San Francisco, California, USA; 15 July 2002 — The first public demonstration of the OASIS Security Assertion Markup Language (SAML) was held today at the Catalyst Conference in San Francisco. Twelve vendors, including IBM, Novell, Oblix, Sun Microsystems Inc., Baltimore Technologies, CrossLogix, Entegrity Solutions, ePeople, Overxeer, Netegrity, RSA Security, and Sigaba participated in the event, which demonstrated interoperability of SAML 1.0-conformant security software products. “SAML is an important security interoperability initiative,” said James Kobielus, senior analyst at Burton Group. “Most Web access solution vendors have committed resources to the emerging standard and are in the process of implementing SAML 1.0 in the next releases of their products. The OASIS SAML interoperability demonstration proves the standard’s viability in practice.” SAML allows authentication and authorization information to be exchanged among disparate Web access management and security products. The OASIS specification addresses the need for secure single sign-on among diverse Web access management environments implemented across various organizations, applications, Web sites and portals. Defining standardized exchanges of identity and access management information, SAML leverages such Web services standards as XML and SOAP. “Traditionally, security has been implemented within a single enterprise, but companies are now partnering on the Web to expand the scope and range of their e-business transactions. With SAML, application service providers and end-user companies of all sizes can securely exchange information about users, Web services, and authorization information without requiring partners to change their current security solutions,” said Hal Lockhart of Entegrity, member of the OASIS Security Services Technical Committee. He added, “SAML is the common language that defines how different systems can communicate data about security.” “This interoperability demonstration is a milestone in the development and recognition of SAML 1.0 as an open standard,” said Patrick Gannon, president and CEO of OASIS. “The event is a testimony to how the industry has come together to develop SAML and how quickly vendors are implementing it in their products.” The SAML specification has been completed and approved by the OASIS Security Services Technical Committee and is now under review by the OASIS membership at-large for consideration as an OASIS Standard. SAML is one of several security standards being developed at OASIS. Other specifications include WS-Security for high-level security services, XACML for access control, XCBF for describing biometrics data, SPML for exchanging provisioning information, and XrML for rights management. Industry Leaders Support SAML “Access management vendors are rallying around security standards for interoperability across Web services, helping speed the adoption of dynamic e-business applications,” said Arvind Krishna, vice president of security products, Tivoli Software, IBM. “IBM is committed to delivering open standards-based security management that leverages emerging Web services standards like SAML.” “Helping businesses securely connect employees, customers, partners and suppliers across organizational boundaries is at the heart of Novell’s one Net vision; and SAML offers a very promising means to make that vision a reality,” said Winston Bumpus, director of standards for Novell. “As a passionate supporter of many standards development efforts, we’re very pleased to see the cooperation of so many industry leaders in OASIS’ SAML Interoperability Demonstration. This event is a very important step toward the completion and acceptance of the SAML standard, and its potential to improve and secure online business relationships.” “Oblix has always been a strong advocate of open standards, and we are excited to demonstrate our commitment to SAML,” says Nand Mulchandani, Oblix co-founder and chief technology officer. “SAML is another key piece of our comprehensive Federation Services, which facilitates the federation of identity services across corporate boundaries. Our focus continues to be on providing our customers the ability to easily integrate Oblix solutions into their existing environments.” “This is a major step forward for the industry as SAML helps further the evolution of Web services security by enabling heterogeneous interoperability between vender solutions,” said Andy Eliopoulos, director of product marketing, network identity, Sun Microsystems, Inc. “Sun is committed to developing and supporting open standards that enable enterprises to more easily and cost-effectively deploy end-to-end identity services across value networks.” About OASIS OASIS (http://www.oasis-open.org) is a not-for-profit, global consortium that drives the development, convergence and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. OASIS produces worldwide standards for security, Web services, XML conformance, business transactions, electronic publishing, topic maps and interoperability within and between marketplaces. OASIS has more than 400 corporate and individual members in 100 countries around the world. For more information: Carol Geyer Director of Communications OASIS carol.geyer@oasis-open.org +1.978.667.5115 x209

Boston, MA, USA; 18 June 2002 — OASIS, the XML interoperability consortium, today announced its members have formed the OASIS Controlled Trade Markup Language (CTML) Technical Committee to develop an international standard for the tracking of controlled materials as they move through trading processes. CTML will allow governments, industry, and non-governmental organizations to unambiguously identify essential business and legal documents that need to be exchanged, including trade applications, cases, licenses, and delivery verification certificates. “Currently, there is no single, unified, and open means to manage the international transfer of sensitive and strategic goods in a structured and meaningful way,” said Todd Harbour, chair of the OASIS CTML Technical Committee. “CTML will enable both government and industry to share data more efficiently so that companies can remain competitive and governments can protect truly sensitive goods.” Governments and suppliers around the world are participating in CTML development at OASIS. John Borras, Assistant Director of Technology Policy for the United Kingdom’s Office of the e-Envoy, commented, “The area of work being addressed by the OASIS CTML Technical Committee is something which the UK government sees as very important, and we are happy to co-sponsor and support its activities. The more we can standardize the vocabulary in this area, the better it will be for the exchange of information between governments and industry.” Steven Saboe, Director of the Nonproliferation and Disarmament Fund at the US Dept of State, agreed. “Creating the means by which government and industry can communicate to control trade in dangerous materials is a worthwhile goal and strongly supported by