Business Information Systems
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Trusted Computing Or Distributed Trust Management?
Trusted computing or distributed trust management? Michele Tomaiuolo Dipartimento di Ingegneria dell’Informazione Università di Parma Via Usberti, 181/A – 43100 Parma – Italy [email protected] Abstract Nowadays, in contrast with centralized or hierarchical certification authorities and directory of names, other solutions are gaining momentum. Federation of already deployed security systems is considered the key to build global security infrastructures. In this field, trust management systems can play an important role, being based on a totally distributed architecture. The idea of distributed trust management can be confronted with the concept of trusted computing. Though having a confusingly similar denomination, the different interpretation of trust in these systems drives to divergent consequences with respect to system architectures and access policies, but also to law, ethics, politics. While trusted computing systems assure copyright holders and media producers that the hosting system will respect the access restrictions they defined, trust management systems, instead, allow users to grant trust to other users or software agents for accessing local resources. Keywords Data security, Security Management, Authentication, Authorization, Intellectual Property Rights, Information Access, Digital Books, Multimedia, Web Technologies Introduction A number of architectures and systems are being proposed as a ground for improved interoperability among diverse systems, mainly exploiting the idea of service-oriented architecture. Yet, some issues remain open. In fact, composition of services requires some delegation of goals and duties among partners. But these delegations cannot come into effect, if they’re not associated with a corresponding delegation of privileges, needed to access some resources and complete delegated tasks, or achieve desired goals. -
OASIS Response to NSTC Request for Feedback on Standard Practices
OASIS RESPONSE TO NSTC REQUEST FOR FEEDBACK ON STANDARDS PRACTICES OASIS (Organization for the Advancement of Structured Information Standards) is pleased to respond to the request from the National Science and Technology Council's Sub-Committee on Standards published at 75 FR 76397 (2010), and extended by 76 FR 3877 (2011), for feedback and observations regarding the effectiveness of Federal agencies' participation in the development and implementation of standards and conformity assessment activities and programs. We have advised our own members about the Federal Register inquiry, in case they wish to respond. Of course, their opinions are their own, and this response does not represent the views of any members, but only the observations of OASIS professional staff. I. RESPONDENT'S BACKGROUND OASIS is one of the largest and oldest global open data standards consortia, founded in 1993 as SGML Open. OASIS has over 5000 active participants representing about 600 member organizations and individual members in over 80 countries. We host widely-used standards in multiple fields including • cybersecurity & access control (such as WS-Security, SAML, XACML, KMIP, DSS & XSPA) [/1], • office documents and smart semantic documents (such as OpenDocument, DITA, DocBook & CMIS) [/2], and • electronic commerce (including SOA and web services, such as BPEL, ebXML, WS-ReliableMessaging & the WS-Transaction standards) [/3] among other areas. Various specific vertical industries also fulfill their open standards requirements by initiating OASIS projects, resulting in mission-specific standards such as • UBL and Business Document Exchange (for e-procurement) [/4], • CAP and EDML (for emergency first-responder notifications) [/5], and • LegalXML (for electronic court filing data)[/6]. -
Innovations in Resource Management and Mutual Aid Technology
Innovations in Resource Management and Mutual Aid Technology July 22, 2021 National Alliance for Public Safety GIS (NAPSG) Foundation napsgfoundation.org | @napsgfoundation napsgfoundation.org | @napsgfoundation 1 Webinar Prep • Due to the large attendance, all participants are muted for the duration of the session to prevent background noise. • Please use the Q&A functionality within Zoom for questions that are relevant to the whole group. • We will address these Q&A at the end of the webinar! napsgfoundation.org | @napsgfoundation Today’s Objectives • Learn about FEMA’s National Resource Hub and how to gain access and start using the suite of resource management tools. • Gain insight into how the National Resource Hub can connect and share data with your other incident management systems, situational awareness apps, and other 3rd party systems today and in the future. • Learn what is in development to improve existing and innovate with new resource management and mutual aid technology tools and systems. • Find out what’s new in version 3.0 of the Implementation Guide on Information Sharing Standards and how you can use the guide in informing your agency’s technology selection and acquisition process to ensure interoperability and seamless information sharing. • Gain basic technical knowledge on the latest with the Emergency Data Exchange Language (EDXL) and how it supports building a National – and Global – network of interoperable incident management systems. napsgfoundation.org | @napsgfoundation 3 Agenda 2:00pm Introductions and Overview 2:10pm National Resource Hub - What It’s About - What It Can Do For You and Your Agency 2:25pm What’s Coming in the Job Aid and Technical Guidance for Incident Management Technology 2:35pm Know the Basics on EDXL and Why it Matters 2:55pm Actions & Next Steps 3:00pm Adjourned napsgfoundation.org | @napsgfoundation 4 Hosts and Panelists • Charlotte Abel, Strategic Manager, NAPSG Foundation • Harmon Rowland, Section Chief, FEMA National Integration Center • Rebecca Harned, Vice President, 4 Arrows Consulting, Inc. -
