Look here for acronym expansion and explanation of TAS3 terms.
A markup language for declaring data availability and acceptable use policies a Provider. Part of [IGF].
Aiming at providing only high quality service to the users, the provider of a directory service can be interested in testing that the services asking for registration are of "good" quality. For this purpose, the directory could submit the service under registration to a verification step before granting the registration. The implementation of such process with respect to the technical assessment is called Audition (Automatic Model-Based Interface Testing In Open Networks).
Aspects of feedback used in define a reputation. For example for a helpdesk one could consider politeness, responsiveness, usefulness of supplied information, etc. These factors may be combined into the reputation differently depending on the needs of the user.
Business Process Modelling
Using a formal methodology to describe a business process. Such formal model will usually allow some of the configuration details for implementing the business model to be automatically derived.
Business Process Execution Language
A markup language for declaring data needs of a Client. Part of [IGF].
While general meaning as in "customer" is acknowledged, in protocol contexts "Client" is taken to mean requestor of a service. Thus Client is the counter part of a Service Provider. Client is a business entity and quite different from a User. A Service Provider can be a Client towards other entities that it calls.
Circle of Trust. Synonymous with Trust Network.
Synonymous with Trust Network.
Domain Name System. The scheme for attributing alphanumeric, human readable "web addresses". DNS will map the human readable string to an IP address. Sometimes a /etc/hosts file replaces the function of the DNS, but this solution, while allowing more local control, is generally very burdensome to maintain.
Governing Agreement.
Legal document that every member of Trust Network MUST agree to. This can be seen as the charter of the Trust Network.
Identity Assurance Framework
Identity Governance Framework
General acronym meaning Identity Management
Identity Provider.
An entity that specializes in identifying (collecting identity information or PII), and authenticating users. IdP is usually, and in SAML case especially, charged with the role of facilitating Single Sign On (SSO). IdP often also conveys PII when authenticating the User. IdP has prime visibility to the usage patterms of a User and is therfore especially vulnarable or in need of special business or administrative protections. IdP function is often associated with ID Service Discover and Token Mapping functions. Core of an IdP is a federation database where mappings between several pseudonymous identities and relationships with the service providers are evident. This database constitutes a fat target when an identity system is attached.
or Key Performance Indicators are combinations of different Business Performance factors such as Time to deliver, or number of patent application, etc.
Message Signer. Digitally signs request.
Message Verifier. Verifies digital signature and other constraints of a request.
Policy Enforcement Point
Application Dependent PEP. Apply specific rules that relate to the application roles. Typically comminicates with ADPDP.
Application Independent PEP, typically communicates with AIPDP (cf. Architecture: Anatomy of PEP)
Service Provider Policy Enforcement Point
Requester Policy Enforcement Point
Policy Decision Point
Application Dependent PDP. Apply specific rules that relate to the application roles. Typically comminicates with ADPEP, but may also proxy requests in relevant special cases to outside PDPs or gather Information for its decisions from outside, including from Reputation Providers.
Application Independent PDP, more properly TAS3 Network PDP or External PDP Aggregator (cf. Architecture: Anatomy of PEP)
Service Provider Policy Decision Point
Requester Policy Decision Point
Trust Policy Decision Point. Returns a trust decision. (I think what is meant here is "reputation" decision.)
Policy Management Service.
Handles the management of user policies and 'organization wide' policies. Moreover it will have a functionality to attach policies to a request respectively a response. This is an ongoing task in WP8 under the name of 'Aggregating Policies'.
Personally Identifiable Information.
Information that may allow identifying a User, or impersonation of the User.
Personal Competency Profile.
Liberty and SAML terminology meaning User.
Pick UP Performance Evaluation Test-bed. It is an approach for the automatic generation of test-beds to empirically evaluate the QoS characteristics of a Web Service under development. Specifically, the generation exploits the information about the coordinating scenario, the service description (WSDL) and the specification of the agreed QoS properties.
Quality Of Service
Interface Description Language. For example within the standards of the family WS*, WSDL is an IDL.
Response Signer. Digitally signs request.
Response Verifier. Verifies digital signature and other constraints of a response.
