Attachment 12 -- IGI-S ADS Implementation Guidance Annex A - Reference Architecture (13 March 2019).pdf

Installation Geospatial Information and Services (IGI&S)

Authoritative Data Source (ADS)

Implementation Guidance

Annex A:

Reference Architecture

March 13, 2019

Prepared By:

The Installation Geospatial Information and Services Governance Group (IGG)

For:

The Assistant Secretary of Defense (Sustainment)

© 2019

March 13, 2019 IGI&S ADS Reference Architecture i

Executive Summary

This Reference Architecture (RA) supports the development and implementation of an Installation Geographic Information and Services (IGI&S) Authoritative Data Source (ADS) for each DoD installation managed by the Components (per DoDI 8130.01). It does not have the force of policy, but rather it guides and constrains Components’ solution architecture and system development for IGI&S ADS. Proper implementation of this IGI&S ADS RA will ensure high-quality, curated IGI&S content is available – visible, accessible, understandable, trusted, and interoperable – and suitable for decision-making at all echelons of the Department.

ii

Revision History

Description Date Version

Approved by IGG March 13, 2019 FINAL iii

Table of Contents

Executive Summary ..................................................................................................................................... i

1 Introduction

Overview

Scope

Key Authoritative References

2 Context

Guiding Principles

Constraints and Assumptions

2.2.1 Constraints

2.2.2 Assumptions

Architectural Alignment

Organizational Context (OV-4)

3 ADS Capability Description

Description of the IGI&S ADS Concept of Operations

3.1.1 The IGI&S ADS Cycle

3.1.2 IGI&S Data Lifecycle (As-Is)

3.1.3 Detailed Operational Concept and Capabilities Vision

ADS RA Principles and Rules

3.2.1 IGI&S ADS Business Rules

3.2.2 IEA-Based Principles and Business Rules

ADS Capabilities

3.3.1 IGI&S ADS Capabilities

3.3.2 End User Capabilities

3.3.3 IGI&S ADS Supporting Capabilities

4 Operational Pattern(s)

5 Technical Position

Appendix A. Acronyms

Appendix B. Glossary iv

Table of Figures

Figure 1: Scope of the IGI&S ADS RA

Figure 2: Typical Organizational Context (OV-4)

Figure 3: IGI&S ADS Operational Concept Graphic

Figure 4: The ADS Cycle (OV-1)

Figure 5: The IGI&S Data Cycle (OV-1)

Figure 6: ADS OV-1 with capabilities depicted

Figure 7: IGI&S ADS Capabilities v

Table of Tables

Table 1: IGI&S RA Guiding Principles

Table 2: IGI&S RA Guiding Principles Adapted from the IEA

Table 3: Description of Stages in the ADS Cycle

Table 4: Description of Stages in the IGI&S Data Cycle

Table 5: IGI&S ADS Business Rules

Table 6: IGI&S ADS Principles and Business Rules Adapted from the IEA

Table 7: IGI&S ADS Capability Descriptions

Table 8: IGI&S ADS End User Capability Descriptions

Table 9: IGI&S ADS Supporting Capability Descriptions

Table 10: Operational Activities Related to ADS

1 Introduction

This Reference Architecture (RA) supports the development and implementation of an Installation Geographic Information and Services (IGI&S) Authoritative Data Source (ADS) for each DoD installation managed by the Components (per DoDI 8130.01). It does not have the force of policy, but rather it guides and constrains Components’ solution architecture and system development for IGI&S ADS. This RA ties together the numerous requirements and guidelines articulated in the DoD Information Enterprise Architecture (IEA), Business Enterprise Architecture (BEA), and other DoD policies regarding information sharing and IT governance. Proper implementation of this IGI&S ADS RA will ensure high-quality, curated IGI&S content is available – visible, accessible, understandable, trusted, and interoperable – and suitable for decision-making at all echelons of the Department.

Overview

Reference Architecture abstracts and normalizes the institutional understanding of capabilities at the enterprise level. It provides a common set of principles/rules, process patterns, and technical positions for use within the DoD to guide development of Enterprise, Segment, or Solution architectures.

The purpose of this RA is to describe in greater detail the IGI&S ADS capability required by DoDI

8130.01. It provides architectural patterns to guide, standardize, and enable the most rapid and cost-effective implementation of IGI&S ADS data submission, assessment, update/cleansing, publishing, discovery, understanding, access, download, and security capabilities. It uses the following DoD Architecture Framework (DoDAF) views and models to describe the required capabilities:

AV-1 Overview & Summary Document - Describes the IGI&S ADS purpose, scope, and context. This content is, basically, the introduction to this document.

CV-1 Capabilities Vision – Addresses the enterprise concerns associated with the overall vision for IGI&S ADS and thus defines the strategic context for the group of IGI&S ADS capabilities. This content is reflected in sections 2 and 3.1.

CV-2 Capability Taxonomy - Captures capability taxonomies. The model presents a hierarchy of capabilities. This content is reflected in section 3.3.

OV-1 High-Level Operational Concept Graphics - Graphically and textually describes the ADS concepts for IGI&S data submission, assessment, update/cleansing, publishing, discovery, understanding, access, download, and security from a consumer and service provider perspective.

This document contains several OV-1 graphics (see figures 3, 4, 5, and 6).

OV-4 Organizational Relationships Chart - shows organizational structures and interactions as they relate to IGI&S ADS (see Figure 2).

