Web Content Management Using the OASIS ebXML Registry Standard Farrukh Najmi XML Standards Architect Sun Microsystems

About the Speaker ● XML Standards Architect, Sun – Focused on content management ● Co-author and editor, ebXML Registry ● Co-founder, freebxml.org ● Lead Architect, freebXML Registry

Question So what is ebXML Registry and what does it have to do with Web Content Management?

Agenda ● What is Web Content Management? ● What is ebXML Registry? ● Web Content Management using ebXML Registry ● ebXML Registry in the real world ● Future directions

What is Web Content Management? WCM allows non-technical business people to manage web sites [1] [1]

What is Web Content Management? ● Allows distributed people to build and manage web sites collaboratively ● Allows linking, categorizing and otherwise arranging web site content ● Allows workflow to govern submitted content ● Allows templates driven web sites

What is ebXML Registry? “ebXML Registry is to web services what relational databases were to enterprise applications”

What is ebXML Registry? ● An ebXML registry is an information system that securely manages any content type and the standardized metadata that describes it ● Defined by OASIS ebXML Registry specifications

What ebXML Registry Is Not ● Not just for ebXML artifacts – Collaboration Protocol Profiles, Business Process Specifications and Core Components. ● Not just a web services registry ● Not just for run time use ● Not dependent on any other ebXML specification

The Specifications ● ebXML Registry Information Model – Defines what metadata can be stored in the registry ● ebXML Registry Services – Defines the interface for services provided by the registry – Defines the API for accessing the registry ● ISO Standard, Part 3 and 4

Content Management Federated Architectur e Standard Metadata Event Bus Secure Architecture ebXML Registry Classification, Associations, Taxonomies Validation, Cataloging, Lifecycle Mgt., Ad hoc Query, WCM Federated SQL & XML Queries DSIG, Role-Based Access Control, Audit Trail Content-Based Event Notifi- cation and Simple Workflow Web Services & B2B Registry Publish, Manage & Discover Web Services Major ebXML Registry Features at a Glance

Web Service & B2B Registry ● Provides a Service description Information Model ● Can reference external WSDL, CPP etc. ● Can store WSDL, ebXML CPP, BPS, Core Components repository – Has all benefits of Content Management features

Content Management ● Registry + Repository ● Life cycle management of objects – Includes content validation and cataloging ● Content discovery: ad hoc queries ● HTTP, SOAP and ebXML Messaging interface to registry – Web Content Management

Lifecycle Management Service ● Submit content and metadata – Validate and catalog content during submission ● Assign access control policies ● Classify content – Using user defined taxonomies ● Associate content – Using user defined Association Types ● Organize content as files within folders

Validation and Cataloging ● Validation example: Photo repository – A photo must be at least 8cm x 13cm ● Cataloging example: Photo repository – Automatically categorize photo as black- and-white or color ● Application specific – not pre- defined ● Performed by user defined web service

LifeCycle of a Typical Object

Query Service ● Application specific – not pre- defined – Ad hoc queries – SQL 92 and XML Filter Query syntax ● Content based queries – Find me all images that are color images – Find me all images that are greater than 10cm x 15cm ● Parameterized, stored queries

Sample SQL Query SELECT * from ExtrinsicObject p, Slot w, Slot h, Classification c WHERE (p.objectType = $objectType) (w.parent = p, w.name = ''width'' AND w.value >= $minw AND w.value = $minh AND h.value <= $maxh) AND (c.parent = p, c.classificationNode = $colorFilter)

Stored Queries and Web Content Discovery ● Application specific – not pre- defined ● Hide query complexity from user ● Displayed as a simple web form

Standard Metadata ● Defined by Registry Information Model – Classification of any type of object – Taxonomy hosting, browsing and validation – Association between any two objects – Links to external content – File / Folder like organization of web content ● User defined attribute extensibility

Registry Information Model

Content-based Event Notification ● Subscriber subscribes using Selector Query ● Subscriber receives event notifications using: – SOAP interface: NotificationListener – ● Notification granularity is configurable

Selector Query Example SELECT * from ExtrinsicObject p, Classification c WHERE (p.objectType = ) (c.parent = p, c.classificationNode = )

Secure Architecture ● Digital signature based authentication ● Role Based Access Control (XACML) ● Event Archiving - complete audit trail

Content Integrity and Quality ● All submissions must be digitally signed by a registered Submitter ● Digital signatures of all submissions must be verified by the registry ● All registry responses must be signed ● Content validation enforces semantic correctness using business rules

Role Based Access Control ● Determines WHO can do WHAT to WHICH registry resource – Subject may be a User, Role, or Group – Action may be any registry defined operation – Resource may be any metadata or content ● Custom Access Control Policies use XACML 1.0 syntax

Role Based Access Control Folder1 Folder1 ACP File1 File1 ACP File2 Default ACP Association RegistryAdmin ProjectLeader ProjectMember All Actions Create, Read, Update, Delete, Add Files RegistryGuest Read Read, Update, Reference

Federated Architecture ● Registry Federation and federated query ● Inter-registry object references ● Object relocation – From one registry to another – From one user to another ● Object replication

Netherlands Registry Federation Foreign Ministry Health Ministry Defense MinistryEducation Ministry

National Registry Federations

EU Registry Federation

Summary of WCM Features ● Content, metadata & policies submitted securely via a web interface ● Content validation and cataloging ● Organized as Files within Folders ● Discoverable via parameterized web forms ● Available over HTTP via web browser

ebXML Registry in the Real World ● Adobe: PDF based eForms ● Apelon: Medical guidelines registry ● General Motors: eBusiness Integration ● Gov. of Canada: eGovernment registry ● Republica: Core Components registry ● RosettaNet: Business Process registry

ebXML Registry in the Real World ● Saber: eBusiness Integration ● SDMX: Statistical data registry ● Sun Microsystems: Web Service registry ● US Government / NIST: HL7 Registry

OASIS egov TC / UK Gov. Pilot ● Office of e-Envoy and MOD – Federation of 2 ebXML Registries ● Controlled vocabulary registry ● Publish, manage and discover of ebXML Core Components and BIE ● Context driven schema assembly tool ● Vocabulary Reconciliation

Future Directions ● Semantic Content Management – Classify objects using Ontology class – Associate objects using Ontology class – Inference capable queries – Type extensibility

What will be ebXML Registry? “ebXML Registry will be for the semantic web what web servers are to the web today - ebXML Registry will be the semantic web server of the future ”

Summary ● ebXML Registry is a standard for Web Content Management – Interoperable, secure, distributed WCM ● It is being deployed in diverse use cases by organizations world wide ● It is evolving from a Content Management standard to a Semantic Content Management Standard

Demonstration of Web Content Management Using ebXML Registry

More Information ● OASIS ebXML Registry Registry – open.org/committees/regrep/ – open.org/committees/regrep/documents/2.5/s pecs ● Open Source freebxml Registry – /freebXMLRegistryBrochure.pdf