connecting worlds Digital Rights Management Note: Some Slides are based on Presentation by Graham Vowles and Joe Cardinale Dr. Roland M. Wagner Wien,

...connecting worlds

Digital Rights Management

Note: Some Slides are based on Presentation by Graham Vowles and Joe Cardinale

Dr. Roland M. WagnerWien, November, 14th, 2005

WorkshopINSPIRE DT Sharing

...connecting worlds WKS „Security in GDI“03. November 2005

Presentation Overview

1. Open Geospatial Consortium

2. Working Group: Geospatial Digital Rights Management

3. Current Activities

o OWS3.geoDRM: Terms-of-use Click-through Service

o OGC GeoDRM Reference Model

4. News / Presentations OGC Meeting Bonn (Nov. 2005)

o (Presentation Laila)

o SDI Terms of Use Harmonization in NRW

5. Requirements & Co-operation to INSPIRE DT Sharing

o Proposal & Discussion


1.1. Open Geospatial Consortium (OGC)

The OGC

Not-for-profit, international consortium

250+ industry, government, and university members (about 1/3 from Europe)

Specification Development Program (since 1994)

similar to other Industry consortia like W3C, OMG, etc.

Class A liaison with ISO/TC211

Interoperability Program (since 1999)

a global, innovative, hands-on engineering and testing program designed to accelerate interface development and bring interoperability to the market

OGC Web Service Testbeds (OWS)

Interoperability Experiments

Outreach and Community Adoption Program (since 2002)

awareness raising, education and training, encourage take up of OpenGIS® interfaces, business development

Subsidiaries: OGC Europe, OGC Australia, …

OGC Vision

A world in which everyone benefits fromgeographic information

and services made available

across any network, application or platform.

OGC Mission

Our core mission is to deliver

spatial interface specifications

that are openly available for global use.


Global ISO, W3C, IETF

OASIS, WS-1, ANSI, CEN, ISO, UN/CEFACT, RosettaNet / UCC...

XX-XML, RosettaNet, OASIS,OGC, SEDRIS, OMA, eMSA, SIF....

+ hundreds more

Microsoft, IBM,Network Providers,

+ hundreds to thousands more

Sco

pe

Shared Business Process Specificity

Cross - Industry

(Horizontal)

Industry Based

(Vertical)

Organisation Specific

1.2. Service Standards Hierarchy

+ 10 more


2.1. Geo Spatial Digital Rights Management Working Group

GeoDRM WG, founded June 2004, Chairs:

Graham Vowles (Ordnance Survey UK)

Joe Cardinale (Boeing)

Roland M. Wagner (Institut für Geoinformatik, Uni Münster)

Topics: DRM, geo-eBusiness, Security,…

First release: Discussion Paper „geoXACML“ for Authorization, June 2005

Meetings with large OGC member participation

Sept. / Chicago, Jan. / New York, April / Frascati, June / St. John’s, November / Bonn


2.2. Relationship: Business - Technology

Discussion: OGC Meeting January, New York, UN

Business Model depends on available/affordable Technology

Technology Model depends on Business model

Source: GDI NRW Organization Model

Need for common SDI Business Model


2.3. Working Program 2005

GeoDRM.Demonstrator (Jan.-April, Frascati Demo)

Sub committee activity: Short term, available technologies

GeoDRM.OWS3 Testbed (since April)

Sponsored activity: USGS/ Navteq / geo-connections (Canada)

Declared Need: Click-Through License Service

GeoDRM.Reference Model (since September)

WG activity

Springfield Workshop (September)

Working Document

Next Workshop End of January (expected in Europe)


3.1. GeoDRM.Demonstrator (Security) [Status: finalized]

Goal: Demonstration usableGeoDRM (Security) Technologies

ISO REL, NRW WSS, XACML

Content Services: OGC WMS

Period: January-April 2005

Members:


Remark:

Note:

Because of on-going activities all given information need to be considered as preliminary. They do not intent to represent

any official statement.


3.2. GeoDRM.Reference Model

Need for common terminology

Lack of common SDI Business Models (see intro)

Creation of expected SDI scenarios

Definition of

Scenarios

Roles & Responsibilities

Interactions, States

Definition of terminology (English)

Top-Down ApproachEnd-User

ServiceProvider

Content

Request

LicensingAgent

Owner Licencee

PaymentProvider

Delegateslicensing

policy

Assignslicence

Licencefee

Payments

Contract

AssignSub-licence

Establishcredentials

Validlicence

Delegateshosting

Delegateswork

Sub-Licencee

LicenceManager


3.3. Scenarios & License Game (Graham Vowles)

Goal: Identification of Roles and Interaction

Scenario 1:

Scenario 2: Integration of datasets by overlay

Scenario 3: Integration of datasets by mosaic – roaming?

Scenario 4:


3.4. GeoDRM.OWS3 Testbed

Sponsored Tests/Developments with bottom-up approach

Goal: Development and Specification of an OGC interoperable “License/Terms-Of-Use Click-Through” (ToU) Mechanism for provider/users with a need to acknowledge the Terms-Of-Use prior requesting for content/service.

