Provides fast & easy means of purchasing content • Greatly enhances existing services • Network Policy and Payment • SMS and payment • Oauth and payment (charging on behalf of user) 54 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Telecom API Exposure Platform Carrier Billing aaS Trusted Identity aaS Network Policy aaS Enterprise Service Access Gateway Machine to Machine TRUSTED IDENTITY AAS 55 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Messaging aaS Trusted Identity as a Service Key Features and components Allows subscribers to share their private resources with a third party without having to provide their own security credentials. – These resources could be photos, videos, contact lists, location, billing capability, profile etc. Open, standards based integration points for fedrated Idenity Management solutions Enables the Identity broker Business Model 56 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Trusted Identity aaS Approach and business models • Increased concerns regarding online fraud and information privacy for service providers and end users creates a need for trusted and certified frameworks that industries can depend on to authenticate users. • Opportunity for telcos to move up the value chain and provide enhanced identity services. Business models • Enhance CSP’s own services and create new ones • Take the role of identity brokers that manage high value web transactions. 57 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Example A large American carrier has made great advances in leveraging IDM technology to create new revenue streams. The “identity broker” business model • Telcos, as trusted “identity brokers,” can bridge the gap of trust and security between end users and web/app transactions to build sustainable revenue streams by authenticating identity credentials with relying parties. 3rd party Authentication Alternate authentication • Offer identity services to third parties to meet needs for trust, privacy, and fraud prevention • Example: • • • • Distributing goods and content Targeting promotions Collecting payments Providing customer care ID Broker Name Address SSN Credit card Email Income insurance bank details Billing 58 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. OCSG Network OAuth2 OAuth is an open standard for authorization. http://tools.ietf.org/html/rfc6749 OAuth provides a method for clients to access protected resources on behalf of a resource owner by issuing the client a different credential – access token. Secure resource access by 3rd party applications On-demand, explicit user authorization for resource access Widely accepted industry standard for resource authorization Application driven, Flexible resource authorization It also provides a process for resource owner to authorize third-party access to their server resources without sharing their credentials (typically, a username and password pair), using user-agent redirections. Simple HTTP based protocol, extensible to any 3rd party authorization Improved security and fine grained control over user privacy, payments, other network assets Example use cases •App charges on behalf of the user, user authenticates & authorizes the charge transaction •Operator provides identity service enabling users to log into 3rd party apps 59 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Subscriber privacy management Anonymous Customer Reference (ACR) support Log into app using operator ID Grant access to resources & password App • Preferences • Order history Each app gets ACR for the user, dedicated to the app Provides anonymous ID Privacy Manager App captures information on anonymous user which can be accessed at a later date Privacy Management = OAuth + Comms API support + API semantics + multi-party + 3rd party authorization + ACR 60 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Subscriber privacy management Value proposition for service providers Anonymous Customer References deliver privacy and security for subscribers – Location of 3rd party – Presence of 3rd party Resources Support monetization of other services – Payment as a service – Profile as a service – Network Policy as a service QoS Resources – Caller ID Monetize ID or authorization as a service – Medical information – ID as a service 61 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Telco ID Service App Subscription management • Decouple access to service subscription from its actual representation and the location of the information by providing: • A single point of access to service subscription functions across multiple instances of a service • A common interface to service subscription functions across multiple services • Manage subscriptions with ease • Ensure subscriber privacy through subscriber anonymization • Integration points to IT systems • Short code, key word to content mappings 62 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Subscriber Anonymization Subscription API Notifications Out of box SMS application Subscription Management Integration with IT Subscription through OAuth Multi channel support Subscription lifecycle management Use case example Anonymous news subscription 1. User gets service description about the “digital Service Portal newspaper service” from the service portal presenting the information and initiates a service subscription on the service portal. 