Case Study: British Columbia Attorny General - XML & Web Services Security Redefined

Document Sample
Case Study: British Columbia Attorny General - XML & Web Services Security Redefined Powered By Docstoc
					          B R I T I S H C O L U M B I A AT TO R N E Y G E N E R A L
                                                 CASE STUDY




XML AND WEB SERVICES SECURITY REDEFINED
                                                                                 XML AND WEB SERVICES SECURITY REDEFINED




British Columbia Attorney General Uses SecureSpan™ to Quickly Share
Vital Services with Strategic Partners
B R I T I S H CO LU M B I A AT TO R N E Y G E N E R A L : A N O V E R V I E W
The BC Ministry of Attorney General and Minister Responsible for Treaty Negotiations, also known as the British Columbia Attorney
General (BCAG), is responsible for the administration of justice and the negotiation and implementation of treaties and other
agreements with First Nations in British Columbia, Canada. The BCAG has a constitutional and statutory role as the BC Government's
lawyer, providing legal advice, representing the Provincial Government in litigation, and drafting legislation.

Five core business areas of the BCAG — Court Services, Legal Services,
Prosecution Services, Justice Services, and Executive and Support               COURT SERVICES
Services (see side bar) — work together and with other justice partners         Court Services offers administrative, security, and
to enforce the justice mandate. Collaboration among key partners like           enforcement services to support the independent
the police, judiciary, defense counsel, and other ministries is vital to the    judiciary and the operation of three separate levels of
effective and efficient delivery of services to the public.                     courts over which the judiciary presides: the Court of
                                                                                Appeal, the Supreme Court, and the Provincial Court.
The BCAG strives to enhance public confidence in the integrity and              LEGAL SERVICES
effectiveness of the justice system by fostering cooperation and shared         Legal Services provides advice to ministries and Cabinet,
initiatives among its partners. The BCAG’s core business areas                  drafts legislation, and represents the government in
contribute unique sets of programs and services that, when integrated           court and before administrative tribunals.
with services from other justice partners, constitute the justice
process.                                                                        PROSECUTION SERVICES
                                                                                Prosecution Services prosecutes offences under the
                                                                                Criminal Code of Canada, the Youth Criminal Justice Act,
                                                                                and offences arising from violations of provincial
T H E B U S I N E S S C HA L L EN GE                                            statutes.

In an effort to streamline court proceedings, the BCAG wanted to make           JUSTICE SERVICES
its electronic filing system, called the Integrated Justice System (JUSTIN),    Justice Services manages legal aid funding and is
available to internal BCAG users, external BCAG users, and external             responsible for a range of civil and family law programs
justice partners and the general public.                                        and services such as dispute resolution and enforcement
                                                                                of registered maintenance orders and agreements.
JUSTIN, a large cluster of Oracle databases, stores extremely confidential      EXECUTIVE AND SUPPORT SERVICES
information related to BC court proceedings. The BCAG needed a way to           Executive and Support Services provides administrative
cost-effectively provide access to information in these databases               and other corporate-level services to the Ministry of
without having to provide direct connections to JUSTIN itself. The              Attorney General, the Treaty Negotiations Office, and the
project also required information access controls that would grant              Ministry of Public Safety and Solicitor General.
specific access privileges depending on a user's profile.

Several proprietary technologies were examined and scored on their complexity, cost, and security. The BCAG determined that a
solution based on open standards would provide the level of flexibility required to securely integrate with other internal and
external application services.

                                               The BCAG initiated a comprehensive proof-of-concept trial to determine the feasibility
  "By using Layer 7, the Ministry              of exposing JUSTIN information to users as Web services. Using Layer 7 Technologies’
  can quickly expose services to               SecureSpan™ suite of products, the BCAG was able to enforce multiple Web service
                                               access policies, permitting user-specific access controls to the confidential
  others organizations, making
                                               information.
  everyone more productive in a
  shorter period of time."                     Web services and SecureSpan met the BCAG's technical and economic criteria, enabling
                                               the successful and secure exposure of JUSTIN information to multiple internal and
  ROBERT MCDONALD                              external users. The result: The BCAG supported its mandate of efficiently and effectively
  DIRECTOR, APPLICATION                        communicating information internally and amongst its justice partners, yielding a more
  MANAGEMENT SERVICES                          streamlined justice process for the public that it serves.
  BCAG


                                                                                                                  W W W. L AY E R 7 T E C H . C O M
S E C U R E S PA N ™: P R O T E C T, C O N N E C T, A N D VA L I D AT E


L AY E R 7 T E C H N O LO G I E S’ S E C U R E S PA N ™ P R O D U C T L I N E
The BCAG successfully channels its Web services through a single security enforcement point — Layer 7 Technologies’ SecureSpan™
suite of products. Using SecureSpan, the BCAG provides secure access to its Web services users while maintaining tight control over
how those Web services are accessed.