OV-5a Operational Activity Decomposition Tree - Organizes the IGI&S ADS activities in a hierarchal structure. This content is contained in section 4).

OV-6a Operational Rules Model - Identifies business rules that constrain IGI&S ADS activities to enable access to enterprise services. This content is contained in section 3.2).

StdV-1 Standards Profile - Lists the known high-level policies and standards that must be applied to solutions developed to enable IGI&S ADS activities as envisioned in the IGI&S ADS OV-1 graphics.

This content is contained in section 5.

Scope

The IGI&S ADS RA is a “To-Be” architectural description of an objective capability and requirements. It describes the objective requirements, rules, patterns, and standards for IGI&S ADS that apply throughout DoD. The DoD Information Enterprise Architecture (IEA) defines three different perspectives with respect to interactions in the DoD Information Enterprise (IE). All three perspectives are used by this RA and set the scope as depicted in Figure 1.

Figure 1: Scope of the IGI&S ADS RA

The IEA perspectives (and their IGI&S ADS RA application) are:

Production/provision of data and services (the Provider perspective) o The IGI&S ADS RA describes, at a high level, how data providers provision and update IGI&S ADS data assets via ADS capability interfaces.

Management/operation of data and services (the Manager perspective) o The IGI&S ADS RA describes the curation of data assets, as well as, provisioning, management, and operation of services by IGI&S ADS managers. Services are provided via ADS capability interfaces to both data providers and users.

Consumption/use of data and services (the User perspective) o The IGI&S ADS RA describes, at a high level, the discovery and consumption of IGI&S ADS data and services by users via ADS capability interfaces.

Key Authoritative References

DoD Instruction 8130.01, “Installation Geospatial Information and Services (IGI&S)”, October 25, 2017.

DoD Instruction 8320.02, “Sharing Data, Information, and Information Technology (IT) Services in the Department of Defense”, August 5, 2013.

DoD Instruction 8320.07, “Implementing the Sharing of Data, Information, and Information Technology (IT) Services in the Department of Defense”, December 5, 2017.

DoD Information Enterprise Architecture (IEA) v2.0, Volume I – Management Overview of the DoD IEA, July 2012, Department of Defense Office of the CIO.

DoD Information Enterprise Architecture (IEA) v2.0, Volume II – IEA Description, July 2012, Department of Defense Office of the CIO.

DoD Reference Architecture Description, June 2010, Department of Defense Office of the CIO.

DoD Architecture Framework (DoDAF), v2.02, August 2010, Department of Defense Office of the

CIO.

Spatial Data Standards for Facilities, Infrastructure, and Environment (SDSFIE) Governance Plan, Revision 2, 13 September 2017, DoD ASD(EI&E)

2 Context

Development of this RA is driven by the IGI&S ADS requirement in DoDI 8130.01 and the Department’s Net-centric vision, as described in the DoD IEA and other CIO policies. This section presents the basis for IGI&S ADS capabilities through applicable guiding principles, constraints, assumptions, architectural alignment, and organization context.

Guiding Principles

Based on analyzing the scope of the IGI&S ADS RA (and the key authoritative references) and input from the IGI&S Governance Group (IGG), three overarching guiding principles emerged.

Table 1: IGI&S RA Guiding Principles

ID Description

GP 01 IGI&S data providers shall provision and maintain IGI&S ADS data assets.

GP 02 IGI&S ADS managers shall operate and manage IGI&S ADS implementations. They will be responsible for a) assessing the quality of the data in support of user trust, b) ensuring that it is documented in support of user discovery and understanding, and c) curating data and services for user consumption.

GP 03 IGI&S ADS implementations shall provide the capability for IGI&S ADS users to discover, understand, access, and download IGI&S data via IGI&S ADS services.

Additionally, three of guiding principles from the DoD IEA are directly applicable to the IGI&S ADS RA.

These principles are adopted and adapted as follows.

Table 2: IGI&S RA Guiding Principles Adapted from the IEA

ID IGI&S ADS RA Description IEA ID IEA Description

IEA GP 01 The IGG is tasked with establishing guidelines to reduce duplicate investments, enable interoperability of IGI&S capabilities, and ensure that IGI&S data has the quality necessary for effective enterprise-wide decision making. The IGG has determined that the IGI&S ADS RA shall guide and constrain the implementation of IGI&S

ADS.

GP 01 Department of Defense (DoD) Chief Information Office (CIO)-governed resources are conceived, designed, operated, and managed to address the mission needs of the Department.

IEA GP 02 Interoperability of IGI&S ADS solutions across the Department is a strategic goal. Information is made interoperable by following the rules for net-centric sharing of data and services across the enterprise. DoD achieves infrastructure interoperability through definition and enforcement of standards and interface profiles and implementation guidance.

GP 02 Interoperability of solutions across the Department is a strategic goal. All parts of the GIG must work together to achieve this goal.

Information is made interoperable by following the rules for net-centric sharing of data and services across the enterprise. DoD achieves infrastructure interoperability through definition and enforcement of standards and interface profiles and implementation guidance.

IEA GP 03 IGI&S ADS data and services shall be visible, accessible, understandable, and trusted to authorized (including unanticipated) users.

GP 03 Data assets, services, and applications on the GIG shall be visible, accessible, understandable, and trusted to authorized (including unanticipated) users.

Constraints and Assumptions

Constraints and assumptions that have a potential impact on the development and use of IGI&S ADS capabilities are identified to properly constrain and bound the development of the IGI&S ADS RA. These constraints and assumptions also assist the reader in understanding certain descriptions in the RA.