2. The service portal sends the service subscription 1 2 request to Oracle Communications Services Gatekeeper. 3 3. Oracle Communications Services Gatekeeper (itself or delegating to other resources) manages the users identity and obtains its pseudo-Id. Oracle Communications Services Gatekeeper sends a notification about the anonymous subscription to the news site 4. The service portal forwards the subscription response to the user. 63 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. News site OCSG 4 Service Portal OCSG News site Use case example Anonymous news subscription 1. The news site application sends a MMS with the content to News site Oracle Communications Services Gatekeeper. The news site only knows the Pseudo-Id as the users Identity. OCSG 1 2. Oracle Communications Services Gatekeeper (itself or delegating to other resources) manages the users identity and obtains the MSISDN. 2 3 3. Oracle Communications Services Gatekeeper forwards the 4 MMS to the user 4. Oracle Communications Services Gatekeeper returns a response to the news site News site 64 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. OCSG Address list management Allows you to manage groups (aliases) of subscribers Group URIs can be used in place of individual URIs by the OneAPI MMS, SMS and Terminal Location communication services 1 createGroup/ 2 sendSMS addMember (group1:[tel:123, tel:456]) (address:group1) Can be used also for custom communicaton services Managing multiple users as one 65 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. address List SMS tel:123 tel:456 Example Family tracking 2a) applyOAuth2Token() 3-4)createGroup(familyURI) getLocation(familyURI) – with 1a) Apply grant for location tracking OAuthToken 1b) addMembers(family members) authorizedByGroupOwner() 2b)issueOAuth2Token() A parent, who is the primary subscriber in a family plan, would like to track family members using a location-based application which makes use of the Address List Management plug-in. 66 – The parent authorizes location tracking on behalf of family members. – The application creates a group owner which issues an authorization grant on behalf of the resource owner members that are part of the group URI. – It passes multiple resource owner addresses to the getGroupLocation method of the Location API to retrieve location information. Copyright © 2013, Oracle and/or its affiliates. All rights reserved. 1 App 4 2 OAuth Oracle Communications Services Gatekeeper 3 GMLC IT / Network Trusted Identity aaS value Safer customer experience -> Increased trust 3rd party Authentication Alternate authentication – Improved security, finer granularity Enabler for Network Policy, Payment and other services Securing privacy –> more business SSO enabler through delegation support 67 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. ID Broker OCSG Billing Network Telecom API Exposure Platform Carrier Billing aaS Trusted Identity aaS Network Policy aaS Enterprise Service Access Gateway Machine to Machine NETWORK POLICY AS A SERVICE 68 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Messaging aaS Network policy as a service QoS Key benefits Better Customer Experience What is the most important differentiator in the mobile broadband market? – QoS! 1% 10% 29% Differentiated Experience QoS Speed 15% Price Coverage Apps and content 18% Increased Revenue Other 27% Source: OVUM: Mobile Industry Survey, AsiaPacific; 2012–13 69 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Network Policy as a service Examples 1. Zero rated commercials (Ad Funded QOS+) Business Drivers 2. Un-throttled OTT partner video (Customer or OTT funded) • Churn reduction 3. Enterprise Mobility Applications (Enterprise funded) • Cost savings 4. Time boxed turbo boosts (Partner or Customer funded) From buffering to joy 70 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Turbo Boost Movie $1 • Revenue Network Policy aaS (Mobile Policy Gateway) Over-the-top apps and content Internal web-based apps and content Unified Communications Content Servers On-boarding Usage statistics Pricing analysis Sub segmentation Partner Relationship Management Allow Allow an an entry entry point point for for applications applications to to influence influence QoS QoS Manage Manage the the relationship relationship between between multiple applications, subscriber, and and multiple applications, subscriber, network network resources resources Leverage Leverage standard standard mechanisms mechanisms like like OAuth OAuth 71 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. CSCF IPTV Service Delivery Platform WS Partner Portal - Internal network services and applications Subscriber Portal OCSG