the United States government. CTML will serve as a lingua franca, allowing the exchange of vital information in real time–in a way that is cost effective for industry and that, above all, allows governments to assure the safety of their citizens.” CTML will incorporate features of other XML business vocabularies and provide a clearly articulated interface to mutually supporting specifications. The OASIS CTML Technical Committee will align its work with other OASIS libraries and frameworks, such as ebXML, Universal Business Language (UBL), Business Transactions Protocol (BTP), and Customer Information Quality (CIQ). Participation in the OASIS CTML Technical Committee remains open to all organizations and individuals interested in advancing a unified trade control vocabulary. OASIS will host an open mail list for public comment on CTML, and completed work will be freely available to the public without licensing or other fees. Information on joining OASIS can be found on http://www.oasis-open.org/join. About OASIS (http://www.oasis-open.org) OASIS (Organization for the Advancement of Structured Information Standards) is a not-for-profit, global consortium that drives the development, convergence and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. OASIS produces worldwide standards for security, Web services, XML conformance, business transactions, electronic publishing, topic maps and interoperability within and between marketplaces. OASIS has more than 400 corporate and individual members in 100 countries around the world. OASIS and the United Nations jointly sponsor ebXML, a global framework for e-business data exchange. OASIS operates XML.org, a community clearinghouse for XML application schemas, vocabularies and related documents. OASIS hosts The XML Cover Pages, an online reference collection for interoperable markup language standards. For more information: Carol Geyer Director of Communications OASIS www.oasis-open.org carol.geyer@oasis-open.org +1.978.667.5115 x209

Boston, MA, USA; 29 May 2002 — Three OASIS Committee Specifications, Directory Services Markup Language (DSML) v2, ebXML Registry Service (RS) v2, and ebXML Registry Information Model (RIM) v2, have passed final approval by the OASIS membership at-large to gain official status as OASIS Standards. To reach this milestone, each of these new standards have been approved by their respective OASIS technical committees, implemented by a minimum of three organizations, completed a 90-day review, and passed a final vote from the OASIS membership at-large. “The OASIS technical process is a creative environment in which to build elegant specifications that solve real industry problems,” said Colin Evans of Intel Labs, chair of the OASIS Board of Directors. “We congratulate and thank members of the OASIS Directory Service Markup Language Technical Committee and the OASIS ebXML Registry Technical Committee for all their outstanding efforts in advancing these new OASIS Standards.” “We are pleased at the member approval of DSML v2 as an OASIS Standard,” commented Winston Bumpus of Novell, co-chair of the OASIS Directory Services Technical Committee. He explained that DSML provides a means of representing directory information in XML, enabling access to directory information for XML applications, cell phones and PDAs. “DSMLv2 is needed to extend the reach of directories into the emerging world of Web services.” ebXML RS and ebXML RIM allow information to be shared between interested parties through common registries. OASIS ebXML Registry Technical Committee chair, Kathryn R Breininger of Boeing, said, “The passage of the ebXML Registry Information Model and the ebXML Registry Services as OASIS Standards demonstrates the confidence the OASIS community has in our work. We look forward to moving forward with ebXML Registry standards, working with related efforts, and continuing to enable e-business functionality and interoperability.” Members of the OASIS ebXML Registry Technical Committee include Boeing, Intel, IONA, Logistics Management Institute, NIST, Sterling Commerce, Sun Microsystems, Vitria Technology, and others. Members of the OASIS DSML Technical Committee include Access360, Novell, and others. Industry Support for New OASIS Standards “As the security framework of eBusiness continues to evolve, standard directory access grows more and more important for conducting provisioning events within the internal and external enterprise environments. Business Layers believes that Directory Services Markup Language (DSML) will help companies leverage the use of directory information expressed as XML and in turn will help drive the efforts of extending LDAP directories to XML-based applications. The combined benefits of both technologies will create a powerful open infrastructure for greater interoperability in the enterprise,” said Adrian Viego, Chief Technology Officer of Business Layers. “The approval of the DSML and ebXML Registry (RS and RIM) specifications as OASIS Standards is a positive step toward the achievement of truly open and interoperable business-to-business collaboration,” said Eric Newcomer, Chief Technology Officer, IONA. “We’re extremely proud of our contribution and leadership in defining Web Services related support in the ebXML Registry and are dedicated to the evolution of ebXML and the success of OASIS.” “Novell has long been an active supporter of open standards, because of the value of those standards in helping companies realize Novell’s one Net vision – where intranets, extranets and the Internet work together as one,” said Gary Hein, Vice President of Architecture and Strategy for Novell. “In that spirit, we’re very pleased to have been involved in the development of DSML v2, which will help establish the role of directories in the emerging world of Web services.” “LMI strongly supports the efforts of OASIS and the OASIS ebXML Technical Committees. We are pleased with the tremendous opportunities the ebXML Registry specifications provide to achieve true interoperability in international business information exchanges, and we look forward to helping our U.S. Government clients in implementing registries that are fully compatible with these specifications,” said Mark Crawford, Research Fellow, Logistics Management Institute. About OASIS (http://www.oasis-open.org) OASIS is a not-for-profit, global consortium that drives the development, convergence and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. OASIS produces worldwide standards for security, Web services, XML conformance, business transactions, electronic publishing, topic maps and interoperability within and between marketplaces. OASIS has more than 400 corporate and individual members in 100 countries around the world. OASIS and the United Nations jointly sponsor ebXML, a global framework for e-business data exchange. OASIS operates XML.org, a community clearinghouse for XML application schemas, vocabularies and related documents. OASIS hosts The XML Cover Pages, an online reference collection for interoperable markup language standards. For more information: Carol Geyer Director of Communications OASIS www.oasis-open.org carol.geyer@oasis-open.org +1.978.667.5115 x209