GRA Reliable Secure Web Services Service Interaction Profile Version 1.2
GRA Reliable Secure Web Services Service Interaction Profile Version 1.2 Table of Contents Acknowledgements ........................................................................................................................... v Document Conventions .................................................................................................................... vi 1. Introduction and Purpose ..............................................................................................................1 1.1. Profile Selection Guidance .....................................................................................................1 1.2. Usage ....................................................................................................................................1 1.3. Profiles, Standards, and Recommendations ...........................................................................2 1.4. Web Services Interoperability (WS-I) Reliable Secure Profile .................................................2 1.5. Reliable Secure Profile Usage Scenarios ................................................................................3 1.6. Transport Independent Messaging Protocol ...........................................................................3 2. Conformance Requirements ..........................................................................................................4 2.1. Conformance Targets ............................................................................................................4 2.2. -
Emergency Management Standards
Emergency Management Standards HL7 WGM International Council May 2019 Elysa Jones, Chair OASIS Emergency Management Technical Committee Emergency Interoperability Member Section [email protected] Agenda ▪ What is OASIS ▪ Joint work with HL7 - Tracking emergency patients - Hospital availability 2 Internationally recognized ▪ EU classifies OASIS as “one of the top three ICT consortia”. ▪ EU Regulation 1025/2012 allows OASIS specs to be referenced in public procurement ▪ OASIS is permanent member of EC’s European Multi-Stakeholder Platform on ICT Standardization ▪ OASIS TC Process is ANSI-accredited. 3 Established presence, Current agenda ▪ Nonprofit consortium ▪ Founded 1993 ▪ Global 5,000+ participants 600+ orgs & individuals in 100+ countries ▪ Home of 70+ Technical Committees ▪ Broad portfolio of standards: security, privacy, Cloud, M2M, IoT, content technologies, energy, eGov, legal, emergency management, finance, Big Data, healthcare, + other areas identified by members 4 OASIS → de jure OASIS Standard Also Approved As: Advanced Message Queuing Protocol (AMQP) ISO/IEC 19464 ebXML Collaborative Partner Profile Agreement ISO 15000-1 ebXML Messaging Service Specification ISO 15000-2 ebXML Registry Information Model ISO 15000-3 ebXML Registry Services Specification ISO 15000-4 Security Assertion Markup Language (SAML) ITU-T Rec. X.1141 Extensible Access Control Markup Language (XACML) ITU-T Rec. X.1142 OpenDocument Format (ODF) ISO/IEC 26300 Common Alerting Protocol (CAP) ITU-T Rec. X.1303 Computer Graphics Metafile (WebCGM) W3C WebCGM -
Gs Ins 006 V1.1.1 (2011-11)
ETSI GS INS 006 V1.1.1 (2011-11) Group Specification Identity and access management for Networks and Services; Study to Identify the need for a Global, Distributed Discovery Mechanism Disclaimer This document has been produced and approved by the Identity and access management for Networks and Services (INS) ETSI Industry Specification Group (ISG) and represents the views of those members who participated in this ISG. It does not necessarily represent the views of the entire ETSI membership. 2 ETSI GS INS 006 V1.1.1 (2011-11) Reference DGS/INS-006 Keywords access, control, ID, management, network, service ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N° 348 623 562 00017 - NAF 742 C Association à but non lucratif enregistrée à la Sous-Préfecture de Grasse (06) N° 7803/88 Important notice Individual copies of the present document can be downloaded from: http://www.etsi.org The present document may be made available in more than one electronic version or in print. In any case of existing or perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF). In case of dispute, the reference shall be the printing on ETSI printers of the PDF version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at http://portal.etsi.org/tb/status/status.asp If you find errors in the present document, please send your comment to one of the following services: http://portal.etsi.org/chaircor/ETSI_support.asp Copyright Notification No part may be reproduced except as authorized by written permission. -
