RE: Attending the XACML TC F2F in Ottawa, Canada

[<srinivas.sridhara@nokia.com>]

Hi,

We have been working on a project involving device settings for wireless terminals in an enterprise setting, wherein the terminal settings are authored by the corporate owner and handed over to a Device Management (DM) server to actually carry out the device settings for the terminals being used by the company employees. 

In this regard, our thinking was about using XACML for configuring the device policies. Each terminal might have different settings, controlled by corporate owner. While terminal settings are configured in SyncML, the policies regarding individual terminal settings written in XML.

Some of the issues re. the use of XACML for policy setting are:
1. What are the security implications of using XACML for terminal configuration?
2. Could the PEP return "Obligations" to the device to enforce device settings?
3. Is XACML v3.0 a better fit for management policy decisions?

Thanks,
-Srinivas

> -----Original Message-----
> From: Sridhara Srinivas (Nokia-NRC/Boston) 
> Sent: Monday, April 18, 2005 4:51 PM
> To: 'ext Hal Lockhart'; Bill Parducci
> Cc: Anne.Anderson@Sun.COM; tim.moses@entrust.com
> Subject: RE: Attending the XACML TC F2F in Ottawa, Canada
> 
> 
> Hi,
> I was traveling for the past 10 days, so the delayed response.
> 
> I will be posting some initial thoughts, regarding our 
> requirements, to the XACML list tomorrow.
> 
> -Srinivas
> 
> > -----Original Message-----
> > From: ext Hal Lockhart [mailto:hlockhar@bea.com]
> > Sent: Thursday, April 07, 2005 12:49 PM
> > To: Bill Parducci; Sridhara Srinivas (Nokia-NRC/Boston)
> > Cc: Anne.Anderson@Sun.COM; tim.moses@entrust.com
> > Subject: RE: Attending the XACML TC F2F in Ottawa, Canada
> > 
> > 
> > It would also be useful to post something to the list in 
> > advance to help people get started thinking about your requirements.
> > 
> > Hal
> > 
> > > -----Original Message-----
> > > From: Bill Parducci [mailto:bparducci@gluecode.com]
> > > Sent: Thursday, April 07, 2005 12:44 PM
> > > To: srinivas.sridhara@nokia.com
> > > Cc: Anne.Anderson@Sun.COM; Hal Lockhart; tim.moses@entrust.com
> > > Subject: Re: Attending the XACML TC F2F in Ottawa, Canada
> > > 
> > > 
> > > we can add this to the face to face agenda. i am sure the 
> > > members would 
> > > be interested in your application of the specification. 
> > approximately 
> > > how much time would you need to present to the group?
> > > 
> > > thanks
> > > 
> > > b
> > > 
> > > srinivas.sridhara@nokia.com wrote:
> > > > Hi Bill and Anne,
> > > > Thank you for your assistance re. attending the XACML f2f 
> > > this month end. I wanted to bring, to the attention of the 
> > > XACML TC members, the work that we have been doing in Device 
> > > Management (DM) for cell phone terminals. In particular, the  
> > >  corporate owner of the devices authors the device settings, 
> > > which are then handed over to a DM server, to finally install 
> > > on the device terminals. In this regard, the feeling amongst 
> > > our team was that XACML seemed to be an appropriate policy 
> > > language for the DM author to use, to convey the device 
> > > settings as well as for other relevant actions.
> > > > 
> > > > How should go about throwing this issue open to the XACML 
> > > TC members to discuss and getting their feedback. I was 
> > > hoping to bring this up at the F2F in Ottawa.
> > > > 
> > > > What is your opinion about this matter?
> > > > 
> > > > Thanks,
> > > > -Srinivas
> > > > 
> > > > 
> > > >>there aren't any special requirements, just show up and 
> > hop in, all 
> > > >>oasis members all welcome!
> > > >>
> > > >>tim has posted all relevant travel info the list and i am 
> > > sure would not 
> > > >>mind providing more detailed information re: ottawa should 
> > > you require it.
> > > >>
> > > >>b
> > > > 
> > > > 
> > > >>-----Original Message-----
> > > >>From: ext Anne Anderson [mailto:Anne.Anderson@Sun.COM]
> > > >>Sent: Saturday, March 26, 2005 8:47 AM
> > > >>To: Sridhara Srinivas (Nokia-NRC/Boston)
> > > >>Cc: Hal Lockhart; Bill Parducci; Tim Moses
> > > >>Subject: Re: Attending the XACML TC F2F in Ottawa, Canada
> > > >>
> > > >>
> > > >>Hi Srinivas,
> > > >>
> > > >>I'm happy to hear of your interest in the XACML work.  I'm 
> > > >>cc'ing this 
> > > >>to the co-chairs, Bill Parducci and Hal Lockhart, who can 
> > > better tell 
> > > >>you what is involved.
> > > >>
> > > >>Thanks,
> > > >>Anne
> > > >>
> > > >>srinivas.sridhara@nokia.com wrote:
> > > >>
> > > >>
> > > >>>Hi Anne,
> > > >>>
> > > >>>I am research engineer in Nokia Research Center here in 
> > > >>
> > > >>Burlington, MA. I have been following the XACML TC 
> > > >>developments for the past few months, as an employee of 
> > > >>Nokia, in the Observer status.
> > > >>
> > > >>>I was planning to attend the XACML TC F2F, to be held in 
> > > >>
> > > >>April end, in Ottawa. Are there any specific issues, such as 
> > > >>registration, that I need to take care of?
> > > >>
> > > >>>Thanks,
> > > >>>-Srinivas
> > > >>
> > > >>-- 
> > > >>Anne H. Anderson               Anne.Anderson@sun.com
> > > >>Sun Microsystems Labs          1-781-442-0928
> > > >>Burlington, MA USA
> > > >>
> > > 
> > > 
> > 
>