Z Enterprise.Optimization And Security

IBM zEnterprise Value for Business Workloads and Applications Becoming Responsive, Flexible and Competitive

Agenda
Recognizing the Workloads
The evolution of the consumer transaction
The Value of IBM zEnterprise ™
What the computer does vs. what the computer is
Real Customers – Real Value
Our initial learning from studies done with clients like you
Discussion and Questions
A few thoughts about a way forward

Around the world, industries are re-shaping business models to meet the demands of a sophisticated consumer and fiercely competitive economy Smart Work for a Smarter Planet ..Insights, risk reduction, reduced time to market, responsive, efficient Smarter Cloud: Conserve energy. Consolidate resources. With mandates like these, we have to be smarter about accessing, processing and storing data. Smarter Healthcare: Smarter healthcare starts with the individual. Changing the way patient information is used to treat the “whole” person, not parts at a time. Smart Thinking: Taking advantage of a new wealth of information to be able to make more intelligent decisions and rise to the top. Smarter Shopping: Information exchange and collaboration, offer a tremendous opportunity to strengthen customer loyalty . Smarter Money: Using advanced analytics to turn a numerical ocean into actionable insight and intelligence. Upromise ® : Providing the ability to shop online at over 100 Web sites, stores, restaurants while earning and accumulating savings for college education Medical Home: Primary care physicians act as "coaches," leading a team that manages a patient's wellness, preventive and chronic care needs Mobile Banking: Having the ability to check balances, move money across accounts and initiate payment to a vendor, all from your cellular phone ‘ Single Moments of Truth’: Insurance, Banking, Retail, Travel & transportation are all industries that want a single view of all information for Customer Care & Insight Online Universities: Providing millions the ability to remotely take courses from several colleges and universities simultaneously, consolidating resources and skills

These new business models are driving requirements for complex changes into the components of a traditional workload or application Future requirements include complete application integration in an optimal fashion Special Purpose systems and optimizers General Purpose Enterprise systems Evolving & Emerging Workload Components Networking Optimized for a specific set of applications or components Optimized for a broad set of applications or components Traditional Workload Components XML Java ™ Analytics Data Protection SOA Sensors Events Search Digital Media Encryption
What is a workload?
The relationship between a group applications and/or systems related across several business
functions to satisfy one or more business processes. e.g. Retail Merchandising, On-line Banking

The competition says run it all on one platform – ONE SIZE FITS ALL
While in theory, all workloads could run on a single platform, the reality is all platforms have a role to play
You need the data serving strengths of the mainframe, the security, the resiliency, the scalability
You need the computational strength of Power Systems ™ , for HPC and large scale application serving
You need the breadth of IBM System x ® , for front end applications , special function servers and a myriad of niche applications
Creating a single platform infrastructure can be highly inefficient, ineffective and unsustainable in the long term Collaboration is the key to success

Applications that are competitive targets … Patterns of OLTP, web browsing, business analytics, work flow processing Banking Insurance Retail Healthcare Telco Public Sector Core Banking Internet Rate Quotes On-line Catalog Patient Care Systems Business Support Systems (BSS) Electronic Tax Reporting Wholesale Banking – Payments Policy Sales & Management (e.g. Life, Annuity, Auto) Supply Chain Management On– line Claims Submission & Payments Operation Support System (OSS) Web based Social Security Customer Care & Insight Claims Processing Customer Analysis

