SIST ISO 19153:2015
Geospatial Digital Rights Management Reference Model (GeoDRM RM)
Geospatial Digital Rights Management Reference Model (GeoDRM RM)
This International Standard is a reference model for digital rights management (DRM) functionality for
geospatial resources (GeoDRM). As such, it is connected to the general DRM market in that geospatial
resources must be treated as nearly as possible like other resources, such as music, text, or services.
This International Standard defines:
— A conceptual model for digital rights management of geospatial resources, providing a framework
and reference for more detailed specification in this area.
— A metadata model for the expression of rights that associate users to the acts that they can perform
against a particular geospatial resource, and associated information used in the enforcement and
granting of those rights, such as owner metadata, available rights, and issuer of those rights.
— Requirements that are placed on rights management systems for the enforcement of those rights.
NOTE A rights management system must be necessary and sufficient: it must implement only those
restrictions necessary to enforce the rights defined therein, and it must be sufficient to enforce those rights.
— How this is to work conceptually in the larger DRM context to ensure the ubiquity of geospatial
resources in the general services market.
A resource in this context is a data file, or service for geographic information or process.
This abstract descriptive International Standard builds on and complements the existing standards, and
defines at an abstract level a rights model to enable the digital rights management of standards-based
geospatial resources. Future GeoDRM standards will be written to implement the concepts defined in
this International Standard. This International Standard is not intended to delve into questions of morals, ethics, market model, or
implementations any further than is necessary to express requirements against rights management
functionalities and systems.
Modèle de référence de la gestion des droits numériques des données géographiques
L'ISO 19153:2014 est un mod�le de r�f�rence pour la fonctionnalit� de la gestion num�rique des droits (DRM) des ressources g�ospatiales (g�o-DRM). En tant que telle, elle est reli�e au march� g�n�ral de la DRM, �tant donn� que les ressources g�ospatiales doivent �tre trait�es autant que possible comme d'autres ressources, telles que de la musique, des textes, ou des services.
L'ISO 19153:2014 d�finit:
- Un mod�le conceptuel pour une gestion num�rique des droits des ressources g�ospatiales, fournissant un cadre et une r�f�rence � une sp�cification plus d�taill�e dans ce domaine.
- Un mod�le de m�tadonn�es pour l'expression de droits qui associe les utilisateurs aux actions qu'ils peuvent accomplir envers une ressource g�ospatiale particuli�re, et une information associ�e utilis�e dans la mise en application et la concession de ces droits, tels que des m�tadonn�es de propri�taire, des droits disponibles et des �metteurs de ces droits.
- Des exigences plac�es sur des syst�mes de gestion de droits pour la mise en application de ces droits. Un syst�me de gestion des droits doit �tre n�cessaire et suffisant: il doit mettre uniquement en oeuvre les restrictions n�cessaires pour imposer les droits qui y sont d�finis, et doit �tre suffisant pour imposer ces droits.
- La mani�re dont cela doit fonctionner du point de vue conceptuel dans le contexte plus vaste de DRM afin d'assurer l'omnipr�sence des ressources g�ographiques sur le march� g�n�ral des services.
Une ressource dans ce contexte est un fichier de donn�es, un service d'information ou de m�thodes g�ographiques.
La pr�sente norme descriptive abstraite se fonde sur les normes existantes et les compl�te, et d�finit � un niveau abstrait un mod�le de droits qui permet la gestion num�rique des droits des ressources g�ospatiales bas�es sur des normes. Les futures normes g�o-DRM seront r�dig�es de mani�re � mettre en oeuvre les concepts d�finis dans l'ISO 19153:2014.
Referenčni model za upravljanje geoprostorskih digitalnih avtorskih pravic (GeoDRM)
Ta mednarodni standard je referenčni model za funkcijo upravljanja digitalnih avtorskih pravic (DRM) za geoprostorske vire. Kot takšen je povezan s splošnim trgom upravljanja digitalnih avtorskih pravic, kar pomeni, da je treba geoprostorske vire obravnavati na način, ki je čim bolj enak načinu, na katerega se obravnavajo drugi viri, kot so glasba, besedilo ali storitve. Ta mednarodni standard določa:
– konceptualni model za upravljanje digitalnih avtorskih pravic za geoprostorske vire, ki ponuja ogrodje in referenco za podrobnejšo specifikacijo na tem področju;
– metapodatkovni model za izražanje pravic, ki povezujejo uporabnike z dejanji, ki jih lahko izvedejo za določen geoprostorski vir, ter povezane informacije, uporabljene pri uveljavitvi in dodelitvi takšnih pravic, kot so metapodatki lastnika, razpoložljive pravice in izdajatelj takšnih pravic;
– zahteve za sisteme upravljanja pravic, ki urejajo uveljavitev teh pravic; OPOMBA Sistem upravljanja pravic mora izražati potrebnost in zadostnost: uvesti mora le tiste omejitve, ki so potrebne za uveljavitev pravic, določenih v tem dokumentu, in mora biti zadosten za njihovo uveljavitev;
– način konceptualnega delovanja v širšem kontekstu upravljanja digitalnih avtorskih pravic, s čimer se zagotovi vseprisotnost geoprostorskih virov na trgu splošnih storitev.
