Introduction to IBM Worklight Mobile Platform

The Worklight Mobile Platform

The Worklight Mobile Platform is an open, complete

and advanced mobile application platform for

HTML5, hybrid and native apps.

Evolving Mobile Landscape

Mobile Development is more expensive than traditional Web App Development:

– Which smartphone? Which tablet? Which form factor?• iOS, Android, Blackberry, Windows Phone

• All of the above..

– Skills?• Web or native apps? Java or Objective C? Or other?

– Maintenance?• Separate software stacks for each major OS• Separate software stacks for each major OS

• Separate applications for each major OS

• How do I keep software current?

– Security?• Encryption? Authentication?

• Response to stolen/lost devices?

– Management?• Can I see my apps? Can I disable them remotely?

– Enterprise Integration?• How do I build cross-channel app?

Rational

Collaborative

Lifecycle

Management

Mobile Foundation

IBM Worklight

Firewall or Security Gateway

IBM Endpoint IBM QRadar

IBM Mobile Foundation

Enterprise Apps

SOA & ConnectivityWebSphere MQ/Message broker, Websphere Cast Iron, WebSphere Services Registry and Repository

IBM Worklight

WebSphere eXtreme Scale /WebSphere DataPower XC10 Caching Appliance

IBM Endpoint

Manager for Mobile

Devices

Analytics

WebSphere

Operational

Decision

Management

IBM Cognos

IBM Business

Process

Management

Lotus

Connections

IBM QRadar

IBM Security

Access Manager

for Mobile

(TAMeb)

IBM AppScan for

Mobile

How Worklight is Different

Open, standards-

based

• Developer flexibility

• Avoid vendor lock-in

Extremely easy

to learn and use

• Few days to full productivity

• No Worklight involvement

HTML5 as core • Cross-platform technology strongly promoted by all mobile vendors

5

HTML5 as core

development

technology

• Cross-platform technology strongly promoted by all mobile vendors

• Leverage existing web development skills in IT

Focus on new

devices and OS’s

• iOS, Android, BlackBerry, Windows Phone

• Phones and tablets

• Native, hybrid, and web apps

Cater to high-

end enterprise

needs

• B2C and B2E

• App capabilities, development process, integration, security, scalability,

and management

Build mobile applicationsConnect to, and run backend systems in support of mobile

Manage mobile devices and applicationsSecure my mobile business

Extend existing business capabilities to mobile devices

Transform the business by creating new opportunities

Client Initiatives

The image cannot be displayed. Your computer may not have enough memory to open the image, or the image may have been corrupted. Restart your computer, and then open the file again. If the red x still appears, you may have to delete the image and then insert it again.

Customers are focused on a new set of mobile “client initiatives”

Key Capabilities• Strategy and planning services• Mobile-enabled solutions

including analytics, commerce, and social business

• Implementation and hosting services

Key Capabilities• Mobile web app development• Enterprise data, service, and

application integration• Mobile Technology Preview

features

Key Capabilities• Mobile Lifecycle Management• Device analytics and control• Secure Network

Communications & Management

Concord Hospital improved patch compliance

50%, reduced software license costs 25%, and

has not had a single malware infection since

implementation of IBM Endpoint Manager for

patch management and core protection

*ING Canada

Customer Spotlight – ING Direct France

7

• Leading iPhone banking app in France with a unique user experience

• Flexibility: Valued HTML5, but preferred starting native

• Mobile adaptation of data integration and authentication layers

Customer Spotlight – Lotte

8

• Rich hybrid app with over 100 screens

• Native implementation for augmented reality and security

• Ported Android to iOS in a 3-4 weeks

Worklight Application Types

Native AppsNative Apps

Platform-specific.

Requires unique

expertise, pricy and

long to develop.

Can deliver higher

user experience.

Hybrid Apps - MixedHybrid Apps - Mixed

User augments web

code with native

language for unique

needs and

maximized user

experience.

Hybrid Apps - WebHybrid Apps - Web

HTML5 code and

Worklight runtime

libraries packaged

within the app and

executed in a native

shell.

Web AppsWeb Apps

Written in HTML5

JavaScript and

CSS3. Quick and

cheap to develop,

but less powerful

than native.