API Platform REST Diameter Rx Application Policies Policy Engine Service Policies Policy Control (PCRF) Decisions flow Operator Network PCEF Subscriber Profile Charging & Billing OCSG and BSS in 3GPP architecture Application Function (OCCAS , WLS, Other) Application Vendor Open and flexible access to enhance applications with QoS Application driven charging models OCSG API Platform Carrier Get over limitations of network centric interfaces Open connection between applications and network Control access to QoS resource from multiple applications Subscriber Gain granular control over applications and their QoS profile Subscriber Profile Repository (BRM / NCC) Policy and Charging Rules Function (OCPC) Policy and Charging Enforcement Function (PCEF) Online Charging System (ECE / BRM / NCC) Offline Charging System (BRM) Adapted from 3GPP TS 23.203 72 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Example End to End QoS Solution 1. A subscriber's mobile device is registered with the Gateway GPRS Support Node (GGSN) or the PCEF. 2. The GGSN or PCEF requests a default QoS plan from the PCRF. 3. Once the QoS plan is returned from the PCRF, the GGSN or PCEF executes that plan and connects the subscriber's device to the Internet. 4. A subscriber application sends a RESTful request to Services Gatekeeper for a change in QoS. 3 Internet App GGSN PCEF 4 5. Services Gatekeeper sends the QoS request to the PCRF using the Rx protocol. 1 6 Internet 6 2 5 OCSG OCPC 6. The PCRF pushes the new QoS plan to the PCEF using the Gx 7 protocol, and the PCEF executes that plan. 7. The PCRF interfaces with BRM or another billing management system to charge the subscriber appropriately. 73 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. 7 BRM OCMC Network Policy Value • Greatly simplifies Network Policy enabled apps • Exposure to 3:rd parties - Allowing partners to guarantee high quality user experiences • Carrier Internal services – Allowing differentiation and optimal use of resources • Better Customer Experience • Differentiated Experience • Increased Revenue 74 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Managed QoS and Consumption Smart Pipes Telecom API Exposure Platform Carrier Billing aaS Trusted Identity aaS Network Policy aaS Enterprise Service Access Gateway Machine to Machine ENTERPRISE SERVICE ACCESS GATEWAY 75 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Messaging aaS Enterprise Service Access Gateway Robust and Performant Unified Service Exposure Platform Expose Network Capabilities as Open Network Applications Applications Applications APIs to Applications Centralized Network Access and Usage Control – WS security, encryption & trust, OAuth 2 – Policy protection framework enabling SLA for applications and end users Access Control Network APIs Policy & Partner Mgmt Pre-built Enablers for Profile, Messaging, Charging, etc. Network Protocols Pre-built interfaces for partner relationship Oracle Communications Services Gatekeeper management & OSS/BSS integration Reliability through scalable clustering (six sigma) – 76 Also supports geographic redundant deployments Copyright © 2013, Oracle and/or its affiliates. All rights reserved. REST SOAP Profile (LDAP) Billing Telecom API Exposure Platform Carrier Billing aaS Trusted Identity aaS Network Policy aaS Enterprise Service Access Gateway Machine to Machine MACHINE TO MACHINE 77 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Messaging aaS M2M Exposure B2B Policy Control and Budgeting • B-2-B and SLA management to partners • Control network access and usage Network Access • Integrates with service enablers: profile, messaging, location, presence,… • Integrates with OSS/BSS infrastructure: Billing & Charging, device management 78 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. SOA Façade (Oracle Service Bus) SOAP & REST Facades • Handles communication and interaction to end devices LBS SMS-C MMS -C Network M2M Device M2M Gateway M2M Device M2M Applications M2M Device HLR OSM BRM ASAP Optional Modules • Exposes network & service delivery capabilities as WEB services to partners and applications M2M Applications Partner/App Management M2M Applications M2M Enabling Platform & Service Delivery • Centralized Service Exposure Layer & Policy Enforcement M2M Enabling Platform & Service Delivery Oracle Communications Services Gatekeeper Appl 1 Appl … Appl 3 M2M Core Tekecom Network enablers available out of the box Network Protection, Throttling & Policy Control Appl 2 M2M Service Capabilities(SC) Network Mgmt (NM) Function Core Network (CN) Transport Network Partner On-boarding – extensive Partner relationship management Access Network M2M Appl M2M SC Web services generation wizards for simple WS integrations M2M Gateway M2M Appl M2M Device Domain M2M Area Network M2M Device 79 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. M2M Mgmt Function M2M SC M2M Device • Scalable, Resilient, Modular and Secure Platform • Developer-friendly API’s and Service Exposure (e.g. RESTful API’s Web