Vir v tem kontekstu je podatkovna datoteka ali storitev za geografske informacije ali postopek.
Ta povzetek opisa mednarodnega standarda temelji na obstoječih standardih in jih dopolnjuje ter na abstraktni ravni določa model pravic, da se omogoči upravljanje digitalnih avtorskih pravic za geoprostorske vire, ki temeljijo na standardih. Prihodnji standardi upravljanja geoprostorskih digitalnih avtorskih pravic bodo napisani z namenom uvedbe konceptov, določenih v tem mednarodnem standardu. Namen tega mednarodnega standarda ni poglabljanje v vprašanja moralnih in etičnih načel, tržnega modela ali uvedb, razen kolikor je to potrebno za izražanje zahtev v zvezi s funkcijami in sistemi upravljanja pravic.
General Information
Buy Standard
Standards Content (Sample)
SLOVENSKI STANDARD
SIST ISO 19153:2015
01-februar-2015
5HIHUHQþQLPRGHO]DXSUDYOMDQMHJHRSURVWRUVNLKGLJLWDOQLKDYWRUVNLKSUDYLF
*HR'50
Geospatial Digital Rights Management Reference Model (GeoDRM RM)
Modèle de référence de la gestion des droits numériques des données géographiques
Ta slovenski standard je istoveten z: ISO 19153:2014
ICS:
07.040 Astronomija. Geodezija. Astronomy. Geodesy.
Geografija Geography
35.240.70 Uporabniške rešitve IT v IT applications in science
znanosti
SIST ISO 19153:2015 en,fr,de
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
---------------------- Page: 1 ----------------------
SIST ISO 19153:2015
---------------------- Page: 2 ----------------------
SIST ISO 19153:2015
INTERNATIONAL ISO
STANDARD 19153
First edition
2014-02-15
Geospatial Digital Rights Management
Reference Model (GeoDRM RM)
Modèle de référence pour la gestion numérique des droits d’utilisation
de l’information géographique
Reference number
ISO 19153:2014(E)
©
ISO 2014
---------------------- Page: 3 ----------------------
SIST ISO 19153:2015
ISO 19153:2014(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO 2014
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail copyright@iso.org
Web www.iso.org
Published in Switzerland
ii © ISO 2014 – All rights reserved
---------------------- Page: 4 ----------------------
SIST ISO 19153:2015
ISO 19153:2014(E)
Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
2 Conformance . 2
3 Normative references . 2
4 Terms and definitions . 3
5 Conventions . 9
5.1 Abbreviated terms . 9
5.2 UML notation . 9
6 GeoDRM design principles .10
6.1 GeoDRM roadmap .10
6.2 Basics .10
6.3 Flow model of GeoDRM .11
6.4 GeoDRM Gatekeeper .11
6.5 DRM metadata — licence model .15
6.6 Developmental guidelines .16
6.7 The components of managing risk .17
7 GeoDRM enterprise viewpoint and Abstract Rights Model.19
7.1 General .19
7.2 Geospatial resource .19
7.3 GeoLicence extents .19
7.4 GeoLicence expression .21
7.5 GeoLicence creation and enforcement .21
7.6 GeoLicence delegation and management .21
7.7 GeoLicence chaining .22
7.8 GeoLicensing communities .23
7.9 GeoLicensing and resource lineage .25
7.10 Handling GeoLicence violation — and the break-the-glass principle .25
7.11 Automated licence revocation/expiration — need to revoke privilege .26
8 GeoDRM computational viewpoint .26
8.1 Overview — roles and responsibilities .26
8.2 Principals .29
8.3 Resource owner.30
8.4 Agent .30
8.5 Licence broker or licensing agent .30
8.6 Service broker .31
8.7 Service provider .31
8.8 End-user .31
8.9 Licence manager .31
9 Information viewpoint .31
9.1 Overview .31
9.2 User metadata .33
9.3 Properties and patterns .33
9.4 Resource metadata .33
9.5 Licence metadata .34
9.6 Process metadata .44
Annex A (normative) Abstract test suite .45
Annex B (informative) GeoDRM UML model.47
Annex C (informative) Scenarios .82
© ISO 2014 – All rights reserved iii
---------------------- Page: 5 ----------------------
SIST ISO 19153:2015
ISO 19153:2014(E)
Annex D (informative) Editor’s notes .88
Bibliography .89
iv © ISO 2014 – All rights reserved
---------------------- Page: 6 ----------------------
SIST ISO 19153:2015
ISO 19153:2014(E)
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation on the meaning of ISO specific terms and expressions related to conformity
assessment, as well as information about ISO’s adherence to the WTO principles in the Technical Barriers
to Trade (TBT) see the following URL: Foreword - Supplementary information
The committee responsible for this document is ISO/TC 211, Geographic information/Geomatics, jointly
with the Open Geospatial Consortium, Inc. (OGC).
