B R I T I S H C O L U M B I A AT TO R N E Y G E N E R A L
XML AND WEB SERVICES SECURITY REDEFINED
XML AND WEB SERVICES SECURITY REDEFINED
British Columbia Attorney General Uses SecureSpan™ to Quickly Share
Vital Services with Strategic Partners
B R I T I S H CO LU M B I A AT TO R N E Y G E N E R A L : A N O V E R V I E W
The BC Ministry of Attorney General and Minister Responsible for Treaty Negotiations, also known as the British Columbia Attorney
General (BCAG), is responsible for the administration of justice and the negotiation and implementation of treaties and other
agreements with First Nations in British Columbia, Canada. The BCAG has a constitutional and statutory role as the BC Government's
lawyer, providing legal advice, representing the Provincial Government in litigation, and drafting legislation.
Five core business areas of the BCAG — Court Services, Legal Services,
Prosecution Services, Justice Services, and Executive and Support COURT SERVICES
Services (see side bar) — work together and with other justice partners Court Services offers administrative, security, and
to enforce the justice mandate. Collaboration among key partners like enforcement services to support the independent
the police, judiciary, defense counsel, and other ministries is vital to the judiciary and the operation of three separate levels of
effective and efficient delivery of services to the public. courts over which the judiciary presides: the Court of
Appeal, the Supreme Court, and the Provincial Court.
The BCAG strives to enhance public confidence in the integrity and LEGAL SERVICES
effectiveness of the justice system by fostering cooperation and shared Legal Services provides advice to ministries and Cabinet,
initiatives among its partners. The BCAG’s core business areas drafts legislation, and represents the government in
contribute unique sets of programs and services that, when integrated court and before administrative tribunals.
with services from other justice partners, constitute the justice
process. PROSECUTION SERVICES
Prosecution Services prosecutes offences under the
Criminal Code of Canada, the Youth Criminal Justice Act,
and offences arising from violations of provincial
T H E B U S I N E S S C HA L L EN GE statutes.
In an effort to streamline court proceedings, the BCAG wanted to make JUSTICE SERVICES
its electronic filing system, called the Integrated Justice System (JUSTIN), Justice Services manages legal aid funding and is
available to internal BCAG users, external BCAG users, and external responsible for a range of civil and family law programs
justice partners and the general public. and services such as dispute resolution and enforcement
of registered maintenance orders and agreements.
JUSTIN, a large cluster of Oracle databases, stores extremely confidential EXECUTIVE AND SUPPORT SERVICES
information related to BC court proceedings. The BCAG needed a way to Executive and Support Services provides administrative
cost-effectively provide access to information in these databases and other corporate-level services to the Ministry of
without having to provide direct connections to JUSTIN itself. The Attorney General, the Treaty Negotiations Office, and the
project also required information access controls that would grant Ministry of Public Safety and Solicitor General.
specific access privileges depending on a user's profile.
Several proprietary technologies were examined and scored on their complexity, cost, and security. The BCAG determined that a
solution based on open standards would provide the level of flexibility required to securely integrate with other internal and
external application services.
The BCAG initiated a comprehensive proof-of-concept trial to determine the feasibility
"By using Layer 7, the Ministry of exposing JUSTIN information to users as Web services. Using Layer 7 Technologies’
can quickly expose services to SecureSpan™ suite of products, the BCAG was able to enforce multiple Web service
access policies, permitting user-specific access controls to the confidential
others organizations, making
everyone more productive in a
shorter period of time." Web services and SecureSpan met the BCAG's technical and economic criteria, enabling
the successful and secure exposure of JUSTIN information to multiple internal and
ROBERT MCDONALD external users. The result: The BCAG supported its mandate of efficiently and effectively
DIRECTOR, APPLICATION communicating information internally and amongst its justice partners, yielding a more
MANAGEMENT SERVICES streamlined justice process for the public that it serves.
W W W. L AY E R 7 T E C H . C O M
S E C U R E S PA N ™: P R O T E C T, C O N N E C T, A N D VA L I D AT E
L AY E R 7 T E C H N O LO G I E S’ S E C U R E S PA N ™ P R O D U C T L I N E
The BCAG successfully channels its Web services through a single security enforcement point — Layer 7 Technologies’ SecureSpan™
suite of products. Using SecureSpan, the BCAG provides secure access to its Web services users while maintaining tight control over
how those Web services are accessed.
SecureSpan is a standards-based product line designed to secure and govern XML and Web services interactions spanning
departments, business units, and partners. Providing best-in-breed XML firewalling, adaptive policy enforcement, and optional
client-side security coordination, SecureSpan ensures secure and flexible Web services deployments across security and identity
The SecureSpan product suite is composed of three separate yet complementary products: the SecureSpan™ Gateway is a scalable
and accelerated XML firewall appliance that defends applications and enforces diverse security policies, the SecureSpan™ Bridge
enables client applications in external security and identity domains to securely access protected Web services without
programming and off-line policy coordination, and the SecureSpan™ Manager is a rich environment to centrally define and govern
fine-grained security and interaction policies between Web services and their client applications.
Intranet / Extranet
Bridge High Security
Public SecureSpan™ Bridge
B E N E F I T S O F S ECUR E SP A N ™
The benefits of the BCAG's SecureSpan™ implementation were immediate and significant. "The Layer 7 solution was easy to install
and configure, therefore the deployment costs were negligible" reported Robert McDonald, Director of Application Management
Services at the BCAG. "The Layer 7 solution has allowed us to quickly and securely expose new services to internal business areas
and external partners, all while saving a significant amount of design and development costs. This has allowed us to more easily
share vital information and ensure the collaboration needed to quickly respond to the needs of our constituents."
In addition to its lower integration cost and ease of implementation, SecureSpan also allowed the BCAG to quickly deploy their Web
services without requiring complex security and integration policy coding. Since SecureSpan is centrally-managed, policy changes
require no changes to the application code, and the addition or modification of Web services and/or policies is quickly updated and
automatically propagated on both sides of the integration. "By eliminating the need to manually code security and integration
policies into our applications, Layer 7 has reduced our overall development costs by 25%." said Mr. McDonald. "If you multiply that by
the overall spend within the Ministry [BCAG], it is very significant and allows us to use those resources on other business critical
I N F O @ L AY E R 7 T E C H . C O M
A B O U T L AY E R 7 T E C H N O LO G I E S
With offices in San Mateo, California; New York, New York; and Vancouver, British
Columbia, Canada; Layer 7 Technologies helps enterprises accomplish secure and
cost-effective business integration using XML and Web services. Layer 7 Technologies’
SecureSpan™ suite of products is the first end-to-end technology that addresses
security and governance across a Web services deployment without expensive and
inflexible programming. With SecureSpan, customers realize lowered integration costs,
increased security reliability, faster time to production, and the ability to future-proof
their Web services investments. Contact Layer 7 Technologies or visit
www.layer7tech.com for more information.
Phone: 604.681.9377 / 1.800.681.9377
Copyright © 2005 Layer 7 Technologies Inc. All rights reserved. SecureSpan™ and the Layer 7 Technologies logo are
trademarks of Layer 7 Technologies Inc. Other mentioned trade names and trademarks are the property of their respective owners.