User might be

anonymous,

registered, but without proofed identity (nick name) or

registered with proof of identity

Process is state-full for all user groups (session).

Process must support cascading.

Note: Details in OGC RFQ OWS3.


3.5. Compatibility and Environment

Security and other horizontal (business) functions are considered as more and more important

Integration

New “Geo-eBusiness” Services

Content Services (WMS,WFS, WCS, …),

For legacy, operational and future versions

with suitable engine-readable meta data description

OWS3.geoDRM: First technical solutionsIPR Report: End 2005


3.6. Outlook: Geo-eBusiness Services

(Horizontal) Services to manage DRM issues

Open List of business functions

Different constellations depending on business models

Identified Functions:

Terms-Of-Use Click-Through (INSPIRE: click-licenses)

Security [not mentioned in INSPIRE directly, but required]

Pricing & Ordering Services (INSPIRE : e-commerce)

…


3.8. Conclusion OGC

OGC is a organization of mostly technical members

Defines OGC interoperable (technical) specifications

OGC initialized a WG for Business Services (GeoDRM)

First Goals: Click-Through ToU and Security

Business / GeoDRM Services depend of common SDI Business Model

Question: Could INSPIRE, with an organizational/legal frame and clear tasks, covering 25 national States (MS), deliver a common SDI business model? (DT Sharing)

Co-operation: a win-win situation

...connecting worlds

4. NRW approach to structure Terms-of-Use agreements

Extracts of an OGC GeoDRM Presentation: Kleemann, Knabenschuh, Sander, Siebold, Panzer, Wagner

(November 2005, Bonn)


Joint Project 2004 – technical driven approach

Build an operational standardized core of the SDI

40 Projects were realized to implement:

More than 120 services and

about 20 applications

4.1. SDI NRW

An activity: The SDI Joint Project 2004 - Developments and Experiences


4.2. Problem Statement

Arising question:

What are SDI services good for, if nobody knows if and how you are allowed to use them?

“We recognize that we need Terms of Use [and other business rules] to enable the economic use of the SDI.”

Risk: Large diversity of different Terms of Use [and other b.r. will create a new (legal) barrier.

Approach

Harmonization and enhanced market transparency by usage of neutral third party templates for business rules

Engine-readable structured contract templates for automated contracting ( a la Mobile Phone GSM)


4.3. Approach: Model

ToU consists of separate statements referring to elementary combinations of

an operation (What kind of usage is undertaken?)

an intention (What is the purpose of the usage?)

Building up a matrix of generic operations / intentions

Ambition: chosen categories should be applicable for data, services and applications!

Reduce complexity for regular users!


4.4. Model: Matrix

op

erat

ion

sintentions

• view (simple)• view (enhanced) • plot• analyse• integrate• link (traceable)• link (not traceable)• publish• relay• modify


4.5. Model: Matrix

op

erat

ion

sintentions

• Type A - private individualno commercial interest • purpose: personal information and use in personal environment

• Type B - companydirect or indirect commercial interest • purpose: making profit

• Type C - public authorityno commercial interest • purpose: administration based on legal regulations

• Type D - public utility institutionno commercial interest • purpose: depends on kind of institution

• Type E - educational institutions no commercial interest • purpose: teaching and related research


4.6. Model: Matrix

op

erat

ion

sintentions

Cells contain descrete values:

x usage is prohibited

! usage is permitted with restrictions

? usage requires compliance with process regulations

ok usage is permitted without restrictions

usage is not defined

x

!

X

ok


4.7. Matrix: adding more details to cells

process regulations

prohibitedrestrictedfree not defined

1st level of detail

conclusion of contract

registration permisson

type2nd level of detail


4.8. Matrix: adding more details to cells

process regulations

prohibitedrestrictedfree not defined

1st level of detail

restriction C

restriction A

restriction B

type

2nd level of detail ! 2do: categorization


4.9. Conclusion

Risk: Legal / business contract diversity may destroy SDI interoperability efforts

Geo-eBusiness Services are required to manage Digital Rights

Therefore corresponding Expression are needed between

Legal Text

Computational Model (categories)

User readable information Text

Harmonization a key issue, Stimulation by supported tools?

Open List of concrete Business Rules


5. Proposals & Discussion

Joint Definition of Roles and Interaction with (INSPIRE) Scenarios for an (INSPIRE) Business Model

=> Reference Model

Joint Development of Legal contract technical contract process Model for IP management

=> Matrix Model

Support in Harmonization by providing efficient tools in an SDI

=> Geo-eBusiness Services


Contact

Universität Münster

Institut für Geoinformatik

Dr. Roland M. Wagner

eMail: [email protected]

Documents

connecting worlds Digital Rights Management Note: Some Slides are based on Presentation by Graham Vowles and Joe Cardinale Dr. Roland M. Wagner Wien,