# Addressing Lock-in, Interoperability, and Long-Term Maintenance Challenges Through Open Source: How Can Companies Strategically Use Open Source?

Björn Lundell, Jonas Gamalielsson, Stefan Tengblad, Bahram Hooshyar

Yousefi, Thomas Fischer, Gert Johansson, Bengt Rodung, Anders Mattsson,

Johan Oppmark, Tomas Gustavsson, et al.

<figure><img src="image_1.png" /></figure>

## To cite this version:

Björn Lundell, Jonas Gamalielsson, Stefan Tengblad, Bahram Hooshyar Yousefi, Thomas Fischer, et al.: Addressing Lock-in, Interoperability, and Long-Term Maintenance Challenges Through Open Source: How Can Companies Strategically Use Open Source?. 13th IFIP International Conference on Open Source Systems (OSS), May 2017, Buenos Aires, Argentina. pp.80-88, 10.1007/978-3-319-57735-7_9. hal-01776263

HAL Id: hal-01776263

https://inria.hal.science/hal-01776263

Submitted on 24 Apr 2018

HAL is a multi-disciplinary open access
archive for the deposit and dissemination of sci-
entific research documents, whether they are pub-
lished or not. The documents may come from
teaching and research institutions in France or
abroad, or from public or private research centers.

L'archive ouverte pluridisciplinaire HAL, est
destinée au dépôt et à la diffusion de documents
scientifiques de niveau recherche, publiés ou non,
émanant des établissements d'enseignement et de
recherche français ou étrangers, des laboratoires
publics ou privés.

<figure><img src="image_2.png" /></figure>

Distributed under a Creative Commons Attribution 4.0 International License
Addressing lock-in, interoperability, and
long-term maintenance challenges through
Open Source: How can companies
strategically use Open Source?

Björn Lundell¹, Jonas Gamalielsson¹, Stefan Tengblad¹, Bahram Hooshyar
Yousefi¹, Thomas Fischer¹, Gert Johansson², Bengt Rodung³, Anders
Mattsson⁴, Johan Oppmark⁵, Tomas Gustavsson⁶, Jonas Feist⁷, Stefan
Landemoo⁸, Erik Lönroth⁹

¹University of Skövde, Skövde, Sweden,
{bjorn.lundell,jonas.gamalielsson,stefan.tengblad,
bahram.hooshyar.yousefi,thomas.fischer}@his.se

²Combitech AB, Linköping, Sweden,
gert.johansson@combitech.se

³Findwise AB, Göteborg, Sweden,
bengt.rodung@findwise.com

⁴Husqvarna AB, Huskvarna, Sweden,
anders.mattsson@husqvarnagroup.com

⁵JAK, Skövde, Sweden,
johan.oppmark@jak.se

⁶PrimeKey Solutions AB, Solna, Sweden,
tomas@primekey.se

⁷RedBridge AB, Stockholm, Sweden,
jfeist@redbridge.se

⁸Saab AB, Linköping, Sweden,
stefan.landemoo@saabgroup.com

⁹Scania IT AB, Södertälje, Sweden,
erik.lonroth@scania.se

**Abstract.** This industry paper reports on how strategic use of open source in company contexts can provide effective support for addressing the fundamental challenges of lock-in, interoperability, and longevity of software and associated digital assets. The fundamental challenges and an overview of an ongoing collaborative research project are presented. Through a conceptual model for open source usage in company contexts we characterise how companies engage with open source and elaborate on how the fundamental challenges can be effectively addressed through open source usage in company contexts.
# 1 Introduction

Over the years, researchers have identified a number of different motivations for companies and individuals to engage with open source [29, 4, 21]. Open Source Software (OSS) is software made available under a software license which has been approved by the Open Source Initiative [25] and with OSS the nature of development and competition in the software sector has significantly impacted on this sector [7]. This, in turn, has led to increased opportunities for organisations basing their business on open source and in 2007 it was found that in the context of the Norwegian software industry “more than 30% of the companies get over 40% of their income from OSS related services or software” [11]. Further, open source goes beyond software and important aspects of open source have influenced licensing in the hardware domain [12] and as a development model for standardisation [19].

Open source constitutes an early exemplar of open innovation [20] and its strategic use by companies is increasing [23]. Software maintained in open source projects is external to specific company contexts. Therefore, to maintain control of R&D resources it is critical for any company to participate and utilise effective work practices for involvement in open source communities, something which calls for technical and strategic considerations. Hence, companies must be prepared to counter and adapt their way of working in order to stay competitive in an increasingly competitive market.

