[ACTION-152] [Policy Framework] Draft updated + next steps

Hi all,

As agreed two weeks ago I've been working on the policy framework
document to cover explicit trust domain assignment via trust policies.

Link: (note that you might not be able to see the image in section 2.3
correctly yet, sorry...)
http://dev.w3.org/2009/dap/policy/Overview.html

Modifications to the Policy Framework document:
-- Section 2.1 Framework Overview: already made changes to this
subsection.

-- Section 2.2 Layer Model: already added a third layer, Trust Domain
Control Layer.

-- Section 2.3 Logical Model: already made changes to this subsections.
Created a new dataflow diagram (see attached).
	-- Problems with the dataflow diagram (need some help with svg
file...)

To-Do's:
-- Divide content into different documents --> would appreciated if
someone else could do this.
Policy Framework document: sections 2, 3.1, 3.3, 3.4 and 3.5 of current
doc could remain in the framework.
Policy XACML Profile document: sections 3.2, 3.6-3.20 and 4 of current
doc can be moved to XACML profile.
Examples document: section 5 could go into a separate examples document.
Out of scope can go into requirements,   Added to  
framework would be trust domain model contribution from Nokia.

-- Section 2.4 Access Control Policy Structure: need to add a Trust
Policy Structure. --> I'll take this action.

-- Need to add sections 3.1, 3.3, 3.5 and 3.5 to the framework doc. -->
I'll take this action.

-- XACML Profile document: need to divide this document into two
sections, one part covering access control policies and another on for
trust policies. This wouldn't require creating anything *new*, just
reorganising the content of the current sections 3.2, 3.6-3.20 and 4.
--> Could someone else start doing this?

I am happy to continue with the document focusing on policy framework
but I would like to ask the group for some support in the changes needed
for the policy profile document.

Happy to discuss further in the call later today.

Thanks,
Laura









Laura Arribas

Security Technologies Researcher
Vodafone Group R&D
 
Tel: +44 (0) 7775411861
Fax: +44 (0) 1635231776
E-mail: laura.arribas@vodafone.com


Vodafone Group Services Limited
Registered Office: Vodafone House, The Connection, Newbury, Berkshire
RG14 2FN
Registered in England No 3802001.