6.电子教案教学课件

CNRIHandleSystemanditsApplicationsSamX.Sun

CNRI

ssun@cnri.reston.va.usCNRIHandleSystemanditsApplicationsHandleSystemanditsBackgroundHandleSystemFeaturesHandleSystemData&ServiceModelHandleSystemApplicationsHandleSystemandIDFHandleSystemandIdentityManagementHandleSystemAglobalnameservicethatprovidesuniqueidentifierfordigitalobjectsovertheInternet

Maintainspersistentidentifierthatcanbepersistentoverlocationandattributechange

Aninfrastructureservicethatpromotesinteroperabilityforidentitymanagement&digitalrightsmanagement,BackgroundR.Kahn,&R.Wilensky,"AFrameworkforDistributedDigitalObjectServices",1995

InformationLayerInfrastructure:

-General-purposeglobalidentifierservice

-Repositoryfordigitalobjects

-Accesscontrol&contentmanagementResearchprojectsponsoredbyDARPAoverthepasteightyears.HandleSystemFeaturesSecurednameresolutionanddatadelivery,withstandardmechanismforcredentialvalidationDistributedadministrationviahandlesystemauthenticationprotocolOwnershipdefinedperhandle,accesscontroldefinedperhandlevalue–essentialforprivacyprotectionInternationalsupportviaUTF-8encodingDistributedservicemodelthatisbothscalableandextendableHandleNamespaceSyntaxDefinition: <handle> ::=<NA>/<Local-Name> <NA> ::=*(<na_seg>)<nasegment> <na_seg> ::=AnyUnicode2.0characterencodedinUTF- 8,except‘/’and‘.’ <Local-Name>::=AnyUnicode2.0characterExamples:

10.123/456

cnri.dlib/july95-armsNamingauthority(NA)Local-NameunderNAHandleSystemDataModelHandleAdministratorRecorddefineshandleadministrator

(e.g.forhandle“0.NA/10”)HandledataHandleIndexDataTypeExample:HandleandHandleValues10.123/4562URLhttp://...3URLhttp://...50mdhttp://...100adm.10.123/admin20emailInfo@ClientHandleSystemGHSLHSLHSLHSLHSLHSisacollectionofhandleservices,eachofwhichcon-sistsofoneormorereplicatedsites,Site3Site2SitenSite1Site2Site1...eachofwhichmayhaveoneormoreservers.#1#2#n#4#3#1/.....10.1000/123456URLURL12/.....HandleSystemServiceArchitectureHandleSystemProtocol:MessageStructureHandleSystemProtocol:MessageStructure(continued)EnvelopHeaderCredential…<messagebody>…HandleSystemDocumentations:HandleSystemOverview

/overview-current.htmlHandleSystemNamespaceandServiceDefinition

/namespace-current.htmlHandleSystemProtocolSpecification

/protocol-spec-current.htmlTheDigitalObjectIdentifier

HandleSystemApplications:InternationalDOIFoundation()USLibraryofCongressandUniversitylibrariesUSLearningObjectNetworkWeb-in-the-BoxProjectforUSNavyContentIDForum,JapanKPA/KDC,KoreaInventorymanagement,ENPIA,KoreaHandleSystemApplications (cont.)DARPA/NSFSecureDigitalInformationSystemforsecuredinformationsharingamongdifferentagenciesAAMVADriverRecordInformationVerificationSystem(DRIVerS)FinancialServiceTechnicalConsortium(FSTC)MPEG-21StandardProcessIETF/IRTFInternetDigitalRightsManagementDOIandIDF():InternationalDOIFoundation:founded1998followingdemonstrationofprototypein1997Not-for-profit;paidmembershipsupportsimilarprinciplestoWorldWideWebConsortium(W3C)

OpentoallinterestedpartiesDemocratic:boardelectedfrommembersFulltimestaff(Director)40+organisationsandgrowingDOIandIDF:Establishawayofidentifyingcontentinthedigitalenvironmentviaactionableidentifier(e.g.handlesintheHandleSystem).Usethatasthebasisfordigitalrightsmanagementinthefuture.Aimtomaximisevalueofdigitalobjects(e.g.reducecopyinfringement,increaseaccessibility,helpincontentmanagement).Facilitatemassproductionandmasscustomisationviatermsandconditionsassociatedwithdigitalobjects.DOIandIDFandtheHandleSystem:DOIregistrationandresolutionservicefullyimplementedovertheHandleSystem.ApplicationsarebeingbuiltontopofDOI

(e.g.CrossRefandMetadataregistration).Commercialdeployment:DOIregistrationagencies(e.g.CrossRefandothers).E-BookendorsementandDOI-EBprototype

(see).IdentityandIdentityManagement:Identity:IdentityReference+SetofAttributes

Examples:

Driver’sLicense

PublicKeyCertificate

Handle+HandleAttribute

Differentwaysofidentityreferencedetermineshowidentitiesareusedormanaged.

Identitymanagementisessentialforallkindsofsecurityservices,especiallyinareassuchasauthentication/authorization,dataconfidentiality,aswellasservicenon-repudiation.IdentityManagementusingHandleSystemPersistentidentityreference,separatingidentityreferencefromanyofitsattributes.

Separatestransportsecurityfromcredentialvalidation.Simplifiestheauthenticationprocess.Automationofcredentialvalidation,suchthatnointermediateCertificateAuthority(CA)isnecessary,makingidentityvalidationprocessmoreliableuponlegalchallenge.IdentityManagementusingHandleSystem

(cont)Realtimeidentityvalidationcanbecarriedoutviaauthorizationagencies,thusavoidingdifficultiessurroundingcertificaterevocationprocessandmakingitmoretrustworthy

Ownershipofidenti