Building and organising communities around OSS projects involves a number of challenges (e.g. [3, 8, 1]) and previous research shows “that effective governance and work practices that are appreciated by community members is fundamental for long-term sustainability” for open source projects [8]. A number of OSS projects are governed by a foundation (e.g. the Eclipse Foundation, the Linux Foundation, and the Document Foundation), which “are associations that serve to protect, not define, their respective communities’ core technologies as well as the advancement of the commons through technical, social, and educational services” [9]. Previous studies have analysed Eclipse-projects and investigated how “software firms can apply different types of governance approaches to open source software development projects” [27]. Further, several widely adopted OSS projects are also governed in other ways and many companies seek guidance concerning how to establish effective strategies for governance and company involvement in open source projects.

This industry paper makes three principle contributions. First, we elaborate on the three fundamental challenges: lock-in, interoperability, and long-term maintenance of software and associated digital assets. Second, we present an overview of an industrial collaborative research project which aims to establish effective strategies for how companies can (and should) strategically engage with open source projects in order to successfully address the three fundamental challenges. Third, through an evolved conceptual model and associated strategies for company involvement with open source we illustrate how companies seek to strategically use and engage with open source projects in different ways.
## 2 On fundamental challenges: lock-in, interoperability, and long-term maintenance

Over the years we have witnessed more widespread deployments of complex IT-systems and associated increased demands for longevity of software [8, 19]. This causes organisations to vary concerning different types of lock-in and inability to provide long-term maintenance of critical systems and digital assets [16, 19]. Further, OSS is often deployed in a legacy situation where there is a lot of proprietary software and closed file formats. This leads to the need for migrations between different file formats and establishment of interoperable systems. Interoperability supports systems heterogeneity, thereby increasing options for organisations [2, 10, 13].

Use of an open standard, especially when implemented in OSS, contributes to interoperability in that it “ensures that data and systems can be interpreted independently of the tool which generated it” [17]. This is relevant for scenarios in both commercial [18] and public sector [19] organisations. The Swedish National Procurement Services has published a list of open standards, which all can be referenced as mandatory requirements in public procurement [24]. An open standard is a standard which conforms to the definition presented in the European Interoperability Framework (EIF) version 1.0 [24] and such standards can be implemented and distributed under different licenses for proprietary software and under all OSI-approved licenses for OSS.

To allow for competition and stimulate innovation the Framework agreements established by the Swedish National Procurement Services [24] require that only open standards can be referenced as mandatory requirements in public procurement. A recent study commissioned by the Swedish Competition Authority found that many IT-projects in the Swedish public sector refer to closed standards which cannot be implemented in open source software, and the Director General for the Swedish Competition Authority states in the foreword to the report from the study that “From a competition perspective it is often problematic when public sector organisations conduct IT procurement and express requirements for closed standards” [19]. Further, the study shows that there is a widespread practice to refer to standards, trademarks, and proprietary software and IT-solutions which only specific manufacturers and suppliers can provide [19].

Many companies and organisations need to preserve their systems and associated digital assets for more than 30 years [22], and in some industrial sectors (e.g. avionics) even more than 70 years [3, 26]. In such usage scenarios “there will be problems if the commercial vendor of adopted proprietary software leaves the market” with increased risks for long-term availability of both software and digital assets [22].

Open source projects with healthy ecosystems can be an appropriate way to address risks related to lock-in and long-term maintenance of commodity software [15]. Further, use of open standards reduces the risk to an organisation of being technologically locked-in since they increase control by supporting migration,
thereby reducing an organisation's reliance on a single product or supplier [6, 10, 13, 16, 28]. Further, previous research claims that support for interoperability should not require compatibility with existing software systems (since it tends to favour specific providers of those systems), but rather promote "interoperability with software from multiple vendors", something which can be achieved through use of OSS and open standards [10]. Despite such recommendations, recent results from a study commissioned by the Swedish Competition Authority show that many Swedish governmental organisations undertake projects for development and procurement of IT-systems which inhibit competition and use of open source solutions since there are mandatory requirements for compatibility with specific proprietary technology and closed standards that (perhaps) unintentionally inhibit interoperability and create a number of very problematic lock-in effects.

There is limited prior research concerning effective strategies for how companies can successfully address the three challenges through use and involvement in open source software projects. The ongoing collaborative research project LIM-IT is one notable exception which aims to advance the existing body of knowledge concerning effective strategies for company involvement with open source in order to successfully address these challenges.