© ISO 2014 – All rights reserved v
---------------------- Page: 7 ----------------------
SIST ISO 19153:2015
ISO 19153:2014(E)
Introduction
To create a marketplace, individuals who own something of value (here a resource) shall have some level
of assurance that they will be able to obtain fair value for its use or purchase. In a digital world, due to
the nature of digital resources and commerce, most digital entities are not sold in the usual sense. When
a user acquires an application, he actually acquires the right to use a copy of the application. Possession
does not equate with ownership, and a system of software and resource licensing has grown up in the
digital world that ensures the following types of things:
— The user can legitimately act upon a resource if he has a corresponding licence for that act.
— The owner will maintain the resource, fixing errors (“bug-fix”) and assuring a guaranteed level of
functionality.
— Optionally, the user can be asked to pay the owner of the resource based upon agreed criteria,
whether that is a one-time fee, a per-machine fee, a usage fee, or some other mechanism stated in
the legal contract or licence between user and owner.
— The user agrees to protect the owner’s rights based on the agreement. This usually means he cannot
backward engineer code or resource, nor redistribute the resource without proper permission.
— The owner agrees to maintain the resource and allow a reasonable access to the users for any fixes
that can be required. Again, the extent or degree of maintenance is stated in the user agreement.
— To create and support a large-scale, open market in geospatial resources, this type of protection is
needed to ensure that a “fair value for work (investment)” ethic can be guaranteed so that suppliers
can be sure of fair return on individual sales, and users can be sure of fair value for purchases of
uses of resources.
This International Standard describes how this is to be done.
This International Standard does not replace any previous ISO or OGC international standards, but it is
dependent upon them. Each resource and service standard that exists or will exist becomes a resource
description in this International Standard, and hopefully will be subject to the same sorts of protection
that are afforded to other digital resources.
vi © ISO 2014 – All rights reserved
---------------------- Page: 8 ----------------------
SIST ISO 19153:2015
INTERNATIONAL STANDARD ISO 19153:2014(E)
Geospatial Digital Rights Management Reference Model
(GeoDRM RM)
1 Scope
This International Standard is a reference model for digital rights management (DRM) functionality for
geospatial resources (GeoDRM). As such, it is connected to the general DRM market in that geospatial
resources must be treated as nearly as possible like other resources, such as music, text, or services.
This International Standard defines:
— A conceptual model for digital rights management of geospatial resources, providing a framework
and reference for more detailed specification in this area.
— A metadata model for the expression of rights that associate users to the acts that they can perform
against a particular geospatial resource, and associated information used in the enforcement and
granting of those rights, such as owner metadata, available rights, and issuer of those rights.
— Requirements that are placed on rights management systems for the enforcement of those rights.
NOTE A rights management system must be necessary and sufficient: it must implement only those
restrictions necessary to enforce the rights defined therein, and it must be sufficient to enforce those rights.
— How this is to work conceptually in the larger DRM context to ensure the ubiquity of geospatial
resources in the general services market.
A resource in this context is a data file, or service for geographic information or process.
This abstract descriptive International Standard builds on and complements the existing standards, and
defines at an abstract level a rights model to enable the digital rights management of standards-based
geospatial resources. Future GeoDRM standards will be written to implement the concepts defined in
this International Standard.
GeoDRM Reference Model
GeoDRM Implementation Specs
Implementation Specs
Common Platforms
Geographic Reference Model
ISO Open Distributed Processing
Figure 1 — GeoDRM reference model context
Figure 1 shows a simplified view of how this International Standard, the Geospatial Digital Rights
Management Reference Model (indicated in grey), relates to the ISO Open Distributed Processing
© ISO 2014 – All rights reserved 1
---------------------- Page: 9 ----------------------
SIST ISO 19153:2015
ISO 19153:2014(E)
standard, OGC Reference Model, and OWS Common initiative. The purpose of this International Standard
is to define the conceptual framework and rights model for the future GeoDRM Implementation
Standards, which will enable the digital rights management of geospatial resources.
