RE: [xcbf] [Fwd: [security-jc] submission of OASIS work to ITU-T]

[Monica Martin <mmartin@certivo.net>]

The revised document looks good.
 
Noticed though one question on:
To verify the message authentication code, the user computes a MAC or
HMAC on the biometric information using the same shared secret key
identified by its name, and compares this result to the message
authentication value received to determine the integrity of the
biometric information.
 
Wouldn't name be keyName?
 
If not, let me know.  In addition, the notes I have from the meeting you
sent were for WSS.  Are the XCBF document changes the representation of
the meeting minutes?
Just wanted to ensure I didn't miss something.
 
Thanks.
Monica

-----Original Message-----
From: Phillip H. Griffin [mailto:phil.griffin@asn-1.com]
Sent: Friday, December 20, 2002 7:10 AM
To: [OASIS XCBF]
Subject: [xcbf] [Fwd: [security-jc] submission of OASIS work to ITU-T]


Maybe we'll get a similar opportunity when we finish XCBF.

Still waiting for Paul and Paul to approve the face to face 
document changes. And MM and BS and JL, I would 
appreciate a quick review and vote please.

Phil


-------- Original Message -------- 
Security JC:



FYI - I have been approached recently by a representative from the ITU-T


central secretariat, Richard Hill, who expressed interest in having 

OASIS submit some of our completed work for approval under the ITU-T 

process. OASIS was earlier in the year granted A.4 and A.5 recognition 

by ITU-T, and they would like to see us take advantage of that 

recognition by submitting some of our work. (This is similar to what we 

are doing with the ebXML specs: submitting them to ISO for approval 

under their process.)



ITU-T is particularly interested in our security work, as that is a 

topic that they work on quite a bit. I suggested that perhaps we could 

submit the SAML, recently approved as an OASIS Standard, and XACML, 

which we hope will also be approved soon. Richard thought that this 

would be a good plan, and he and I will discuss how best to do this 

under the ITU-T process while still allowing OASIS ownership of the work


and retaining the right of the OASIS TCs to do further work on the
specs.



-Karl





=================================================================

Karl F. Best

Vice President, OASIS

+1 978.667.5115 x206

karl.best@oasis-open.org <mailto:karl.best@oasis-open.org>
http://www.oasis-open.org <http://www.oasis-open.org> 





----------------------------------------------------------------

To subscribe or unsubscribe from this elist use the subscription

manager: