High Level Architecture. BOUNCE aims to build an open architecture to maximise the benefits of combining technologies and data from different partners and organisation. The architecture will be constructed based on an iterative incremental process of software development. Short iterations will help keep quality under control by driving to a releasable state frequently, which will prevent the project from collecting a large backlog of defect correction work. Refinements of the architecture will take place during the whole lifetime of the project driven by the iterative feedbacks from all stakeholders. The general BOUNCE architecture is envisioned as a framework, which integrates several building blocks oriented to support/predict the resilience of women with breast cancer. The building blocks are organized in three tiers:
i. the semantic tier based on hybrid architecture which contains data extraction, transformation and serving the applications tier,
ii. the applications tier which contains the technology components such as biological and medical modelling, rule based decision support system and psycho-emotional models
iii. the security tier, a privacy framework able to handle user privacy and data security The high-level architecture of BOUNCE is shown in Figure 4, while in the following sub-sections we describe the three tiers.
High Level Architecture. The Platform architectural design is strategically arranged to promote Customer data confidentiality, integrity and availability. This architecture includes: - Data segregation; - Consistency checks; - Log management; and - Active monitoring using situational awareness algorithms.
High Level Architecture. In the upper part of the architect the Modelling Xxxxx resides. In this layer, three distinct editors exist. Initially, the Service Graph Editor is responsible to author and maintain application templates of cloud-native components. Since the term cloud-native is usually “overloaded”, the definition that applies consistently across this document is that a cloud- native component is any software artefacts that follows the 12-factor principles [36]. According to these principles, any software component that can operate on top of an isolated compute-environment with abstracted configuration profile and dependencies can be considered as cloud-native. These templates formulate a direct acyclic graph (DAG) and in the context of RAINBOW should be verified both at design- and runtime; fog nodes hosting these cloud-native components should be able to provide verifiable evidence on their configuration integrity and correctness, thus, enabling the creation of privacy- and trust-aware service graph chains with the capability of Secure Zero Touch Provisioning (S-ZTP). S-ZTP allows the automatic and secure establishment of trust, called enrolment, between a new fog node/device connected to the network and the Orchestration Lifecycle Manager, without the need of any manual intervention. S-ZTP eliminates the need of trust on first use or out-of-band trust establishment schemes, which, in practice can be very unreliable from the perspectives of trust model, organization and cost. As can be seen in Section 6.3, the result of a successful enrolment will be based on the output of the RAINBOW trust enablers (i.e., attestation agents) and will be materialized by the issuance of an appropriate (TLS) certificate that can be then used to securely communicate with the backend Orchestrator or with other nodes. Existing cloud-orchestrators (as the ones examined in 2.2 such as Docker Swarm, Kubernetes) maintain their own version of DAG representation (e.g. docker- compose[37], Helm charts [38]). RAINBOW will maintain backward compatibility with the de-facto DAG models. However, on top of these models, specific modelling extensions will be provided that will drive sophisticated orchestration logic. These metadata include, mainly, deployment constraints, resource constraints, operational constraints and security constraints. For example, let us assume an application that aims to capture live video from several drones and use these streams in order to perform both local and remote data p...
High Level Architecture. Figure 3 presents the architectural elements of RESOLVD platform and their interconnections, briefly explained below and presented in more detail in Table 1 and in the next chapters. The RESOLVD platform is composed of the following architectural elements: • The Enterprise Service Bus (ESB), acting as an integration middleware; • The Data Analytics Platform (DAP), acting as a central data repository and data analysis and visualization provider; • The AAA Server, serving as the security infrastructure; • The Operation Applications, managing advanced grid operations and providing a UI. Component Name Description Enterprise Service Bus The Enterprise Service Bus (ESB) is the means to connect service consumers with service providers, enabling them to route service calls, transform messages, mediate between communication protocols and data models and orchestrate complex business processes. In the context of the project, the ESB will be used for interfacing and interaction among the various legacy system as well as applications and services that will be implemented in the project, through standard interfaces. The ESB will be responsible for the orchestration of the execution of the various modules, as well as the coordination of data exchanges with different systems (GIS, MDMS, DAP, WAMS etc.). Data Analytics Platform The DAP consists of the infrastructure that is responsible for data management, analysis and visualization. On one hand, it will integrate and homogenize data from third party applications and services via appropriate interfaces, which may differ among different data providers. It will act as a centralized storage of data from legacy systems and results of computation algorithms, allowing the decoupling of the legacy systems from the operation of the advanced functionalities offered by the operation applications. DAP will also be able to host the calculations of key performance indicators e.g. regarding the impact of the grid operations, being able to provide them as a service. Finally, DAP will provide visualizations, enabling end users to view both raw data stored on DAP as well as the insights gained from analytic computations. AAA Server The AAA Server will be utilized for the integration of security mechanisms in a network of services. This security infrastructure will provide authentication, authorization, and accounting and will safeguard the platform’s resources/services. Operation Applications The Operation Applications aim to provide an i...
High Level Architecture