This International Standard is not intended to delve into questions of morals, ethics, market model, or
implementations any further than is necessary to express requirements against rights management
functionalities and systems.
2 Conformance
Because the normative nature of a reference model is embedded in its “reference” description of the
semantics of the environment which it describes, the central requirement of this International Standard
is:
Any standard or implementation conformant to this International Standard shall be consistent with
the semantics described within this International Standard or within the normative references of
this International Standard.
Conformance with this specification shall be checked using tests specified in Annex A. Conformance
classes for this International Standard are
— alignment of rights expression to the abstract rights model,
— expression for applicability of rights for geospatial resources, and
— enforcement of rights for geospatial resources.
Resources that are augmented by GeoDRM licence metadata will be referred to as GeoDRM extended or
enabled resources. Processing resources that have met the requirements to maintain GeoDRM resource
and enforce the licensing procedures shall be referred to as GeoDRM enabled.
This is a complex subject, and Annexes B to D are informative annexes that aid in understanding the
normative specification of the rights expression language.
3 Normative references
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
ISO 2382-6, Information processing systems — Vocabulary — Part 6: Preparation and handling of data
ISO/IEC 15408, Information technology — Security techniques — Evaluation for IT security
1)
ISO/IEC 21000 (all parts), Information technology — Multimedia framework (MPEG-21)
ISO/IEC 21000-5, Information technology — Multimedia framework (MPEG-21) — Part 5: Rights Expression
Language
1) The MPEG 21 (ISO/IEC 21000) standard is a work in progress. It will eventually have at least 14 parts. Only
the first few are available now. The intent is to eventually incorporate as much of ISO/IEC 21000 as appropriate in
this International Standard in order to assure interoperability of geospatial resource DRM with that used for other
multimedia information.
2 © ISO 2014 – All rights reserved
---------------------- Page: 10 ----------------------
SIST ISO 19153:2015
ISO 19153:2014(E)
4 Terms and definitions
For the purposes of this document, the terms and definitions in ISO 2382-6 and ISO/IEC 15408 and the
following apply.
NOTE If a term is not defined in this document, it will take the definition supplied in their original context
in the last reference in the following list in which it occurs, or, if still undefined, its usual English [Oxford English
Dictionary (OED) or Webster] definition.
— ISO 2382-6 for common processing terms such as read, write, copy, duplicate, input, output, collection,
acquisition, transform, convert, encode, decode, search, index, edit, and extract.
— ISO/IEC 15408 for common information technology (IT) security terms such as authentication resource,
authorized user, identity, security attribute, security policy, and trusted channel.
[13]
— OWS Common Implementation Specification [OGC 05-008 ].
[14]
— OGC Glossary for terms and examples specifically related to OGC standardized web services.
[8]
— RM-ODP for system modelling terms such as the enterprise, computational, and information viewpoints.
[19] [15]
— ODRL, OMA DRM REL, and ISO/IEC 21000 for terms specific to rights expressions languages, such as
principal, licence, right, grant, condition, and resource.
Terms that are repeatedly defined in these resources shall assume the definition supplied here in the context of
GeoDRM.
4.1
access control
combination of authentication (4.4) and authorization (4.5)
4.2
agency
legal relationship of a person (called the agent [4.3]) who acts on behalf of another person, company, or
government (called the principal [4.35])
4.3
agent
one who acts on behalf of another
4.4
authentication
verification that a potential partner in a conversation is capable of representing a person or organization
[SOURCE: W3C, Web Services Glossary]
4.5
authorization
determination whether a subject is allowed to have the specified types of access to a particular resource
(4.40)
Note 1 to entry: Usually, authorization is in the context of authentication (4.4). Once a subject is authenticated, it
can be authorized to perform different types of access.
4.6
bypass
mechanism to defeat the purpose of a subsystem by avoiding its invocation
[SOURCE: W3C, Web Services Glossary]
Note 1 to entry: Security systems are bypassed usually by using security faults in the operating system. Such
infringements (4.21 and 4.22) are more an aspect of the operating system than of the security system. To correct
this, the relationship between the security system and the operating system shall be modified to prevent bypass
mechanisms.