These workloads have recognizable patterns Multi-Tier Web Serving
Database (z)
DB2 for z/OS or IMS
Application (Power /UNIX)
WebSphere
JBoss
Presentation (x86)
WebSphere
Apache / Tomcat
Database (z)
DB2 for z/OS
Application (Power / UNIX)
WebSphere
JBoss
Database (z)
DB2 for z/OS
Application (z)
WebSphere
Application (x86)
WebSphere
Apache / Tomcat
Database (z)
DB2 for z/OS, IMS
Transaction Processing (z)
CICS, MQ
Application (Power /UNIX)
WebSphere
JBoss
WebLogic
Presentation (x86)
WebSphere
Windows
Data Warehouse & Analytics
Master Data Management
Database (z)
DB2 for z/OS
Application (z)
WebSphere MDM (AIX, Linux on z)
SAP
Database (z)
DB2 for z/OS
Application (z)
Linux ® for z
Database (z)
DB2 for z/OS
Application (Power)
AIX ®
Database (z)
DB2 for z/OS
Application (x86)
Linux for x86
Analytics
System z/OS
DB2
Cognos ® (Soon!)
SAS
Linux for System z
Cognos
SPSS
InfoSphere ™ Warehouse
Core Applications
Database (z)
DB2 ® for z/OS ® , IMS ™
Application (z)
CICS ®
COBOL
WebSphere ®
Database (z)
DB2 for z/OS
Oracle on Linux for z
Application (z)
WebSphere

There are patterns for security as well Professional Services Managed Services Hardware & Software Authentication Access Control Data Privacy Audit/Compliance Registration/Enrollment Incident and Event Management Strategy: zEnterprise as a control point for the Enterprise Common Policy, Event Handling and Reporting The IBM Security Framework Security Governance, Risk Management and Compliance Security Governance, Risk Management and Compliance People and Identity Data and Information Application and Process Network, Server, and End-point Physical Infrastructure

zEnterprise: Full Value for Your IT Infrastructure Virtualization Centralize Management of virtual servers across a heterogeneous pool > 100,000 virtual servers in a single zEnterprise System Efficiency Economies of scale for Labor, software and environmental costs Reduce labor, energy, and development costs, by up to 70%, 90%, and 20% (respectively) Availability Resiliency management and fewer points of failure Fault tolerant and fault avoiding servers Centralized workload management aligned to business priorities Scalability Ability to meet massive demands from users and data Process up to a Trillion instructions per second with a single zEnterprise System Security industry leading security at the core of an integrated infrastructure Identifies potential fraud in Real Time

Agenda
The Value of zEnterprise
What the computer does vs. what the computer is

Continued WebSphere optimizations for z/OS From then to now
Continued investment to optimize WebSphere software for z/OS environment
1.35 times performance improvement for JPA 2.0 applications that exploit the caching features available in WebSphere Version 7, and the WebSphere Version 7 JPA Feature Pack
Uplevel to zEnterprise hardware produces 1.43 times performance improvement
From then to now – 1.93 times performance improvement
System z10 Announce zEnterprise Hardware Then Now WebSphere Version 7 Announce DayTrader 2.0 No Caching WebSphere Version 7.0.0.9 JPA Feature Pack DayTrader 2.0 Data Caching System z10 EC zEnterprise

The Most Efficient Platform for Large Scale Consolidation: Linux on zEnterprise
Lower acquisition costs of hardware and software vs distributed servers*
Less than $1.00/day per virtual server (TCA)*
Reduce floor space by up to 90% compared to distributed servers*
Reduce energy consumption by up to 80% compared to distributed servers*
Consolidate 40 Oracle server cores to 2 Linux Cores on zEnterprise
* Distributed server comparison is based on IBM cost modeling of Linux on zEnterprise vs. alternative distributed servers. Given there are multiple factors in this analysis such as utilization rates, application type and local pricing, etc.; savings may vary by user 74% less than Nehalem 39% less than Nehalem

Imagine the possibilities….. An operational advantage you can turn into a business advantage
Business Problem
Data warehouse can detect trends, but not necessarily prevent fraud or upgrade transactions in real time because data is copied in bulk or batch mode
Insight instead of Hindsight
Opens up opportunities for real time analytics
Preventing fraud
Making business analytic decisions faster
Improved performance and lowers cost
Uses blade-based specialty processors, storage for warehouse workloads
Boosts overall query performance up to 80x
Customers could see a 40% reduction in storage utilization
Supports in-memory column store for parallel star schema queries
Uses column-based compression to minimize storage needs
Unchanged interfaces to DB2 for z/OS and thus no changes to the BI/DW applications
Provides capability to perform both transactional (OLTP) and warehousing (OLAP) type of queries in the same database management system
Blades zEnterprise ISAO or Decision Support Transform Z196 Claims POS Credit/Debit DB Cognos On Linux

