[xacml] XACML April 4, 2002 Minutes

Title: XACML Conference Call Minutes

XACML
Conference Call

Date:  Thursday, April 4, 2002 

Time: 10:00 AM EST 

Tel: 512-225-3050 Access Code: 65998 

Minutes of Meeting

 

Summary

A discussion on DRM and XrML TC was added to the agenda. The general
consensus is that there is overlap and we should be concerned about that. Oasis
will not prevent two overlapping committees from existing, so XACML members are
encouraged to get involved with XrML to help resolve these issues. Their first
F2F is 5/21 in DC. The IBM IP statement was also discussed but little is known
about what it covers. Michiharu will find out more and report back. The schema
subcommittee reported their progress and they are beginning by breaking into
task forces to tackle the different areas of the schema.

 

It was also agreed that progress needs to start on the security and
privacy, conformance and example application sections of the document. Various
people volunteered to work on those areas and begin reporting back at the next
TC meeting. Other areas of the document that need work are SAML profiles, error
codes, extensibility (to be covered by Schema Subcommittee), policy storage
profiles (LDAP/DSML, HTTP, JDBC, CORBA RAD).

 

There was not time remaining to vote on the issues to close so Carlisle
will begin that process over email and it will take 5 days. The meeting ended
with some discussion of the next F2F in Milan on 4/22 -
4/24.

 

Action
Items

 
Simon to be reminded one more time to send his
     F2F#3 presentation to Michiharu for posting to the website.

 
[Hal, Konstantin] to produce an XACML
     "primer" that provides more verbal text describing function
     and use of the various element types at the appropriate time (ed note:
     Suggest a date be decided on and this be added to the calendar and removed
     from the action  item list.)

 
Ernesto to appoint someone to update the TC on
     subcommittee progress if he will not be on a TC call (ed note: Suggest
     this apply to all subcommittees)

 
Michiharu will brief the TC further on the extent
     of IBM's patents and provide an official translation (or at least
     and English description) of the Japanese patent that has already been
     published.

 
Michiharu and Anne to develop description of
     example applications, specifically for XML documents and J2SE

 
Ken and Polar to begin work on conformance

 
James and Polar to begin work on Security and
     Privacy.

 
Carlisle to begin email voting
     process for closing issues.

 

Votes

Voted to approve minutes of 3/7, F2F#4, 3/21 Meetings with inclusion of
amendments posted to the list.

 

Proposed Agenda:

10:00-10:10 Roll Call and Agenda Review 

10:10-10:15 Vote to accept minutes of March 21 meeting 

http://lists.oasis-open.org/archives/xacml/200203/msg00049.html

10:15-10:20 Review of Action Items (see 3/21 minutes) 

10:20-10:30 Report of Schema Sub-Committee 

(in particular, proposals for Focus Group topics) 

10:30-10:50 Discussion of Overall Status 

(in particular, vote to close several items on current issues list) 

http://lists.oasis-open.org/archives/xacml/200204/msg00014.html

10:50-11:00 Discussion of logistics for next
face-to-face meeting

 

Roll Call

James MacLean, Affinitex

Ken Yagen, Crosslogix

Hal Lockhart, Entegrity

Carlisle Adams, Entrust

Tim Moses, Entrust

Michiharu Kudoh, IBM

Bill Parducci, Self

Polar Humenn, Self

Pierangela Samarati, University of Milan

Ernesto Damiani, University of Milan

Sekhar Vajjhala, Sun Microsystems

Anne Anderson, Sun Microsystems

 

Raw Minutes (taken by Ken Yagen)

 

Agenda Review

Hal - 2 new issues

*Need to approve 3/7 and F2F minutes as well because no quorum last
time

*Discussion about Digital Rights/XrML

Anne - 4 new proposals to close issues that need voting

Tim - IBM's IP notice

 

Acceptance of Minutes

3/7, F2F, 3/21 Voted and approved with posted amendments

 

10:20

Existing Action Items

 
Simon to send presentation from F2F3 to Michiharu
     for website

Carried for a long time. Was for historical purposes.
Will remind Simon one more time then drop it.

 
Anne to propose a new resolution to PM 2-05

Polar has presented a newer resolution and is up for
voting

 
[Hal, Konstantin] Produce XACML
     "primer" that provides more verbal text describing function
     and use of the various element types.  

