11:00
am
W3C Privacy and Security Initiatives
The Society and Technology Domain within W3C concentrates
on the impact of the Web on our daily life. P3P, Platform
for Privacy Preferences, is a W3C protocol designed to allow
Web sites to present their data-collection practices in
a standardized, machine-readable, easy-to-locate manner
to enable Web users to understand what data will be collected
by sites they visit, how that data will be used, and what
data/uses they may "opt-out" of or "opt-in"
to. PICS, the Platform for Internet Content Selection provides
us with a system for associating ratings with Internet content.
Learn more about these and other W3C privacy and security
initiatives in this session
by Ralph Swick, Technical Director, Tecnology &
Society Domain, W3C
11:45
am
A
Security Model for Syndication and Subscription
There has been an explosion of exchange and syndication
protocols in the XML space. Only a small emphasis has been
put on the security modeled around and by those protocols.
There are a number of ways security can be implemented.
This paper looks at one potential instance of security.
We will model several levels of security, potential uses
for each security mode and the ICE extensions used to incorporate
security. ICE is used to demonstrate "real world"
applicability of the implementation of a security model.
The structures of this model are generic in nature and should
be adaptable to fit other exchange protocols.
by Daniel Koger, Director, XML Practices, Herrick
Douglass Technology, Inc.
2:00
pm
Securing
Personal Information on the Web
This presentation describes how information is gathered
from a Web user and proposes methods to counter these activities.
It details specific points where personal privacy is vulnerable
and suggests data aggregation solutions, where the consumer
owns and controls access to his personal information.
by Ann Adams, Solutions Account Manager, Xerox Corporation
2:45
pm
Will
XML and Information Retrieval Make Society Transparent?
XML will add great strength to our ability to retrieve text
based on various criteria. One of the downfalls of this
will be increased threats to personal privacy, as information
created by or about us will be much easier to find in public
and private data sources. This presentation addresses how
information retrieval will be enhanced by XML, and the accompanying
threats to personal privacy as a result of the enhancements.
by Gregory B. Newby, Assistant Professor, University
of North Carolina at Chapel Hill
4:00
pm
Customer
Profile Exchange
CPExchange, Customer Profile Exchange, hosted by IDEAlliance,
offers a vendor-neutral, open standard for facilitating
the privacy-enabled interchange of customer information
across disparate enterprise applications and systems. Businesses
will be able to apply CPExchange across a disparate range
of back-office applications, front-office applications and
Web customer automation applications. While the benefits
of a singular customer view are growing increasingly apparent
within an enterprise, CPExchange solutions will prove vital
in tomorrow's world of connected enterprises.
by Brad Husick, VP Standards & Evangelism, Vignette
Corporation, Member of CPExchange Working Group
4:45
pm
XML
Digital Signatures
One element of trust is the ability to reliably associate
a statement with the person or organization who made it.
While the underlying cryptographic technology to accomplish
this is available and widely known, it has not yet been
applied to a general-purpose system for creating machine
readable statements. As part of achieving this goal, the
XML Signature Activity will produce a simple facility for
associating a signature key with a document. Learn more
about digital signatures and why they are important in this
session.
by Joseph M. Reagle Jr., XML Signature Co-Chair, W3C
