Re: a strawman proposal for the security discussion at the Dallas facetoface

[James Clark <JamesC@EDIFECS.COM>]

Maryann's document brings to light many important issues surrounding the
definition/specification of legally binding commercial transanactions. This
issues are critical to providing a trusted and familiar environment in which
legacy and manual commercial processes will be migrating to. Currently most
if not all of the issues addressed in this proposal are proscriptively and
precisely defined in the ebXML Collaboration Modeling Metamodel & UML
Profile. Draft Version 0.1.
http://www.ebxml.org/project_teams/business_process/wip/metamodel/ebXML%20Co
llaboration%20Modeling%20Metamodel.zip.

The metamodel, patterns and methodolgy being developed by ebXML-bp team
redresses things like authentication, authorization, repudiation, signed
receipts, privacy, signatures, remedies, legally-binding, ect in accordance
to regional and international law as specified by the following references:

·          PART 2 UNIFORM RULES OF CONDUCT FOR INTERCHANGE OF TRADE DATA BY
TELETRANSMISSION (UNCID), CHAPTER 2 - Text of the Uniform Rules of Conduct,
http://www.unece.org/trade/untdid/texts/d220_d.htm

·          UN/ECE RECOMMENDATION No.26, THE COMMERCIAL USE OF INTERCHANGE
AGREEMENTS FOR ELECTRONIC DATA INTERCHANGE,
http://www.unece.org/trade/untdid/texts/d240_d.htm

·          The Commercial use of Electronic Data Interchange, Section of
Business Law American Bar Association, A report and model trading partner
agreement, http://www.abanet.org/buslaw/catalog/5070258.html

It would be good if the issues brought forth in the proposal could be
audited against the metamodel in order to ensure the completeness of the
metamodel, patterns and methodology.

Best regards,

Jim Clark
Director of Industry Solutions
Edifecs Commerce, Inc
936.264.3366 (direct)
425.895.3020 (corp)
jamesc@edifecs.com







----- Original Message -----
From: "Martin W Sachs/Watson/IBM" <mwsachs@us.ibm.com>
To: <ebxml-tp@lists.ebxml.org>
Cc: "Maryann Hondo/Austin/IBM" <mhondo@us.ibm.com>
Sent: Saturday, September 23, 2000 9:50 AM
Subject: a strawman proposal for the security discussion at the Dallas face
toface


> Here is Maryann Hondo's initial security proposal.  While it is aimed
> primarily at TRP, there are PA implications both with regard to the
> definitions of the messaging-related function in a PA and with regard to a
> proposal for signing of PAs.
>
>
> Regards,
> Marty
>
>
****************************************************************************
*********
>
> Martin W. Sachs
> IBM T. J. Watson Research Center
> P. O. B. 704
> Yorktown Hts, NY 10598
> 914-784-7287;  IBM tie line 863-7287
> Notes address:  Martin W Sachs/Watson/IBM
> Internet address:  mwsachs @ us.ibm.com
>
****************************************************************************
*********
> ---------------------- Forwarded by Martin W Sachs/Watson/IBM on
09/23/2000
> 10:48 AM ---------------------------
>
> Maryann Hondo/Austin/IBM@IBMUS on 09/22/2000 05:20:00 PM
>
> To:   ebxml-transport@lists.ebxml.org
> cc:
> Subject:  a strawman proposal for the security discussion at the Dallas
>       face to face
>
>
>
>
>
> All,
>
> As discussed on the TRP call, here is a strawman proposal to use in our
> discussion of security at
> the face to face in Dallas on Tuesday.   Hope it reflects some of the
> comments, if not, let me know!
>
> Maryann
>
> (See attached file: Ebxml Security Strawman.doc)
>
> (See attached file: Ebxml Security Strawman.doc)
>
>
>