Introduction


This document forms one of the iPlanet Trustbase Transaction Manager framework documentation set. This document is aimed at designers and developers looking to produce applications that utilise the iPlanet Trustbase Transaction Manager framework. The guide is divided into three main sections:

• Introduction to the environment iPlanet Trustbase Transaction Manager has been designed for

• An overview of the Framework and how the components interact

• Development of a iPlanet Trustbase Transaction Manager application

Overall Layout

---

The complete documentation set comprises of:

• iTTM3.0.1-Install-Configuration-Guide.pdf is designed for operators looking to produce applications that utilise the iPlanet Trustbase Transaction Manager framework. It is designed to provide information for operators looking to install the iPlanet Trustbase Transaction Manager platform. This guide identifies hardware and software required prior to installation, how to install iPlanet Trustbase Transaction Manager from CD-ROM

• iTTM3.0.1-Developer-Guide.pdf (this Document) that indicates how to build and deploy your own services. At the end of this manual there are two worked examples on how to build your own applications and an appendix on how to operate your own PKI using the command line tool TokenKeyTool

• API reference /opt/ittm/current/apidocs is a softcopy Java documentation set that is provided as part of the iPlanet Trustbase Transaction Manager installation. It is designed to provide application developers with the information to utilise the framework and tools provided within the iPlanet Trustbase Transaction Manager framework.

This manual assumes the reader is familiar with Java standards described in http://www.javasoft.com and XML described in http://www.w3.org/TR/REC-xml.

The manual also assumes that the reader has attended the iPlanet Trustbase Transaction Manager Developer Training course.

Related Documents

---

• Solaris 8 and Java Development Kit 1.2.1

  http://docs.sun.com

  http://java.sun.com/products/jdk/1.2/docs/index.html

• iPlanet Application Server 4.1

  http://docs.iplanet.com/docs/manuals/ias.html

• iPlanet Web Server 6.0

  http://docs.iplanet.com/docs/manuals/enterprise.html

• iPlanet Certificate Management System

  http://docs.iplanet.com/docs/manuals/cms.html

• Oracle 8i Installation and Configuration Guides

  http://www.oracle.com

• Hardware Security nCipher KeySafe 1.0 and CAFast

  http://www.ncipher.com

• Identrus Message Specifications

  http://www.identrus.com

  Transaction Coordinator requirements (IT-TCFUNC)

  Core messaging specification (IT-TCMPD)

  Certificate Status Check Messaging specification (IT-TCCSC)

Introduction

---

The iPlanet Trustbase Transaction Manager platform provides a message oriented middleware platform capable of supporting a variety of banking and trade facilitation applications. This platform is specifically designed to enable Financial Institutions to make use of the Identrus Network by providing all of the function required to process messages that conform to the Identrus messaging specification.

iPlanet Trustbase Transaction Manager Platform

The iPlanet Trustbase Transaction Manager Platform operates at a high level as follows:

• Incoming messages are received from dedicated security services that support secure channel communication - including HTTP over SSLv3 and SMIMEv2 over SMTP.

• Requests are passed through a message parsing and verification engine that verifies that the incoming message is requesting a service that is offered by the platform, is complete and correctly formatted and builds the service request message request for processing through the system. The platform supports a range of standards for message coding including XML and HTML. A naming service identifies the application logic that the message object will be routed to for processing.

• Application Logic. The platform can support a range of application logic and can be extended by both the deploying and third party organisations.

• Third party services. Applications executed on the iPlanet Trustbase Transaction Manager platform may apply to third party systems during the decision making process. These include an organisation's operational systems and third party services.

• Response Management. A response to the relying party is constructed and returned to the requesting party based on the policy defined for each particular transaction supported by the platform.

All stages of the transaction processing process can be recorded in the repository's audit facilities.

Identrus Transaction Coordinator

The iPlanet Trustbase Transaction Manager provides an implementation of the Identrus Transaction Coordinator as specified in the following Identrus documents:

Title	Description and Document Reference
Transaction Coordinator	Transaction Coordinator requirements (IT-TCFUNC)
Transaction Coordinator Messaging Protocol Definition	Core messaging specification (IT-TCMPD)
Transaction Coordinator Certificate Status Check Protocol Definition	Certificate Status Check Messaging specification (IT-TCCSC)

The iPlanet Trustbase Transaction Manager is designed to be an extensible platform that not only performs the core CSC function of an Identrus Transaction Coordinator, but also allows the developer to produce applications that conform to the Identrus messaging specification.

The iPlanet Trustbase Transaction Manager makes producing Identrus compliant applications simple for the Developer by providing the following functionality:

• Standard presentation of messages independent of the transport mechanism.

• Standard Authentication and Authorisation of requests.

• Common validation and error handling of all Identrus Network layer information within messages.

• Tools for generation of new application message types that conform to the Identrus specifications.

The early sections of this guide identify these common components and the functions supported by each. The later sections of the guide show how an Identrus application may be produced and deployed on the iPlanet Trustbase Transaction Manager infrastructure.

Product Features

---

iPlanet Trustbase Transaction Manager provides a platform for the delivery of business to business E-Commerce solutions. The principal challenges to be addressed are as follows:

Product features

Identity	The solution recognises different types of credential and uses them as the basis for authentication requests, sometimes to remote and/or third party services. It supports the establishment of multi-party trust relationships, including those based on iPlanet Trustbase Transaction Manager Third Parties and other external CA services.
Entitlement	Once the identity of trading partners has been established, the platform provides a means for a business to determine which services it should provide to a potential customer. The e-commerce platform specifies and enforces terms for the provision of services based on the user type, credential type, access channel, credit worthiness, and so on.
Dispute Resolution	Using certificate-based technology, the platform provides services for transaction signing, audit logging and non-repudiation.
Integration	iPlanet Trustbase Transaction Manager integrates with existing back and mid-office solutions such as Customer Relationship Management and Cash Management solutions. It supports a flexible e-commerce model, catering for '2-to-n'-party transactions.
Availability	It provides Business to business commerce on a global basis that allows 24x7x365 availability.
Scalability	It services an increasing customer base catering for unpredictable performance requirements.
Security	E-commerce solutions must provide total security for all parties. This includes identification and authentication services, data confidentiality and integrity, transactional security, and security management services.