Boston, MA, USA; 17 May 2002 — The Interoperability Summit Series gains momentum as standards developers from around the world make plans to gather in Orlando, Florida, 27-28 June 2002 and advance their mission of collaboration. Hosted by HR-XML, OASIS, OMG ™, and XBRL, the Interoperability Summit brings industry groups, consortia and their members together in an ongoing initiative to coordinate development of electronic business specifications. Building on core issues identified at the first Summit meeting last December, the June event will focus on removing barriers to interoperability and managing against duplication of effort. Several tactics for encouraging real collaboration between e-business standards groups were targeted in the first meeting, and Interoperability Summit participants now plan to actively move forward to implement solutions. “The multi-lateral, neutral forum provided by the Interoperability Summit offers a great opportunity for standards bodies and industry consortia to share information, explore synergies and zero in on areas where convergence makes sense,” said program co-chair, Karl Best, director of technical operations for OASIS. Best is spearheading the Interoperability Summit’s effort to create a set of common metadata for use in standards registries around the world. Agreeing on metadata to describe completed standards, as well as specifications in-progress, will make it easier for developers to recognize and avoid potentially duplicative efforts. The June Interoperability Summit will also focus on the various initiatives underway to define core vocabularies and related best practices for enabling e-business, including: * UN/CEFACT’s eBusiness Transition Working Group (eBTWG) * ASC X12’s E-Business Cross-Industry XML architecture * OASIS Universal Business Language (UBL) Technical Committee * Open Applications Group Integration Specification * OMG’s Model Driven Architecture Initiative “We appreciate that it is not realistic to define one best approach or a single library of business documents that will meet everyone’s needs,” explained Interoperability Summit co-chair, Karen Larkowski, executive vice president of The Standish Group. “The output of these initiatives affects the entire e-business standards community, however, and clarifying the goals, timelines, and scope connected with each project will benefit us all.” As an outcome of the first Summit, organizers, HR-XML, OASIS, OMG, and XBRL, have created the Interoperability Pledge, which recognizes the need to identify intersections between major horizontal and vertical standards and promote acceptance of common models and approaches. Any organization interested in advancing interoperability between standards is invited to join in this Pledge at http://www.omg.org/interoperability_pledge.htm. Program and registration details for the Interoperability Summit are posted at http://www.omg.org/interop/program.htm. About HR-XML HR-XML (http://www.hr-xml.org) is a global, independent, non-profit consortium dedicated to enabling e-commerce and inter-company exchange of human resources (HR) data worldwide. The work of the Consortium centers on the development and promotion of standardized XML vocabularies for HR. HR-XML’s current efforts are focused on standards for staffing and recruiting, compensation and benefits, training and work force management. HR-XML is represented by its membership in 17 countries. About OASIS OASIS (http://www.oasis-open.org) is a not-for-profit, global consortium that drives the development, convergence and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. OASIS produces worldwide standards for security, Web services, XML conformance, business transactions, electronic publishing, topic maps and interoperability within and between marketplaces. About OMG With well-established standards covering software from design, through development, to deployment and maintenance, the Object Management Group (OMG) supports a full-lifecycle approach to enterprise integration. Based on the established Object Management Architecture (OMA) and emerging Model Driven Architecture (MDA), OMG’s standards cover application design and implementation. OMG’s Modeling standards include the UML (Unified Modeling Language) and CWM (Common Warehouse Metamodel). CORBA, the Common Object Request Broker Architecture, is OMG’s standard open platform. OMG also issues the CORBAservices and a rapidly growing set of industry-specific standards in vertical markets including healthcare, telecommunications, biotechnology, transportation and a dozen other areas. The OMG is headquartered in Needham, MA, USA, with an office in Tokyo, Japan as well as international marketing offices in the UK and Germany, along with a U.S. government representative in Washington, DC. About XBRL XBRL (www.xbrl.org) is an international group developing the eXtensible Business Reporting Language (XBRL), an XML-based framework for the preparation and exchange of business reports and data. The initial goal of XBRL is to provide an XML-based framework that the global business information supply chain will use to create, exchange, and analyze financial reporting information including, but not limited to, regulatory filings such as annual and quarterly financial statements, general ledger information, and audit schedules. For more information: Carol Geyer Director of Communications OASIS carol.geyer@oasis-open.org +1.941.284.0403

Geneva, Switzerland and Boston, MA, USA; 2 May 2002 — “Implementing ebXML” provides the focus for a new conference sponsored jointly by OASIS and UN/CEFACT in Barcelona, Spain on 23 May 2002. Highlighting the growing use of ebXML in a range of industries as well as ebXML’s role in Web services, the one-day conference will be held in conjunction with IDEAlliance’s XML Europe 2002 show. The ebXML conference is expected to draw developers and business managers from around the world who are interested in implementing ebXML’s modular suite of specifications for conducting business over the Internet. “Implementing ebXML” will offer technical guidance on how to adopt the UN/CEFACT and OASIS ebXML standards for exchanging business messages, conducting trading relationships, communicating data in common terms and defining and registering business processes. Attendees will also hear about the general business benefits of managing electronic commerce through ebXML from existing ebXML end users and software suppliers. Keynote presentations from Isidro Laso of the European Commission and Ray Walker, Special Advisor on Trade Processes and Electronic Business for the United Kingdom Department of Trade and Industry, will be featured at “Implementing ebXML.” The program will also include updates from ebXML users in the finance, insurance, retail sales, e-commerce and automotive industries. Representatives of the United