Browser Access Hybrid Apps - Web Hybrid Apps - Mixed Native Apps

9

Native Application

Device APIs

1001010101011101001010

0100101011101001001101

0101010100100100101111

0010011001010101001010

1010100101010101010101

0101011111100000101010

1010101001001010101010

1010001111010100011110

1010011101010111110010

1101111010001011001110

Native Shell

Web Native

Device APIs

<!DOCTY

PE html

PUBLIC

created

2003-12

</p>

</body>

</html>

1001010

1010111

0100101

0101010

1010010

0100101

1110010

0110010

Native Shell

Web Code

<!DOCTYPE html PUBLIC

<html>

<! - - created 2003-12-1

<head><title>XYZ</title

</head>

</body>

</html>

Device APIs

Mobile Browser

Web Code

<!DOCTYPE html PUBLIC

<html>

<! - - created 2003-12-12 -

-

<head><title>XYZ</title>

</head>

<body>

</p>

</body>

</html>

Browser Access Downloadable Downloadable Downloadable

What are Hybrid Apps?

• Can be uploaded to Apple AppStore, Google Play Store and other app stores

– For iOS, it will have an IPA file extension

– For Android, it will have an APK file extension

• Worklight Runtime Component

Worklight Runtime Component

(Common Framework)

Web Code

<!DOCTYPE html PUBLIC

<html>

<! - - created 2003-12-1

Deployable

App

10

• Worklight Runtime Component

– It’s a Common Framework

– Performs things like:• Check-in with Server on Startup

• Check for updates

• Authentication framework

• Push notification framework

• Sending Statistic

• Device API

• etc

<! - - created 2003-12-1

<head><title>XYZ</title

</head>

</body>

</html>

Device APIs

Worklight ServerMobile middleware offering unified push notifications,

version management, security and integration

Worklight StudioThe most complete, extensible development environment

with maximum code reuse and per-device optimization

Worklight Overview

version management, security and integration

Worklight ConsoleA web-based console for real-time analytics and control of

your mobile apps and infrastructure

11

Worklight Runtime ComponentsExtensive libraries and client APIs that expose and interface

with native device functionality and the Worklight Server←

Worklight Architecture

Worklight Runtime Architecture

Worklight ServerWorklight Server

Authentication

JSON Translation

Server-side

Application Code

Adapter Library

Client-side

App Resources

Direct Update

Mobile

Web Apps

Unified Push

Notifications

Sta

ts A

gg

reg

ati

on

Device RuntimeDevice Runtime

Ap

plica

tio

n C

od

eA

pp

lica

tio

n C

od

e

• Cross Platform Technology

• Security and Authentication

• Back-end Data Integration

• Post-deployment control and

Diagnostics

Development: Worklight Studio

Development: Supported Application Types

• Supports a variety of application types

• Mobile

– iPhone

– iPad

– Android

– BlackBerry

15

– BlackBerry

– Windows Phone

• Desktop

– Windows 7 and Vista

– Adobe AIR

– Mac OS Dashboard

• Web Applications

– Facebook

– iGoogle

– Embedded web page

– Mobile web app

Development: Single Shared Codebase

Common code placed

in primary file

Environment optimization

code is maintained separately

16

Development: Integrating Best-in-class Tools

Worklight is compatible with prominent HTML5 libraries and tools:

17

Development: Incorporated Device SDKs

18

Worklight Server

Worklight

Runtime

Component

Web Code

HTTP

Development: Adapters – Enable connectivity to Enterprise

Applications

JSONAccount Adapter

getAccountInfo()

XML

DB Result Set

Backend

Systems

19Firewall

Web Code

Device APIs

• Adapters will get the most minimal set of useful information and filter into

the JSON format such that the Mobile app can display.