2.2.1 Constraints

1. The IGI&S ADS RA provides a vision for the future-state (2-5 years) of IGI&S ADS in the DoD through principles, rules, technical positions (standards), and architectural patterns. Although it does not have the force of policy, it documents guidance which the IGG is authorized by policy to establish.

As such, it is intended to constrain IGI&S ADS implementations within DoD enterprise guidelines, and architecture. It articulates, but does not direct or authorize, a depicted future state. The policy, guidance, and resourcing necessary to transition to this future state will be promulgated by the Components separately, in collaboration with IGG stakeholders and the EI&E community.

2. This version of the RA focuses only on the requirements for the production/provision, curation/management/operation, and consumption/use of IGI&S ADS data and services. IGI&S products will be addressed in future versions.

3. This RA describes the principles, rules, patterns, and standards required for the production/provision, management/operation, and consumption/use of IGI&S ADS data and services.

4. This RA abstractly models, using architectural artifacts specified in the DoDAF, those identified core processes associated with IGI&S ADS data and services.

5. Terminology, concepts, and components for this reference architecture follow those established in the DoDI 8130.01, the SDSFIE Governance Plan, and the DoD IE Architecture (IEA).

2.2.2 Assumptions

1. Compliance with the entire reference architecture will likely not be achievable upon initial implementation. A phased implementation is acceptable.

2. IGI&S ADS implementation will vary by Component.

3. The aspects of production of IGI&S data outside of the context of IGI&S ADS implementation may be addressed in future DoD RA efforts. Life cycle of IGI&S data is important to the context of the IGI&S ADS and is thus described here to the degree necessary to promote understanding.

4. The capabilities described in this RA are IGI&S ADS data and services only. IGI&S products will be addressed in future versions. The supporting applications, services, processes, and infrastructure are assumed to be available in the context of typical DoD IT infrastructure.

Architectural Alignment

As already seen, this RA aligns with guiding principles from the DoD IEA. In section 3.1.3, this RA will further align with the DoD IEA via more detailed principles and business rules. The operational activities presented in section 4 align with the Business Enterprise Architecture via use of and extensions to operational activities.

Organizational Context (OV-4)

The OV-4 depicted in Figure 2 provides the relevant portion of a typical Component organization. For the purposes of the IGI&S ADS RA, we define the roles IGI&S Program Manager, data provider, and ADS Manager.

Figure 2: Typical Organizational Context (OV-4)

An IGI&S Program Manager coordinates IGI&S capability within a Component and facilitates integration of IGI&S activities and organizational functions across the DoD enterprise via participation in the IGG and IGI&S community of interest (COI).

Data providers are responsible for provisioning and maintaining IGI&S ADS data assets. Data providers are influenced by policy direction and technical guidance coming from the IGI&S Program Manager. Data providers submit data and metadata to the ADS manager.

ADS managers are responsible for a) assessing the quality of the data in support of user trust, b) ensuring that it is documented in support of user discovery and understanding, and c) curating data and services for user consumption. ADS managers are influenced by policy direction and technical guidance coming from the IGI&S Program Manager. ADS Manager(s) make update requests to data providers, as required.

3 ADS Capability Description

The Operational Concept for the IGI&S ADS describes the key concepts, operations, components, and participants of the IGI&S ADS. It provides a User, Manager, and Provider perspective.

Description of the IGI&S ADS Concept of Operations

Figure 3: IGI&S ADS Operational Concept Graphic, is a graphical depiction of the IGI&S ADS and the operations performed within it. It is an adaptation of the IEA OV-1. The upper portion of Figure 3 represents the User perspective and the bottom portion represents the Manager and Provider perspective.

Figure 3: IGI&S ADS Operational Concept Graphic

Users authenticate and connect to the ADS via some form of user-facing capability, perhaps of portal or similar. Once connected, the User has access to functionality and data provided by the IGI&S ADS user services.

The ADS Manager uses ADS management services to manage and ensure the quality of provisioned data assets and to publish the content when appropriate. The ADS Manager is also responsible for informing the mission assurance and infrastructure aspects of the IGI&S ADS, to include network operations (NetOps), information assurance (IA), and the allocation and configuration of infrastructure capabilities based on ADS system and user requirements.

The IGI&S ADS is populated by data providers that utilize ADS management services to provision and maintain data assets in the IGI&S ADS. Data providers are responsible for responding to ADS Manager requests for update.

3.1.1 The IGI&S ADS Cycle

Figure 4, is a graphical depiction of the IGI&S ADS Cycle and depicts the life cycle of a data asset within the IGI&S ADS context.

Figure 4: The ADS Cycle (OV-1)

The following table describes the stages in the ADS Cycle along with the primarily responsible actor.

Table 3: Description of Stages in the ADS Cycle

Cycle Stage Description Responsible

Submit Data providers submit data assets for inclusion in the IGI&S ADS. This stage can be revisited if feedback or other events requiring data update require a re-submission.

Data Provider

Assess The ADS Manager makes a quality assessment, if appropriate, to determine whether the asset meets quality criteria. Specific quality criteria are not directly in the purview of the IGI&S ADS RA. However, the IGG has established a standard, SDSFIE Quality (SDSFIE-Q), that provides a framework for measuring quality. Although the focus is currently on vector data assets, it will eventually apply to raster assets and services, as well.

