K. Jamroendararasame*, T. Matsuzaki,

1
Two Generators of SecureWeb-based Transaction
Systems

• K. Jamroendararasame, T. Matsuzaki,
• T. Suzuki, and T. Tokuda
• Department of Computer Science,
• Tokyo Institute of Technology, JAPAN

2
Contents

• Motivations
• Software architectures for Web-based transaction
  systems
• Web transition diagrams
• Web-based transaction system generators
• T-Web system
• PF-Web system
• Evaluation
• Comparisons Conclusion

3
Disadvantages of current approaches

• Manual consistency and security management
• Ad hoc construction of processing programs
• Complex logical structure processing programs
• No graphical view of overall system behavior

4
Goals

• Non-programmers can generate typical Web-based
  transaction systems.
• Support of consistency management and standard
  level of Web security

5
Purposes (1)

• A method to describe behavior of Web-based
  transaction systems graphically

• Web Transition Diagrams
• Representation of overall behavior of Web-based
  transaction systems
• Based on pipe/filter software architecture

6
Purposes (2)

• A method to generate Web-based transaction
  systems from graphical diagrams

• Web-based transaction system generators
• T-Web system based on template method
• PF-Web system based on functional
  composition method

7
Why two types of generators?

• For two types of target users
• T-Web system for non-programmers with
• ability to understand overall system behavior,
• ability to compose Web transition diagrams,
• ability to differentiate types of processes
• PF-Web system for non-programmers with
• ability to understand overall system behavior,
• ability to compose Web transition diagrams,
• ability to give a clear definition of
  input/output values of processes

8
Software architectures for Web-based transaction
systems
9
Definitions
Client-Server computing systems
Web application systems
Web-based transaction systems
10
Software architectures forWeb-based transaction
systems

• Processing on the client side
• scripting languages JavaScript and VBScript
• compiled modules Java applets and ActiveX
  controls
• Processing on the server side
• SSI (Server Side Includes)
• CGI (Common Gateway Interface)
• JavaServlet
• server side scripts JSP, ASP, PHP, etc.
• components EJB and COM

11
Software architectures for Web-based transaction
systems

• Processing on both client side and server side
• client side scripts with server side programs
• client-server programs communicating by general
  protocols
• RMI (Remote Method Invocation)

We concentrate on CGI architecture.
12
Web Transition Diagrams
13
Overview

• Representation of overall behavior of Web-based
  transaction systems
• Based on Pipe/Filter architecture

Pipe
Pipe
Filter
14
Definitions
Links
Nodes
title
title
Page transition link
Fixed Web page node Output Web page node
name
Data-flow link
name
Processing node Database node
15
Example a Seminar Room Booking System
16
T-Web system
17
T-Web system structure
Step 1 Compose a Web transition diagram using
the editor Step 2 Allow the generator to
generate resulting files Step 3 Optionally
revise Web pages using a Web page composer Step
4 Place all resulting files on a Web server and
run the script to
create all database tables
18
Template Method

• A template library for processing programs
• 15 templates
• Templates for database manipulations and sending
  e-mails
• Automatically support a standard level of Web
  security
• For each processing node, users have to
• Select a template from the template library,
• Specify template parameters
• No coding
• Reuse of processing program codes

19
Web transition diagram composition
20
List of output Web pages
Web transition diagram composition
21
Web transition diagram composition
22
Web transition diagram composition
Template library
Description
Requirement
23
List of database tables
List of input parameters
List of database fields
List of output Web pages
Web transition diagram composition
24
Web transition diagram composition
25
Web transition diagram composition
26
Generation of Web pages
Register
ID PW EM home

ltHTMLgt ltBODYgt lt/BODYgt lt/HTMLgt
ltTITLEgtRegisterlt/TITLEgt ltFORM ACTION
"/cgi-bin/ADD1.cgi" METHOD "POST"gt IDltINPUT
TYPE 鍍ext