• Save network bandwidth by using JSON format

• Consolidated entry point for all apps

• Loosely Coupled between apps and backend

• Convenience

Secure back-end integration

XML-based declarative specification

Multi-source data mashups

Eclipse plug-in supporting auto-complete and validation

Development: Back-end Integration

Simplified adapter testing

Server-side debugging

Web services and JDBC integration

Access to session data and user properties

Development Outline: How to Create an Mobile

App in Worklight

1 Create a Worklight Project and App

2 Put in the app logic and css display

21

2

3 Build and deploy to Server

4 Preview the Mobile App

Development: Centralized Build

22

Worklight

Build System

Source Code

Repository

Run-Time: Unified Push Notifications

Back-end

System

Back-end

SystemBack-end

System

Back-end

System

Polling

Adapters

Unified

Notification

State

Database

iOS

Dispatcher

Android

Dispatcher

BlackBerry

Apple Push

Servers

(APN)

Google

Push

Servers

(C2DM)

Worklight

Client-side

Push Services

Worklight

Client-side

Push Services

iOS

Push API

Android

Push API

Back-end

System

Back-end

SystemBack-end

System

Back-end

System

Message-

based

Adapters

Unified

Push API

User-

Device

Database

BlackBerry

Dispatcher

Windows

Phone

Dispatcher

SMS

Dispatcher

RIM Push

Servers

Microsoft

Push

Servers

SMS/MMS

BrokersAdministrative Console

Worklight

Client-side

Push Services

Worklight

Client-side

Push Services

BlackBerry

Push API

Windows

Push API

Broker API

23

Run-Time: Dynamic Control of Deployed Apps

24

• Centralized control of all installed applications and adapters

• Remotely disable apps by device and version

• Customize user messages

Run-time Skinning: Use Cases

Different

Screen Sizes

Different

Screen Densities

25

Different

Input Method

Screen Densities

Support

for HTML5

• The runtime skin is selected the first time the

application is started.

• SkinLoader.js

– Encapsulate the rules and condition on how

to determine which skins to use.

Security: Securing Mobile Apps

Enforcing security

updates

Remote

disableDirect update

Jailbreak and

malware

detection

App

authenticity

testing

Protecting data on the

device

Encrypted

offline cache

Offline

authentication

Secure challenge-

response on

startup

26

disable

Providing robust

authentication and

authorization

Authentication

integration

framework

Data

protection

realms

Using device

id as 2nd

factor

Streamlining

Corporate security

processes

Shell as

organizational

sandbox

Application

Security

Code

obfuscation

SSL with

server

identity

verification

Proven

platform

security

detectiontestingoffline cache authentication

startup

Direct Update - Distribution

Native Shell

Web Code

<!DOCTYPE html

PUBLIC

<html>

<! - - created

2011-12-1

<head><title>XYZ

</title

</head>

</body>

</html>

V1.0V1.0

Worklight Worklight

StudioStudio

Worklight ServerWorklight Server

Develop:

• Native app

Web

Resources

Maintains recent web resources

for native apps V1.0 and V1.1

Native Shell

Web Code

V1.1V1.1

Updated Web

Resources for V1.0

Updated Web

Resources for V1.1

27

Application Stores Application Stores (*)(*)

• Native app

• Web resources Native + Web

ResourcesDownload

<!DOCTYPE html

PUBLIC

<html>

<! - - created

2011-12-1

<head><title>XYZ

</title

</head>

</body>

</html>

(*) During development cycles, testers automatically get recent web resources via

internal distribution mechanisms and not application stores.

Direct Update – On-device Logic

1. Web resources packaged

with app to ensure initial

offline availability

2. Web resources transferred to

app's cache storage

3. App checks for updates

Native Shell

Pre-packaged

resources

1 Download

App Store 3. App checks for updates

• On startup

• On foreground

4. Updated web resources

downloaded when necessary

Worklight

Server

4Update web

resource

Web

resources

Cached

resources

2 Transfer

3Check for

updates

28

• Application Version Management

• Push management

• Usage reports and analytics

• Reports of custom application events

• Configurable audit log

• Administrative dashboards for:

• Deployed applications

• Installed adapters

• Push notifications

Worklight Console

• Push notifications

• Data export to BI enterprise systems

Data Collection and Analytics

30

Copyright and Trademarks

© IBM Corporation 2012. All Rights Reserved.

IBM, the IBM logo, ibm.com are trademarks or registered trademarks of International

Business Machines Corp., registered in many jurisdictions worldwide. Other product

and service names might be trademarks of IBM or other companies. A current list of

IBM trademarks is available on the Web at “Copyright and trademark information” at

31

IBM trademarks is available on the Web at “Copyright and trademark information” at

www.ibm.com/legal/copytrade.shtml.