Re: XACML - Extensible Access Control Markup Language

You will note from the Press Release from OASIS that Reuters is one of
the initial members of the OASIS XACML Technical Committee.  I will be
taking part in the kick-off teleconference on 12 May and would hope
that any work undertaken by OASIS will be aligned as closely as
possible to the many other efforts currently in the process of
starting up.  I am fearful that too many competing standards will have
the following effects:

1/ to dilute the effort applied in any one place
2/ to spread too thin the efforts of those who are trying to keep
     up with (i.e., by active participation) multiple standards
3/ to reduce the likelihood of truly interoperable systems
4/ to impact credibility

Looking at the PKI space, one sees many standards in place (PKIX,
OCSP, PKCS, S/MIME, etc) but each of those is operating in a slightly
different problem domain.  My concern about the rights management
standards is that there is significant overlap.  I would be looking,
ideally, for niches to be identified in which the different standards
excel and which are complementary.  Clearly, lines of responsibility
need to be drawn.

Regards,
/Dave.

_ ______________________________________________________________
Dr David J. Parrott (Chartered Engineer) Chief Technology Office
     Reuters Limited, 85 Fleet Street, London EC4P 4AJ, UK.
   Direct Line: +44 (0)20 7542 9830, Fax: +44 (0)20 7542 8314
       Email: David.Parrott@reuters.com, dparrott@acm.org





|--------+----------------------->
|        |          Rigo Wenning |
|        |          <rigo@w3.org>|
|        |                       |
|        |          24/04/01     |
|        |          23:36        |
|        |                       |
|--------+----------------------->
  >-------------------------------------------------------------------|
  |                                                                   |
  |       To:     DRM-Public-List <www-drm@w3.org>                    |
  |       cc:     (bcc: David Parrott/LON/GB/Reuters)                 |
  |       Subject:     XACML - Extensible Access Control Markup       |
  |       Language                                                    |
  |       Header:      Internal Use Only                              |
  >-------------------------------------------------------------------|






----- Forwarded message from Larry Gussin <ldgussin@home.com> -----

Date: Tue, 24 Apr 2001 13:14:56 -0400 (EDT)
Message-ID: <00b101c0ccd8$8e395c60$16c60b41@pwtkt1.ri.home.com>
From: "Larry Gussin" <ldgussin@home.com>
To: <www-drm@w3.org>
Subject: [Moderator Action] XACML - Extensible Access Control Markup Language

Hi,

I worked at Intertrust for some years, and so am familiar with DRM concepts. I
note XACML, which was begun at IBM and announced today by OASIS as a technical
committee, as another form of XML-based rights language, growing out of
enterprise access control practices:
http://xml.coverpages.org/XACML-PR20010424.html. The XACML web page:
http://xml.coverpages.org/xacl.html.

>From the press release:
"XACML will define the representation for rules that specify the who, what, when
and how of information access," explained Simon Y. Blackwell of Psoom, chair of
the OASIS XACML Technical Committee. "Access control, which is often called
'rights management' or 'entitlement management,' determines who can look at
something, what they can do with it, the type of device they can look at it on,
etc."

I'd appreciate hearing how this effort might fit in.

Larry Gussin




----- End forwarded message -----




-----------------------------------------------------------------
        Visit our Internet site at http://www.reuters.com

Any views expressed in this message are those of  the  individual
sender,  except  where  the sender specifically states them to be
the views of Reuters Ltd.

Received on Wednesday, 25 April 2001 04:31:10 UTC