1. Web Content Management Using the OASIS ebXML Registry Standard Farrukh Najmi XML Standards Architect Sun Microsystems farrukh.najmi@sun.com

2. About the Speaker ● XML Standards Architect, Sun – Focused on content management ● Co-author and editor, ebXML Registry ● Co-founder, freebxml.org ● Lead Architect, freebXML Registry

3. Question So what is ebXML Registry and what does it have to do with Web Content Management?

4. Agenda ● What is Web Content Management? ● What is ebXML Registry? ● Web Content Management using ebXML Registry ● ebXML Registry in the real world ● Future directions

5. What is Web Content Management? WCM allows non-technical business people to manage web sites [1] [1] http://www.crownpeak.com/Company/FAQ/Content_Management_System.asp

6. What is Web Content Management? ● Allows distributed people to build and manage web sites collaboratively ● Allows linking, categorizing and otherwise arranging web site content ● Allows workflow to govern submitted content ● Allows templates driven web sites

7. What is ebXML Registry? “ebXML Registry is to web services what relational databases were to enterprise applications”

8. What is ebXML Registry? ● An ebXML registry is an information system that securely manages any content type and the standardized metadata that describes it ● Defined by OASIS ebXML Registry specifications

9. What ebXML Registry Is Not ● Not just for ebXML artifacts – Collaboration Protocol Profiles, Business Process Specifications and Core Components. ● Not just a web services registry ● Not just for run time use ● Not dependent on any other ebXML specification

10. The Specifications ● ebXML Registry Information Model – Defines what metadata can be stored in the registry ● ebXML Registry Services – Defines the interface for services provided by the registry – Defines the API for accessing the registry ● ISO 15000 Standard, Part 3 and 4

11. Content Management Federated Architectur e Standard Metadata Event Bus Secure Architecture ebXML Registry Classification, Associations, Taxonomies Validation, Cataloging, Lifecycle Mgt., Ad hoc Query, WCM Federated SQL & XML Queries DSIG, Role-Based Access Control, Audit Trail Content-Based Event Notifi- cation and Simple Workflow Web Services & B2B Registry Publish, Manage & Discover Web Services Major ebXML Registry Features at a Glance

12. Web Service & B2B Registry ● Provides a Service description Information Model ● Can reference external WSDL, CPP etc. ● Can store WSDL, ebXML CPP, BPS, Core Components repository – Has all benefits of Content Management features

13. Content Management ● Registry + Repository ● Life cycle management of objects – Includes content validation and cataloging ● Content discovery: ad hoc queries ● HTTP, SOAP and ebXML Messaging interface to registry – Web Content Management

14. Lifecycle Management Service ● Submit content and metadata – Validate and catalog content during submission ● Assign access control policies ● Classify content – Using user defined taxonomies ● Associate content – Using user defined Association Types ● Organize content as files within folders

15. Validation and Cataloging ● Validation example: Photo repository – A photo must be at least 8cm x 13cm ● Cataloging example: Photo repository – Automatically categorize photo as black- and-white or color ● Application specific – not pre- defined ● Performed by user defined web service

16. LifeCycle of a Typical Object

17. Query Service ● Application specific – not pre- defined – Ad hoc queries – SQL 92 and XML Filter Query syntax ● Content based queries – Find me all images that are color images – Find me all images that are greater than 10cm x 15cm ● Parameterized, stored queries

18. Sample SQL Query SELECT * from ExtrinsicObject p, Slot w, Slot h, Classification c WHERE (p.objectType = $objectType) (w.parent = p, w.name = ''width'' AND w.value >= $minw AND w.value = $minh AND h.value <= $maxh) AND (c.parent = p, c.classificationNode = $colorFilter)

19. Stored Queries and Web Content Discovery ● Application specific – not pre- defined ● Hide query complexity from user ● Displayed as a simple web form

20. Standard Metadata ● Defined by Registry Information Model – Classification of any type of object – Taxonomy hosting, browsing and validation – Association between any two objects – Links to external content – File / Folder like organization of web content ● User defined attribute extensibility

21. Registry Information Model

23. Content-based Event Notification ● Subscriber subscribes using Selector Query ● Subscriber receives event notifications using: – SOAP interface: NotificationListener – Email ● Notification granularity is configurable

24. Selector Query Example SELECT * from ExtrinsicObject p, Classification c WHERE (p.objectType = ) (c.parent = p, c.classificationNode = )

25. Secure Architecture ● Digital signature based authentication ● Role Based Access Control (XACML) ● Event Archiving - complete audit trail

26. Content Integrity and Quality ● All submissions must be digitally signed by a registered Submitter ● Digital signatures of all submissions must be verified by the registry ● All registry responses must be signed ● Content validation enforces semantic correctness using business rules

27. Role Based Access Control ● Determines WHO can do WHAT to WHICH registry resource – Subject may be a User, Role, or Group – Action may be any registry defined operation – Resource may be any metadata or content ● Custom Access Control Policies use XACML 1.0 syntax

28. Role Based Access Control Folder1 Folder1 ACP File1 File1 ACP File2 Default ACP Association RegistryAdmin ProjectLeader ProjectMember All Actions Create, Read, Update, Delete, Add Files RegistryGuest Read Read, Update, Reference

29. Federated Architecture ● Registry Federation and federated query ● Inter-registry object references ● Object relocation – From one registry to another – From one user to another ● Object replication

30. Netherlands Registry Federation Foreign Ministry Health Ministry Defense MinistryEducation Ministry

31. National Registry Federations

32. EU Registry Federation

33. Summary of WCM Features ● Content, metadata & policies submitted securely via a web interface ● Content validation and cataloging ● Organized as Files within Folders ● Discoverable via parameterized web forms ● Available over HTTP via web browser

34. ebXML Registry in the Real World ● Adobe: PDF based eForms ● Apelon: Medical guidelines registry ● General Motors: eBusiness Integration ● Gov. of Canada: eGovernment registry ● Republica: Core Components registry ● RosettaNet: Business Process registry

35. ebXML Registry in the Real World ● Saber: eBusiness Integration ● SDMX: Statistical data registry ● Sun Microsystems: Web Service registry ● US Government / NIST: HL7 Registry

36. OASIS egov TC / UK Gov. Pilot ● Office of e-Envoy and MOD – Federation of 2 ebXML Registries ● Controlled vocabulary registry ● Publish, manage and discover of ebXML Core Components and BIE ● Context driven schema assembly tool ● Vocabulary Reconciliation

37. Future Directions ● Semantic Content Management – Classify objects using Ontology class – Associate objects using Ontology class – Inference capable queries – Type extensibility

38. What will be ebXML Registry? “ebXML Registry will be for the semantic web what web servers are to the web today - ebXML Registry will be the semantic web server of the future ”

39. Summary ● ebXML Registry is a standard for Web Content Management – Interoperable, secure, distributed WCM ● It is being deployed in diverse use cases by organizations world wide ● It is evolving from a Content Management standard to a Semantic Content Management Standard

40. Demonstration of Web Content Management Using ebXML Registry farrukh.najmi@sun.com

41. More Information ● OASIS ebXML Registry Registry – http://www.oasis- open.org/committees/regrep/ – http://www.oasis- open.org/committees/regrep/documents/2.5/s pecs ● Open Source freebxml Registry – http://ebxmlrr.sourceforge.net/presentations /freebXMLRegistryBrochure.pdf