### 3 Addressing fundamental challenges through Open Source: an overview of the LIM-IT project

The overarching goal of the LIM-IT project is to develop, use, and scrutinise effective work practices and strategies for development, procurement, and organisational implementation of software systems in a number of complex application domains, where such software systems with associated digital assets (provided in a number of different open and closed standards and file formats) typically involve several open source projects as well as proprietary software, often depending on many different legacy systems. To address this goal, practitioners and researchers are committed to investigate the following core question: "How can companies develop and utilise effective work practices for achieving long-term strategic benefits from participation in open collaborative projects?"

To successfully address the core question there is a need to thoroughly understand motivations and expectations from all relevant (private and public sector) stakeholder groups, which inherently encompass a complex web of interdependencies (with a variety of different, sometimes conflicting, motivations and goals) between different stakeholders involved in, and affected by, a coopetative marketplace, i.e. a marketplace with competition on top of (open) collaboration.

Researchers from different research specialisations (including open source, software engineering, organisational science, and intellectual property rights) address the fundamental challenges from multi-disciplinary perspectives in collaboration with practitioners in a number of innovative organisations. Partner organisations include (small and large) companies from the primary software sector that all have
extensive experience from development and use of (proprietary and open source) software, as well as software intensive organisations from the secondary software sector, representing businesses in different domains such as automotive, avionics, finance, and outdoor power products. The primary software sector companies are all service providers with many years of experience from providing services and delivering open source solutions to the private- and public sector. Several of these are international and have also been contracted in framework agreements by the Swedish National Procurement Services at Kammarkollegiet (a governmental authority) for delivering open source solutions to the Swedish public sector organisations in public procurement. Amongst the companies in the software intensive secondary sector, several are recognised as globally leading enterprises in their respective fields.

The research project seeks to investigate how the fundamental challenges lock-in, interoperability, and long-term maintenance of software and associated digital assets can be successfully addressed in different usage context. Investigation involves systematic scrutiny, through use of an action-case study approach [5], of a number of usage contexts which are of relevance for partner organisations.

## 4 Strategic use of open source in different company contexts

When companies succeed in establishing long-term symbiotic relationships with external open source communities and projects, such relationships can significantly strengthen the company's own missions in addition to strengthen involved open source communities which govern development in open source projects that may be of strategic importance for the own company.

In Figure 1 we present a conceptual model for how companies can exploit, and engage with, open source based on previous and ongoing research. The model, which initially was presented in the context of product lines [14], has evolved through collaborative research with representatives for partner organisations involved in the LIM-IT project. Arrows (labelled 1, 2, 3, 4a, 4b, and 5 in Figure 1) represent principle strategies (strategies 1, 2, 3, 4a, 4b, and 5 in Table 1) for how companies can exploit, and engage with, open source in order to seek long-term benefit for their own organisation in different usage contexts. It should be noted that our research has in particular evolved strategy 4a compared to the initial model [14].

Through conduct of research in the LIM-IT project, we have for all these strategies identified a number of specific instances for how companies exploit and are engaged with open source in different usage contexts in the primary and secondary software sector. By drawing from the identified instances in which partner companies exploit and engage with open source, we present some illustrative examples of the identified instances in order to characterise all principle strategies which have been evolved in collaboration with partner companies. The presented strategies and illustrative examples show how companies utilise (and can utilise) open source software for long-term strategic benefits.
<figure><img src="image_3.png" /><figcaption>Fig. 1. Leveraging Open Source Opportunities</figcaption></figure>

<table><caption>**Table 1.** Principle strategies for how a company can engage with open source projects</caption><tr><td>Strategy 1</td><td>Adopt open development practices within closed company contexts. This has been referred to as inner source development [15].</td></tr><tr><td>Strategy 2</td><td>Use open source software tools in a company's own development process.</td></tr><tr><td>Strategy 3</td><td>Use open source software components in the IT- and software products<fnref n="1" /> which are deployed to customers and other usage contexts outside the own company context.</td></tr><tr><td>Strategy 4</td><td>Contribute to existing open source projects and open up proprietary software products and release those as new open source projects:<br>4a) Contribute to existing open source projects and to existing open source products (that have been released from those open source projects).<br>4b) Open up software products that were initially developed as proprietary software in the own closed company context and release those products as new open source projects.</td></tr><tr><td>Strategy 5</td><td>Establish symbiotic relationships between development projects in the closed company context and strategically important open source projects maintained and governed outside the company's own context. Such mutually beneficial relationships are strategically important for strengthening a company's business and technical development. Further, such relationships are also beneficial for open source projects.</td></tr></table>

<footnote n="1">¹ Stable releases from open source projects that are deployed for use in different contexts are often referred to as software products.</footnote>
All five principle ways for use and engagement with open source projects can be identified amongst the partner organisations in the LIM-IT research project. All companies have, to some extent, adopted open source work-practices into their own development process (strategy 1), and all use a variety of different open source software in their own company context (strategy 2). For example, several companies use the Eclipse-based modelling tool Papyrus in development projects undertaken in their own company context, and companies in the primary software sector also provide services and training related to specific open source tools. Further, companies also internally use the open source licensed ROS (Robotic Operating System) for simulations in their own development processes and there are also experiences from use of many other open source licensed solutions, such as Apache Solr, Elastic, PostgreSQL, and MongoDB.

