Welcome!

Cloud Security Authors: Pat Romanski, Elizabeth White, Liz McMillan, Derek Weeks, Peter Silva

Related Topics: @CloudExpo, Java IoT, Microservices Expo, Linux Containers, Containers Expo Blog, Cloud Security

@CloudExpo: Blog Feed Post

API Testing Helps MedicAlert Increase Agility, Extend Services

Acclerating the roll out of secure, reliable APIs

MedicAlert pioneered the use of medical ID products and delivers the most dependable, responsive, and trusted Emergency Identification and Medical Information Network. The nonprofit charity provides the functionality of an e-health information exchange for emergencies through an innovative combination of a unique patient identifier linked to a personal health record and a live 24/7 emergency response service.

medicalertAs MedicAlert continues expanding its role as an innovative provider of healthcare information services, they are leveraging APIs.  To accelerate their ability to roll out new APIs in a secure and effective fashion, MedicAlert has relied on automated API testing software from Parasoft.

With Parasoft, the organization has been able to rapidly manage the functional, regression and load testing challenges associated with its new capabilities and offerings. Parasoft has enabled MedicAlert to automate the testing and validating of new APIs – enabling them to provide new healthcare information services and more rapidly respond to business opportunities.

Challenge: Agility and Scalability on Demand

MedicAlert is focused on enabling members to manage their personal health records (PHR) online while maintaining security, privacy and confidentiality. Its repository of personal health information also facilitates the delivery of critical medical information between patients, providers, payers, and emergency responders. These foundations have enabled the organization to grow by constantly introducing new product offerings such as an RFID-based medical card and a USB- enabled portable information device called E- HealthKEY.

Given the high demands associated with such endeavors, MedicAlert recognized the need to
publish APIs to support its dynamic market plans and objectives. The organization now relies on
these interfaces to support its members’ PHR, which include information about medical conditions
as well as drug prescriptions and other relevant health data.

Considering the sensitive nature and life-saving potential of such information, MedicAlert’s IT organization is under severe pressure to ensure its systems are secure, streamlined and effective. APIs represent an opportunity to roll out new  offerings rapidly, capitalize on reusability, and ensure the systems can scale up to meet the growing demands of members and partners. “APIs are about making your business more agile – being able to rapidly seize new business opportunities,” says Jorge Mercado, Principal Architect for MedicAlert’s Product Development Group.

To be sure, software quality is an essential factor in meeting these objectives – and this fast-moving organization needed a way to address its demanding quality requirements quickly and effectively. “We needed tools to automate our testing processes,” says Natalie Doan, the team’s QA Engineer. “When I joined the group, we had a very manual approach for testing.”

Action: Capitalizing on Parasoft API Testing

After exploring some of the potential API testing solutions, MedicAlert chose API testing with Parasoft SOAtest. “We found SOAtest and we ran with it,” says Doan. “Parasoft support trained us for one week and we were able to take it from there. We quickly saw that the product had a lot of powerful features that would help us automate our testing activities and processes. Parasoft SOAtest was able to support all the latest standards (ex. security and schema validation standards); we were able to test all areas of our APIs.”

Through the use of Parasoft SOAtest, the team is able to efficiently test different endpoints and ensure broad test coverage within this environment. When new updates or modifications are made to an API, Parasoft SOAtest’s regression testing can be employed to ensure that no defects have been introduced and that previously verified functionality continues to operate as expected. “I can quickly ensure that features from the previous version are in place to support the new version,” adds Doan.

Parasoft also brought powerful capabilities in terms of functionality and load testing. It enables the team to test the performance differences on the system between, say, 10 or 100 users simultaneously, updating their personal health record through the services under various scenarios. For instance, Parasoft can test how a user sending a long, data-intensive message impacts a particular API.

Parasoft also helps the group ensure authentication and authorization of data and users are managed properly. However, the key to Parasoft’s value is the range of capabilities it delivers and coverage it enables. “We load test the system from beginning to end,” says Doan. “I couldn’t do that with other testing tools we were using previously.”

Results: Enhanced API Security, Quality and Performance

In recent years, MedicAlert has realized important benefits from Parasoft along three key dimensions: security; quality; and performance.

Parasoft’s support for security is critical to an organization that manages personal health records for its four million members. It relies on Parasoft to ensure authentication and authorization capabilities are performing as expected – whether this requires the team to test SAML assertions or HTTP authentication procedures. With different levels of security support, MedicAlert benefits from Parasoft’s expansive testing capabilities.

In terms of quality, Parasoft’s regression testing capabilities are particularly valued. Doan notes that she can use the same test suites she built two years ago to test new versions of products such as E-HealthKEY, ensuring that all members are continually supported. “When we upgrade to new versions of an API, I can rerun tests and make sure the new API actually supports the previous functionality,” she says. “It’s reliable. It assures me that the functionality is there and working as expected.”