ADS Manager

Update? The output of the assessment is evaluated to determine whether the data asset needs to be updated for quality reasons. If metadata is inadequate or non-existent, then an update request is also justified. If it must be updated, it is returned to the data provider.

ADS Manager

Publish If no update is required, the ADS Manager is free to curate and publish the asset.

ADS Manager

Discover The user can search or browse the IGI&S ADS content to discover assets of interest.

User

Understand The user can review metadata and visualize data assets to further understand the content.

User

Access/Download The user can query records and download entire assets or subsets for use in further analyses/applications.

User

Feedback If the user has experiences with the data asset that require updates to the assets, then the user may provide feedback to the data provider.

User

3.1.2 IGI&S Data Lifecycle (As-Is)

In this section, the IGI&S data asset production and maintenance life cycle is discussed as a method to further depict the relationships between it and the ADS cycle.

Figure 5: The IGI&S Data Cycle (OV-1)

The following table describes the stages in the ADS Cycle along with the primarily responsible actor.

Table 4: Description of Stages in the IGI&S Data Cycle

Cycle Stage Description Responsible

Requirement The data provider receives a requirement for data collection. In the case of vector data assets, this requirement includes the data content specification, whenever possible. The requirement can be updated as a result of user feedback or a need for maintenance.

Data Provider

Create/Modify The data provider creates the data asset by any means necessary (including acquisition from external sources), possibly driven by data content specification

Data Provider

Assess The data provider makes a quality assessment, if appropriate, to determine whether the asset meets quality criteria. Specific quality criteria are not directly in the purview of the IGI&S ADS RA. However, the IGG has established a standard, SDSFIE Quality (SDSFIE-Q), that provides a framework for measuring quality.

Data Provider

Update? The output of the assessment is evaluated to determine whether the data asset needs to be updated for quality reasons. If the provider feels that an update is required, then a maintenance event is generated, otherwise, the data asset can be submitted into the ADS.

Data Provider

Maintain The data provider receives an update request from the ADS Manager as a result of an ADS submission or another internal or external event occurs requiring maintenance on a data asset.

Data Provider

3.1.3 Detailed Operational Concept and Capabilities Vision

Figure 6 is an elaboration of the Figure 3 operational concept graphic that depicts capability groupings that result from the discussion regarding the IGI&S ADS Cycle. We can see that the ADS User and ADS Management services align with those from that cycle. We additionally depict service categories contemplated in the IEA that should be addressed at the capabilities level in this RA. These will be further elaborated in later sections.

Figure 6: ADS OV-1 with capabilities depicted

ADS RA Principles and Rules

This section contains elaboration on the principles and business rules driving IGI&S ADS implementations.

3.2.1 IGI&S ADS Business Rules

The principles and business rules in this section are those that elaborate the capabilities vision for the

IGI&S ADS.

Table 5: IGI&S ADS Business Rules

IGI&S RA ID IGI&S RA OV-6a Description

CIRP 01 IGI&S ADS shall use existing infrastructure (hardware and software) to the greatest extent practical, and Components should seek implementation solutions which leverage economy of scale.

DSDR 01 IGI&S data providers shall be able to provision IGI&S ADS with authoritative data via a data submission capability implementation.

DSDR 01.1 Data submission capability implementations shall allow for prior, simultaneous, or subsequent submission of metadata associated with any data asset.

DSDR 01.3 SDSFIE-V data sets shall, and all other submitted data assets should, include metadata in support of understanding and trust.

DSDR 01.4 Submitted IGI&S ADS data assets (specifically dataset) metadata should contain feature catalog information in support of understanding.

DSDR 01.5 Submitted IGI&S ADS data assets (specifically dataset) metadata should contain quality information in support of trust.

DSDR 01.6 IGI&S ADS managers will be notified when data assets have been submitted via a data submission capability implementation.

DSDR 02 IGI&S data providers shall be able to update data assets they have previously provisioned to an IGI&S ADS via a data update capability implementation. These updates can be the results of routine data maintenance or a cleaning request from an ADS manager.

DSDR 03 IGI&S ADS managers shall be able to evaluate and qualify data assets that have been submitted by data providers via a data assessment capability implementation.

DSDR 03.1 Data assessment capability implementations shall provide mechanisms to perform quality assessments on vector datasets based on the content of SDSFIE-Q Data Content Specifications (DCS).

DSDR 03.2 Data assessment capability implementations shall produce a report suitable to describe errors in a manner useful for requesting data cleansing operations by the submitting data provider.

DSDR 04 IGI&S ADS managers shall be able to publish data assets that have been submitted by data providers via a data publishing capability implementation.

DSDR 05 IGI&S ADS users shall be able to discover IGI&S ADS data assets via a data discovery capability implementation.

DSDR 06 IGI&S ADS users shall be able to understand IGI&S ADS data assets by examining metadata retrieved from a successful search conducted via a data discovery capability implementation.

DSDR 07 IGI&S ADS users shall be able to access IGI&S ADS data assets via a data access capability implementation.

DSDR 07.1 Data access capability implementations should provide the ability to query vector data assets using their properties, including their geometric properties.

DSDR 08 IGI&S ADS users shall be able to download IGI&S ADS data assets via secure net-centric means.

DSDR 08.1 Data download capability implementations should provide the ability to query vector data assets using their properties, including their geometric properties, to subset and join datasets for download.

DSDR 08.2 Data download capability implementations shall provide standard download formats.

SAR 01 IGI&S ADS Implementations shall conform to the applicable Risk Management Framework for the system.

