" rel="home"><?php print " id="logo-image" />
" rel="home">

" rel="home">

'main-menu', 'class' => 'links clearfix')); ?>

 
Updated 20 April 2001 
  XACML TC
eXtensible Access Control Markup Language

Announcements | Charter | Membership | Mailing Lists | Documents | Schedule and Minutes | Press

This page was last updated 6 May 2001. Please send corrections here.


Announcements

The first meeting will be held via teleconference on 21 May 2001 at 11:00AM Eastern Time.


Charter

The TC was created on April 16th, 2001. The following wording was adopted for TC creation:

The purpose of the XACML TC is to define a core schema and corresponding namespace for the expression of authorization policies in XML against objects that are themselves identified in XML. The schema will be capable of representing the functionality of most policy representation mechanisms available at the time of adoption. It is also intended that the schema be extensible in order to address that functionality not included, custom application requirements, or features not yet envisioned. Issues to be addressed include, but are not limited to: fine grained control, the nature of the requestor, the protocol over which the request is made, content introspection, the types of activities authorized.

To ensure work is not duplicated and standards adoption is as simple as possible, XACML shall adopt as baseline documents the work products of the Security Services TC including but not limited to a Domain Model and Glossary. Furthermore, Use Cases and Requirements documents will share content that is common through normative references. The XACML TC shall keep its work consistent with the work of the Security Services TC by requesting enhancements to, modifications of, and cross-references from Security Services TC documents through a formal liaison with the Security Services TC. This liaison will include the regular sharing of deliverables and status reports during teleconferences or at face-to-face meetings.

The official language of the TC is English.

The official Security Services TC liaisons are as follows:

  • Meeting Liaisons: Krishna Sankar ksankar@cisco.com Backup: fpaynter@sandhilltech.com
  • Domain Model Consistency: Gilbert Pilz, gpilz@jamcracker.com 
  • Glossary Consistency: fpaynter@sandhilltech.com

We know of several additional efforts involving XML and electronic security. For those we deem particularly relevant to our work we have assigned the following liaisons to help ensure interoperability and avoid duplication of work:

  • ebXML: open
  • XKMS: open
  • DSML: open

Membership

Any individual OASIS member or employee of an OASIS member organization may join the TC. Voting and membership rules are documented in the OASIS policy governing technical committees. Contact the TC chair or secretary if you are interested in joining the TC and are eligible to join. A public list of current members is available.

The following TC members have special duties.

  • TC chair: Simon Blackwell, Psoom, Inc.
  • Membership and Recording Secretary: open
  • Coordinating Editor: open
  • Website Maintainer: open
  • Auxiliary Resources and Links Editor: fpaynter@sandhilltech.com
  • Issues list maintainer: open

Also see the liaisons above.


Mailing Lists

Each OASIS technical committee has a discussion list and a comment list. The Security Services TC has the following lists:

  • xacml: Subscription and posting to the TC members' mailing list is open to OASIS members only, but the archives are viewable by the general public. Subscribing to the list does not constitute gaining committee membership; OASIS members must contact the TC chair and secretary to request membership.

  • xacml-comment: Posts to this list can be made by the general public. Posts are automatically forwarded to xacml so that TC members will see all comments.

In addition, the TC's subcommittees have the following discussion lists, which operate under the same access rules as xacml (though it is generally assumed that subscribers are already TC members). the lists without a subscription link are now inactive; those subcommitttees use the main list for discussion.

  • There are currently no additional lists.

Documents

The working documents of the TC can be found in the document repository. The following lists may be slightly out of date; for the latest information, always go to the repository itself.

Committee drafts:

  • None

Submissions and position papers:

  • None

Auxiliary resources and links:

The following U.S. Patents may be relevant to XACML work:
  • 5,715,403 System for controlling the distribution and use of digital works having attached usage rights where the usage rights are defined by a usage rights grammar
  • 5,629,980 System for controlling the distribution and use of digital works
  • 5, 638, 443 System for Controlling the Distribution and Use of Composite Digital Works

The following works have substantial overlap with XACML:

  • XACL http://www.trl.ibm.com/projects/xml/doccont/xacl_e.htm - contributing to XACML
  • XACL http://alphaworks.ibm.com/tech/xmlsecuritysuite - contributing to XACML
  • XrML http://www.xrml.org
  • DPRL http://www.oasis-open.org/cover/DPRLmanual-XML2.html (a precursor to XrML)

The following external resources have been identified as useful for the TC's work:

  • IRTF AAA Architecture group RFCs:
    • RFC 2903: Generic AAA Architecture
    • RFC 2904: AAA Authorization Framework
    • RFC 2905: AAA Authorization Application Examples
    • RFC 2906: AAA Authorization Requirements

TC members should note the following procedure for publishing documents to the repository:

  1. If your submission is covered by the document guidelines, try to ensure that it follows the guidelines (especially regarding file format and file name).

  2. Send mail to the xacml-editors list, attaching the submission and indicating the list(s) to which the eventual URL(s) should be published.

    1. If the submission needs further work with respect to the guidelines, and the folks on the xacml-editors list can't perform this work themselves, they'll return it to you with their requests.

    2. If the submission is (or can be made) ready to go, the editors will put it in the repository and publish the URL.


Schedule and Minutes

The plan is to produce a "substantially complete" draft specification by 21 Dec 2001, with a final version ready to undergo the OASIS member approval process by 22 March 2002. The final version will be accompanied by reference implementations. Below are interim deliverable dates:

  • statement of scope 29 June 2001
  • glossary 29 June 2001
  • bibliography 29 June 2001
  • use cases 24 Aug 2001
  • detailed requirements 21 Sep 2001
  • draft standard 21 Dec 2001
  • model examples for "native" and non-native XML targets of control 21 Dec 2001
  • reference implementations 22 March 2002

Subject to approval during the first teleconference on May 21st, 2001, teleconferences will be held by the full TC on the second Monday of each month at 8AM PST, except when a face-to-face meeting is scheduled during the same week. A face-to-face schedule will be established during the first teleconference on May 21st, 2001. A tentative date for a face-to-face meeting, not the first,  is XML World Sep 30th-Oct 3rd, San Jose, CA. Attendance on these teleconferences and meetings is used to assess good standing. 

The TC has one-hour teleconferences every four weeks from 11:00 AM to 12:00 noon Eastern time. A face-to-face schedule will be established during the first teleconference on May 21st, 2001. 

Following is the TC/Focus meeting schedule. Agendas are tentative. Final agendas for TC teleconferences are sent out one to two business days ahead of time to the xacml-services list. Subsequent update of the links below may be delayed until official meeting minutes are posted:

  • 21 May 2001 agenda

Press

Following are articles about our work:

  • OASIS XACML Announcement 24 April 2001

If you are a journalist or analyst looking for XACML information, please contact:

Carol Geyer
OASIS Director of Communications
carol.geyer@oasis-open.org
Telephone +1.941.926.2322
Fax +1.941.328.0121 x3791


 

TOP OF PAGE