Members Approve WS-SecureConversation and WS-Trust as OASIS Standards.More than 40 Organizations Collaborate on Extensions to WS-Security BOSTON -- OASIS, the international standards consortium, today announced that its members have approved WS-SecureConversation version 1.3 and WS-Trust version 1.3 as OASIS Standards, a status that signifies the highest level of ratification. Developed by the OASIS Web Services (1) Loosely, any online service delivered over the Web. Such usage appears in articles from non-technical sources, but not in IT-oriented publications, because definition #2 below describes the correct use of the term. Secure Exchange (WS-SX) Technical Committee, these new standards define policies and extensions to WS-Security that enable the trusted exchange of multiple SOAP messages. "In order to secure communication between two parties, both must exchange security credentials. Before that can take place though, each party needs to determine if they can 'trust' the asserted credentials of the other," explained Anne Thomas Manes manes (mā`nēz), in Roman religion, spirits of the dead. Originally, they were called di manes, a collective divinity of the dead. Manes could also refer to the realm of the dead and, later, to the individual souls of the dead. , research director with the Burton Group. "Applications that communicate using the Web services framework (e.g., SOAP and WSDL (Web Services Description Language) An XML-based language for defining Web services. Developed by Microsoft and IBM, WSDL describes the protocols and formats used by the service. ) can use WS-Trust to obtain and exchange security credentials--either directly or through a trusted third party--and use WS-SecureConversation to establish and maintain an extended secure session." WS-Trust provides methods for issuing, renewing, and validating security tokens as well as establishing, detecting, and brokering trust relationships. WS-SecureConversation allows security contexts to be created and key material to be exchanged more efficiently. Together, WS-Trust and WS-SecureConversation can increase the overall performance and security of exchanges. "We defined the basic mechanisms for providing secure messaging in WS-Security," explained Kelvin Lawrence of IBM (International Business Machines Corporation, Armonk, NY, www.ibm.com) The world's largest computer company. IBM's product lines include the S/390 mainframes (zSeries), AS/400 midrange business systems (iSeries), RS/6000 workstations and servers (pSeries), Intel-based servers (xSeries) , co-chair of the OASIS WS-SX Technical Committee. Lawrence, along with WS-SX co-chair, Chris Kaler of Microsoft, previously led the WS-Security development effort at OASIS. "WS-Trust builds upon WS-Security by introducing an XML XML in full Extensible Markup Language. Markup language developed to be a simplified and more structural version of SGML. It incorporates features of HTML (e.g., hypertext linking), but is designed to overcome some of HTML's limitations. syntax and a protocol that enable the issuance and dissemination of credentials between different trust domains via a Security Token Service (STS (Synchronous Transport Signal) The electrical equivalent of the SONET optical signal. In SDH, the European counterpart of SONET, STS is known as STM (Synchronous Transport Module). )." "WS-Security focuses on the security of a single message, which is useful in many situations," noted Kaler. "WS-SecureConversation adds a security context authentication model that is extremely beneficial for long-running exchanges. When two parties are passing multiple rounds of secured messages back and fourth, the added security and efficiency provided by WS-SecureConversation becomes essential." IBM, Microsoft, and Sun Microsystems Sun Microsystems, Inc. (NASDAQ: JAVA[3]) is an American vendor of computers, computer components, computer software, and information-technology services, founded on 24 February 1982. have verified successful implementations of WS-SecureConversation and WS-Trust, in accordance with eligibility requirements for all OASIS Standards. Representatives of Adobe, AmberPoint, Axway, BEA Systems BEA Systems, Inc. (NASDAQ: BEAS) is one of the major companies developing enterprise infrastructure software. BEA makes middleware, products that help software run on top of databases. , BMC Software, CA, EDS (Electronic Data Systems, Plano, TX, www.eds.com) Founded in 1962 by H. Ross Perot (independent candidate for the President of the U.S. in 1992), EDS is the largest outsourcing and data processing services organization in the country. , Forum Systems, Fujitsu, HP, IBM, IONA, Microsoft, Neustar, Nokia, Nortel, Novell, Oracle, Progress Software, Red Hat, Ricoh, SAP, SOA Software, Software AG, Sun Microsystems, TIBCO Software, VeriSign, and other members of OASIS collaborated to develop WS-SecureConversation and WS-Trust. "The support for this work has been tremendous," observed Patrick Gannon, president and CEO (1) (Chief Executive Officer) The highest individual in command of an organization. Typically the president of the company, the CEO reports to the Chairman of the Board. of OASIS. "Specifications that were initiated by a few vendors two years ago have evolved and benefited significantly by participation from the broader international community. Today, with 90 participants from more than 40 organizations, WS-SX represents one of the largest Committees at OASIS. This is an indication, not only of the breadth of input that has gone into these standards, but also of their ability to meet the needs of the marketplace." Participation in the OASIS WS-SX Technical Committee remains open to all, and OASIS hosts the public ws-sx-dev mailing list for exchanging information on implementing the standard. Additional information: OASIS WS-SX Technical Committee: http://www.oasis-open.org/committees/ws-sx/ Support for WS-SecureConversation and WS-Trust OASIS Standards See quotes from BEA Systems, BMC (BMC Software, Inc., Houston, TX, www.bmc.com) A leading supplier of software that supports and improves the availability, performance, and recovery of applications in complex computing environments. , CA, IBM, Microsoft, Oracle, SAP, and TIBCO TIBCO The Information Bus Company at http://www.oasis-open.org/news/oasis-news-2007-03-27.php/. About OASIS: OASIS (Organization for the Advancement of Structured Information Standards) is a not-for-profit, international consortium that drives the development, convergence, and adoption of e-business standards. Members themselves set the OASIS technical agenda, using a lightweight, open process expressly designed to promote industry consensus and unite disparate efforts. The consortium produces open standards for Web services, security, e-business, and standardization efforts in the public sector and for application-specific markets. Founded in 1993, OASIS has more than 5,000 participants representing over 600 organizations and individual members in 100 countries. http://www.oasis-open.org |
|
||||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion