OASIS produces worldwide standards for
security, Web services, conformance, business transactions, supply
chain, public sector, and interoperability within and between
marketplaces.

Business Editors/High-Tech Writers

BOSTON ----

BEA Systems, Booz Allen Hamilton, Computer Associates, Entrust,
Gluecode Software, IBM , Sun Microsystems, and Others Advance Open
Standard for Information Access Control

The OASIS , the international e-business standards consortium,
today announced that its members have approved the Extensible Access
Control Markup Language (XACML) version 2.0 incorporates new profiles for Role Based
Access Control (RBAC), Privacy, and Lightweight Directory Access
Protocol (LDAP). XACML 2. "XACML 2.
"The approval of XACML 2. "Having an open and standard means
of expressing and resolving authorization and entitlement policies
will aid in building secure systems.

extensible xns

OASIS DCML (Data Center Markup Language) Adoption, which is
working to promote the adoption of OASIS DCML standards in the
data center to help organizations realize the promise of
utility computing

OASIS DCML Applications and Services, which is defining
extensions to represent and manage applications and services
in a data center

OASIS SOA (Service-Oriented Architecture) Reference Model,
developing a core reference model to guide and foster the
creation of specific service-oriented architectures

OASIS XSLT (Extensible Stylesheet Language Transformation)
Conformance, developing the processes, tools and methods to
integrate disparate XSLT/Xpath test-set contributions into a
comprehensive conformance test suite

"We're pleased to have Conformative join these OASIS technical
committees," said Carol Geyer, OASIS director of communications. XACML goes beyond simply denying or granting information
access, it defines the mechanism for creating the rules and policy
sets that enable meaningful authorization decisions.0 as an OASIS Standard builds on a solid
base of XACML implementations by major international companies,
start-ups, and open source providers," noted Patrick Gannon, president
and CEO of OASIS."
XACML is part of the growing portfolio of OASIS Standards for
security, which also includes the Application Vulnerability
Description Language (AVDL), SAML, Service Provisioning Markup
Language (SPML), WS-Security, and XML Common Biometric Format (XCBF).

From 1995 on , Mr.

ietf extensible

Dan Blum, Senior Vice President and Research Director of the
Burton Group, noted, "Access control is a requirement of almost every
application. Participation remains open to all, and
suppliers , end-users and system integrators are invited to join OASIS
to advance the continued development and the adoption of XACML.

Mr. Staccato's offerings include
PHY, MAC, drivers, application software, development kits and reference
designs.

iana icann

Business Editors/High-Tech Writers
OASIS Symposium on the Future of XML Vocabularies

AUSTIN, Texas----Conformative
Systems, Inc. Headquartered in
Austin, Texas, Conformative Systems was founded in 2003 and is backed
by Austin Ventures and Charles River Ventures. For more information, please visit www. Then, the specification demonstrated its readiness through
multiple implementations, after which XACML was reviewed and approved
by the OASIS membership as a whole.0 and our open source implementation of XACML are further
evidence of our commitment to open standards and the interoperability
benefits they bring to customers.
Founded in 1993, OASIS has more than 4,000 participants representing
over 600 organizations and individual members in 100 countries. The next major market we see will be Internet
Protocol (IP) over UWB, which will emerge to support a number of critical
applications in the coming years," said Roberto Aiello , co-founder and CTO,
Staccato Communications. Mockapetris held leadership roles at several Silicon
Valley networking start-ups, including @Home, Software. For more information,
please visit www .staccatocommunications.

rfcs extensible

Initially serving as observers, Conformative plans to expand its
contributions on the following OASIS technical committees. The
company's unique server design incorporates many processors in a
single application specific integrated circuit (ASIC), enabling
acceleration of enterprise applications and Web services by up to 200
times compared to existing general-purpose servers.conformative. Our congratulations
go to the members of the OASIS XACML Technical Committee for their
hard work in advancing this standard.coverpages. Mockapetris has been associated with the Internet Engineering Task
Force (IETF) since its creation in 1986, chaired several DNS and non-DNS
working groups, and was chair of the IETF from 1994 to 1996. The IETF
continues to be the focus of new applications and extensions to DNS.D.