Extensible Resource Identifier (XRI) Resolution Version 2.0 Committee Draft 02 25 November 2007
Extensible Resource Identifier (XRI) Resolution Version 2.0 Committee Draft 02 25 November 2007 Specification URIs: This Version: http://docs.oasis-open.org/xri/2.0/specs/cd02/xri-resolution-V2.0-cd-02.html http://docs.oasis-open.org/xri/2.0/specs/cd02/xri-resolution-V2.0-cd-02.pdf http://docs.oasis-open.org/xri/2.0/specs/cd02/xri-resolution-V2.0-cd-02.doc Previous Version: N/A Latest Version: http://docs.oasis-open.org/xri/2.0/specs/xri-resolution-V2.0.html http://docs.oasis-open.org/xri/2.0/specs/xri-resolution-V2.0.pdf http://docs.oasis-open.org/xri/2.0/specs/xri-resolution-V2.0.doc Technical Committee: OASIS eXtensible Resource Identifier (XRI) TC Chairs: Gabe Wachob, AmSoft <[email protected]> Drummond Reed, Cordance <[email protected]> Editors: Gabe Wachob, AmSoft <[email protected]> Drummond Reed, Cordance <[email protected]> Les Chasen, NeuStar <[email protected]> William Tan, NeuStar <[email protected]> Steve Churchill, XDI.org <[email protected]> Related Work: This specification replaces or supercedes: • Extensible Resource Identifier (XRI) Resolution Version 2.0, Committee Draft 01, March 2005 • Extensible Resource Identifier (XRI) Version 1.0, Committee Draft 01, January 2004 This specification is related to: • Extensible Resource Identifier (XRI) Syntax Version 2.0, Committee Specification, December 2005 • Extensible Resource Identifier (XRI) Metadata Version 2.0, Committee Draft 01, March 2005 Declared XML Namespace(s) xri://$res xri://$xrds xri://$xrd XRI Resolution 2.0 Committee Draft 02 25 November 2007 Copyright © OASIS® 1993–2007. -
OSCRE Industry Alliance Organizations Synopsis
OSCRE Connecting the Real Estate Industry ALLIANCE ORGANIZATION SYNOPSIS OSCRE is the trading name of OSCRE Americas Inc., part of the OSCRE International global network supporting the Americas. OSCRE Americas Inc. is registered in Washington, District of Columbia. E-mail: [email protected] Web: www.oscre.org © 2003, 2004 OSCRE International. All Rights Reserved. Version History 1.0 Andy Fuhrman March 29, 2004 Document Creation 1.1 Andy Fuhrman April 4, 2004 Incorporated feedback from OSCRE International Executive Board 1.2 Chris Lees May 26, 2004 Section 2: Verbiage Modification OSCRE International OSCRE Americas PISCES Limited 2020 Pennsylvania Avenue, NW 7-8 Greenland Place Box #1024 LONDON, NW1 0AP Washington, DC 20006 www.pisces.co.uk www.oscre.org ALLIANCE ORGANIZATION SYNOPSIS © 2003-2004 OSCRE International. All Rights Reserved. 2 of 46 Contents 1 Mission ................................................................................................... 4 2 Industry Focus ......................................................................................... 4 3 Methodology ............................................................................................ 4 4 Document Purpose ................................................................................... 5 5 About OSCRE........................................................................................... 5 5.1 OSCRE International Executive Board Members ..................................... 6 5.2 Projected OSCRE Timeline ................................................................. -
Extensible Resource Identifier (XRI) Resolution V2.0
1 2 Extensible Resource Identifier (XRI) 3 Resolution V2.0 4 Working Draft 10, 18 March 2006 5 Document identifier: 6 xri-resolution-V2.0-wd-10 7 Location: 8 http://docs.oasis-open.org/xri/xri/V2.0 9 Editors: 10 Gabe Wachob, Visa International <[email protected]> 11 Drummond Reed, Cordance <[email protected]> 12 Les Chasen, NeuStar <[email protected]> 13 William Tan, NeuStar <[email protected]> 14 Steve Churchill, XDI.ORG <[email protected]> 15 Contributors: 16 Dave McAlpin, Epok <[email protected]> 17 Chetan Sabnis, Epok <[email protected]> 18 Peter Davis, Neustar <[email protected]> 19 Victor Grey, PlaNetwork <[email protected]> 20 Mike Lindelsee, Visa International <[email protected]> 21 Abstract: 22 This document defines both generic and trusted HTTP(S)-based resolution protocols for 23 Extensible Resource Identifiers (XRIs) as defined by Extensible Resource Identifier (XRI) 24 Syntax V2.0 [XRISyntax] or higher. For the set of XRIs defined to provide identifier 25 metadata, see Extensible Resource Identifier (XRI) Metadata V2.0 [XRIMetadata]. For a 26 basic introduction to XRIs, see the XRI 2.0 FAQ [XRIFAQ]. 27 Status: 28 This document was last revised or approved by the XRI Technical Committee on the 29 above date. The level of approval is also listed above. Check the current location noted 30 above for possible later revisions of this document. This document is updated periodically 31 on no particular schedule. 32 Technical Committee members should send comments on this specification to the 33 Technical Committee's email list. -
