Lanka Gate Core Components

1. Lanka Gate Architecture
And its
Components
Crishantha Nanayakkara
crishanthan@icta.lk
1

2. Lanka Gate is a typical SOA environment
2

3. SOA is an architectural style of building
software applications that promotes
loose coupling between components so
that you can reuse them
3

4. Service Description
Service
Registry
Fin
d
ish
bl
Pu
Service
Consumer
Bind
Service
Provider
Web Service
4

5. 5

6. Mobile
Payment Providers
Credit Card
Payment Providers
Services
Citizens
Application
Private Sector
Companies
Mobile Payment
Service
Mobile Portal
SMS, VXML
Mobile Service
Providers
Country Portal
Registry
Lanka Government
Network
Services
Application
Certificate
Authority
Services
Application
Private Sector
VPN
Lanka Gate
Lanka Gate
48 Ministries
60 Departments
Services
Application
Application
271 DS Offices
8 Provincial
Councils
32 Provincial
Ministries
16 Provincial
Departments
6

7. LG Components
●
Core Components
–
–
●
Lanka Interoperability eXchange (LIX)
Service Registry
Supporting Components
–
GovSMS
–
Lanka Government Payment Service (LGPS)
–
Lanka Government Cloud (LGC)
–
LGN and LGN­CA
7

8. Lanka Interoperability
Exchange (LIX)
8

9. 9

10. The Service Registry
10

11. Service Description
Service
Registry
Fin
d
ish
bl
Pu
Service
Consumer
Bind
Service
Provider
Web Service
11

12. Security
12

13. Authentication
Confidentiality
Integrity
Non­Repudiation
13

14. PKI enables enables parties of an e­commerce
transaction to identify one another by
providing authentication with digital
certificates, and allows reliable business
communications by providing confidentiality
through the use of encryption, and
authentication, data integrity and a
reasonable basis for nonrepudiation through
the use of digital signatures.
(Resource ­ WebTrust)
14

15. Encryption
15

16. Digital Signatures
(Signing Process)
16

17. Digital Signatures
(Verification Process)
Step 1
Step 2
17

18. LGN CA is the Sri Lankan Government
PKI and it manages the digital
Certificates within the Sri Lankan
Government
18

19. The Transport Level Security
●
One way (1­way) SSL
–
The server must represent the certificate to
the client
–
The client is not required to present a
certificate to the server
19

20. The Transport Level Security
●
Two way (2­way) SSL
–
Known as client authentication as well
–
Server and Client both present their
certificate to each other (The authentication
happens both ways)
20

21. Point to Point Security
ESB as a Security Gateway
21

22. End to End Security
with a ”Pass Through Proxy”
22

23. End to End Security
with a ”Secure Proxy”
23

24. Thank You!
24