Application Architecture: The Complexity of Distributed
Business Objectives
A bank has four basic transactions
Credit, Debit, Transfer, Inquiry
And they have a variety of choices for front end interface
ATM, Branch Terminal, Kiosk, Web browser, PDA, Cellphone
Customer uses a Bladecenter to drive multi channel transformation
The back end processing remains the same regardless of the presentation device
Fully Distributed Model (if deployed)
Each application becomes a cluster of server images and must be individually authenticated and managed
Each line is a separate network connection, requiring high bandwidth and protection
Data is replicated across enterprise to meet scalability
Customer deploys/builds automation processes to facilitate system recovery with additional software – this is not trivial and requires additional software and unique development
High environmental needs and full time employees to manage infrastructure
Application Servers WebSphere ® Service Platform Database Connectors SQLJ Service Message Servlet Loan Applic. Bank Teller General Ledger Credit Card Processing Risk Analysis Service Service Connectors/Appliances Current Accounts Batch Programs Bill Payment Database SQLJ Currency Exchange Temp data to Electronic Data Warehouse Batch Process RMI/IIOP EJB WAS Bill Payment EJBs Authentication Server Mgt Mgt Mgt Mgt Mgt Mgt Mgt Mgt Mgt Mgt Mgt Mgt Mgt Management Considerations for an enterprise Authentication Alert processing Firewalls Virtual Private Networks Network Bandwidth Encryption of data Audit Records/Reports Provisioning Users/Work Disaster Recovery plans Storage Management Data Transformations Application Deployment How does the Virtualization Manager improve these?

Application Architecture: A Large Enterprise
zEnterprise Combinations – reducing control points
Assumes the Bladecenter for the multi channel transformation
Can leverage Websphere on either Linux for System z or z/OS
The Bladecenter functionality can be migrated to zBX in the future
TCA and TCO advantages over distributed
It’s the very same programming model in a different container that provides a superior operations model
End User – Hosted Client Application Server Service Platform Desktop Framework Devices Websphere Service Platform Database Connectors SQLJ Service Message Servlet Loan Applic. Bank Teller General Ledger Credit Card Processing Risk Analysis Service Service Connectors Current Accounts Banking Portal Device Apps. XML over HTTP(S) Middleware Services Batch Programs Bill Payment Database SQLJ Desktop Framework Services Personalization Service Systems & Databases MQ Currency Exchange Temp data to Electronic Data Warehouse Batch Process RMI/IIOP EJB WAS Bill Payment EJBs Authentication Server System zEnterprise Potential advantages of consolidating your application and data serving
Security Fewer points of intrusion
Resilience Fewer Points of Failure
Performance Avoid Network Latency
Operations Fewer parts to manage
Environmentals Less Hardware
Capacity Management On Demand additions/deletions
With IFL With zAAP & zIIP
Utilization Efficient use of resources
Scalability Batch and Transaction Processing
Auditability Consistent identity
Simplification Problem Determination/diagnosis
Transaction Integrity Automatic recovery/rollback
Security Fewer points of intrusion
Connectivity Improved throughput
Simplification Problem Determination/Monitoring
Development Consistent, cross platform tools
With zBX

Agenda
What happens when there isn’t collaboration?
How computing silo’s create operational risk

Customer Problem Wireless Store Infrastructure HQ Regional Data center
Branch uses WEP for LAN activity
Processes cards with banks
Hacker plugs in and gets copies of all transactions
Problem detected and branch systems get fixed
Mainframe doesn’t appear affected by distributed leaks
Hypothesis: Mainframe could help secure end users if they use good procedures
Branch managers run inventory transactions to mainframe
No encryption on sign in
No audit records analyzed
? ? ? ? ? ? ? ? ? Bank Hacker Branch Manager Point of Sale Point of Sale

