secure gateway

1. TECHNICAL DISCUSSION • PolyNet Overview • Smartees: Detailed Overview • Enterprise Interoperability secure gateway interoperable communication multidomain traffic system APPLICATION LAYER SWURV www.swurv.net

2. Nexus Swurv Server Client Authentication *Logos used for illustration purposes only. Trademarks are the property by their respective owners.

3. Nexus Swurv Server Client Administration Webmarks Data Storage Address Book Email Chat/Messaging Media Streaming Scheduler Secure Gateway to the PolyNet Authentication Native Applications *Logos used for illustration purposes only. Trademarks are the property by their respective owners.

4. Nexus Swurv Server Client Interoperable Webservices End User Services • Validate User(s): Single Signon • Add, modify fields • highlight, alert & flag • permissions, sorting & searching • User(s) status: online/offline • Add, modify, access data structure(s): sharing model & tree structure(s) • etc... Administration Data Storage Authentication Webmarks Native Applications Smartee Services Address Book Email extensible Chat/Messaging Media Streaming customizable Scheduler standards based generic

5. Multidomain Traffic System Nexus Nexus Server A Nexus ServerB Swurv Server Internet Swurv Domain 6 Swurv Domain 1 Authentication Native Applications Smartee Services Swurv Domain 5 Swurv Domain 2 Swurv Domain 4 Swurv Domain 3 Client cross organizational many to many end to end

6. DETAILED OVERVIEW SWURV SMARTEES SMART Electronic Encryption Sequence

7. SMARTEES OVERVIEW Swurv Smartees is a communication architecture which enables interoperability between 3rd party databases, applications and transaction systems. Smartees provides peer-to-peer (server-to-server) web services for 3rd parties. Multiple 3rd parties may participate in a single transactional chain of requests. The Smartee API (Application Programming Interface) does not specify specific services but provides the communication infrastructure for predefined and user created functionality. Smartees use generally known and available technologies allowing integration on most platforms and development environments.

8. MAJOR BENEFITS The ability to extend functionality with fewer integration problems. Enterprises may leverage existing IT assets. Provides seamless and secure interaction between unrelated enterprises that most likely are using dissimilar technologies. Integration of market clusters that currently use islands of best of breed, one to many processes and technologies. Non-repudiation prevents an individual or entity from denying having performed a particular action related to data. All data is transmitted securely and in private between the participants. Most communication is done out of band (server2server) minimizing security risk.

9. KEY ASPECTS Swurv user: A user currently logged into the Swurv Environment. Smartee: A unique item of information incorporating identification and permission exchanged between services in the Smartee protocol. Smartee Service: A particular action or request made by a 3rd party of Swurv or of another 3rd party application. Generic user information: User information which is stored by Swurv that is available to all 3rd party applications. 3rd party specific user information: Information about a user that is stored by Swurv for the 3rd party application. This information is not available to other 3rd party applications.

10. TECHNOLOGIES Smartees use the following generally known and available technologies: XML-RPC for communications and data format RSA public key infrastructure for data encryption and non-repudiation By using widely available and non-proprietary technologies as its base, the Smartees API can be used on nearly every web development platform and environment.

11. PRE-DEFINED SERVICES • Smartees have many predefined services which a 3rd party application may request of Swurv. • Some examples are: • Verify that the current web user is using Swurv. • Store and retrieve 3rd party defined information in Swurv associated with this user. This information is only available to the particular 3rd party application which stored it. • examples are: • a user ID or customer number for the user • access privileges for the Webservice • Request the user's name, email address or street address

12. 2 Home Depot 4 3 Swurv PolyNet Swurv PolyNet EXAMPLE 1: User Authentication for 3rd Party Applications • Smartees allow Swurv users to identify themselves to 3rd party applications without any user action or intervention.This allows a 3rd party application (examples:e-tail, informational, ERP) to request from Swurv the 3rd party specific identity of the user attempting a connection,and once connected to request further information about the user if it is required. (Single Sign On) 1 Fig.1 contd. *Logos used for illustration purposes only. Trademarks are the property by their respective owners.

13. Home Depot Swurv PolyNet Swurv PolyNet EXAMPLE 2: Get User's Delivery Address for a Product Purchase Rather than requiring the User to enter their delivery address into a web form when Swurv already knows the address, using Smartees a 3rd party application may request Swurv to pre-fill the form. 1 4 5 2 3 6 Fig.2 contd. *Logos used for illustration purposes only. Trademarks are the property by their respective owners.

14. Home Depot Swurv PolyNet Swurv PolyNet EXAMPLE 3: Interoperability between Swurv and two 3rd party apps A Swurv user purchases a product from an e-tailing website. The e-tail website requires that delivery of the product to the user be scheduled. The e-tail application uses Smartees to book delivery with a shipping company. The shipping company needs to know the delivery address. 1 5 6 4 7 2 3 UPS Fig.3 8 contd. *Logos used for illustration purposes only. Trademarks are the property by their respective owners.

15. Home Depot Swurv PolyNet Swurv PolyNet EXAMPLE 4: Single sign-on to a 3rd party application/web service (non-Smartees based) A Swurv user signs up to a website that does not use Smartees. The user has the facility to automatically sign-on to the site the next time that they visit the site. 1 3 4 2 Fig.4 contd. *Logos used for illustration purposes only. Trademarks are the property by their respective owners.

16. MORE BENEFITS User Privacy: The user decides what personal information to share with which 3rd party applications. User Data Repository: The user maintains information in one location while retaining the right to govern access permissions. User Identification: As the user moves from one computer to another their Swurv identity moves with them. If there are multiple users on the same machine they still maintain unique Swurv identities. Issues with browser cookies, users using multiple computers or shared computer usage are already dealt with by the time that a user connects to a 3rd party website. Proprietary Information Protection: Smartees do not require the disclosure of 3rd party application proprietary information to Swurv or other 3rd parties.

17. New app. New app. New app. New app. Existing app. Existing app. ENTERPRISE INTEROPERABILITY Internal Apps./ Webservices TA (Travel Agents) Partner Apps./ Webservices External Apps./ Webservices New Data New Data the difference *Logos used for illustration purposes only. Trademarks are the property by their respective owners.