semantic web, proof and trust

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In a semantic web paper by James Hendler, a layer cake of
technologies is presented with Unicode/URI at the bottom followed by
XML, RDF, Ontology vocabulary, logic, proof and finally trust. The
intermediate layers (RDF, ontology, logic and proof) are protected
ala digital signature (I presume W3C DSIG).

I'd like to undersand the proof and trust layers, namely what is
being prooved and what is being trusted?

The use of digital signature suggests that key management is some how
involved. Can anyone clarify? Is there the expectation that a PKI
will be used (for example)?

Regarding proofs. One possible dimension to proof is the idea that
one party must prove possession of a secret (a basic element of
authentication). Is this an aspect of the proof layer? What other
dimensions are implied by the proof layer?

Trust has been used in a variety of ways. In DOD Orange Book systems
it describes the Trusted Computing Base which does not rely on
external checking mechanisms for its assurances. In financial systems
trust is better understood as risk management and can include
indemnity protection - not relying exclusively on techniques for risk
mitigation. The semantic web seems to apply the "web of trust"
abstraction which could imply a system of distributed cross-checked
nodes. I presume these nodes contain a TCB of sorts. Can anyone
elaborate on the intended architecture for web of trust or the Trust
layer?

Thanks,
Ned



Ned M. Smith
Intel Architecture Labs          Phone: 503.264.2692
2111 N.E. 25th Ave               Fax: 503.264.6225
Hillsoboro OR. 97124            mailto:ned.smith@intel.com


-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.3

iQA/AwUBO/QRuhdTablCCzU/EQLdkQCcCUPFxVLnVFBTTaBAZbye77uXUg8AoNvE
QMpDjWEynaav2v2XiyC/tkmJ
=IhCo
-----END PGP SIGNATURE-----

Received on Thursday, 15 November 2001 14:19:49 UTC