A job function or role at Trust Guarantor. Similar function, with the same name, may also exist at Trusted Third Parties, and Service Providers. Security Officer's job is to on continuing basis verify and validate that the members of a Trust Network adhere to the rules. To do this Security Officer usually operates and monitors automated auditing and systems monitorin tools. If discrepancies are found, or complaints are reported, the Security Officer will investigate manually in more detail. Security Officer also participates in approving new members to the network and in taking disciplinary action, such as removal from the network, against the offenders.
Service Oriented Architecture.
A conglomeration of web services, or in a briader sense any kind of services. SOA paradigm attempts to abstract the services so that they are reusable components that can be composed in different arrangements at will. Parallel to the orchestration, there is identity propagation infrastructure and authorization infrstructure, which in its turn relies on trust infrastructure. Real life SOAs are mucl less generic and recomposing the components in any reliable way remains a dream.
Service Provider.
An entity that provides a service. In TAS3 context the service is foreseen to be provided over a network, usually the Internet.
Service Provider Process Engine. Controlling logic of the Service Provider.
Service Requester Process Engine. Controlling logic of the Client.
Single Sign-On
Single Logout (the logical complement of SSO)
can be simple trust statements as Provider X is trusted to supply Job Vacancies and the combinations trust relations for example when the party trusted to issue credentials is itself determined by trust rules; Provider X is trusted to supply Job Vacancies if a trusted Accreditation agency certifies them. An Accreditation agency is trusted to certify Providers if it is registered at a national registry and has a good reputation, etc.
Testing by Automatically generated XML Instances. A tool by CNR that generates XML instances from an XML Schema automatically. The methodology is largely inspired by the Category Partition testing technique.
a point which gathers feedback information needed to calculate reputations (see also WP02 D2.1 deliverable).
See TAS3. This is just an alternate spelling.
EU FP7 Project.
A trust network that adheres to the TAS3 rules, as specified in [TAS3ARCH], [TAS3PROTO], and [TAS3COMPLIANCE]. N.B. that such network need not be operated or governed by TAS3 consortium. Any TO can set up a TAS3 Trust Network by simply satisfying the requirements.
The users, members, suppliers, and stake holders of a Trust Network.
Trust Network.
An online business environment where parties can interact with each other securely. While the network does not warrant hones behaviour of the members in the network, it does ensure that everybody adheres to some basic principles especially in nonrepudiation, data security, communucations security, and IT security. Thus a Trust Network promotes trust between its members.
Trust and Privacy Negotiator.
Trust Operator, now renamed as Trust Guarantor (TG).
See TG.
Top Level Guarantor. Formerly Trust Operator, TO, now TG.
Trust Guarantor (formerly Trust Operator, TO, or Top Level Guarantor, TLG).
Governing entity of a Trust Network. The top level Trusted Third Party that administers the Trust Network.
Trusted Third Party.
An entity that is technically trusted by the infrastructure to assure correctness of some transaction or relationship. TTP is generally subordinate to Trust Operator, the latter being responsible for the overall oversight..
Time-To-Live. Parameter that indicates how long a cache entry is valid. Generally a cache entry will not be refetched until TTL expires. This concept is especially used by the DNS.
Trust and Security.
Human that uses the Trust Network. In Liberty and SAML contexts User is synonymous with Principal.
Circle of Trust
Service discovery, sometimes specifically identity enabled service discovery such as Liberty ID-WSF Discovery Service. Discovery service corresponds to one of the bulletin boards in Danny's "snake" diagram.
Dashboard, a web GUI for viewing audit records, work flow status, and/or viewing and manipulating privacy settings and permissions.
Frontend, here means web site, i.e. SP
Web Service, SOAP based machine to machine communication. Sometimes specifically Identity enabled web service, e.g. Liberty ID-WSF based WS.
Web Service Client, aka Service Requester
Web Services Provider
Ontology harmonization
Maintain this glossary on some formal notation, to facilitate ontology work
draft-tas3-glossary-v02.pdf
repo.tas3.eu:/var/lib/tas3repo/arch/tas3-glossary.pd (1.2)
CVSROOT=:ext:repo.tas3.eu:/var/lib/tas3repo cvs co arch
~
Please comment on the TAS3ALL@LISTSERV.CC.KULEUVEN.AC.BE mailing list, or that failing, send your comments to the editor.
Any footnotes in this document will not appear in final version. They are editorial comments that may help reviewers to put material in context.