© ISO 2014 – All rights reserved 3
---------------------- Page: 11 ----------------------
SIST ISO 19153:2015
ISO 19153:2014(E)
4.7
chain of agency
sequence of agency (4.2) where the agent (4.3) in each relationship is the principal (4.35) of the next in
the chain
Note 1 to entry: A chain of agency, with the proper agreements at each step creates a transitive agency between
the agent of the first link and the principal of the last. This chain can be spoken of in either direction, either as
“principal → agent = principal → agent” (normal or granting order) or “agent → principal = agent → principal”
(reverse, acceptance, verification, or tracing order).
4.8
chain of licence
sequence of licences (4.26) that traces a chain of agency (4.7), where a licence is granted at each link of the
chain, allowing the agent (4.3) at that link to act as the principal (4.35) in the next
Note 1 to entry: As with the chain of agency, this chain can be spoken of in either direction.
4.9
contract
agreement between two or more principals (4.35) that creates in each principal a duty to do or not do
something and a right to performance of the other’s duty or a remedy for the breach of the other’s duty
[SOURCE: FindLaw, modified]
4.10
copyleft
licence (4.26) that accompanies some open source software that details how the software and its
accompanying source code can be freely copied, distributed, and modified
Note 1 to entry: A copyleft is a form of general public licence (4.15).
4.11
digital licence
document or its representation that specifies the rights (4.42) granted to a particular user or organization
with respect to a specific content or group of content
Note 1 to entry: The core concept in DRM (4.12) is the use of digital licences. Instead of buying the digital
content, the consumer purchases a licence (4.26) granting certain rights with respect to the content. A licence
is the mechanism by which a rights holder (4.43) conveys rights to another party (4.35), such as a consumer or
distributor.
4.12
digital rights management
DRM
packaging, distributing, controlling, and tracking content based on rights (4.42) and licensing information
Note 1 to entry: DRM covers a much broader spectrum of capabilities and underlying technologies supporting
description, identification, trading, protecting, monitoring, and tracking of all forms of rights usages for both
tangible and intangible (electronic) assets, including the management of rights-holders relationships. See,
for example, Reference [5]. “Digital” refers to the material over which the rights exist. “Rights” applies to the
Intellectual Property rights linked to the material. “Management” covers both the defining of policy and enforcing
that policy in such a way that rights are respected. The ultimate goal of a distributed DRM system is for content
authors to be able to project policies governing their content into remote environments with confidence that
[12]
those policies will be respected by the remote nodes. For the purposes of this International Standard, DRM
is taken to mean technology that enables the secure distribution (and where appropriate, sale) of digital media
[26]
content on the Internet.
4.13
expected risk
expected value (statistics) of loss
Note 1 to entry: Expected risk (4.45) is calculated by multiplying the probability of the types of infringement (4.21
and 4.22) by the cost of that infringement, summed up over all types of infringement.
4 © ISO 2014 – All rights reserved
---------------------- Page: 12 ----------------------
SIST ISO 19153:2015
ISO 19153:2014(E)
4.14
fair use
uses of content that are considered valid defences to copyright infringement (4.21 and 4.22), such as for
criticism or educational purposes
[SOURCE: U.S. legal term derived from Title 17 of the United States Code, Section 107]
Note 1 to entry: Fair use is based on case-law precedents derived from general principles. The term is often
misapplied to refer to the reasonable expectations of consumers to be able to use purchased content on all owned
[29]
devices.
4.15
general public licence
GPL
licence (4.26) containing rights (4.42) accorded to the general public without an existing agreement
Note 1 to entry: GPLs can be granted by the owner (4.34) of a resource (4.40) or can be applied to a resource by
law, usually as part of the copyright law. The most obvious GPL concept is fair use (4.14) in the United States for
copyrighted material. Other GPL rights can be demanded by the source of the resource or other “public good”
considerations.
Note 2 to entry: The most widespread use of GPL is in reference to the GNU GPL, which is commonly abbreviated
simply as GPL when it is understood that the term refers to the GNU GPL. One of the basic tenets of the GPL is that
anyone who acquires the material shall make it available to anyone else under the same licensing agreement. The
GPL does not cover activities other than the copying, distributing, and modifying of the source code. A GPL is also
[29]
referred to as a copyleft (4.10), in contrast to a copyright, which identifies the proprietary rights of material.
4.16
GeoDRM enabled
capable of maintaining GeoDRM extended (4.17)resources (4.40) and enforcing GeoDRM defined rights
(4.42) and protections (4.38)
Note 1 to entry: Applied to processing resources.
4.17
GeoDRM extended (applied to resources)
associated to GeoDRM metadata indicating types of licences (4.26) that apply
4.18
GeoLicence
licence (4.26) related to geoinformation
4.19
GeoLicence r
...
