Subject: KMIP "Statements of Use"
Hi - Here's some more information on Statements of Use, as requested in yesterday KMIP TC call. As we look towards moving from public review to OASIS standard, one of the things we're going to need to do is provide 3 "Statements of Use" attesting to implementation of the specification, as described in this quote from the OASIS TC process: "Simultaneously with the approval of a Committee Specification or at a later date, and after three Statements of Use have been presented to the TC, a TC may resolve by Special Majority Vote to submit the Committee Specification to the Membership of OASIS for consideration as an OASIS Standard." (OASIS committee process, section 3.4, http://www.oasis-open.org/committees/process.php). Statement of Use is defined as follows (definitions section, same URL): 35. "Statement of Use", with respect to a specification, is a written statement by an OASIS Organizational Member stating that it is successfully using or implementing that specification in accordance with the conformance clauses specified in Section 2.18, and stating whether its use included the interoperation of multiple independent implementations. The "Guideliness to Writing Conformance Clauses" (http://docs.oasis-open.org/templates/TCHandbook/ConformanceGuidelines.h tml) includes the recommendation that: " A Conformance claim SHOULD accompany a statement of use declaration when a Committee Specification is being advanced to OASIS Standard. (Section 2. Terms and Definitions) And here's an example of a Statement of Use for XACML, referenced in the attached "steps following public review" document. " Red Hat has successfully implemented and used the Cross-Enterprise Security and Privacy Authorization (XSPA) Profile of XACML v2.0 for Healthcare Version 1.0 in accordance with the conformance clauses specified therein and OASIS policy. The implementation was successfully used in interoperation with other independent implementations@HIMSS 2009. For more information, please contact either me or Dr.Mark Little, Red Hat Director of Standards." However, other Statements of Use are less specific, such as the following from Oracle for WSRP in 2003: "On behalf of Oracle Corporation, I would like to state that Oracle 9iAS has successfully used the WSRP V1 Specification as approved by the OASIS WSRP Specification Technical Committee. We think that WSRP specification is ready for becoming an OASIS standard." Regards, Bob
Steps following Public Review.docx