W3C XKMS Workshop B2B Requirements Mark Curtis, CTO RSG V th July 2001

CTO Research & Standards Group Agenda qReuters B2B Overview qDimensions of B2B Commerce qXKMS Trust Requirements/Issues qRecommendations

CTO Research & Standards Group Reuters Business Operations qNot just a News Agency qInformation Company –Financial Markets –Corporate Treasurers and Bond Managers –Newspaper, Broadcasters, News Agencies qTransactions –Foreign Exchange Dealing ~>50% of world spot fx transactions ~Instinet, worlds leading agency broker From knowing to doing “Fortunately, there is a model for the future shape of B2B: the financial service industry” Beyond the Exchange: The Future of B2B, Harvard Business Review Nov-Dec 2000

CTO Research & Standards Group What do we mean by B2B?

CTO Research & Standards Group B2B/XKMS Activities qBusiness Process Integration with Customers –Procurement, payment, service etc

CTO Research & Standards Group B2B/XKMS Activities qBusiness Integration with Customers –Procurement, payment, service etc qInformation Supply Chain Integration –Digital rights/obligations management

CTO Research & Standards Group B2B/XKMS Activities qBusiness Process Integration with Customers –Procurement, payment, service etc qInformation Supply Chain Integration –Digital rights/obligations management qAggregation of Business Venues/Exchanges –Publish offers ~Indication of interest (IOI) ~Price vs. Value –Trade ~Range of different trading models

CTO Research & Standards Group Aggregation of Business Venues qRegistration –Portable registration attributes e.g. FSA money laundering checks qCommon authentication framework –View offer in one channel, select the offer and ‘automate’ execution in another e.g. SSO qInternal status of trader –Role, responsibilities qExternal position status of trader –Credit allocation to particular organisation –Market credit position –Dynamic status services qDispute Resolution –Who did what, when, and why

CTO Research & Standards Group What does XKMS give us? qLow tier service –Certificate resolution ~In a B2B world we know who we are dealing with-we can already resolve certs ~Good to move to standard model –Higher level interface into PKI services ~We have already developed these internally ~Map our interfaces to those of XKMS qHigher tier services –More consumable application level trust services –Easier to map to business models and requirements

CTO Research & Standards Group B2B Issues qOperability across multiple domains –User centric key registration service vs. application level centric key registration service qInteroperability between domains –Trust relationship ~User defined ~Service defined qBusiness relevant trust attributes –Context of business –Meta data for acceptance

CTO Research & Standards Group B2B Issues qService association –Information may be distributed qThird party attribute and service association –Rules for association qPrivacy –Conditions for disclosure of information –User defined qAdministration

CTO Research & Standards Group XKMS Adoption qTechnical Framework –High level interfaces ~SDKs tend to be clunky ~Packaging is important –Service integration qPolicy Framework –Aligned to business verticals? –Privacy qStandards Framework –XKMS (XKISS,XKRSS, XTASS), SAML, XACML, MPEG21… –ebXML, UDDI, LDAP….

CTO Research & Standards Group Challenges qAcceptance –Solve problems not just package them qUsability –High level interfaces –Configuration vs. coding qInteroperability –Relevant business context qArchitectural consistency –Clearly identified boundaries and relationships between standards

CTO Research & Standards Group Recommendations qPush ahead with definition of lower tier service levels –Test against real ‘business driven’ scenarios qOutline scope and requirements for the provision of higher tier services qMap out relationships and interfaces to other standard activities operating in this space –Remove confusion, provide focus and prevent duplication

W3C XKMS Workshop B2B Requirements Mark Curtis, CTO RSG V th July 2001