INTERNATIONAL ISO
STANDARD 19153
First edition
2014-02-15
Geospatial Digital Rights Management
Reference Model (GeoDRM RM)
Modèle de référence pour la gestion numérique des droits d’utilisation
de l’information géographique
Reference number
ISO 19153:2014(E)
©
ISO 2014
---------------------- Page: 1 ----------------------
ISO 19153:2014(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO 2014
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail copyright@iso.org
Web www.iso.org
Published in Switzerland
ii © ISO 2014 – All rights reserved
---------------------- Page: 2 ----------------------
ISO 19153:2014(E)
Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
2 Conformance . 2
3 Normative references . 2
4 Terms and definitions . 3
5 Conventions . 9
5.1 Abbreviated terms . 9
5.2 UML notation . 9
6 GeoDRM design principles .10
6.1 GeoDRM roadmap .10
6.2 Basics .10
6.3 Flow model of GeoDRM .11
6.4 GeoDRM Gatekeeper .11
6.5 DRM metadata — licence model .15
6.6 Developmental guidelines .16
6.7 The components of managing risk .17
7 GeoDRM enterprise viewpoint and Abstract Rights Model.19
7.1 General .19
7.2 Geospatial resource .19
7.3 GeoLicence extents .19
7.4 GeoLicence expression .21
7.5 GeoLicence creation and enforcement .21
7.6 GeoLicence delegation and management .21
7.7 GeoLicence chaining .22
7.8 GeoLicensing communities .23
7.9 GeoLicensing and resource lineage .25
7.10 Handling GeoLicence violation — and the break-the-glass principle .25
7.11 Automated licence revocation/expiration — need to revoke privilege .26
8 GeoDRM computational viewpoint .26
8.1 Overview — roles and responsibilities .26
8.2 Principals .29
8.3 Resource owner.30
8.4 Agent .30
8.5 Licence broker or licensing agent .30
8.6 Service broker .31
8.7 Service provider .31
8.8 End-user .31
8.9 Licence manager .31
9 Information viewpoint .31
9.1 Overview .31
9.2 User metadata .33
9.3 Properties and patterns .33
9.4 Resource metadata .33
9.5 Licence metadata .34
9.6 Process metadata .44
Annex A (normative) Abstract test suite .45
Annex B (informative) GeoDRM UML model.47
Annex C (informative) Scenarios .82
© ISO 2014 – All rights reserved iii
---------------------- Page: 3 ----------------------
ISO 19153:2014(E)
Annex D (informative) Editor’s notes .88
Bibliography .89
iv © ISO 2014 – All rights reserved
---------------------- Page: 4 ----------------------
ISO 19153:2014(E)
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation on the meaning of ISO specific terms and expressions related to conformity
assessment, as well as information about ISO’s adherence to the WTO principles in the Technical Barriers
to Trade (TBT) see the following URL: Foreword - Supplementary information
The committee responsible for this document is ISO/TC 211, Geographic information/Geomatics, jointly
with the Open Geospatial Consortium, Inc. (OGC).
© ISO 2014 – All rights reserved v
---------------------- Page: 5 ----------------------
ISO 19153:2014(E)
Introduction
To create a marketplace, individuals who own something of value (here a resource) shall have some level
of assurance that they will be able to obtain fair value for its use or purchase. In a digital world, due to
the nature of digital resources and commerce, most digital entities are not sold in the usual sense. When
a user acquires an application, he actually acquires the right to use a copy of the application. Possession
does not equate with ownership, and a system of software and resource licensing has grown up in the
digital world that ensures the following types of things:
— The user can legitimately act upon a resource if he has a corresponding licence for that act.
— The owner will maintain the resource, fixing errors (“bug-fix”) and assuring a guaranteed level of
functionality.
— Optionally, the user can be asked to pay the owner of the resource based upon agreed criteria,
whether that is a one-time fee, a per-machine fee, a usage fee, or some other mechanism stated in
the legal contract or licence between user and owner.
— The user agrees to protect the owner’s rights based on the agreement. This usually means he cannot
backward engineer code or resource, nor redistribute the resource without proper permission.
— The owner agrees to maintain the resource and allow a reasonable access to the users for any fixes
that can be required. Again, the extent or degree of maintenance is stated in the user agreement.
— To create and support a large-scale, open market in geospatial resources, this type of protection is
needed to ensure that a “fair value for work (investment)” ethic can be guaranteed so that suppliers
can be sure of fair return on individual sales, and users can be sure of fair value for purchases of
uses of resources.
This International Standard describes how this is to be done.