SecureSpan is a standards-based product line designed to secure and govern XML and Web services interactions spanning
departments, business units, and partners. Providing best-in-breed XML firewalling, adaptive policy enforcement, and optional
client-side security coordination, SecureSpan ensures secure and flexible Web services deployments across security and identity
domains.

The SecureSpan product suite is composed of three separate yet complementary products: the SecureSpan™ Gateway is a scalable
and accelerated XML firewall appliance that defends applications and enforces diverse security policies, the SecureSpan™ Bridge
enables client applications in external security and identity domains to securely access protected Web services without
programming and off-line policy coordination, and the SecureSpan™ Manager is a rich environment to centrally define and govern
fine-grained security and interaction policies between Web services and their client applications.

                                                                  BC
                                                               Attorney
                                                               General


                                                                                                    SecureSpan™
                                                                                                      Manager
                                       SecureSpan™
                                         Gateway
                                                                                             Low
                                                                                           Security
                                                                                                                        Public
                                         High                                                                           Users
                                        Security
                                                                     Intranet / Extranet

           SecureSpan™                                                                                     Medium
              Bridge                                       High                                            Security
                                                          Security                         Court
                                                                                           Clerks
                 Prosecutors
                                                                                                              SecureSpan™
                                                    Public                 SecureSpan™                           Bridge
                                                   Defenders                  Bridge


B E N E F I T S O F S ECUR E SP A N ™
The benefits of the BCAG's SecureSpan™ implementation were immediate and significant. "The Layer 7 solution was easy to install
and configure, therefore the deployment costs were negligible" reported Robert McDonald, Director of Application Management
Services at the BCAG. "The Layer 7 solution has allowed us to quickly and securely expose new services to internal business areas
and external partners, all while saving a significant amount of design and development costs. This has allowed us to more easily
share vital information and ensure the collaboration needed to quickly respond to the needs of our constituents."

In addition to its lower integration cost and ease of implementation, SecureSpan also allowed the BCAG to quickly deploy their Web
services without requiring complex security and integration policy coding. Since SecureSpan is centrally-managed, policy changes
require no changes to the application code, and the addition or modification of Web services and/or policies is quickly updated and
automatically propagated on both sides of the integration. "By eliminating the need to manually code security and integration
policies into our applications, Layer 7 has reduced our overall development costs by 25%." said Mr. McDonald. "If you multiply that by
the overall spend within the Ministry [BCAG], it is very significant and allows us to use those resources on other business critical
projects."

I N F O @ L AY E R 7 T E C H . C O M
                                         A B O U T L AY E R 7 T E C H N O LO G I E S
                                         With offices in San Mateo, California; New York, New York; and Vancouver, British
                                         Columbia, Canada; Layer 7 Technologies helps enterprises accomplish secure and
                                         cost-effective business integration using XML and Web services. Layer 7 Technologies’
                                         SecureSpan™ suite of products is the first end-to-end technology that addresses
                                         security and governance across a Web services deployment without expensive and
                                         inflexible programming. With SecureSpan, customers realize lowered integration costs,
                                         increased security reliability, faster time to production, and the ability to future-proof
                                         their Web services investments. Contact Layer 7 Technologies or visit
                                         www.layer7tech.com for more information.

                                         Phone: 604.681.9377 / 1.800.681.9377
                                         Fax: 604.681.9387
                                         Email: info@layer7tech.com
                                         Web: www.layer7tech.com




      Copyright © 2005 Layer 7 Technologies Inc. All rights reserved. SecureSpan™ and the Layer 7 Technologies logo are
trademarks of Layer 7 Technologies Inc. Other mentioned trade names and trademarks are the property of their respective owners.

				
DOCUMENT INFO
Shared By:
Categories:
Tags: Justin, bcag
Stats:
views:1
posted:4/4/2012
language:
pages:4
Description: Sharing vital services with strategic partners The British Columbia Attorney General (BCAG) is a government ministry in British Columbia, Canada, with a constitutional and statutory role as the province’s lawyer. In an effort to streamline court proceedings, the BCAG wanted to make data from its electronic filing system, called JUSTIN, available to internal and external BCAG employees, partner organizations and the general public.