Nations, EAN International, Uniform Code Council (UCC), Standards for Technology in Automotive Retail (STAR), Pan Asian e-Commerce Alliance, Sun Microsystems, Microsoft, IONA, Cyclone Commerce, Sybase, Sterling Commerce, XML Global, and others will present. “Adoption of ebXML and concurrent realization of business benefits has been growing — especially in Europe– since the completion of the first phase of ebXML last May,” said Simon Nicholson of Sun Microsystems, chair of the UN/CEFACT-OASIS Joint Coordination Committee for ebXML and chair of “Implementing ebXML” at XML Europe. “The breadth and quantity of industry groups, governments, vendors and major companies that are coming together to share their experiences at this conference is a testament to the momentum that’s building in the marketplace.” “ebXML Day offers a great opportunity to gain valuable insight from ebXML implementers as they share tips, guidelines, and lessons learned,” added Patrick Gannon, president and CEO of OASIS. “The program will explore how ebXML is being used to facilitate Web services with the support of global product vendors and the backing of major standards-setting bodies.” “Implementing ebXML” http://www.xmleurope.com/2002/ebxmlday.asp will be open to all XML Europe 2002 attendees, as well as to those who would like to register for the one-day conference separately. In addition to the “Implementing ebXML” conference, UN/CEFACT will be hosting a series of ebXML working group meetings the week of 20-24 May 2002 at the World Trade Center in Barcelona. About ebXML ebXML (www.ebXML.org), sponsored by UN/CEFACT and OASIS, is a modular suite of specifications that enables enterprises of any size and in any geographical location to conduct business over the Internet. Using ebXML, companies now have a standard method to exchange business messages, conduct trading relationships, communicate data in common terms and define and register business processes. UN/CEFACT (www.uncefact.org) is the United Nations body whose mandate covers worldwide policy and technical development in the area of trade facilitation and electronic business. OASIS (http://www.oasis-open.org) is a not-for-profit, global consortium that drives the development, convergence and adoption of e-business standards. For more information: Carol Geyer Director of Communications OASIS carol.geyer@oasis-open.org +1.978.667.5115 x209

Boston, MA, USA; 19 April 2002 — ACORD, the insurance industry standards organization, has become the latest industry group to appoint a representative to the OASIS Universal Business Language (UBL) Technical Committee. ACORD joins liaisons from a broad group of industry standards organizations in the subcommittee that provides guidance to UBL, the initiative to define standard XML business forms for electronic commerce. “ACORD has been a long time advocate of working with other organizations to achieve interoperability across industries,” said Gregory Maciag, CEO of ACORD. “Insurance is not only a vertical market, but also an integral part of international supply chain management. The UBL effort brings together major players in the standards arena to develop ebXML compliant solutions. This is very important to our industry.” Other organizations with liaisons to UBL include: ARTS, representing retail sales; ASC X12, representing EDI standards; EIDX, representing the electronics industry; RosettaNet, the information technology consortium; and XBRL, the accounting industry standards organization. UBL liaisons provide input to UBL and coordinate the review of standard XML business schemas as they become publicly available. “Input from these pivotal industry groups ensures that UBL reflects the needs of the marketplace,” said Jon Bosak of Sun Microsystems, chair of the OASIS UBL Technical Committee and organizer of the working group that created XML. “Our goal of defining a common XML library for basic business documents like purchase orders, invoices, and shipping notices crosses all industries. Contributing to the development of UBL gives industry groups the opportunity to shape the outcome of our work together.” About UBL (http://oasis-open.org/committees/ubl) The OASIS UBL (Universal Business Language) Technical Committee is an open, publicly accountable, nonprofit initiative to define a common XML library for basic business documents like purchase orders, invoices, and shipping notices. UBL provides a standard set of XML building blocks together with a framework that will enable trading partners to unambiguously identify and exchange basic e-commerce documents in specific business contexts. The OASIS UBL effort builds on the Electronic Business XML (ebXML infrastructure developed by OASIS and the United Nations. The ebXML specifications provide for XML registry services, reliable XML messaging, standardized trading partner agreements, a standard data dictionary, and a business context methodology. However, UBL documents are usable in a wide variety of other ecommerce frameworks as well. UBL unites and harmonizes a number of currently existing XML and EDI business libraries into a set of internationally recognized de jure standards. Designed to solve major interoperability problems for both vendors and users, UBL will speed the entry of small and medium-size businesses into the electronic marketplace. UBL is freely available to everyone without legal encumbrance or licensing fees. About ACORD (www.acord.org) ACORD (Association for Cooperative Operations Research and Development) is a global, nonprofit insurance association whose mission is to facilitate the development and use of standards for the insurance, reinsurance, and related financial services industries. With offices in Belgium, the United Kingdom, and the United States, ACORD accomplishes its mission by remaining an objective, independent advocate for sharing information among diverse platforms. Affiliated with ACORD are hundreds of insurance and reinsurance companies and thousands of agents and brokers, related financial services organizations, software providers, and industry organizations worldwide. About ARTS (www.nrf-arts.org) The Association for Retail Technology Standards (ARTS), a division of the National Retail Federation (NRF), is dedicated to the creation of an international, barrier-free technology environment for retailers. The National Retail Federation (NRF) is the world’s largest retail trade association, with membership that comprises all retail formats and channels of distribution, including department, specialty, discount, catalog, Internet, and independent stores. NRF members represent an industry that encompasses more than 1.4 million U.S. retail establishments with aggregate annual sales of more than $3.4 trillion. NRF’s international members operate stores in more than 50 nations. In its role as the retail industry’s umbrella group, NRF also represents 32 national and 50 state associations in the U.S. as well as 36 international associations representing retailers abroad. About ASC X12 (www.x12.org) The