The acronym in the identifiers for the business rules in this section are defined in the IEA and is as follows:

CIRP – Computing Infrastructure Readiness Principles

DSDR – Data & Services Deployment Business Rules

SAR – Secured Availability Business Rules

3.2.2 IEA-Based Principles and Business Rules

The principles and business rules in this section are those directly derived from the IEA and have, in some cases, been specified further to apply to IGI&S ADS.

Table 6: IGI&S ADS Principles and Business Rules Adapted from the IEA

IGI&S ID IGI&S RA OV-6a Description IEA ID IEA OV-6a Description

IEA CIRP 03 IGI&S ADS computing infrastructure must be able to provide secure, dynamic, computing platform-agnostic and location-independent data storage.

CIRP 03 Computing infrastructure must be able to provide secure, dynamic, computing platform-agnostic and location-independent data storage.

IEA CIRP 04 IGI&S ADS computing infrastructure hosting environments must evolve and adapt to meet the emerging needs of applications and the demands of rapidly increasing services.

CIRP 04 Computing infrastructure hosting environments must evolve and adapt to meet the emerging needs of applications and the demands of rapidly increasing services.

IEA CIRR

Computing infrastructure capabilities must be robust and agile to respond to increased computing demand, data storage, and shared space requirements.

CIRR 05 Computing infrastructure capabilities must be robust and agile to respond to increased computing demand, data storage, and shared space requirements.

IEA CIRR

IGI&S ADS computing infrastructure facilities must be accredited, certified, and approved by DoD designated authorities.

CIRR 07 All GIG computing infrastructure facilities must be accredited, certified, and approved by DoD designated authorities.

IEA DSDP

IGI&S information is a strategic asset.

IGI&S ADS implementations shall provide access to data and services when and where needed in support of EI&E missions, the priorities of the Secretary of Defense, and the national security of the United States.

DSDP 01 Data, services and applications belong to the enterprise. Information is a strategic asset that cannot be denied to the people who need it to make decisions.

IEA DSDP

Data, services, and applications should be loosely coupled to one another. The interfaces for mission services that an organization provides should be independent of the underlying implementation. Likewise, data has much greater value if it is visible, accessible and understandable outside of the applications that might handle it.

DSDP 02 Data, services, and applications should be loosely coupled to one another. The interfaces for mission services that an organization provides should be independent of the underlying implementation. Likewise, data has much greater value if it is visible, accessible and understandable outside of the applications that might handle it.

IEA DSDP

Only handle information once (the OHIO principle). Information that exists should be reused rather than recreated.

DSDP 03 Only handle information once (the OHIO principle). Information that exists should be reused rather than recreated.

IEA DSDP

IGI&S ADS content shall conform to all applicable SDSFIE, and endorsed external, semantics and syntax standards for data sharing.

DSDP 04 Semantics and syntax for data sharing should be defined on a community basis.

Information sharing problems exist within communities; the solutions must come from within those communities.

IEA DSDR

The ADS Implementation Guidance defines enterprise-wide ADS content and acceptable assessment criteria. Beyond this, the Components shall determine the IGI&S ADS implementation that applies to each of their installations.

DSDR 05 Communities of Interest (COIs) will determine which data sources are authoritative and will not declare any source authoritative without establishing a valid pedigree.

IEA DSDR

IGI&S COI has developed SDSFIE-V as its semantic vocabulary for vector datasets. IGI&S ADS manager shall confirm that vector datasets comply with a registered SDSFIE-V adaptation, per Component policy.

DSDR 08 COIs should develop semantic vocabularies, taxonomies, and ontologies.

IEA DSDR

IGI&S COI has developed SDSFIE-V and Components have made compliant adaptations. All of these are registered in the SDSFIE Online registry.

DSDR 10 Vocabularies, taxonomies, and ontologies must be registered with the enterprise for visibility, re-use, and understandability.

IEA DSDR

Existing enterprise data, services, and end-user interfaces shall be used whenever possible, practical, and appropriate, instead of re-creating those assets.

DSDR 11 Existing enterprise data, services, and end-user interfaces shall be used whenever possible, practical, and appropriate, instead of re-creating those assets.

IEA SAP 01 IGI&S ADS contain certain data that can be considered a target for highly motivated and well-equipped adversaries.

As such, they must be conscientiously designed, managed, protected, and defended.

SAP 01 The GIG is critical to DoD operations and is a high-value target for many highly motivated and well-equipped adversaries.

As such, it must be conscientiously designed, managed, protected, and defended.

IEA SAR 01 DoD information programs, applications, and computer networks shall protect data in transit and at rest according to their confidentiality level, Mission Assurance category, and level of exposure.

SAR 01 DoD information programs, applications, and computer networks shall protect data in transit and at rest according to their confidentiality level, Mission Assurance category, and level of exposure.

IEA SAR 04 DoD programs must clearly identify and fund Information Assurance (IA) management and administration roles necessary for secure operation and maintenance of the program. Additionally, provision must be made for adequate training of all users in secure operation.

SAR 04 DoD programs must clearly identify and fund Information Assurance (IA) management and administration roles necessary for secure operation and maintenance of the program. Additionally, provision must be made for adequate training of all users in secure operation.

IEA SIP 02 IGI&S ADS implementations shall enable connectivity to all authorized users.

SIP 02 The GIG shall enable connectivity to all authorized users.

IEA SIP 03 IGI&S ADS implementations must be scalable, changeable, deployable, and rapidly manageable while anticipating the effects of the unexpected user.

