Submission request to the World Wide Web Consortium

Submission request to W3C (W3C Team Comment)

We, W3C member organizations VeriSign, Microsoft, webMethods, Baltimore Technologies, Citigroup, Hewlett-Packard, IBM, IONA Technologies, PureEdge and Reuters Limited hereby submit to the Consortium the following specification, comprising the following document attached hereto:

XML Key Management Specification (XKMS)

which collectively are referred to as "the submission". We request the submission be known as the XKMS submission.

Abstract

The XKMS specification defines protocols for distributing and registering public keys, suitable for use in conjunction with the proposed standard for XML Signature [XML-SIG] developed by the World Wide Web Consortium (W3C) and the Internet Engineering Task Force (IETF) and an anticipated companion standard for XML encryption. The XML Key Management Specification (XKMS) comprises two parts -- the XML Key Information Service Specification (X-KISS) and the XML Key Registration Service Specification (X-KRSS).

The X-KISS specification defines a protocol for a Trust service that resolves public key information contained in XML-SIG elements. The X-KISS protocol allows a client of such a service to delegate part or all of the tasks required to process <ds:KeyInfo> elements. A key objective of the protocol design is to minimize the complexity of application implementations by allowing them to become clients and thereby shielded from the complexity and syntax of the underlying PKI used to establish trust relationships. These may be based upon a different specification such as X.509/PKIX, SPKI or PGP.

The X-KRSS specification defines a protocol for a web service that accepts registration of public key information. Once registered, the public key may be used in conjunction with other web services including X-KISS.

Both protocols are defined in terms of structures expressed in the XML Schema Language, protocols employing the Simple Object Application Protocol (SOAP) v1.1 [SOAP] and relationships among messages defined by the Web services Definition Language v1.0 [WDSL]. Other compatible expressions are possible.

Intellectual Property Rights

Declaration of Microsoft Corporation, VeriSign Inc. and webMethods Inc.:: Microsoft, VeriSign and webMethods (the 'Authors') hereby grant to the W3C, a perpetual, nonexclusive, non-sublicensable, non-assignable, royalty-free, worldwide right and license under any copyrights in this contribution to copy, publish and distribute the contribution, as well as a right and license of the same scope to any derivative works prepared by the W3C and based on, or incorporating all or part of the contribution. The Authors further agree that, upon adoption of this contribution as a Standard, the Authors will grant to any party a royalty-free license on other reasonable and non-discriminatory terms under Authors' applicable intellectual property rights essential to implement and use the technology proposed in this contribution in products that comply with the Standard, but only for the purpose of complying with the Standard. The Authors expressly reserve all other rights they may have in the material and subject matter of this contribution. The licensing commitments made hereunder do not include any license for implementation of other published specifications developed elsewhere but referred to in this contribution.

Declaration of Baltimore Technologies:: Baltimore Technologies may own patents or patent applications which apply to the XKMS specification being submitted to the W3C. If implementation of a W3C standard based on the XKMS specification requires the use of Baltimore Technologies patents, Baltimore
Technologies will grant, upon written request, a non-exclusive license under such patents on reasonable and non-discriminatory terms. Baltimore Technologies expressly disclaims any and all warranties regarding this contribution including any warranty that this contribution does not violate the rights of others or is fit for a particular purpose.

Declaration of Citigroup:: Citigroup hereby grants to the W3C, a perpetual, nonexclusive, non-sublicensable, non assignable, royalty-free, world-wide right and license under any Citigroup copyrights in this contribution to copy, publish and distribute the contribution, as well as a right and license of the same scope to any derivative works prepared by the W3C and based on, or incorporating all or part of the contribution. Citigroup further agrees that, upon adoption of this contribution as a Standard, Citigroup will grant to any Member a royalty-free license on other reasonable and non-discriminatory terms under applicable Citigroup intellectual property rights to implement and use the technology proposed in this contribution only to the extent that the use and implementation of such intellectual property rights are necessary to implement the Standard. Citigroup expressly reserves all other rights it may have in the material and subject matter of this contribution. The licensing commitments made hereunder does not include any license for implementation of other published specifications developed elsewhere but referred to in this contribution. This document and the information contained herein is provided on an "AS IS" basis and CITIGROUP DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.; IN NO EVENT WILL CITIGROUP BE LIABLE TO ANY OTHER PARTY INCLUDING THE W3C AND ITS MEMBERS FOR THE COST OF PROCURING SUBSTITUTE GOODS OR SERVICES, LOST PROFITS, LOSS OF USE, LOSS OF DATA, OR ANY INCIDENTAL, CONSEQUENTIAL, DIRECT, INDIRECT, OR SPECIAL DAMAGES WHETHER UNDER CONTRACT, TORT, WARRANTY, OR OTHERWISE, ARISING IN ANY WAY OUT OF THIS OR ANY OTHER AGREEMENT RELATING TO THIS DOCUMENT, WHETHER OR NOT SUCH PARTY HAD ADVANCE NOTICE OF THE POSSIBILITY OF SUCH DAMAGES.

Declaration of Hewlett-Packard Company: Hewlett-Packard Company (HP) agrees that, upon adoption of this contribution as a W3C Recommendation, HP will make available, on reasonable, non-discriminatory terms to anyone implementing the Recommendation, a license to any HP intellectual property rights that are essential to using the technology described in this contribution. HP expressly reserves all other rights it may have in the material and subject matter of this contribution.; This contribution is being provided "AS IS", and HP EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES REGARDING THIS CONTRIBUTION, INCLUDING ANY WARRANTY THAT THIS CONTRIBUTION DOES NOT VIOLATE THE RIGHTS OF OTHERS OR IS FIT FOR A PARTICULAR PURPOSE.