Accredited Standards Committee (ASC) X12, accredited by the American National Standards Institute and comprised of cross-industry representation, develops robust e-business exchange specifications and electronic data interchange standards that interact with a multitude of e-commerce technologies and serve as the premier tool for integrating electronic applications. Through standards setting and active participation in emerging and technically relevant initiatives, ASC X12 facilitates the effective exchange of electronic information. Propelling global e-business, ASC X12 serves as the entry point for the United States into the United Nations/Electronic Data Interchange for Administration, Commerce and Transport (UN/EDIFACT), an international standard relating to the exchange of trade goods and services. About EIDX (www.eidx.org) The Electronics Industry Data Exchange Association (EIDX) is a section of the Computing Technology Industry Association (CompTIA) that represents the majority of companies in the electronics industry. EIDX researches and develops information exchange methodologies for the electronics industry and develops and publishes business models and standards implementation guidelines that represent current and emerging practices. About RosettaNet (www.rosettanet.org) RosettaNet is an independent, self-funded, non-profit consortium dedicated to the development and deployment of standard electronic business interfaces to align the processes between supply chain partners on a global basis. More than 250 companies representing more than $1 trillion in annual information technology and electronic components revenues, currently participate in RosettaNet’s standards development, strategy, and implementation activities. About XBRL (www.xbrl.org) XBRL is an international consortium comprising accounting standards bodies, accounting firms, technology companies, financial information providers, corporations, and government regulatory bodies. The XBRL standard is freely licensed and permits the automatic exchange and reliable extraction of financial information across all software formats and technologies, including the Internet. XBRL does not require a company to disclose any additional information beyond that which they normally disclose under existing accounting standards, nor does it require a change to existing accounting standards. About OASIS (http://www.oasis-open.org) OASIS (Organization for the Advancement of Structured Information Standards) is a not-for-profit, global consortium that drives the development, convergence and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. OASIS produces worldwide standards for security, Web services, XML conformance, business transactions, electronic publishing, topic maps and interoperability within and between marketplaces. OASIS has more than 400 corporate and individual members in 100 countries around the world. OASIS and the United Nations jointly sponsor ebXML, a global framework for e-business data exchange. OASIS operates XML.org, a community clearinghouse for XML application schemas, vocabularies and related documents. OASIS hosts The XML Cover Pages, an online reference collection for interoperable markup language standards. For more information: Carol Geyer Director of Communications OASIS www.oasis-open.org carol.geyer@oasis-open.org +1.978.667.5115 x209

Boston, MA, USA; 2 April 2002 — OASIS, the XML interoperability consortium, today announced its members have formed the OASIS Rights Language Technical Committee to advance a common XML rights language standard for the digital rights management (DRM) marketplace. Their work will provide a universal method for specifying and managing rights associated with all kinds of resources including digital content and web services. The OASIS specification will support a wide variety of business models, expressing both simple and complex rights and promoting interoperability between systems regardless of platform, media type or format. “There is a significant need across many industries for DRM standards to assist institutions in managing their digital assets such as content or web services”, said Hari Reddy of ContentGuard, chair of the OASIS Rights Language Technical Committee. “Our work in establishing a standard rights language will address the need for interoperability between the components and systems that manage the creation, distribution and consumption of digital assets within and across different industries.” ContentGuard intends to submit its eXtensible rights Markup Language(tm) (XrML(tm)) to the 0ASIS Rights Language Technical Committee as a starting point for this work. XrML, recently selected as the base architecture for the MPEG-21 Rights Expression Language, can be used in content-centric as well as service-based business models. “The use of DRM technologies for the distribution of content and services holds great potential, and putting DRM-related standards in place is essential for the success of DRM, ” said Joshua Duhl, an IDC Contributing Analyst. “The contribution of XrML to OASIS is an important step in establishing a standard rights language for DRM.” Members of the OASIS Rights Language Technical Committee include ContentGuard, Hewlett-Packard Company, Microsoft, Reuters, VeriSign Inc., and other OASIS members. Participation remains open to all organizations and individuals interested in advancing a common rights language. Information on joining OASIS can be found on http://www.oasis-open.org/join. “The OASIS Rights Language Technical Committee is an important step towards consistency in the area of rights expression — a key to establishing interoperability for DRM systems and services,” said John Erickson, systems program manager for digital rights management, HP Labs. “HP has been involved in a number of industry initiatives that are crucial to the evolution of DRM and is pleased to be a sponsoring member of this technical committee.” About OASIS OASIS (www.oasis-open.org), a not-for-profit, global consortium, drives the development, convergence and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. OASIS is the home for XML conformance, Web services, security, business transactions, electronic publishing, topic maps and other interoperability specifications development. OASIS has more than 400 corporate and individual members in 100 countries around the world. OASIS and the United Nations jointly sponsor ebXML, a global framework for e-business data exchange. OASIS operates XML.org, a community clearinghouse for XML application schemas, vocabularies and related documents. OASIS hosts The XML Cover Pages, an online reference collection for interoperable markup language standards. For more information: Carol Geyer Director of Communications OASIS carol.geyer@oasis-open.org +1.978.667.5115 x209

