Sun's previous attempts at defining a Web services strategy have been characterised by a series of fits and starts. While Microsoft has been the most vocal technology maker in the Web services arena, largely defining the playing field for its competitors, analysts have criticised Sun for being late to announce a Web services strategy. Sun executives have admitted that the company has been slow to stake its claim in the Web services area. It hasn't always been this way. Sun starred in the first phase the Internet's growth, selling powerful networked server computers while Microsoft and IBM played more peripheral roles. But the two came back fighting with Web services, and now Sun is trying to reclaim the initiative. Sun has been battling Microsoft and IBM on Web services almost from the start. Microsoft, along with IBM, co-founded the Web Services Interoperability Organization (WS-I), which aims to promote Web services by ensuring that software from technology makers is compatible. More than 100 companies have joined, but Sun has declined an invitation to join as a contributing member, campaigning instead for more influential "founding board member" status so it can help set the group's agenda. During the Microsoft antitrust trial, evidence surfaced in written testimony that chairman Bill Gates and other Microsoft executives attempted to steer the direction of the WS-I away from Sun. Meanwhile, Microsoft and IBM have forged ahead. Just last week, Microsoft said it is building additional Web services security software in the hope of reassuring big companies now assessing the technology for future projects. Meanwhile, IBM continues to revamp its tools and application server software to form a more cohesive package for Web services development. The partner principle
In its latest Web services effort, Sun hopes to enlist other companies as backers. That technique has proven successful in the Sun-spawned Liberty Alliance Project to counter Microsoft's Passport authentication service. Sun plans to eventually submit its Web services work to a standards body such as the Organization for the Advancement of Structured Information Standards, or OASIS, a consortium developing electronic business standards, or the World Wide Web Consortium, which also administers standards work from Microsoft and IBM. Sun's new specification for streamlining Web services is being developed in partnership with BEA Systems, SAP and Intalio. The specification, called the Web Services Choreography Interface, or WSCI, is a mechanism for describing what messages are sent among computers as a particular Web service is processed. The choreography standard mirrors similar work already underway. Microsoft and IBM have built competing languages called Xlang and Web Services Flow Language (WSFL), respectively, and industry groups such as OASIS and the Business Process Management Initiative ( BPMI) are working on their own standards. Sun's WSCI partnership might dovetail with the BPMI work, though, since its partner Intalio is BPMI's founder. Sun also plans to devise a security specification for Web services. The security work might at first blush seem to tread on the toes of the WS-Security initiative, one of several created by Microsoft and IBM. But that initiative is concerned more about security in the sense of encrypted communications and transactions, whereas Sun's appears to involve security in the sense of computers that can't be breached by attackers. But questions remain about how the specifications will coexist. "The question is how will WS-Security and Sun work together? This is another example of fragmentation if they're not going to work together and are just competing," said Gartner's Plummer. Security has surfaced as one of the most critical areas of Web services. Larry Kittelberger, chief information officer for Honeywell, said his company is evaluating Web services, with security among the biggest concerns. Kittleberger said Honeywell, a conglomerate that makes everything from aerospace and aircraft parts to fire detectors, is working to digitize its businesses. "If I'm going to put 90 percent of our corporate processes online I want better security," he said. "That standard has got to get hooked up." Specifically, Kittelberger said he would like a security architecture that allows "detective" security. "I want it so hackers don't know if they've fallen into a soft area or a trap," he said. "It has to be more than just a big fence." News.com's Wylie Wong, Larry Dignan and Mike Ricciuti contributed to this report.
For a weekly round-up of the enterprise IT news, sign up for the Tech Update newsletter. Have your say instantly, and see what others have said. Go to the ZDNet news forum. Let the editors know what you think in the Mailroom.