Services) • Grow an M2M Partner Ecosystem Telecom API Exposure Platform Carrier Billing aaS Trusted Identity aaS Network Policy aaS Enterprise Service Access Gateway Machine to Machine Messaging aaS MESSAGING AS A SERVICE 80 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Oracle Communications Services Gatekeeper Messaging Capabilities Applications Web Services (SOAP or REST) OSS System Mgmt SMS, MMS, Wap Push & Email Service Exposure Policy Control and Budgeting BSS SCE Network Abstraction Extensions Oracle RAC Integration Oracle SDP SDK SMSC MMSC PPG Network 81 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. SMTP … Unified Messaging as a service Consolidating Messaging Infrastructure Content Provider 1 Content Provider x Application1 Application2 Application n Application1 Application3 Content Provider2 Application2 Content Provider1 Application3 Content Provider2 Content Provider 2 Internal Apps Application 3 WS/REST/Native /SOA interface Telco Service Exposure Plug-in 1 SMPP Gateway1 UCP Gateway1 Plug-in 2 Plug-in N Plug-in N Custom SMSC-1 SMPP Gateway2 Plug-in 3 MMS Gateway1 MMSC1 MMSC 2 Custom SMSC-2 • Reduce OPEX by consolidating fragmented messaging gateways that were tailored to address various business needs • Seamless migration of existing applications; efficient network partitioning for monetization • Comprehensive messaging protocol support (SMPP3.3,SMPP 3.4, UCP 4.0,5.0,USSD) • Exposure, network protocol, business process customization choices on traffic flow • Rich policy control and application, network, subscriber protection 82 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Messaging as a service Significant enhancements to existing messaging capabilities Guaranteed Message Delivery for notifications – Send a message (SMS or Email) for a heads up, reminder, or special offer e.g. when an invoice is sent, payment is due Bulk Messaging for campaign management – Send out offerings to certain customers as SMS, MMS or E-mail – Plan, execute and follow-up on mobile marketing campaigns 83 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Presentation Overview Market Trends Service Provider Challenges Service Exposure Opportunities Oracle Communications Services Gatekeeper Overview Focused Solutions Technical Details Development and Extensions 84 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Communication Services - Exposing Network Services to Applications Webservice Apps Service Facade The Application Facing Component, including the Access Tier and Common Parts of the Network Tier Service Enabler The Network Facing Component, including the Protocol Translation Parts Service Façade Service Enabler Plug-in Communication Services 85 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Access tier Access Control Security Configuration Store Plug-in Manager Statistics Storage Policy Event Channel Account SNMP EDR Budget Lifecycle Management GeoRedundancy Container Services Network tier Out of the Box Interfaces for Service Creation Capability Messaging Communication Service PX 2.1 SMS OneAPI V2 SMS SMPP 3.4 UCP 4, 4.6, 5.0 PX2.1 MMS (MMS & Email) OneAPI V2 MMS MM7 Rel 5, Rel 6 SMTP, IMAP, POP EWS: WAP Push Capability Communication Service PX2.1 Third Party Call PX3.0 Third Party Call Parlay 3.3 SIP RFC 3261 INAP CS1 PAP 2.0 PX2.1 Call Notification PX3.0 Call Notification Parlay 3.3 SIP RFC 3261 EWS: Binary SMS SMPP 3.4 PX3.0 Audio Call EWS: Bulk Messaging SMPP, MM7, PAP as above Parlay 3.3 SIP RFC 3261 Presence PX2.1 Presence SIP RFC 3261 Subscription Subscription Management REST SOAP-SOAP Arbitrary WSDL Arbitrary WSDL REST2REST Arbitrary WADL Arbitrary WADL Native SMPP 3.4 SMPP 3.4 Call Control Payment PX 3.0 Payment OneAPI V2 Payment Diameter Ro Location PX2.1 Terminal Location OneAPI V2 Terminal Location MLP 3.0 Terminal Status PX2.1 Terminal Status MAP Profile EWS: Subscriber Profile LDAP V3 PX 3.0 Device Capabilities and Configuration LDAP V3 MM7 Rel5 MM7 Rel5 QoS Diameter Rf UCP 4, 4.6, 5.0 UCP 4, 4.6, 5.0 Policy 86 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Platform components Weblogic server 11g v 10.3.6 OCCAS ver 5.1 Java Sun 1.6.0_29-b11 or JRockit 1.6.0_29 R28.2.5 (32 or 64 bit) Optional Components For SOA Facades: Oracle Service Bus 11gR1 (11.1.1.6.0) For Portal: WebCenter 11gR1 (11.1.1.6.0) For Reports: Oracle Business Intelligence Suite Enterprise Edition Plus 11.1.1.6.0 87 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Supported operating systems 88 OEL Sun Solaris Redhat Enterprise Linux Windows OS Version OEL Release 4 (UL7+), 5 (UL3+), 6 32 & 64 bits Solaris 2.9 u9+,10 u4+, 11 RHEL 4 (UL7+) & RHEL 5 (UL3+), RHEL 6 32 & 64 bits Windows 7 Windows Vista with SP1+ Windows XP sp2+ (dev only) JVM (bits) 32 & 64 64 32 & 64 32 & 64 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Supported databases Database Oracle 10g and 11g RAC Characteristic Full DB Failover and Fault Tolerance Oracle 10g and 11g Single Instance No Failover and Fault Tolerance Oracle Database Express Edition 10g and No Failover