xml 2001 conference

[bill parducci <bill@parducci.net>]

the ICQ TC (customer information) TC has started to deleve into the 
realm of privacy and control. as you can see below i suggested to the 
chair, ram kumar, that they may want to bounce their requirements off of 
our group. in response ram is asking if anyone from the XACML TC will be 
available at XML 2001 to chat. anyone on the list available?

b

-------- Original Message --------
Subject: RE: Results of Voting on the CIQ TC Specifications
Date: Wed, 3 Oct 2001 18:04:51 +1000
From: "Ram Kumar" <rkumar@msi.com.au>
To: "'bill parducci'" <bill@parducci.net>

Bill

Is xacml group meeting at the XML 2001 conference?
I will be there and will be more than happy to sit
down with you guys and see what can be done with
regards to using xacml in ciq.

Regards

Ram

 > -----Original Message-----
 > From: bill parducci [mailto:bill@parducci.net]
 > Sent: Monday, 10 September 2001 10:20 AM
 > To: Ram Kumar
 > Subject: Re: Results of Voting on the CIQ TC Specifications
 >
 >
 > it sounds like it would be worthwhile to discuss this with
 > the XACML TC.
 >
 > b
 >
 > > However the xCIL.dtd introduces completely different
 > > metrics.
 > >
 > > We need to address the question of privacy and control.
 > >
 > > Nearly three years again I started work on BizID as a
 > > concept with XML precisely because privacy and control
 > > are key.
 > >
 > > By exposing your BizID you are exactly and precisely
 > > controlling who has access to your information and
 > > when.   You are not handing over an xCIL of information
 > > and then not knowing who when and where it will be
 > > accessed.  The BizID provides an access "key" back
 > > into xCIL providers repositories - and that API contains
 > > checks and measures.
 > >
 > > Each peice of the an "xCIL" can then be precisely
 > > controlled and restricted and access to it logged and
 > > audited.
 > >
 > > Also the xCIL can be extended with private and public
 > > section extensions.
 > >
 > > I would propose we introduce the notion of Privacy
 > > and Control mechanisms into this equation.
 > >
 > > <person>
 > > <personalID/>
 > > <xAL/>
 > > <xNL/>
 > > <controlledContent>
 > >    <demographics/>
 > >    <medical/>
 > >    <financials/>
 > >    <travel/>
 > >    <vehicle/>
 > > </controlledContent>
 > > <person>
 > >
 > > I could happily vote Yes to the xAL and xNL pieces
 > > standalone.
 > >
 > > However I must vote No to the overall xCIL since it
 > > mixes highly private content with public.
 > >
 > > I know we've been in hurry-up-and-wait, but I
 > > believe we really must take another three months
 > > here if necessary and fundamentally address how
 > > people will have control of their own information
 > > in the XML space.
 > >
 > > We should also explore how we can exploit ebXML
 > > messaging to enable secure querying against
 > > customer information.  We do not have to spell this
 > > out in chapter and verse - but we can at least
 > > show how sister specifications can be utilized to
 > > deliver on requirements.
 > >
 > > Sorry to rain on the parade so late - but fundamentally
 > > we have to address the biggest issues here.  Just
 > > creating the XML DTD is just the tip of the iceberg.
 > >
 > > Thanks, DW.
 > >
 > --------------------------------------------------------------
 > --------------
 > > --------------------------------
 > > Cheers
 > >
 > > Ram
 > >
 > > Ram Kumar
 > > MSI
 > > Level 12, 67 Albert Avenue
 > > Chatswood NSW 2067
 > > Australia
 > >
 > > "We are a One to One Business Solutions and Consulting Company
 > > that assists our clients to become Customer-Centric with
 > appropriately
 > > tailored strategies, services and enabling technologies"
 > >
 > > Direct Phone : +61 2 94128315
 > > Office Phone : +61 2 94128333
 > > Facsimile      : +61 2 94134275
 > > Mobile          : +61 412758025
 > > Web Site      :  www.msi.com.au
 > >
 > > ----------------------------------------------------------------
 > > To subscribe or unsubscribe from this elist use the subscription
 > > manager: <http://lists.oasis-open.org/ob/adm.pl>