Real World Customer Problems
That problem could never happen at my business
Wrong – this problem can occur anywhere there is a change in security administrative control
The weakest link in an enterprise is typically the end user interface
Virus, worms, Trojan Horses enable someone to hijack the end user interface
In turn, that hijacked desktop can be used to log into any other server
Is it “really the authorized end user”? Perhaps not.
That’s a large risk to a business.
Outsourcers and mainframe IT operations have SLA’s that protect the data they host on their systems.
Do their customers and end users have SLA’s that specify minimum desktop security? Do they manage Desktops and mainframes together?
Typically not – as a result, there is a major risk that a compromised end user interface can result in compromised mainframe access.
Our Goal is to look at security management across these domains

Examples of End to End Security Wireless Business Infrastructure HQ Outsourcer
Mainframe Userid and Password Encryption via Host on Demand
Virtual Private Network encryption (which exploits the zIIP)
Audit and anomaly detection via TCIM
Fraud Forensics, Analysis and Prevention via Intellinx (which exploits the zAAP)
LAN encryption via WPA which exploits z/OS PKI
z/OS PKI deployment with Global Services
PKI management via Venafi
zIIP ? ? ? ? ? ? ? ? ? zAAP z/OS PKI Services Bank Regional Data center Branch Manager Point of Sale Point of Sale Hacker Or Insider Compliance Insight Manager Global Services: Security & Privacy Consulting

Agenda
Real Customers – Real Value
Our initial learning from studies done with clients like you

Large European Bank – Internet Banking (today)
Today’s Environment
System z with CICS, IMS and DB2 for data serving and core business logic, using WebSphere on Power for additional business logic and presentation capability; Web servers on System x Blades running Linux
Challenges/Issues
Extremely complex environment
Majority of maintenance applied to systems manually
Several single points of failure
Bank presence in multiple countries across Europe and are maintaining different infrastructures based on acquisitions

Large European Bank – Internet Banking (tomorrow) The Environment with zEnterprise Integrate core business logic and data serving on System z (IMS/CICS/DB2) with IBM Blades; POWER 7 Blades running WebSphere and System x Blades as virtualized Linux based Web Servers, all managed in a zBX. Business Advantage Simplification and standardization of the environment will allow bank to be more flexible responsive to local country banks adding functionality and growing banking revenue . Operational Advantage A single management and policy framework across Web serving, transactions and database to lower the cost of enterprise computing Mainframe Quality of Service characteristics will be extended to application servers to manage risks The dynamic resource management of the mainframe is extended to all devices within a multi-tier architecture to improve quality of services Organizational Advantage Reduce level of manual coordination , freeing up staff to train and focus on backlog of business application function development HMC – Unified Resource Manager PR/SM PR/SM zEnterprise Blade Extension PowerVM ™ x86 Power SE SE Virtual Machine z/OS Virtual Machine z/OS Virtual Machine z/OS Virtual Machine z/OS AIX AIX AIX xHyp Linux Linux Linux AMM Virtual Machine z/OS

US Healthcare Provider – Information Hubs (today) ASP ASP z/OS IMS SOAP Gateway MQ IMS TM IMS DB .net Windows z/OS IMS SOAP Gateway MQ IMS TM IMS DB Power - AIX MDM WebSphere Member Hub Provider Hub Product Hub Service Layer z/OS
Today’s Environment
Master Data Management Server is running on AIX today on Power servers front ending multiple data stores on DB2 on z/OS and IMS
Challenges/Issues
Client grew through acquisitions and has multiple systems – looking to consolidate data and systems to reduce complexity and the number of systems to update
Challenged to support new industry mandates
Need to standardize on platforms to reduce complexity for dev/test/prod
Need to reduce the time required to configure a new dev/test environment
Need ability to monitor the end-to-end transaction flow to determine bottlenecks
New Application – Some architectural choices still being investigated

