Minutes of BDXR TC meeting July 6, 2016

[Kenneth Bengtsson <kbengtsson@efact.pe>]

MEETING MINUTES OF BDXR TC MEETING 6 JULY 2016

 

ATTENDANCE

 

Jens Aabol

Kenneth Bengtsson (chair)

Erlend Klakegg Bergheim

Sander Fieten

G. Ken Holman

Sven Rasmussen

 

PUBLISHING OF SMP 1.0 CS03 AND NEXT STEPS

 

SMP 1.0 Committee Specification 03 has been approved by the TC:

https://www.oasis-open.org/committees/ballot.php?id=2946

 

And a ticket for publishing the CS has been opened:

https://issues.oasis-open.org/browse/TCADMIN-2402

 

It was agreed to submit CS03 as Candidate OASIS Standard as soon as feasible, for which purpose we need Statements of Use:

 

Jens will reissue Statement of Use from Difi.

Sander will issue Statement of Use from Chasquis Consulting.

Sven will issue Statement of Use from DIGST and communicate with OpenPEPPOL for a Statement of Use from them as well.

Kenneth will contact IBM (for a reissuing of previously submitted Statement of Use), Philip Helger, and the Australian Digital Business Councils from them as well.

 

The Statement of Use has to include the current Committee Specification number (03). As soon as CS03 has been published, Kenneth will send template statements to Jens, Sander and Sven with the current information.

 

BDE 1.1 COMMITTEE SPECIFICATION PUBLIC REVIEW DRAFT 01 COMMENT RESOLUTION

 

It was discussed that payload encryption with multiple recipients can be obtained using the existing BDE structure, provided that an encryption method is used that support multiple recipients. At least three encryption specifications support this functionality: PGP, CMS and XML Enc. For all these three methods, encryption with multiple recipients work in the manner that a random session key is used to encrypt the payload itself one time, and then that session key is encrypted individually for each recipient using the recipient’s public key. This allows the recipients to individually decrypt the session key first, and then decrypt the payload using the obtained session key. The encrypted session key together with the encrypted payload is kept within a structure defined by the encryption method, which fits into the PayloadContent element of BDE, meaning that no changes to the BDE schema are required except for changing the cardinality of the ToParty.

 

Agreed to change the cardinality of the ToParty to 1..n.

 

Kenneth to draft a short section describing the need to use encryption methods that support multiple recipients, and to draft a BDE example using multiple recipients and XML Enc encryption.

Erlend to verify with Torsten that the proposed approach covers the functional requirements of the EESSI project.

Ken to implement the ToParty cardinality change.

 

JOINT SBDH/BDE PROJECT WITH UN/CEFACT

 

A joint conference call with UN/CEFACT Methodology and Technology PDA was held on June 24. The outcome was that a joint project for SBDH and BDE is feasible and desirable. Anders Grangard (UN/CEFACT M&T PDA leader) and Kenneth will draft a project proposal to be discussed by OASIS and UN/CEFACT, and a Doodle has been distributed for coordinating a next meeting:

http://doodle.com/poll/83kdmdre3472crb6

 

Kenneth to bring the project up with OASIS staff. The aim is to have a project approved at the next UN/CEFACT Forum held September 26 to 30.

 

ANY OTHER BUSINESS

 

It was agreed to keep regular conference call schedule throughout the summer months.

 

MEETING SCHEDULE

 

July 20 2016, regular conference call

August 3 2016, regular conference call

August 17 2016, regular conference call

 

Kenneth Bengtsson