About Staccato Communications

Staccato Communications , based in San Diego, Calif. The fabless
semiconductor company serves the mobile phone, personal computing and
consumer electronics industries with small form factor single-chip,
all-CMOS wireless system -in-packages (SiP).com.

facilitations rfcs

DataPower

"XACML finally enables organizations to move access control policy
out of custom spaghetti code and into an interoperable, declarative
XML form," said Eugene Kuznetsov, CTO, founder and chairman of
DataPower."

Gluecode Software

"We are pleased to contribute to the advancement of the XACML 2. We look forward to incorporating XACML 2. The consortium produces open
standards for Web services, security, e-business, and standardization
efforts in the public sector and for application-specific markets.oasis-open.S.

w3c isoc

com. At the University of Southern California Information Sciences
Institute (ISI), after working on the design of the SMTP protocol for email
and its first implementation as part of the birth of the Internet in 1983,
he took on the challenge of designing DNS, and then operated the original
"root servers" for all Internet names . He is currently
chairman and chief scientist of Nominium, the leading provider of IP
address infrastructure solutions for Global 2000 companies.

ecmascript xns

"
"OASIS is the consortium that's driving the majority of Web
services standards as well as standards in e-business and
application-specific markets," said John Derrick, CEO of Conformative."
Before becoming an OASIS Standard, XACML v2.0 first completed an
extensive public review and was approved by the OASIS XACML Technical
Committee .

Cordance

"By taking the industry standard for policy-based access control
to a new level, XACML 2.oasis-open.

"In the emerging UWB industry, Staccato has established itself as a leader
in Wireless USB applications.

iana sgml

conformative.

PRESS RELEASE Paul Mockapetris Joins Staccato Communications' Advisory Board

in
information and computer science from the University of California , Irvine,
in 1982.

assigned ietf

com

"Increasingly, XACML is being recognized as an
integral part of enterprise security frameworks.
As a result, BEA supports the release of the XACML 2. "As an open source infrastructure company, participation in
these standardization efforts allows us to deliver leading-edge
solutions to our customers. Throughout his career, he
has contributed to the computing research community and to the evolution of
the Internet. Accordingly, he is well known as a speaker and
lecturer in several Internet areas.

valid standards

XACML 2.0 Access Control Markup Language Approved as OASIS Standard

"

Sun Microsystems

"XACML is an important piece of technology for enabling access
control for web services and part of the broader solution in providing
a policy and security framework for web services," said Ed Julson,
director of engineering for Web Technologies + Standards at Sun
Microsystems. "Paul will help pioneer those techniques at
Staccato and help sustain our technological leadership.

ieee facilitations

0 specification
as an OASIS standard and is working to incorporate support for the
standard in future releases of BEA's product family," said Paul
Patrick, Chief Security Architect, BEA Systems.0," said
Drummond Reed, CTO of Cordance Corporation and co-chair, OASIS XRI and
XDI Technical Committees. "Sun's active participation in the development of OASIS
XACML 2 .org/xacml.

Mr.com (now OpenWave),
Fiberlane (now Cisco), and Siara (now Redback Networks) .

In other words, they create the technologies that allow users to interact with the Internet.

valid extensible

"
Conformative is also participating in the OASIS Symposium on the
Future of XML Vocabularies in New Orleans this week.

About Conformative Systems

Conformative Systems is a developer of high-performance computer
systems that dramatically increase application performance while
reducing cost and complexity in the enterprise data center.
XACML v2."

Nokia

"Nokia applauds the accomplishment of the OASIS XACML Technical
Committee in producing the XACML v2.
Approved OASIS Standards include AVDL, CAP, DocBook, DSML, ebXML,
SAML, SPML, UBL, UDDI, WS-Reliability, WSRP, WSS, XACML, and XCBF . Mockapetris is an Internet advocate and investor.

sgml facilitations

0 provides even more incentive for enterprises
to adopt XML-based resource management infrastructure.
venture capital company and Lee Van Pelt, a patent attorney who specializes
in IP strategy.

ecma assigned

For more information,
visit www."
To meet the needs of a wide range of users across many different
environments, XACML 2.0 profiles also provide integration and
hierarchical resources for the Security Assertion Markup Language
(SAML) OASIS Standard.0 was developed by members of the OASIS XACML Technical
Committee, which includes representatives of BEA Systems, Booz Allen
Hamilton, Computer Associates, Entrust, Gluecode Software, IBM, Sun
Microsystems , and others.0
standard," said Bill Parducci, security architect for Gluecode
Software.html

About OASIS:

OASIS (Organization for the Advancement of Structured Information
Standards ) is a not-for-profit, international consortium that drives
the development, convergence, and adoption of e-business standards.org

"

Mr.

confront interoperability

OASIS
hosts an open mail list for public comment and the xacml-dev mailing
list for exchanging information on implementing the standard.