Declaration of International Business Machines Corporation:: IBM may own patents or patent applications which apply to the XKMS specification being submitted to the W3C. If implementation of a W3C standard based on the XKMS specification requires the use of IBM patents, IBM will grant, upon written request, a non-exclusive license under such patents on reasonable and non-discriminatory terms.; IBM expressly disclaims any and all warranties regarding this contribution including any warranty that this contribution does not violate the rights of others or is fit for a particular purpose.

Declaration of IONA Technologies:: IONA does not identify any intellectual property rights in the current submission, but IONA may identify subsequent contributions to the W3C as containing intellectual property rights. IONA reserves all rights with respect to such intellectual property, however, IONA agrees to make available to any W3C member on a fair, equitable, and reasonable basis rights to any such intellectual property as IONA may choose to contribute in future W3C work on this submission.

Declaration of PureEdge:: PureEdge may own patents or patent applications which apply to the XKMS specification being submitted to the W3C. If implementation of a W3C standard based on the XKMS specification requires the use of PureEdge patents, PureEdge will grant, upon written request, a non-exclusive license under such patents on reasonable and non-discriminatory terms.; PureEdge expressly disclaims any and all warranties regarding this contribution including any warranty that this contribution does not violate the rights of others or is fit for a particular purpose.

Declaration of Reuters Limited:: Reuters Limited hereby grants to the W3C, a perpetual, nonexclusive, non-sublicensable, non-assignable, royalty-free, worldwide right and license under any copyrights in this contribution to copy, publish and distribute the contribution, as well as a right and license of the same scope to any derivative works prepared by the W3C and based on, or incorporating all or part of the contribution. Reuters Limited further agrees that, upon adoption of this contribution as a Standard, Reuters Limited will grant to any party a royalty-free license on other reasonable and non-discriminatory terms under Reuters Limited's applicable intellectual property rights essential to implement and use the technology proposed in this contribution in products that comply with the Standard, but only for the purpose of complying with the Standard. Reuters Limited expressly reserves all other rights it may have in the material and subject matter of this contribution. The licensing commitments made hereunder do not include any license for implementation of other published specifications developed elsewhere but referred to in this contribution. Reuters Limited expressly disclaims any and all warranties regarding this contribution including any warranty that this contribution does not violate the rights of others or is fit for a particular purpose.

Names

The following are registered marks referred to in this request or the submission: Microsoft is a registered trademark of Microsoft Corporation. VeriSign is a registered trademark of VeriSign Inc. IBM is a registered trademark of International Business Machines Corporation. All other product and company names are trademarks, registered trademarks, or service marks of their respective owners.

Specification

The submission may distributed within the membership of the W3C free of any fee.

The submission may be distributed publicly free of any fee under the redistribution terms expressed in the W3C copyright statement.

Implementation

The following points should be noted as regards licensable technology involved in any third party implementations of the technology specified in the submission:

The authors are not aware at this time of specific patent claims that may cover the technology described, it is however the responsibility of implementers to exercise their own due diligence to ensure that infringement does not occur. Neither the authors nor their companies warrant that the implementation is not subject to patent claims that have either been granted or may be granted in the future.

Suggested action

We suggest that the Consortium publish the document as a W3C Technical Note and hold a workshop to discuss the submission with a view to forming a working group to develop a standard based on the specification. The submitters intend to participate in such a workshop and working group.

Resources

To help with this work, we expect to be able to provide workshop facilities (venue, refreshments etc.) and one non-resident document editor to the Consortium.

Change control

Should any changes be required to the document, we would expect future versions to be produced by W3C process after formation of a working group.

Contacts

Inquiries from the public or press about this submission should be directed to:

VeriSign: Warwick Ford, wford@verisign.com, +1 (617 642 0139; Phillip Hallam-Baker, pbaker@verisign.com, +1 (781) 245 6996 x227
Microsoft Corporation: David Turner, Microsoft, dturner@microsoft.com, +1 (425) 936 9459

webMethods: Jennifer Tansey, jennifer.tansey@webMethods.com, 703-460-2554

Baltimore Technologies,: Stephen Farrell, stephen.farrell@baltimore.ie, +353 1 881 6716

Citigroup: Dave Solo, David.Solo@citicorp.com, +1 (212) 559-2900

Hewlett-Packard: Nigel Edwards, nigel_edwards@hp.com tel: +44 117 3128490

IBM / Tivoli: Cas Purdy, cpurdy@tivoli.com, tel: +1 512 436-1211

IONA Technologies: Todd Keefe, todd.keefe@iona.com, +1 (781) 902 8033; Jonathan Daly, jonathan.daly@iona.com, +1 (781) 902 8139

PureEdge: Dave Manning, dmanning@pureedge.com, +1 (250) 479 8334

Reuters Limited: Mark Curtis, mark.curtis@reuters.com, +44 207 5427427

Submitted

this 16^th day of February, 2000,

Warwick Ford, Verisign, wford@verisign.com; Asir Vedamuthu, webMethods, asirv@webmethods.com; David Turner, Microsoft, dturner@microsoft.com; Graham Klyne, Baltimore, Graham.Klyne@mimesweeper.com; Daniel Schutzer, Citigroup, d_schutzer@yahoo.com; Jim Bell, Hewlett-Packard, jim_bell@hp.com
David Fallside, IBM, fallside@us.ibm.com; Eric Newcomer, IONA, eric.newcomer@iona.com
Dave Manning, PureEdge, dmanning@pureedge.com; Misha Wolf, Reuters Limited, misha.wolf@reuters.com