SIP 03 GIG infrastructure must be scalable, changeable, deployable, and rapidly manageable while anticipating the effects of the unexpected user.

IEA SIR 01 IGI&S ADS resources shall be discoverable, and available to both meet the dynamic demand of all mission

SIR 01 GIG infrastructure resources shall be discoverable, and available to both meet the dynamic demand of all mission requirements and support the monitoring and management of the GIG.

requirements and support the monitoring and management of the GIG.

The acronyms in the identifiers for the principles and business rules in this section are defined in the IEA and are as follows:

DSDP – Data & Services Deployment Principles

DSDR – Data & Services Deployment Business Rules

SAP – Secured Availability Principles

SAR – Secured Availability Business Rules

SIP – Shared Infrastructure Principles

SIR – Shared Infrastructure Business Rules

CIRP – Computing Infrastructure Readiness Principles

CIRR – Computing Infrastructure Readiness Business Rules

ADS Capabilities

This section contains a set of capabilities related of IGI&S ADS. Figure 7 depicts the capabilities grouped by logical capability category.

Figure 7: IGI&S ADS Capabilities

3.3.1 IGI&S ADS Capabilities

The capabilities described in this section are those of the IGI&S ADS itself. They support the provisioning, maintenance, and curation of IGI&S data assets.

Table 7: IGI&S ADS Capability Descriptions

Category Capability Name Capability Definition

Submit

Submit Dataset Provides the ability for an IGI&S Program Analyst or Contracted Data Provider to submit a new dataset to the ADS Manager for inclusion in the ADS.

Submit Metadata Provides the ability for an IGI&S Program Analyst or Contracted Data Provider to submit metadata concerning any content to the ADS Manager

Submit Imagery Provides the ability for an IGI&S Program Analyst or Contracted Data Provider to submit imagery to the ADS Manager for inclusion in the ADS.

Update/Cleanse

Update Dataset

Provides the ability for an IGI&S Program Analyst or Contracted Data Provider to submit a revised dataset to the ADS Manager for inclusion in the ADS. Depending on the architecture of the ADS, this may or may not be a transactional capability.

Update Metadata

Provides the ability for an IGI&S Program Analyst or Contracted Data Provider to submit updated metadata to the ADS Manager. Depending on the architecture of the ADS, this may or may not be a transactional capability.

Evaluate

Evaluate (Assess) Dataset Submission

Provides the ability for an ADS Manager to perform an evaluation of the quality of a dataset that is submitted for inclusion in the ADS (enabled by Access/Obtain Requirements capability)

Evaluate (Assess) Dataset Update

Provides the ability for an ADS Manager to perform an evaluation of the quality of a dataset based on updates that occur due to routine update or cleansing activity (enabled by Access/Obtain Requirements capability)

Publish

Define Aggregate

Provides the ability for an ADS Manager to define an aggregate as a collection of datasets located in the ADS and might include filtering (sub setting). This ability does not create an instance of the aggregate.

Publish Dataset

Provides the ability for an ADS Manager to publish a dataset. This ability means that authorized and authenticated users can access/obtain, download, and/or visualize the dataset. This capability may or may not include role-based access control.

Publish Aggregate

Provides the ability for an ADS Manager to publish an aggregate. At the time an aggregate is published it is created as an ephemeral, time-stamped instance of the datasets (or portions thereof as provided for in the definition of the aggregate). This ability means that authorized and authenticated users can access/obtain, download, and/or visualize the aggregate. This capability may or may not include role-based access control.

Publish Metadata

Provides the ability for an ADS Manager to publish metadata. This ability means that authorized and authenticated users can discover the dataset or browse the dataset metadata. This capability may or may not include role-based access control.

3.3.2 End User Capabilities

The capabilities described in this section are those the IGI&S ADS provides to end-users.

Table 8: IGI&S ADS End User Capability Descriptions

Category Capability Name Capability Definition

Secure

Authorize User Provides the ability to authorize an end user to access and use ADS resources, in accordance with established policies.

Authenticate User Provides the ability to authenticate an authorized end user to provide access to the ADS capabilities.

Discover

Discover Content Provides the capability to query the ADS (metadata) to discover content of interest

Browse Content Provides the capability to browse the ADS content (metadata)

Access

Access/Obtain Dataset Provides the capability to obtain a dataset of interest interactively

Access/Obtain Imagery Provides the capability to obtain imagery of interest interactively

Download

Download Dataset Provides the capability to download a complete dataset of interest

Download Imagery Provides the capability to download imagery of interest

Download Aggregate Provides the capability to download a predefined aggregate of datasets

Understand

Query Dataset Provides the capability to query a dataset of interest to interactively obtain a filtered subset

Visualize Content Provides the capability to visualize datasets and/or imagery of interest

Create Map Provides the capability to create a map from datasets and/or imagery of interest

3.3.3 IGI&S ADS Supporting Capabilities

The capabilities described in this section are those that indirectly support the capabilities of the IGI&S ADS but that are not directly capabilities of the IGI&S ADS itself and thus do not have a category in this Reference Architecture and are informational.

Table 9: IGI&S ADS Supporting Capability Descriptions

Capability Name Capability Definition

Register Requirements

Provide the capability for Component IGI&S Program Managers (or designee) to register dataset requirements (Data Content Specifications (DCS) and Data Reviewer Batch Jobs (RBJ)) so that ADS Managers can access.

Access/Obtain Requirements Provide the capability for ADS Managers to access requirements (DCS and

RBJ).