These are organizations that are recognized as having some sort of standards-making role for the Internet.

assume confront

"We intend to actively participate in this respected organization as
it creates standards that directly impact our customers and their
businesses. "Whether driven by new security threats, regulatory
mandates or Web services, there is a growing need for fine-grained
authorization for heterogeneous systems . Mockapetris' Internet experience mirrors the development of the
industry.

standards interoperable

Only
Conformative is approaching the problem of XML processing performance
through the application of a parallel processing architecture. XACML is used
to represent and evaluate access control policies.

Industry Support for XACML OASIS Standard

BEA Systems

"BEA realizes the importance of a portable description for
security policy and the significant benefit it can bring to customers. His primary research
interests are in distributed systems and computer communication protocols. Mockapetris received his degrees in physics and electrical engineering
from the Massachusetts Institute of Technology in 1971, and his Ph.

extensible assume

standards icann

By becoming involved in OASIS technical committees, Conformative
representatives will work with other enterprise IT thought leaders to
enable the more efficient use of XML data processing , web services and
SOAs.
"XACML is designed to standardize the use of declarative policy to
control access to resources, which can reduce costs while increasing
security," said Hal Lockhart, co-chair of the OASIS XACML Technical
Committee.

interoperable facilitations

"Their insight and expertise will further enhance each committee's
efforts to create effective standards in these vital areas.0 can be of particular interest to those deploying
SAML, looking for a practical way to implement RBAC or protecting
hierarchical resources, such as portions of XML documents. Wireless USB is the
first large volume market to adopt and take advantage of UWB technology,
but Internet Protocol (IP) is also quickly emerging as an important
protocol layer., is an Ultrawideband
(UWB) technology pioneer with applications expertise in Wireless USB,
Bluetooth and Internet Protocol (IP) connectivity.

pasc isoc

OASIS members also advance specifications such as Digital Signature
Services (DSS) and Public Key Infrastructure (PKI).org/committees/xacml

Cover Pages Technology Report:
http://xml.

Paul Mockapetris joins Morio Kurosaki, president of IT-Farm, a Japan-U.

iana nist

, a developer of high-performance computer systems, has
joined four key technical committees of the Organization for the
Advancement of Structured Information Standards (OASIS), a
not-for-profit, international consortium that drives the development,
convergence, and adoption of e-business standards.0 as an OASIS Standard, a
status that signifies the highest level of ratification ."

Additional Information:
OASIS XACML Technical Committee:
http://www.

iana rfcs

Conformative Systems Joins Four OASIS Technical Committees; Thought Leaders Collaborate to Develop and Promote XML Web Services and SOA Standards

The Symposium
brings standards developers and users together to explore options for
solving issues of interoperability that are increasingly affecting the
global exchange of business information. The OASIS XRI
(Extensible Resource Identifier) and XDI (XRI Data Interchange )
Technical Committees look forward to providing other key pieces of
this infrastructure that will leverage the power of XACML 2. Nokia is working to use such open
standards to enhance the capabilities of its mobile platforms.
Members themselves set the OASIS technical agenda, using a
lightweight , open process expressly designed to promote industry
consensus and unite disparate efforts.
Staccato Communications, an ultrawideband
(UWB) wireless technology pioneer, today announced that Paul Mockapetris
has become a member of the company's advisory board.

Mr.

pasc extensible

0
in our products to facilitate integration with an enterprise's central
security policies.0 open standard," said Frederick
Hirsch, Senior Architect at Nokia.
http://www. As an Internet pioneer and IP expert, Paul Mockapetris
brings a wealth of experience to Staccato.
He is best known for creating the Domain Name Server (DNS), which is the
key name registration basis for the Internet. His earliest work at the University of California, Irvine, on
distributed systems and LAN technology preceded the commercial Ethernet and
token ring designs. Founded by wireless industry veterans who have delivered highly
successful solutions for mobile phones, Bluetooth and WiFi, Staccato is now
leveraging that expertise for UWB -based applications.