KMIP "Statements of Use"

[<robert.griffin@rsa.com>]

Hi -

Here's some more information on Statements of Use, as requested in
yesterday KMIP TC call.

As we look towards moving from public review to OASIS standard, one of
the things we're going to need to do is provide 3 "Statements of Use"
attesting to implementation of the specification, as described in this
quote from the OASIS TC process:

"Simultaneously with the approval of a Committee Specification or at a
later date, and after three Statements of Use have been presented to the
TC, a TC may resolve by Special Majority Vote to submit the Committee
Specification to the Membership of OASIS for consideration as an OASIS
Standard." (OASIS committee process, section 3.4, 
http://www.oasis-open.org/committees/process.php). 

Statement of Use is defined as follows (definitions section, same URL):

35. "Statement of Use", with respect to a specification, is a written
statement by an OASIS Organizational Member stating that it is
successfully using or implementing that specification in accordance with
the conformance clauses specified in Section 2.18, and stating whether
its use included the interoperation of multiple independent
implementations.

The "Guideliness to Writing Conformance Clauses"
(http://docs.oasis-open.org/templates/TCHandbook/ConformanceGuidelines.h
tml) includes the recommendation that:

" A Conformance claim SHOULD accompany a statement of use declaration
when a Committee Specification is being advanced to OASIS Standard.
(Section 2. Terms and Definitions)

And here's an example of a Statement of Use for XACML, referenced in the
attached "steps following public review" document.

" Red Hat has successfully implemented and used the Cross-Enterprise
Security and Privacy Authorization (XSPA) Profile of XACML v2.0 for
Healthcare Version 1.0 in accordance with the conformance clauses
specified therein and OASIS policy.  The implementation was successfully
used in interoperation with other independent implementations@HIMSS
2009. 
For more information, please contact either me or Dr.Mark Little, 
Red Hat Director of Standards."

However, other Statements of Use are less specific, such as the
following from Oracle for WSRP in 2003:

"On behalf of Oracle Corporation, I would like to state that Oracle 9iAS
has successfully used the WSRP V1 Specification as approved by the OASIS
WSRP Specification Technical Committee. We think that WSRP specification
is ready for becoming an OASIS standard."

Regards,

Bob

Steps following Public Review.docx