Companies use various open source implementations in their own software and hardware offerings (strategy 3). For example, open source implementations of the LWM2M protocol is adopted for wireless communication with machines for use in different product offerings and several companies include several open source software components in solutions provided to customers. Several companies use a combination of proprietary and open source software, and organisations have experience from distribution of solutions under different terms (including open source software, SaaS, and a combination of proprietary and open source software).

Amongst partner organisations there are experience from releasing proprietary software as open source software (strategy 4b) and also from providing contributions to established open source projects (strategy 4a), such as Apache Solr, SignServer, and EJBCA.

Organisations seek to establish a long-term symbiotic relationship between different interests in open and closed contexts which is beneficial for both companies and open source projects (strategy 5). Such relationships can be effective means for influencing the formation of long-term goals and thereby support strategic collaborations. For example, organisations in the LIM-IT project has experience from involvement in open source industrial working groups, such as Eclipse and the Papyrus Industry Consortium. Further, amongst partners there are also experiences from initiation of and engagement with independent open source projects (e.g. SignServer and EJBCA) which include all relevant roles.

It should be noted that a combination of the above strategies may be utilised for utilising opportunities with open source in a specific company context. Besides strategic and technical benefits from utilising the five strategies for engaging with open source there are also other potential benefits. For example, from a perspective of personnel policy, a company engaged with open source may be perceived as a much more attractive employer, which may significantly ease recruitment of new staff.
# 5 Conclusion

This paper has elaborated on how companies can strategically use open source for addressing lock-in, interoperability, and long-term maintenance of software and associated digital assets. Through a conceptual model for how companies can use and leverage from open source we have presented an overview of a collaborative research project which aims to establish effective strategies for how companies can use and strategically engage with open source projects in different ways. In so doing, we have illustrated how organisations, through adoption of different strategies, currently use and are involved with open source projects in order to achieve long-term strategic benefits for their own organisation.

Through systematic research investigations of how companies can successfully address the fundamental challenges lock-in, interoperability, and long-term maintenance of software and associated digital assets in different usage contexts we seek to advance practically useful recommendations for use and engagement with open source projects, whilst also contributing to advancing the existing body of knowledge in the field.

# 6 Acknowledgements

This research has been financially supported by the Swedish Knowledge Foundation (KK-stiftelsen) and participating partner organisations in the LIM-IT project. The authors are grateful for the stimulating collaboration and support from colleagues and partner organisations.

# 7 References

1. Ågerfalk, P. J., Fitzgerald, B.: Outsourcing to an Unknown Workforce: Exploring Opensourcing as a Global Sourcing Strategy, MIS Quarterly **32**(2), 385-409 (2008)

2. Bird, G. B.: The Business Benefit of Standards, StandardsView **6**(2), 76-80 (1998)

3. Blondelle, G., Arberet, P., Rossignol, A., Lundell, B., Labezin, C., Berrendonner, R., Gaufillet, P., Faudou, R., Langlois, B., Maisonobe, L., Moro, P., Rodriguez, J., Puerta Pena, J.-M., Bonnafous, E., Mueller, R.: Polarsys: towards Long-Term Availability of Engineering Tools for Embedded Systems, In ERTS 2012, 8p (2012)

4. Bonaccorsi, A., Rossi, C.: Comparing motivations of individual programmers and firms to take part in the open source movement: from community to business, Knowledge Technology and Policy **18**(4), 40-64 (2006)

5. Braa, K., Vidgen, R.: Interpretation, intervention, and reduction in the organizational laboratory: a framework for in-context information system research, Accounting, Management & Information Technology **9**, 25-47 (1999)
6. EU: COMMUNICATION FROM THE COMMISSION TO THE EUROPEAN PARLIAMENT, THE COUNCIL, THE EUROPEAN ECONOMIC AND SOCIAL COMMITTEE AND THE COMMITTEE OF THE REGIONS, Against lock-in: building open ICT systems by making better use of standards in public procurement, COM(2013) 455 final, European Commission, Brussels, 25.6.2013 (2013)

7. Fitzgerald, B.: The transformation of Open Source Software, MIS Quarterly **30**(4), 587-598 (2006)

8. Gamalielsson, J., Lundell, B.: Sustainability of Open Source software communities beyond a fork: How and why has the LibreOffice project evolved?, The Journal of Systems and Software **89**, March, 128-145 (2014)

9. Germonprez, M., Allen, J. P., Warner, B., Hill, J., McClements, G.: Open source communities of competitors, Interactions **20**(6), 54-59 (2013)

10. Ghosh, R. A.: Open Standards and Interoperability Report: An Economic Basis for Open Standards, FLOSSPOLS, Deliverable D4, 12 December, Maastricht (www.flosspols.org) (2005)

11. Hauge, Ø., Sørensen, C.-F., Conradi, R.: Adoption of Open Source in the Software Industry. In Russo, B. et al. (Eds.) Open Source Development, Communities and Quality, IFIP – The International Federation for Information Processing, vol. 275, pp. 211-221, Springer, Heidelberg (2008)

12. Katz, A.: Towards a Functional Licence for Open Hardware, International Free and Open Source Software Law Review **4**(1), 41-62 (2012)

13. Krechmer, K.: The Meaning of Open Standards, In Proceedings of the 38th Hawaii International Conference on System Sciences – 2005, IEEE Computer Society, Los Alamitos, 10p (2005)

14. van der Linden, F.: Applying Open Source Software Principles in Product Lines, UPGRADE X(2), 32-40 (2009) http://www.cepis.org/upgrade/files/issue%20III-2009-vanderlinden.pdf

15. van der Linden, F., Lundell, B., Marttiin, P.: Commodification of Industrial Software: A Case for Open Source, IEEE Software **26**(4), 77-83 (2009)

16. Lundell, B.: e-Governance in public sector ICT-procurement: what is shaping practice in Sweden?. European Journal of ePractice **12**(6), (2011) http://www.epractice.eu/en/document/5290101

17. Lundell, B.: Why do we need Open Standards?, In Orviska, M., Jakobs, K. (Eds.) Proceedings 17th EURAS Annual Standardisation Conference ‘Standards and Innovation’, The EURAS Board Series, Aachen, pp. 227-240 (2012), ISBN: 978-3-86130-337-4

18. Lundell, B., Gamalielsson, J., Mattsson, A.: Exploring Tool Support for Long-term Maintenance of Digital Assets: a Case Study, In Fomin, V., Jakobs, K. (Eds.) Proc.: 16th EURAS Annual Standardization Conference, European Academy of Standardisation, The EURAS Board, pp. 207-217 (2011a)

19. Lundell, B., Gamalielsson, J., Tengblad, S.: IT-standarder, inläsning och konkurrens: En analys av policy och praktik inom svensk förvaltning, Uppdragsforskningsrapport 2016:2, Konkurrensverket (2016), ISSN: 1652-8089, http://www.konkurrensverket.se/nyheter/problem-med-slutna-standarder-vid-it-upphandlingar/ (in Swedish, with an English Executive Summary)

20. Lundell, B., van der Linden, F.: Open Source Software as Open Innovation: Experiences from the Medical Domain, In Eriksson Lundström, J. S. Z. et al. (Eds.) Managing Open Innovation Technologies, Springer, Berlin, pp. 3-16 (2013)

21. Lundell, B., Lings, B., Lindqvist, E.: Open Source in Swedish Companies: Where are We?, Information Systems Journal **20**(6), 519-535 (2010)
22. Lundell, B., Lings, B., Syberfeldt, A.: Practitioner perceptions of Open Source software in the embedded systems area. Journal of Systems and Software **84**(9), 1540–1549 (2011b)

23. Northbridge: 2016 the future of open source, North Bridge (2016), http://www.slideshare.net/blackducksoftware/2016-future-of-open-source-survey-results

24. NPS: Open IT-standards, National Procurement Services (Kammarkollegiet), 7 March, Dnr 96-38-2014 (2016), http://www.avropa.se/globalassets/open-it-standards.pdf

25. OSI: Open Source Initiative (2017), https://opensource.org/

26. Robert, S.: On-board software development - The open-source way, IST/ARTEMIS workshop, Helsinki, 22 November (2006)

27. Schaarschmidt, M., Walsh, G., von Kortzfleisch, H.F.O.: How do firms influence open source software communities? A framework and empirical analysis of different governance modes, Information and Organization **25**(2), 99-114 (2015)

28. UK: Open Standards Principles: For software interoperability, data and document formats in government IT specifications. Cabinet Office, UK, 1 November (2012)

29. Wichmann, T.: FLOSS Final Report – Part 2, Free/Libre Open Source Software: Survey and Study Firms’ Open Source Activities: Motivations and Policy Implications, Berlecon Research GmbH, July, Berlin (2002).