Washington, D.C., 28 March 2002 — Standards group, LegalXML, joined the OASIS interoperability consortium today, in a move that aligns the development of specifications for legal data exchange with the global standards community at-large. By migrating its work to OASIS, LegalXML secures its representation within the consortium known for setting adoptable worldwide standards for electronic business, Web services and security. The alliance brings new resources and international awareness to LegalXML’s work on specifications for electronic court filing, court documents, legal citations, transcripts, criminal justice intelligence systems, and others. “This is an important move for LegalXML,” said James I. Keane, co-chair of the eLawyering Task Force of the American Bar Association Law Practice Management Section. “Operating within OASIS, LegalXML gains close ties to the major global standards-setting bodies. Existing OASIS members, representing some of the largest and most innovative companies in the world, will now be able to actively contribute to the work of LegalXML.” “OASIS has the experience, the technology and the support environment that is essential for the successful development of XML standards,” said Don Bergeron, chair of the LegalXML Steering Committee. “Being in the mainstream of OASIS, LegalXML participants take advantage of a tried-and-true technical process and track record of successful adoption. OASIS provides the infrastructure we need, so we can focus all our energies on developing standardized structures, vocabularies and data exchange tools for the legal community.” Under the new organizational structure, members of LegalXML will join OASIS and be eligible to contribute to all OASIS technical work. Existing OASIS members will have the option to participate in LegalXML without additional membership dues. “In today’s economy, it’s not practical to expect companies to join a multitude of consortia in order to participate in all the relevant standards development being done. OASIS is one organization with many opportunities for involvement,” explained Patrick Gannon, OASIS president and CEO. “LegalXML expands the breadth of our technical agenda in an exciting way. We welcome LegalXML participants to our community of developers and look forward to sharing new approaches, methods, and insights with one another.” Members of the LegalXML Steering Committee within OASIS include Donald Bergeron of Lexis-Nexis, Toby Brown of the Utah State Bar, Rolly Chambers of Smith, Currie & Hancock LLP, John Greacen, Esq. of Grecean Associates, Daniel Greenwood, Esq. of the Massachusetts Institute of Technology, Jim Keane, Esq. of JKeane.Pro, Eddie O’Brien of Ringtail Solutions, and Dave Roberts of the SEARCH National Consortium for Justice Information and Statistics. OASIS will host open mail lists for public comment on LegalXML technical committees, and completed work will be freely available to the public without licensing or other fees. The LegalXML website will continue to be maintained by OASIS. LegalXML was founded in November 1998 as a non-profit organization to bring legal and technical experts together to create standards for the electronic exchange of legal data. The OASIS LegalXML Member Section will continue this work to serve as an open forum for the legal domain to share ideas and experiences associated with XML and related core standards. LegalXML participants include lawyers, developers, application vendors, government agencies and members of academia. About OASIS OASIS (www.oasis-open.org), a not-for-profit, global consortium, drives the development, convergence and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. OASIS is the home for XML conformance, Web services, security, business transactions, electronic publishing, topic maps and other interoperability specifications development. OASIS has more than 400 corporate and individual members in 100 countries around the world. OASIS and the United Nations jointly sponsor ebXML, a global framework for e-business data exchange. OASIS operates XML.org, a community clearinghouse for XML application schemas, vocabularies and related documents. OASIS hosts The XML Cover Pages, an online reference collection for interoperable markup language standards. For more information: Carol Geyer Director of Communications OASIS carol.geyer@oasis-open.org +1.978.667.5115 x209

Boston, MA, USA; 7 March 2002 — OASIS, the interoperability consortium, today announced that its members have formed the OASIS XML Common Biometric Format (XCBF) Technical Committee to provide a standard XML schema for biometrics. XCBF will describe information that verifies identity based on human characteristics such as DNA, fingerprints, iris scans, and hand geometry. XCBF will be used in biometric applications that measure attendance, grant access control to documents or other resources, and facilitate non-repudiation in commerce, particularly over open networks. “Biometrics, in essence ‘what you are,’ are destined to replace ‘what you know’ items, such as PIN numbers, and to augment ‘what you have’ forms of identification, such as cards,” explained Phillip H. Griffin of Griffin Consulting, chair of the OASIS XCBF Technical Committee. “Existing biometric standards use binary encoding formats, which severely limit their use in XML systems and applications. XCBF will provide a standard way for biometric functions to be done using XML.” The charter of the OASIS XCBF Technical Committee is to define a set of XML encodings for the Common Biometric Exchange File Format (CBEFF), which describes data elements necessary to support biometric technologies in a standard way. Universal type definitions will allow biometric data to be validated and exchanged without ambiguity. The exact values specified in CBEFF binary encodings will be used in XCBF XML representations. CBEFF is a draft of the American National Standards Institute (ANSI), managed and maintained currently by the National Institute of Standards Technology (NIST). “The message syntax for transferring information across the Internet seems to be focused on XML-based dialects, and biometric information is no different in this respect. What’s critically important is that XCBF meets the American National Standard X9.84 security requirements regarding the authenticity and integrity of biometric data. By basing this XML work on the schema and security mechanisms defined in X9.84, it should be possible for XCBF to meet these requirements,” said Jeff Stapleton of KPMG LLP, chair of the X9F4 working group of the X9 Accredited Standards Committee (ASC) of ANSI. “XCBF is another example of OASIS’ commitment to cross-consortia collaboration,” noted Karl Best, OASIS director of technical operations. “The work at OASIS builds on development from CBEFF and ANSI, bringing our XML expertise to advance a global solution. All processing and security requirements used by this OASIS technical committee will be harmonized with standardization of the XML formats of messages undertaken by ANSI X9F working groups.” Participation in the OASIS XCBF Technical Committee remains open to all organizations and individuals interested in advancing a standard XML schema for biometrics. OASIS will host an open mail list