4 Operational Pattern(s)

The IGI&S RA does not formally define an OV-5b (Operational Activity Model), OV-6b (State Transition Description), or OV-6c (Event-Trace Description) but does define an OV-5a (Operational Activity Decomposition Tree) as a precursor to inserting these Operational Activities into the BEA. The cells with a level number in red or that are grey shaded are not currently in the BEA. The others are already part of the BEA.

Table 10: Operational Activities Related to ADS

Level Activity Name Activity Description

A9 Manage Geospatial Information and Services This activity provides planning, organizing, and executing the design, development, collection, maintenance, sustainment and analysis of geospatial information and systems.

A91 Create Geospatial Information This activity creates Geospatial Information, which is the information required for the spatial representation of real world phenomena (e.g. real property asset, interest area, geopolitical area). The information is created using specialized tradecraft and techniques that implement I&E geospatial standards and guidance.

This activity also includes documenting the geospatial metadata associated with the Geospatial Information. For example, this activity enables the creation of a geospatial representation of the location of a real property asset or an ESOH interest area.

A911 Create/Acquire (Vector) Dataset This activity receives a request to create or acquire vector dataset content (including any requirements in the form of DCS and RBJ or other forms) and results in vector dataset content.

A912 Create/Acquire Imagery (Raster Dataset)

This activity receives a request to create or acquire vector dataset content (including any requirements) and results in imagery or raster dataset content.

A913 Create/Acquire Metadata This activity receives a request to create or acquire metadata describing content and results in metadata documentation.

A914 Submit (Vector) Dataset This activity receives a request for submission of a vector dataset and returns an acknowledgement of receipt. Submission may be tied to an evaluation of the submission and thus would output a Quality Evaluation Report and may result in the rejection of the submission.

A915 Submit Imagery (or Raster Dataset) This activity receives a request for submission of imagery or a raster dataset and returns an acknowledgement of receipt.

A916 Submit Metadata This activity receives a request for submission of metadata and returns an acknowledgement of receipt if valid or a rejection if the metadata is invalid.

A92 Validate Geospatial Information This activity is an acknowledgement by an authorized government official (e.g.

Program Manager) that geospatial information meets requirements and conforms with standards, accuracy and enterprise data quality guidelines.

This activity performs a technical review of created or updated geospatial features to ensure conformance with published I&E standards and guidance as well as specific project requirements.

A921 Evaluate/Assess Dataset Submission/Content

This activity is an assessment of the degree to which geospatial information meets requirements expressed in a DCS. This activity performs an evaluation of created or updated (cleansed) geospatial features to measure quality against a DCS, often using evaluation tools such as RBJ. In the context of ADS, this assessment is performed at time of submission or update of content to the ADS. This activity would output a Quality Evaluation Report.

A93 Maintain Geospatial Information This activity receives the request to update, and updates individual geospatial features using geospatial tradecraft and techniques to meet specified requirements: e.g. data currency, data accuracy and precision, data quality.

A931 Cleanse Geospatial Information This activity receives a Quality Evaluation Report (the output of a dataset evaluation) and updates individual geospatial features using geospatial tradecraft and techniques to meet the specified shortcomings.

A932 Provide Dataset Updates This activity manages the submission and receipt of updates to a dataset resulting in a change to the dataset.

A933 Provide Imagery (Raster Dataset) Updates

This activity manages the submission and receipt of updates to imagery or raster dataset resulting in a change to the imagery or raster dataset.

A934 Provide Metadata Updates This activity manages the submission and receipt of updates to metadata resulting in a change to the metadata.

A94 Provide Geospatial Data and Geospatial Data Services

This activity manages and organizes validated geospatial information according to enterprise standards and guidance. This activity also provides geospatial data services for DoD business missions (e.g. geospatial geometry data to support Real Property Asset Management) and their geospatial Family of Systems.

A941 Publish Dataset This activity receives a request to publish a dataset, potentially including role-based access parameters, and results in the availability of the dataset to authenticated, authorized users.

A942 Publish Imagery (Raster Dataset) This activity receives a request to publish imagery (or a raster dataset), potentially including role-based access parameters, and results in the availability of the dataset to authenticated, authorized users.

A943 Publish Metadata This activity receives a request to publish metadata, potentially including role-based access parameters, and results in the availability of the dataset to authenticated, authorized users.

A944 Define Aggregate This activity receives a request to define an aggregate as some combination of existing content, potentially including role-based access parameters, and results in the definition of an aggregate to authenticated, authorized users.

A945 Publish Aggregate This activity receives a request to publish an aggregate, potentially including role-based access parameters, and results in the availability of an aggregate to authenticated, authorized users.

A946 Access/Download Dataset This activity receives a request for access to or for download of vector dataset content (along with any query/filtering parameters) and results in vector content delivered according to provided output parameters.

A947 Access/Download Imagery (Raster Dataset)

This activity receives a request for access to or for download of imagery or raster dataset content (along with any query/filtering parameters) and results in imagery or raster content delivered according to provided output parameters.

A948 Access/Download Aggregate This activity receives a request for access to or for download of aggregate content (along with any query/filtering parameters) and results in the aggregate content delivered according to provided output parameters.

A95 Provide Geospatial Visualization Services This activity manages geospatial information technology visualization applications and services for DoD business missions (e.g. a geospatial visualization web service like the DISDI Portal, interactive map viewers) and creates geospatial information products. Geospatial Information Products deliverables, a result of geospatial tradecraft and techniques, include hardcopy and/or electronic non-editable maps, presentation figures and graphics, to support DoD activities like master planning (e.g.

land use maps) and soldier support activities (e.g. training and range management).