Without such testing capabilities, MedicAlert would run the risk of upsetting its members. APIs might not perform and member data might not be saved or updated properly. “We have to ensure members have an effective experience and that data is there when you need it in an emergency,” Doan adds. “The data must be valid and correct. It must be rapidly and correctly updated. Parasoft helps us ensure these objectives are consistently met.”

Finally, Parasoft supports MedicAlert’s progressive efforts to enhance online performance for its members and partners. Doan explains that the performance of the organization’s APIs was “quite slow” when they initially launched their effort. Updating one’s health record could take as much as a minute to complete. However, through continual testing, iterations and improvement, the team has been able to reduce the time associated with such transactions to less than four seconds.

“We don’t want our members or partners to wait at all,” says Doan. “So we are continually upgrading our services and enhancing the performance of our system to ensure the members have an effective experience.”

Ultimately, automated testing has enhanced the user’s experience online, strengthened relationships with members and partners, and contributed to the agility of MedicAlert. Parasoft’s delivers a “strong return on investment,” says Doan. “We use it on a daily basis for reliability and support throughout our API infrastructure.”

Such capabilities have clearly strengthened the linkages between IT and the business. “Business leaders at MedicAlert want to be able to react quicker and make our APIs more valuable,” says Mercado. “They want to bring on more members at a faster rate. Being able to more rapidly respond to different business opportunities addresses their objectives – and now they realize that APIs can help the organization meet those goals.”

[PAPER] API Testing Business Drivers

Learn about the business drivers behind API testing solution purchase decisions, as well as the opportunities for ROI. This 6-page API Testing Business Drivers paper explains how an automated enterprise-grade API testing solution delivers

  • Reduced costs by reducing testing costs, reducing technical debt, and exposing defects earlier in the SDLC
  • Reduced risks by applying more exhaustive testing techniques, increasing test coverage, and immediately exposing any defects introduced by modifications
  • Increased efficiency by leveraging sophisticated automation and enabling artifact reuse

More Stories By Cynthia Dunlop

Cynthia Dunlop, Lead Technical Writer at Parasoft, authors technical articles, documentation, white papers, case studies, and other marketing communications—currently specializing in service virtualization, API testing, DevOps, and continuous testing. She has also co-authored and ghostwritten several books on software development and testing for Wiley and Wiley-IEEE Press. Dunlop holds a BA from UCLA and an MA from Washington State University.