for public comment on XCBF, and completed work will be freely available to the public without licensing or other fees. Information on joining OASIS can be found on http://www.oasis-open.org/join. About OASIS OASIS, a not-for-profit, global consortium, drives the development, convergence and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. OASIS is the home for XML conformance, Web services, security, business transactions, electronic publishing, topic maps and other interoperability specifications development. OASIS has more than 400 corporate and individual members in 100 countries around the world. OASIS and the United Nations jointly sponsor ebXML, a global framework for e-business data exchange. OASIS operates XML.org, a community clearinghouse for XML application schemas, vocabularies and related documents. OASIS hosts The XML Cover Pages, an online reference collection for interoperable markup language standards. For more information: Carol Geyer Director of Communications OASIS www.oasis-open.org carol.geyer@oasis-open.org +1.978.667.5115 x209

Boston, MA, USA; 25 February 2002 — OASIS, the XML interoperability consortium, today announced it has entered into a liaison relationship with the International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) Joint Technical Committee One on Information Technology. The relationship will allow representatives from each group to participate in the standards development work of the other. ISO/IEC JTC1/SC34, the JTC1 subcommittee for Document Description and Processing Languages, has joined OASIS as a contributor, and OASIS has become an ISO/IEC Category A Liaison member. “This is a wonderful opportunity for two organizations with a long history of commitment to structured data to cooperate,” said Dr. James David Mason, chairman of the ISO/IEC JTC1/SC34. “Mutual participation between JTC 1 and OASIS will result in synergistic effects. OASIS already has developed specifications that may be good candidates for JTC 1 standardization. Likewise, there are a number of ways OASIS can support existing ISO/IEC standards.” As examples of current collaborations, Mason points to RELAX NG, an XML schema language that was developed at OASIS and is currently under consideration as an ISO/IEC standard. Conversely, XML Topic Maps, a JTC 1 Standard (ISO/IEC 13250:2000) that provides a model for organizing, retrieving and navigating information resources, is now being advanced within OASIS. “The task of providing interoperable specifications demands cooperation between the international standards-setting bodies. Broadening our collaborative relationship with JTC 1 minimizes the risk of divergent and competitive approaches to standardization and avoids duplication of efforts and confusion among users,” said Karl Best, director of technical operations at OASIS. “Sharing information, OASIS technical committees and JTC 1 working groups can promote convergence where appropriate and advance the interests of the marketplace at-large.” This announcement follows recent news that OASIS has joined in a Memorandum of Understanding (MoU) on Electronic Business with ISO, IEC, the International Telecommunication Union (ITU), and the United Nations Economic Commission for Europe (UN/ECE). Working together, the groups plan to increase coordination across many different international programs for more efficient standards development and more rapid adoption in the global marketplace. About OASIS OASIS (www.oasis-open.org), a not-for-profit, global consortium, drives the development, convergence and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. OASIS is the home for XML conformance, Web services, security, business transactions, electronic publishing, topic maps and other interoperability specifications development. OASIS has more than 400 corporate and individual members in 100 countries around the world. OASIS and the United Nations jointly sponsor ebXML, a global framework for e-business data exchange. OASIS operates XML.org, a community clearinghouse for XML application schemas, vocabularies and related documents. OASIS also hosts The XML Cover Pages, an online reference collection for interoperable markup language standards. About ISO Established in 1947, ISO’s mission is to promote the development of standardization and related activities in the world with a view to facilitating the international exchange of goods and services, and to developing cooperation in the spheres of intellectual, scientific, technological and economic activity. About IEC Founded in 1906, the IEC is the global organization that prepares and publishes international standards for all electrical, electronic and related technologies. Its membership consists of more than 60 participating countries, including all the world’s major trading nations and a growing number of industrializing countries. For more information: Carol Geyer Director of Communications OASIS carol.geyer@oasis-open.org

Boston, MA, USA; 13 February 2002 — OASIS, the XML interoperability consortium, today announced its members have formed two new technical committees to advance the XML Topic Maps specification (ISO/IEC 13250:2000) for organizing, retrieving and navigating information resources. The OASIS Vocabulary for XML Standards and Technologies (XMLvoc) Technical Committee will define the essential subjects needed to create interchangeable ontologies for the XML domain. The OASIS Published Subjects for Geography and Languages (GeoLang) Technical Committee will define sets of published subjects for languages, countries, and regions. Both new technical committees will advance the topic maps model, which provides a ‘knowledge layer’–independent of the information resources themselves–to capture and manage corporate memory, improve indexing and enable the integration of information that spans multiple, disparate repositories. Applications include subject classification, search and retrieval tools, portals, semantic Web, and knowledge management. According to Debra Logan, senior research analyst at Gartner, “Any enterprise that has invested time and effort in searching for information resources online and needs a way to capture the output of that search will have a use for topic maps. Because the paradigm is powerful, flexible and extensible, topic maps will become a mainstream technology by 2003.” “XMLvoc will provide a reference set of concept and relationship types that will enable common access layers, making it easier to locate all types of information on XML,” explained Dr. H. Holger Rath of empolis, chair of the OASIS XMLvoc Technical Committee. “Our work will allow information providers all over the world to create XML-related topics maps that can be merged and interoperate with one another. XMLvoc also will make it possible to collaboratively develop overarching indexes that improve accessibility to all aspects of XML, its related specifications, the communities that use it, the tools that support it, and the companies that provide services and expertise around it.” Lars