A96 Provide Geospatial Analytical Services This activity uses geospatial data package and application package combined with geospatial tradecraft and techniques to perform geospatial and geostatistical analysis (e.g. wind farm siting analysis, proximity analysis), in support of DoD activities like Renewable Energy Initiative and Readiness and Environmental Protection Initiative (REPI).

A97 Create Geospatial Information Requirements This activity creates requirements for the collection and maintenance of geospatial information. These requirements are captured in the form of DCS. This activity also creates tools for the validation/evaluation of geospatial information with vector representations.

A971 Register Requirements This activity registers dataset requirements (DCS and/or RBJ and/or other form of requirement expression).

A972 Access/Obtain Requirements This activity receives a request for access to requirements given a set of access parameters and returns the appropriate DCS and/or RBJ and/or other form of requirement expression content.

5 Technical Position

This version of the IGI&S RA recommends that the following standards that must be applied to solutions developed to enable IGI&S ADS activities as envisioned in the IGI&S ADS OV-1 graphics:

Spatial Data Standards for Facilities, Infrastructure, and Environment Quality (SDSFIE-Q), Revision 1, 12 September 2018, ASD(EI&E)

Spatial Data Standards for Facilities, Infrastructure, and Environment Metadata (SDSFIE-M), Version 2.0, 12 September 2018, ASD(EI&E)

Spatial Data Standards for Facilities, Infrastructure, and Environment Vector (SDSFIE-V):

Specification Document, Version 4.0, 22 April 2016, ASD(EI&E)

OpenGIS Web Map Service (WMS) Implementation Specification (1.3.0)

OpenGIS Web Map Service Client (WMS) Implementation Specification (1.3.0)

OpenGIS Web Map Tile Service Implementation Standard (1.0.0)

OpenGIS Web Feature Service 2.0 Interface Standard (also ISO 19142) o OpenGIS Filter Encoding 2.0 Encoding Standard

OGC® Catalogue Services 3.0 - General Model o OGC® Catalogue Services 3.0 Specification - HTTP Protocol Binding o OGC® Catalogue Services 3.0 Specification - HTTP Protocol Binding - Abstract Test Suite

Appendix A. Acronyms

ADS – Authoritative Data Source

ASD (EI&E) – Assistant Secretary of Defense, Energy, Installations, and Environment

AV – All View(point)

BEA – Business Enterprise Architecture

CIO – Chief Information Officer

CIRP – Computing Infrastructure Readiness Principles

CIRR – Computing Infrastructure Readiness Business Rules

COI – Community of Interest

CV – Capabilities View(point)

DCS – Data Content Specifications

DISDI – Defense Installations Spatial Data Infrastructure

DoD – Department of Defense

DSDP – Data & Services Deployment Principles

DSDR – Data & Services Deployment Business Rules

ESOH – Environmental, Safety, and. Occupational Health

GIG – Global Information Grid

GP – General Principle

HTTP – Hypertext Transfer Protocol

IA – Information Assurance

IE – Information Enterprise

IEA – Information Enterprise Architecture

IGG – IGI&S Governance Group

IGI&S – Installation Geographic Information and Services

ISO – International Standards Organization

IT – Information Technology

OGC – Open Geospatial Consortium

OHIO – Only handle information once

OV – Operation View(point)

RA – Reference Architecture

RBJ – Data Reviewer Batch Job

REPI – Readiness and Environmental Protection Initiative

SAP – Secured Availability Principles

SAR – Secured Availability Business Rules

SDSFIE – Spatial Data Standards for Facilities, Infrastructure, and Environment

SIP – Shared Infrastructure Principles

SIR – Shared Infrastructure Business Rules

StdV – Standards View(point)

WCS – Web Coverage Service

WFS – Web Feature Service

WMS – Web Map Service

Appendix B. Glossary

Term Definition Reference

Accessible Data and services can be accessed via the GIG by users and applications in the enterprise. Data and services are made available to any user of application except where limited by law, policy, security classification, or operational necessity.

[DoD IEA, Version 2.0, DoD CIO, August 10, 2012]

Activity Work, not specific to a single organization, weapon system or individual that transforms inputs (Resources) into outputs (Resources) or changes their state.

[DoDAF 2.02, August 2010]

Authentication Security measure designed to establish the validity of a transmission, message, or originator, or a means of verifying an individual's authorization to receive specific categories of information.

[DoD IEA, Version 2.0, DoD CIO, August 10, 2012]

Authoritative Data Source

A recognized or official data production source with a designated mission statement or source/product to publish reliable and accurate data for subsequent use by customers. An authoritative data source may be the functional combination of multiple, separate data sources.

[DoDD 8320.03, March 23, 2007]

Authorization Permission granted by properly constituted authority to perform or execute a lawful governmental function.

[DoD IEA, Version 2.0, DoD CIO, August 10, 2012]

Authorized User Any appropriately cleared individual with a requirement to access a DoD information system in order to perform or assist in a lawful and authorized governmental function.

[DoD IEA, Version 2.0, DoD CIO, August 10, 2012]

Capability The ability to achieve a Desired Effect under specified [performance] standards and conditions through combinations of ways and means [activities and resources] to perform a set of activities.

[DoDAF 2.02, August 2010]

Component See DoD…