OASIS Security Joint Committee (SJC)
Meeting Minutes

Logistics
Business In Order
Action Items & Motions
References


Logistics

Meeting Date 01/09/2003
Meeting Time Time: 12pm EST
Location

Dial-in Number: 405-244-5555
Passcode: 6921#

Call host: Content Guard
Duration 1 Hour
Chair Phil Griffin
Recording Secretary Krishna Sankar
Agenda Agenda available in [1]

Business In Order

1 Roll Call of Voting Member TC's  
  OASIS ebXML CPP/A TC  
(PW) Pete Wenzel, SeeBeyond Absent
  OASIS XACML TC  
(HL) Hal Lockhart, Entegrity Present
(CA) Carlisle Adams, Entrust Present
  OASIS RL TC  
(HR) Hari Reddy, ContentGuard Present
  OASIS XCBF  
(MM) Monca Martin, Certivo Present
  OASIS PS TC  
(DR) Darran Rolls, Waveset Absent
  OASIS DSS TC  
(CA) Robert Zuccherato, Entrust Present
  OASIS WSSL TC  
(PH) Phil Hallam-Baker, Verisign Absent
  OASIS PKI TC  
(TL) Terry Leahy, Wells Fargo Absent
  OASIS LegalXML  
(LP) John Messing Absent
(JC) Jim Cabral, MTG Management Consultants Absent
  Integrated Justice TC  
(JC) Jim Cabral, MTG Management Consultants Absent
  OASIS WSS TC  
(CK) Chris Kaler, Microsoft Absent
(KL) Kelvin Lawrence, IBM Present
  OASIS SS TC  
(RP) Robert Philpott, RSA Present
(PM) Prateek Mishra, Netegrity Absent
  ebXML Reg/Rep TC  
(MM) Monca Martin, Certivo Present
     
  Other Attendees  
(PG) Phil Griffin, Griffin Consulting
Chair
 Present
(KS)

Krishna Sankar, CISCO
OASIS TAB Liasion

 Present
(KB) Karl Best, OASIS
OASIS Director of Operations 		Present


2 Introductions
None

3 Approve minutes from 12/12/02 Committee Meeting - Available at [2]
  Minutes approved.

4 Approve Agenda
  Approved with item 11 for new business

5 Review 12/1/2 Action Items
  All compete.

6 OASIS Forum
PG OASIS Forum on the Direction of Web Services. Need two SJC members to participate in a panel discussion on security. Tuesday,4 March 2003 at XML/Web Services One Conference in Santa Clara, California. Volunteers? None.

7 SJC Positioning re deliverables
KS Stated an opinion that the SJC should not pursue *developing* either of the three projects proposed (vocabulary, common artifacts and framework) as a means of meeting the goals outlined in the SJC charter. The SJC can definitely conceptualize and evangelize these and other relevant deliverables with TCs or sub groups. That definitely falls under the preview of the JC. A related item is the Conceptual Model being developed by TAB.
PG If the SJC would be involved in this work or at least a review of the work and requested that more information be provided?
KS There is a security box in the model and I (Krishna) plan to develop the OASIS Forum presentation based on that model. Will discuss with the JC on this in the coming meetings. JC's review would be appreciated.
KB Purpose of the JC is to coordinate and not to produce any normative deliverables. Anything with normative value should be done by a TC.
Re Glossary, OASIS registry project could also hold the glossary. The glossary would exist in the registry and TC's can add their definitions.
HR How would you validate the information ?
KB The registry would track the submittals. So it is possible to have for example 3 definitions for the same term by three TC's
PG TC's can either accept the definition or offer alternate definitions
?? How can we make suggestions/questions re changes to TC process ?
KB Send queries to Karl
?? One such example is the delay of membership in the JC. The delay makes sense for TC's but not for JC's
PG Question on majority. For example if there are 11 members, what is 2/3 majority?
KB Round up. i.e. the majority of an 11 member committee would be 8

8 SJC F2F Meeting / Joint TC Meeting Proposals
  Decided that there will be no F2F for JC. Phil will explore potential rolling scheme for the various TC's to report to the JC - say two TC's will report their status (10 in) at every meeting

9 Joint OASIS and ITU-T Security Standards
KB Karl explained the background and solicited any feedback/comments. Discussion followed.

10 MoU/MG - Annex A
PG Observed that A.17 is PKI which could be of interest to the PKI TC OASIS should monitor and add references to OASIS TC's as appropriate in the Annex


11 New Business
KB The Kavi system needs to be understood no only by chairs but also by web site maintainers, secretaries et al. Karl discussed the features. Plan to complete installation in 60-90 days. Kavi.com has the demo of the modules. Karl would have the schedule in the next few days. Karl will send out communication to chairs to include other folks in the TC's who need to be involved for training et al. Karl raised the question of participation in an interpretability demo at the Burton conference

12 Motion to adjourn
  Meeting adjourned to reconvene January 9th 2003 at 12 noon EST (M)

Action Items & Motions

  Owner Action Item
     

  Motions  
1 PG motion to adjourned and reconvene January 23rd 203 at 12 noon EST Passed unanimously

References

[1] http://lists.oasis-open.org/archives/security-jc/200301/msg00004.html
[2] http://www.oasis-open.org/committees/security-jc/minutes/minutes12-12-2002.html