@ThingsExpo Stories
The Internet of Things will challenge the status quo of how IT and development organizations operate. Or will it? Certainly the fog layer of IoT requires special insights about data ontology, security and transactional integrity. But the developmental challenges are the same: People, Process and Platform and how we integrate our thinking to solve complicated problems. In his session at 19th Cloud Expo, Craig Sproule, CEO of Metavine, will demonstrate how to move beyond today's coding paradigm ...
Ask someone to architect an Internet of Things (IoT) solution and you are guaranteed to see a reference to the cloud. This would lead you to believe that IoT requires the cloud to exist. However, there are many IoT use cases where the cloud is not feasible or desirable. In his session at @ThingsExpo, Dave McCarthy, Director of Products at Bsquare Corporation, will discuss the strategies that exist to extend intelligence directly to IoT devices and sensors, freeing them from the constraints of ...
From wearable activity trackers to fantasy e-sports, data and technology are transforming the way athletes train for the game and fans engage with their teams. In his session at @ThingsExpo, will present key data findings from leading sports organizations San Francisco 49ers, Orlando Magic NBA team. By utilizing data analytics these sports orgs have recognized new revenue streams, doubled its fan base and streamlined costs at its stadiums. John Paul is the CEO and Founder of VenueNext. Prior ...
Technology vendors and analysts are eager to paint a rosy picture of how wonderful IoT is and why your deployment will be great with the use of their products and services. While it is easy to showcase successful IoT solutions, identifying IoT systems that missed the mark or failed can often provide more in the way of key lessons learned. In his session at @ThingsExpo, Peter Vanderminden, Principal Industry Analyst for IoT & Digital Supply Chain to Flatiron Strategies, will focus on how IoT de...
IoT offers a value of almost $4 trillion to the manufacturing industry through platforms that can improve margins, optimize operations & drive high performance work teams. By using IoT technologies as a foundation, manufacturing customers are integrating worker safety with manufacturing systems, driving deep collaboration and utilizing analytics to exponentially increased per-unit margins. However, as Benoit Lheureux, the VP for Research at Gartner points out, “IoT project implementers often ...
So, you bought into the current machine learning craze and went on to collect millions/billions of records from this promising new data source. Now, what do you do with them? Too often, the abundance of data quickly turns into an abundance of problems. How do you extract that "magic essence" from your data without falling into the common pitfalls? In her session at @ThingsExpo, Natalia Ponomareva, Software Engineer at Google, provided tips on how to be successful in large scale machine learning...
A strange thing is happening along the way to the Internet of Things, namely far too many devices to work with and manage. It has become clear that we'll need much higher efficiency user experiences that can allow us to more easily and scalably work with the thousands of devices that will soon be in each of our lives. Enter the conversational interface revolution, combining bots we can literally talk with, gesture to, and even direct with our thoughts, with embedded artificial intelligence, wh...
In his general session at 18th Cloud Expo, Lee Atchison, Principal Cloud Architect and Advocate at New Relic, discussed cloud as a ‘better data center’ and how it adds new capacity (faster) and improves application availability (redundancy). The cloud is a ‘Dynamic Tool for Dynamic Apps’ and resource allocation is an integral part of your application architecture, so use only the resources you need and allocate /de-allocate resources on the fly.
Information technology is an industry that has always experienced change, and the dramatic change sweeping across the industry today could not be truthfully described as the first time we've seen such widespread change impacting customer investments. However, the rate of the change, and the potential outcomes from today's digital transformation has the distinct potential to separate the industry into two camps: Organizations that see the change coming, embrace it, and successful leverage it; and...
SYS-CON Events announced today that Roundee / LinearHub will exhibit at the WebRTC Summit at @ThingsExpo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. LinearHub provides Roundee Service, a smart platform for enterprise video conferencing with enhanced features such as automatic recording and transcription service. Slack users can integrate Roundee to their team via Slack’s App Directory, and '/roundee' command lets your video conference ...
Digital transformation is too big and important for our future success to not understand the rules that apply to it. The first three rules for winning in this age of hyper-digital transformation are: Advantages in speed, analytics and operational tempos must be captured by implementing an optimized information logistics system (OILS) Real-time operational tempos (IT, people and business processes) must be achieved Businesses that can "analyze data and act and with speed" will dominate those t...
The Jevons Paradox suggests that when technological advances increase efficiency of a resource, it results in an overall increase in consumption. Writing on the increased use of coal as a result of technological improvements, 19th-century economist William Stanley Jevons found that these improvements led to the development of new ways to utilize coal. In his session at 19th Cloud Expo, Mark Thiele, Chief Strategy Officer for Apcera, will compare the Jevons Paradox to modern-day enterprise IT, e...
There are several IoTs: the Industrial Internet, Consumer Wearables, Wearables and Healthcare, Supply Chains, and the movement toward Smart Grids, Cities, Regions, and Nations. There are competing communications standards every step of the way, a bewildering array of sensors and devices, and an entire world of competing data analytics platforms. To some this appears to be chaos. In this power panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, Bradley Holt, Developer Advocate a...
SYS-CON Events announced today that Bsquare has been named “Silver Sponsor” of SYS-CON's @ThingsExpo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. For more than two decades, Bsquare has helped its customers extract business value from a broad array of physical assets by making them intelligent, connecting them, and using the data they generate to optimize business processes.
There is growing need for data-driven applications and the need for digital platforms to build these apps. In his session at 19th Cloud Expo, Muddu Sudhakar, VP and GM of Security & IoT at Splunk, will cover different PaaS solutions and Big Data platforms that are available to build applications. In addition, AI and machine learning are creating new requirements that developers need in the building of next-gen apps. The next-generation digital platforms have some of the past platform needs a...
SYS-CON Events announced today that ReadyTalk, a leading provider of online conferencing and webinar services, has been named Vendor Presentation Sponsor at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. ReadyTalk delivers audio and web conferencing services that inspire collaboration and enable the Future of Work for today’s increasingly digital and mobile workforce. By combining intuitive, innovative tec...
Fact is, enterprises have significant legacy voice infrastructure that’s costly to replace with pure IP solutions. How can we bring this analog infrastructure into our shiny new cloud applications? There are proven methods to bind both legacy voice applications and traditional PSTN audio into cloud-based applications and services at a carrier scale. Some of the most successful implementations leverage WebRTC, WebSockets, SIP and other open source technologies. In his session at @ThingsExpo, Da...
Cognitive Computing is becoming the foundation for a new generation of solutions that have the potential to transform business. Unlike traditional approaches to building solutions, a cognitive computing approach allows the data to help determine the way applications are designed. This contrasts with conventional software development that begins with defining logic based on the current way a business operates. In her session at 18th Cloud Expo, Judith S. Hurwitz, President and CEO of Hurwitz & ...
Almost two-thirds of companies either have or soon will have IoT as the backbone of their business in 2016. However, IoT is far more complex than most firms expected. How can you not get trapped in the pitfalls? In his session at @ThingsExpo, Tony Shan, a renowned visionary and thought leader, will introduce a holistic method of IoTification, which is the process of IoTifying the existing technology and business models to adopt and leverage IoT. He will drill down to the components in this fra...
The Internet of Things can drive efficiency for airlines and airports. In their session at @ThingsExpo, Shyam Varan Nath, Principal Architect with GE, and Sudip Majumder, senior director of development at Oracle, will discuss the technical details of the connected airline baggage and related social media solutions. These IoT applications will enhance travelers' journey experience and drive efficiency for the airlines and the airports. The session will include a working demo and a technical d...