Meant to start a little while from now

 
Carlisle will send out poll on
     dates for next F2F

Decided on April 22 - 24 in Milan

 
Carlisle will send out note to
     list noting closing of Policy Subcommittee

Done and transitioned to Schema committee 10-12
Eastern

 
Ken will update issues list so we can vote on
     closed issues for April 4th. Collect and send out email to make
     sure none that have been missed.

Complete

 
Ernesto would look into pseudocode for possible
     candidates

All came up with was a list of best practices for
writing pseudocode. Anne suggested using Java like syntax to express standard
combination algorithm. Added to issues list as an issue that can be addressed.
V12 algorithms resemble Java.

 
Michiharu to post material presented at the last
     F2F meeting on the website

Complete

 
Chair needed for new Schema subcommittee

Chair is Ernesto. If cannot attend regular TC call,
should appoint someone to update the TC. Hal - will be reporting on two
meetings since TC call every other week.

 

10:30

Update on DRM and XrML TC (Hal)

Initial submission of XrML but charter of TC as
proposed is to continue the work done on XrML. Concern of a substantial
overlap. Karl stated nothing in OASIS rules to prevent this. Darwinian model of
specifications. Formation of TC would create a venue for deciding if duplicating
our work. Just need three members to form TC. Couple XACML members thinking of
getting involved. Hal may outline a synthesis proposal. XACML is more general
but XrML is more fully developed in their target scope area. May want to stick
their specifics into the XACML framework.

Ernesto - are they willing to take into account
what we are doing?

Carlisle - First meeting Tuesday, May
21 in DC area. Encourage others to join and monitor it and raise concerns of
overlap.

Hal - Lot of history of this happening in
security business with a bad effect. If cannot merge, only basis for difference
in domain scopes is that their scope is limited purely to the distribution of
intellectual property. Would not cover exchange of medical information.

Members - ContentGuard, HP, MS, Verisign,
Reuters. MPEG has agreed to use it as official standard.

 

IBM IP statement

Carlisle - Not issued patents so
no one knows what area is being claimed.

Michiharu - cannot provide information on what
the patent claims cover. Will prepare something for the next meeting.

Anne - what Sun has done has issue a statement
that any IP that is owned will be available without need for special license or
fee to implementers of standard. OASIS only requires reasonable and non-discrimatory
terms.

 

[Action Item] Is it possible to get official
translation or at least description in English of formal content. Michiharu
will ask someone if that is possible. 

 

Schema Subcommittee

Ernesto - subdivide schema into different task
forces to work on proposals offline. Sent out proposal for first suggested set
of task forces. Tim replied with alternative set of task forces.  Objective on
Monday to have finally list of task forces and have members join task forces.

 

Tim - other subcommittees: conformance, security
and privacy

Carlisle - need to start
exploring these other aspects to make June 1 submission.

Michiharu - description of example applications
is important one. It may be a part of the spec. Michiharu will lead that
activity, but not sure how document is assembled.

XML documents, J2SE environment - Anne can
assist on this.

 

Ken - I'd be happy to help out on
conformance. 

Hal - Think about it and identify issues. Have a set
of policies and see if PDP can return correct SAML decision.

Ken - take a look at Conformance TC guideline
and give it some thought.

Polar - Can help out as well.

 

Security and Privacy - Polar and James (James is
currently listed as chair)

Draw from SAML as a starting point.

 

Could begin and get back at next TC how things are
going.

Hal - Document outline would be useful at this
point.

 

Tim Possibly drop S&P in to Version 13 of document

 

Tim - placeholders for SAML profiles, error
codes, extensibility (covered by Schema subcommittee)

Carlisle - profiles for storage
of policies in LDAP

Tim - have a couple pages on that but could use
more work. What about HTTP, JDBC? People want others, should be added. 

Polar - CORBA RAD spec?

 

Bill - What about DSML? Describing LDAP schemas
via XML

Anne - will float to Sun XML people.

Hal - two issues: format (DSML may describe) and
naming.

 

Carlisle - propose turn to Email
vote for issues ready to close

Hal - vote on batch as one vote.

Carlisle - will take batch and
other 4 Anne has mentioned and send out notes to list to begin an email vote. Votes
last 5 days.

Anne - actually 5.

 

11:00

F2F Logistics

Rate of 50 Euros for one hotel

Transportation logistics. Malpensa is far from city
but can take bus or train (1 hour) Can arrange taxi for you (van) if around
same time from US.

Contact Pierangela individually and number of nights
and she can collect and get back to us with a proposal.

[Dropped off at this point]