US Healthcare Provider – Information Hubs (tomorrow) The Environment with zEnterprise Consolidate information into ‘information hubs’ that will be used by all aspects of the business. Two options being considered for Master Data Management using DB2 on z/OS for consolidated data store, with WebSphere on either AIX or Linux for System z.
Operational Advantage
Application and Data Proximity
Flexibility of architectural choices as designs are selected for performance and cost
Network –high speed, private, possible opportunity for reduced requirements for firewalls and encryption
Allows for virtualization across multiple tier workloads
Consistency /Standardization of OS/middleware/application reduces variations in test
Consolidate floor space, reduced energy costs
Business Advantage
Consolidation and Simplification will provide client agility to better compete in the highly volatile and competitive healthcare industry.
zOS/WGS IMS SOAP Gateway MQ IMS TM IMS DB P7 - AIX MDM WebSphere Member Hub Provider Hub Product Hub Service Layer zOS Option B zEnterprise with POWER7 Blades zBX zOS/WGS IMS SOAP Gateway MQ IMS TM IMS DB MDM WebSphere Member Hub Provider Hub Product Hub Service Layer zOS Option A zEnterprise with MDM on Linux for System z System z z/VM RHEL 5 for System z ASP ASP z/OS IMS SOAP Gateway MQ IMS TM IMS DB .net Windows ASP ASP z/OS IMS SOAP Gateway MQ IMS TM IMS DB .net Windows

Payment Services IBM Confidential until Announcement A unique national digital identity card project implemented on a country-wide scale
Business Need:
Payment Business Services (PBS) won the contract for implementing and running a digital
signature (PKI) infrastructure for the national danID in Denmark.
To meet the needs of the client, PBS had to be able to accommodate the following:
Same userid and logon-id procedure for both the public and the banking infrastructure.
Access from any computer.
Improved security of a two-factor-authentication with a one-time password.
Benefit: This solution allows all Danish citizens to sign-on and perform digital signatures banking and public systems using a single shared one-time password (OTP) device. It is an innovative solution combining a general purpose engine, specialty engines and hybrid-accelerators, used together to improve the price/performance ratio. IBM provides the operational platform for the digital signature infrastructure. The IBM System z9 Enterprise Class server running z/OS is the platform for development, test and production. IBM developed cryptographic security based on mandated security regulations.

A few thoughts about a way forward
Collaboration is a key to success. It provides:
Business advantage
Operational advantage
Organizational advantage
a more secure environment
… thanks for joining us today

Questions?

Trademarks The following are trademarks of the International Business Machines Corporation in the United States and/or other countries. The following are trademarks or registered trademarks of other companies. * Registered trademarks of IBM Corporation * All other products may be trademarks or registered trademarks of their respective companies. Intel is a trademark of Intel Corporation in the United States, other countries, or both. Upromise is a registered trademark of Sallie Mae, Inc. Java and all Java-related trademarks and logos are trademarks of Sun Microsystems, Inc., in the United States and other countries Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both. UNIX is a registered trademark of The Open Group in the United States and other countries. Microsoft, Windows and Windows NT are registered trademarks of Microsoft Corporation. Red Hat, the Red Hat "Shadow Man" logo, and all Red Hat-based trademarks and logos are trademarks or registered trademarks of Red Hat, Inc., in the United States and other countries. Notes : All customer examples cited or described in this presentation are presented as illustrations of the manner in which some customers have used IBM products and the results they may have achieved. Actual environmental costs and performance characteristics will vary depending on individual customer configurations and conditions. This publication was produced in the United States. IBM may not offer the products, services or features discussed in this document in other countries, and the information may be subject to change without notice. Consult your local IBM business contact for information on the product or services available in your area. All statements regarding IBM's future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only. Information about non-IBM products is obtained from the manufacturers of those products or their published announcements. IBM has not tested those products and cannot confirm the performance, compatibility, or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products. Prices subject to change without notice. Contact your IBM representative or Business Partner for the most current pricing in your geography. AIX* CICS* Cognos* DataPower* DB2* e-business logo* IBM* IBM logo* IMS InfoSphere POWER7 Power Systems PowerVM System z System x WebSphere* zEnterprise z/OS* z/VM* ZSP03409-USEN-00

Z Enterprise.Optimization And Security

by Jim Porell

Accessibility

Upload Details

Usage Rights

1 Embed 1

Statistics

Z Enterprise.Optimization And Security Presentation Transcript