Minutes 21-May-2009 TC Meeting

[Rich Levinson <Rich.Levinson@oracle.com>]

Time: 10:00 am EDT
Tel: 512-225-3050 Access Code: 65998

Agenda for 26-Mar-09 TC Meeting:

10:00 - 10:25 Roll Call & Approve Minutes

Erik Rissanen
Anthony Nadalin
Bill Parducci
Rich Levinson
Hal Lockhart
Dilli Arumugam
Seth Proctor
John Tolbert
Duane DeCouteau
David Staggs

Voting Members: 8 of 10 (80% per Kavi)
    Have quorum

7 May 2009 TC Meeting
  http://lists.oasis-open.org/archives/xacml/200905/msg00003.html

    Approve minutes: no objections

    Hal: checking w Mary on status of public review,
      expect to start imminently


XSPA Profile Upload
  http://lists.oasis-open.org/archives/xacml/200905/msg00004.html

    Duane: updated XSPA doc w all comments from PR
    incorporated HIMSS: Sun, Jericho, RedHat, in demo
	plus DOD, Medical Health systems, 
	Naval Health Research Center in San Diego
     integrated vendors w health providers.
     very instructive as to real world issues and found
       they were well addressed - details in spreadsheets, etc.

    Hal: issues for SAML?
    Duane: info available next week for feedback to SAML
    Hal: next SAML mtg is just before our next mtg

    Duane: Looking for comments back for 2nd public review.


XSPA Comments Updated
  http://lists.oasis-open.org/archives/xacml/200905/msg00009.html

    Duane: XSPA_profile spreadsheet


Export Control Profile Discussion
  http://lists.oasis-open.org/archives/xacml/200905/msg00010.html

    John: email discussion on nationality issues; how a person
	is identified wrt countries
    Hal: TLD's are 2 letters; 2 sets of country codes - relative
	status - 
    John: more people familiar w 2-letter codes; 3-letter codes
	are ISO list
    Erik: misunderstood attrs; emails helping clear up.

    Hal: doc needs a conformance section.

    John: ECUS - conformance identifier
    Hal: why only v3 xacml
    John: ok
    Hal: re: advice - there was talk on export codes; is that
	going to be part of this?
    John: ECCN is export code
    Hal: ok, so is fairly simple; it is classification number.
    John: classification number for here or ITAR
    John: result codes pass on info; probably company specific

    Hal: any other comments on profile? No.
	will write up 3 comments after the call

Intellectual Property Control (IPC) Upload
  http://lists.oasis-open.org/archives/xacml/200905/msg00011.html

    John: new document: property control authorization environment
      enforce policy based on attrs: trade secrets (4 kinds)
      there are general concepts world-wide, however there are
      different interpretations.
    John: attrs included that are needed - somewhat complicated

    David: maybe american bar assoc could get involved - they
	are using xml.
    Hal: could probably be done informally; there are several
	legal groups
    David: thinks that's good idea
    Hal: tc's: electronic court filing, other; maybe they can do
	a prelim informal review
    John: has shared it internally w legal experts; they indicated
	only care about proprietary status; had to explain that
	things need to be generic; initial draft attempts to be
	complete in this arena.
    David: will take action item to explore if contacts can be
	readily made

V3 Status

    Hal: expecting review to start shortly
	additional documents coming, incl provisioning, distr,
	metadata, ws-xacml

  Next meeting: 2 weeks: June 4, 2009
  Meeting adjourned: 10:35 AM ET