Marius Garshol, chair of the OASIS GeoLang Technical Committee, observed, “Languages, countries, and regions are subjects that occur frequently across a wide range of topic maps. GeoLang’s published subjects will establish the foundation for internationalization of topic maps, and ensure that topic maps referring to these key subjects will merge correctly. Our group will update and extend existing topic maps work using code sets defined by recognized standards bodies such as ISO and the United Nations.” Users around the world welcome these development efforts at OASIS. “Topic maps will become an essential part of the added value that commercial publishers apply to their content,” says Ton Schoonderbeek, CTO of Wolters Kluwer – Law, Tax and Business Europe. “Standardized subjects from the various application domains will ensure the return on our investments for topic maps. We greatly appreciate the topic map initiatives for vertical markets.” Members of the new OASIS Topic Maps Technical Committees include consortium sponsors, empolis, Innodata, Reuters, and other OASIS members. Participation remains open to all organizations and individuals interested in advancing the topic maps navigation model. Information on joining OASIS can be found on http://www.oasis-open.org/join. OASIS will host open mail lists for public comment on XMLvoc and GeoLang, and completed work will be freely available to the public without licensing or other fees. “I am looking forward to the outcome of the XMLvoc TC that will result in ontologies becoming interchangeable and robust. These groundbreaking developments are especially important for ontologies in the IT domain of XML standards and technologies,” stated Dr. Stefan Wess, empolis CTO. Dr. H. Holger Rath, empolis Director of R&D and chair of the XMLvoc TC added, “The results of the TC will be a significant step towards global knowledge interchange.” About OASIS OASIS (www.oasis-open.org), a not-for-profit, global consortium, drives the development, convergence and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. OASIS is the home for XML conformance, Web services, security, business transactions, electronic publishing, topic maps and other interoperability specifications development. OASIS has more than 400 corporate and individual members in 100 countries around the world. OASIS and the United Nations jointly sponsor ebXML, a global framework for e-business data exchange. OASIS operates XML.org, a community clearinghouse for XML application schemas, vocabularies and related documents. OASIS also hosts The XML Cover Pages, an online reference collection for interoperable markup language standards. For more information: Carol Geyer Director of Communications OASIS carol.geyer@oasis-open.org +1.978.667.5115 x209

Geneva, Switzerland and Boston, MA, USA; 11 February 2002 — OASIS, the XML interoperability consortium, joined the four International Standards Organizations in a Memorandum of Understanding (MoU) on Electronic Business. Founding members of the MoU include the International Electrotechnical Commission (IEC), the International Organization for Standardization (ISO), the International Telecommunication Union (ITU), and the United Nations Economic Commission for Europe (UN/ECE). As the newest invited member of the MoU, OASIS adds its resources to the efforts of these international standards-setting bodies to coordinate the development of global standards for electronic business. “We welcome OASIS to the MoU on Electronic Business,” noted Cynthia L. Fuller, Chair of the MoU Management Group. “The consortium’s work with UN/CEFACT on ebXML, the specifications that provide an infrastructure for e-business information exchange, is just one example of the many contributions OASIS continues to make towards interoperability. OASIS members span the globe in a united effort to promote convergence and collaboration, and we look forward to their involvement as active members of the MoU.” “OASIS is honored to be invited to participate in this MoU and contribute to its work in furthering the interoperability of electronic business standards worldwide,” said Patrick Gannon, President and CEO of OASIS. “Working together, we can help to increase coordination across many different international programs for more efficient standards development and more rapid adoption that will benefit the entire global marketplace.” The Electronic Business MoU establishes a coordination mechanism under a unique cooperative model to produce mutually supportive standards required in business transactions (data interchange and interoperability), as well as product design and manufacturing to meet the urgent needs of both industry and end-users. “The purpose of the MoU is to minimize the risk of divergent and competitive approaches to standardization, avoid duplication of efforts and confusion amongst users,” said Houlin Zhao, Director of ITU Telecommunication Standardization Bureau. “Under the MoU’s Management Group, for instance, ITU technical groups will be able to share their agendas with OASIS technical committees to promote convergence where appropriate and advance the interests of the marketplace at-large.” According to Dr. Carol Cosgroves-Sacks, Director, UNECE Trade Division, “Since 1999, OASIS and UN/CEFACT have worked closely together, uniting developers from around the world on ebXML. UN/ECE appreciates the contributions OASIS members bring to the standards process, and we look forward to continuing and broadening our cooperative relationship under the MoU.” ISO Secretary-General, Dr. Lawrence D. Eicher, commented, “Participation from OASIS underscores the role of the Electronic Business MoU as a partnership between the governmental and private sectors. It lays the foundation for a healthy future development of e-commerce to the benefit of all stakeholders.” IEC’s General Secretary, Mr Aharon Amit, added, “We recognize that within electronic business, there is the potential for convergence for all types of data interchange. OASIS joins the MoU in advancing a work program that is tailored to bring all types of information exchange development within a single framework.” About OASIS OASIS (www.oasis-open.org), a not-for-profit, global consortium, drives the development, convergence and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. OASIS is the home for XML conformance, Web services, security, business transactions, electronic publishing, topic maps and other interoperability specifications development. OASIS has more than 400 corporate and individual members in 100 countries around the world. OASIS and the United Nations jointly sponsor ebXML, a global framework for e-business data exchange. OASIS operates XML.org, a community clearinghouse for XML application schemas, vocabularies and related documents. OASIS hosts The XML Cover Pages, an online reference collection for interoperable markup language standards. For more information: Carol Geyer Director of Communications OASIS carol.geyer@oasis-open.org +1.978.667.5115 x209