This International Standard does not replace any previous ISO or OGC international standards, but it is
dependent upon them. Each resource and service standard that exists or will exist becomes a resource
description in this International Standard, and hopefully will be subject to the same sorts of protection
that are afforded to other digital resources.
vi © ISO 2014 – All rights reserved
---------------------- Page: 6 ----------------------
INTERNATIONAL STANDARD ISO 19153:2014(E)
Geospatial Digital Rights Management Reference Model
(GeoDRM RM)
1 Scope
This International Standard is a reference model for digital rights management (DRM) functionality for
geospatial resources (GeoDRM). As such, it is connected to the general DRM market in that geospatial
resources must be treated as nearly as possible like other resources, such as music, text, or services.
This International Standard defines:
— A conceptual model for digital rights management of geospatial resources, providing a framework
and reference for more detailed specification in this area.
— A metadata model for the expression of rights that associate users to the acts that they can perform
against a particular geospatial resource, and associated information used in the enforcement and
granting of those rights, such as owner metadata, available rights, and issuer of those rights.
— Requirements that are placed on rights management systems for the enforcement of those rights.
NOTE A rights management system must be necessary and sufficient: it must implement only those
restrictions necessary to enforce the rights defined therein, and it must be sufficient to enforce those rights.
— How this is to work conceptually in the larger DRM context to ensure the ubiquity of geospatial
resources in the general services market.
A resource in this context is a data file, or service for geographic information or process.
This abstract descriptive International Standard builds on and complements the existing standards, and
defines at an abstract level a rights model to enable the digital rights management of standards-based
geospatial resources. Future GeoDRM standards will be written to implement the concepts defined in
this International Standard.
GeoDRM Reference Model
GeoDRM Implementation Specs
Implementation Specs
Common Platforms
Geographic Reference Model
ISO Open Distributed Processing
Figure 1 — GeoDRM reference model context
Figure 1 shows a simplified view of how this International Standard, the Geospatial Digital Rights
Management Reference Model (indicated in grey), relates to the ISO Open Distributed Processing
© ISO 2014 – All rights reserved 1
---------------------- Page: 7 ----------------------
ISO 19153:2014(E)
standard, OGC Reference Model, and OWS Common initiative. The purpose of this International Standard
is to define the conceptual framework and rights model for the future GeoDRM Implementation
Standards, which will enable the digital rights management of geospatial resources.
This International Standard is not intended to delve into questions of morals, ethics, market model, or
implementations any further than is necessary to express requirements against rights management
functionalities and systems.
2 Conformance
Because the normative nature of a reference model is embedded in its “reference” description of the
semantics of the environment which it describes, the central requirement of this International Standard
is:
Any standard or implementation conformant to this International Standard shall be consistent with
the semantics described within this International Standard or within the normative references of
this International Standard.
Conformance with this specification shall be checked using tests specified in Annex A. Conformance
classes for this International Standard are
— alignment of rights expression to the abstract rights model,
— expression for applicability of rights for geospatial resources, and
— enforcement of rights for geospatial resources.
Resources that are augmented by GeoDRM licence metadata will be referred to as GeoDRM extended or
enabled resources. Processing resources that have met the requirements to maintain GeoDRM resource
and enforce the licensing procedures shall be referred to as GeoDRM enabled.
This is a complex subject, and Annexes B to D are informative annexes that aid in understanding the
normative specification of the rights expression language.
3 Normative references
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
ISO 2382-6, Information processing systems — Vocabulary — Part 6: Preparation and handling of data
ISO/IEC 15408, Information technology — Security techniques — Evaluation for IT security
1)
ISO/IEC 21000 (all parts), Information technology — Multimedia framework (MPEG-21)
ISO/IEC 21000-5, Information technology — Multimedia framework (MPEG-21) — Part 5: Rights Expression
Language
1) The MPEG 21 (ISO/IEC 21000) standard is a work in progress. It will eventually have at least 14 parts. Only
the first few are available now. The intent is to eventually incorporate as much of ISO/IEC 21000 as appropriate in
this International Standard in order to assure interoperability of geospatial resource DRM with that used for other
multimedia information.
2 © ISO 2014 – All rights reserved
---------------------- Page: 8 ----------------------
ISO 19153:2014(E)
4 Terms and definitions
For the purposes of this document, the terms and definitions in ISO 2382-6 and ISO/IEC 15408 and the
following apply.
NOTE If a term is not defined in this document, it will take the definition supplied in their original context
in the last reference in the following list in which it occurs, or, if still undefined, its usual English [Oxford English
Dictionary (OED) or Webster] definition.