Member of Security Technical Committees Spanning Federated Identity, Key Management, Health Care Privacy
Security Standardization . Oasis Standards Consortium Geneva, 6-7 December Addressing security challenges on a global scale 2010 2 Speaker Anil Saldhana Co-Chair, Oasis Identity In The Cloud TC Member, Oasis IDTrust Steering Committee . Member of Security Technical Committees spanning Federated Identity, Key Management, Health Care Privacy . [email protected] Geneva, 6-7 December Addressing security challenges on a global scale 2010 3 About Oasis “Organization for the Advancement of Structured Information Standards” – Founded in 1993 as SGML Open – Not for profit consortium – Global Representation • 5000+ Participants. • 600+ Organizations/Individual Members. • 100+ Countries. Geneva, 6-7 December Addressing security challenges on a global scale 2010 4 Oasis Member Sections Member Sections include – IDTrust – Egov – Blue (SmartGrids/Intelligent Buildings) – WS-I etc. Geneva, 6-7 December Addressing security challenges on a global scale 2010 5 Oasis IDTrust Member Section Promotes greater understanding and adoption of standards for Identity and Trusted Infrastructure . Technologies, Policies and Practices Geneva, 6-7 December Addressing security challenges on a global scale 2010 6 Oasis IDTrust Member Section Technical Committees Identity Metasystems/Internet Identity . Identity In The Cloud (IDCloud) . Identity Metasystem Interoperability (IMI) . Extensible Resource Identifier(XRI) . XRI Data Interchange (XDI) Geneva, 6-7 December Addressing security challenges on a global scale 2010 7 Oasis IDTrust Member Section Technical Committees Encryption/Key Management . Key Mgmt. Interoperability Protocol (KMIP) . Enterprise Key Mgmt. Infrastructure (EKMI) Geneva, 6-7 December Addressing security challenges on a global scale 2010 8 Oasis IDTrust Member Section Technical Committees Trust/Privacy . Open Reputation Mgmt. Systems (ORMS) . Privacy Mgmt. Reference Model (PMRM) . Digital Signature Services Extended (DSS-X) . -
Ebxml Messaging Service Interaction Profile Version 1.0
Global JRA ebXML Messaging Service Interaction Profile Version 1.0 Table of Contents Acknowledgements .............................................................................................................. iv Document Conventions .........................................................................................................v 1. Introduction and Purpose ................................................................................................. 1 1.1. Profile Selection Guidance ........................................................................................ 3 1.2. Usage ....................................................................................................................... 3 1.3. Namespace References ............................................................................................. 4 2. Conformance Requirements ............................................................................................. 4 2.1. Conformance Targets ............................................................................................... 4 2.2. General Conformance Requirements (Normative) .................................................... 5 2.3. Implementation Notes and Implications (Non-Normative) ........................................ 6 3. Service Interaction Requirements ..................................................................................... 6 3.1.1. Service Consumer Authentication .................................................................. 6 3.1.2. Statement of Requirement -
(GRA) Ebxml Messaging Service Interaction Profile
GRA ebXML Messaging Service Interaction Profile Version 1.1 Table of Contents Acknowledgements .............................................................................................................. iv Document Conventions ........................................................................................................ vi 1. Introduction and Purpose ................................................................................................. 1 1.1. Profile Selection Guidance ........................................................................................ 3 1.2. Usage ....................................................................................................................... 3 1.3. Namespace References ............................................................................................. 4 2. Conformance Requirements ............................................................................................. 4 2.1. Conformance Targets ............................................................................................... 4 2.2. General Conformance Requirements (Normative) .................................................... 5 2.3. Implementation Notes and Implications (Non-Normative) ........................................ 6 3. Service Interaction Requirements ..................................................................................... 6 3.1.1. Service Consumer Authentication .................................................................. 6 3.1.2. Statement of Requirement