and Fault Tolerance 11g MySQL 5.x Single Instance No Failover and Fault Tolerance MySQL Cluster 7.2 89 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Full DB Failover and Fault Tolerance Virtualization support Virtualization Note Solaris Zones OVM Virtual Box 90 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Tested with OVM 3.1.1 Presentation Overview Market Trends Service Provider Challenges Service Exposure Opportunities Oracle Communications Services Gatekeeper Overview Focused Solutions Technical Details Development and Extensions 91 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Most Extensible Network Gateway Solution API creation & management tools Simulation App • Quickly and easily extend the platform by • Simple wizards to generate SOAP or REST services • Rapidly create & modify service level agreements • Customize workflow and policy control Custom Interfaces Platform Test Environment adding network and IT APIs Application Custom SDK Custom Service Attributes Custom SLA New Communication Service New Interceptor Oracle Communications Services Gatekeeper Custom Protocol through the creation of new interceptors Simulation Node 92 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. New Network Node Customizable Software Development Kit (SDK) For application Development Simplified, Light weight, developer-friendly SDK Can be Customized, White-Labeled and re-distributed – From UI to SLAs, operators can personalize the SDK to developers SOAP & RESTful Web services support SLA enforcement & WS-Security API for extensibility Easy-to-use GUI Simulator Simulator GUI Workshop Controls 93 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Extending Oracle Communications Services Gatekeeper Create a new communication service: – To develop a new end-to-end service for a new network protocol: Create everything from the application-facing Web Service interface to the network-facing plug-in Modify an existing communication service: – Create a new network plug-in when the application-facing interface is the same but the network protocol has been modified: Customize an existing communication service – Change or add an interceptor for workflow customization (Network Tier) – Add a new Handler of Servlet filter for customization of request or response content (Application Tier) 94 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Oracle Communications Services Gatekeeper Communication Service Service Facades Handlers & Filters Service enablers Interceptors EDR’s CDR’s Alarms SNMP Platform Development Studio Features To create new communication services, or to extend existing communication services, Oracle Communications Services Gatekeeper provides the Platform Development Studio. Platform Development Studio includes the following: – Sample communication service – Communication service creation wizard – Platform Test Environment: Includes a service-level agreement (SLA) editor – A schema for creating subscriber-centric SLAs – Event data record (EDR) and alarm listeners Custom Communication Services Support – PDS can generate complete SOAP and REST communication services for SDK using WSDL Oracle Communications Services Gatekeeper also provides a mechanism for implementing custom policy rules. 95 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. The Platform Test Environment What can be extended? Rich APIs for: – New Communication Services – New Service Enablers – Test drivers – Simulators Rich SPIs for: – Service Interceptors – Profile Providers for Subscriber- Centric Policy Automatic generation of: – SOAP-SOAP communication services 96 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Extension Toolkit Communication service creation wizard Eclipse Wizard that Generates Substantial Code Specialized Templates and Ant Tasks Buildable and Executable Example Unit Test Framework The Platform Test Environment (GTool) 97 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. SOAP-SOAP Communication Services • Supports automatic generation of SOAP services based on WSDL file. • The soap-to-soap application interface maps directly to the network facing service (SOAP) and callback WSDL’s • Generated through the eclipse wizard 98 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Client HTTP/SOAP WS Callback EJB EJB Callback EJB client SOAPPluginNorth Callback Handler WS-stub SoapPluginSouth OCSG WS-Skeleton REST-REST Communication Services • Supports automatic generation of REST services based on WADL file. • The rest-to-rest application interface maps directly to the network facing service (REST) and callback WADL’s • Generated through the eclipse wizard 99 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. 100 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. The preceding is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle. 101 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. 102 Copyright © 2013, Oracle and/or its affiliates. All rights reserved. 103 Copyright © 2013, Oracle and/or its affiliates. All rights reserved.