— ISO 2382-6 for common processing terms such as read, write, copy, duplicate, input, output, collection,
acquisition, transform, convert, encode, decode, search, index, edit, and extract.
— ISO/IEC 15408 for common information technology (IT) security terms such as authentication resource,
authorized user, identity, security attribute, security policy, and trusted channel.
[13]
— OWS Common Implementation Specification [OGC 05-008 ].
[14]
— OGC Glossary for terms and examples specifically related to OGC standardized web services.
[8]
— RM-ODP for system modelling terms such as the enterprise, computational, and information viewpoints.
[19] [15]
— ODRL, OMA DRM REL, and ISO/IEC 21000 for terms specific to rights expressions languages, such as
principal, licence, right, grant, condition, and resource.
Terms that are repeatedly defined in these resources shall assume the definition supplied here in the context of
GeoDRM.
4.1
access control
combination of authentication (4.4) and authorization (4.5)
4.2
agency
legal relationship of a person (called the agent [4.3]) who acts on behalf of another person, company, or
government (called the principal [4.35])
4.3
agent
one who acts on behalf of another
4.4
authentication
verification that a potential partner in a conversation is capable of representing a person or organization
[SOURCE: W3C, Web Services Glossary]
4.5
authorization
determination whether a subject is allowed to have the specified types of access to a particular resource
(4.40)
Note 1 to entry: Usually, authorization is in the context of authentication (4.4). Once a subject is authenticated, it
can be authorized to perform different types of access.
4.6
bypass
mechanism to defeat the purpose of a subsystem by avoiding its invocation
[SOURCE: W3C, Web Services Glossary]
Note 1 to entry: Security systems are bypassed usually by using security faults in the operating system. Such
infringements (4.21 and 4.22) are more an aspect of the operating system than of the security system. To correct
this, the relationship between the security system and the operating system shall be modified to prevent bypass
mechanisms.
© ISO 2014 – All rights reserved 3
---------------------- Page: 9 ----------------------
ISO 19153:2014(E)
4.7
chain of agency
sequence of agency (4.2) where the agent (4.3) in each relationship is the principal (4.35) of the next in
the chain
Note 1 to entry: A chain of agency, with the proper agreements at each step creates a transitive agency between
the agent of the first link and the principal of the last. This chain can be spoken of in either direction, either as
“principal → agent = principal → agent” (normal or granting order) or “agent → principal = agent → principal”
(reverse, acceptance, verification, or tracing order).
4.8
chain of licence
sequence of licences (4.26) that traces a chain of agency (4.7), where a licence is granted at each link of the
chain, allowing the agent (4.3) at that link to act as the principal (4.35) in the next
Note 1 to entry: As with the chain of agency, this chain can be spoken of in either direction.
4.9
contract
agreement between two or more principals (4.35) that creates in each principal a duty to do or not do
something and a right to performance of the other’s duty or a remedy for the breach of the other’s duty
[SOURCE: FindLaw, modified]
4.10
copyleft
licence (4.26) that accompanies some open source software that details how the software and its
accompanying source code can be freely copied, distributed, and modified
Note 1 to entry: A copyleft is a form of general public licence (4.15).
4.11
digital licence
document or its representation that specifies the rights (4.42) granted to a particular user or organization
with respect to a specific content or group of content
Note 1 to entry: The core concept in DRM (4.12) is the use of digital licences. Instead of buying the digital
content, the consumer purchases a licence (4.26) granting certain rights with respect to the content. A licence
is the mechanism by which a rights holder (4.43) conveys rights to another party (4.35), such as a consumer or
distributor.
4.12
digital rights management
DRM
packaging, distributing, controlling, and tracking content based on rights (4.42) and licensing information
Note 1 to entry: DRM covers a much broader spectrum of capabilities and underlying technologies supporting
description, identification, trading, protecting, monitoring, and tracking of all forms of rights usages for both
tangible and intangible (electronic) assets, including the management of rights-holders relationships. See,
for example, Reference [5]. “Digital” refers to the material over which the rights exist. “Rights” applies to the
Intellectual Property rights linked to the material. “Management” covers both the defining of policy and enforcing
that policy in such a way that rights are respected. The ultimate goal of a distributed DRM system is for content
authors to be able to project policies governing their content into remote environments with confidence that
[12]
those policies will be respected by the remote nodes. For the purposes of this International Standard, DRM
is taken to mean technology that enables the secure distribution (and where appropriate, sale) of digital media
[26]
content on the Internet.
4.13
expected risk
expected value (statistics) of loss
Note 1 to entry: Expected risk (4.45) is calculated by multiplying the probability of the types of infringement (4.21
and 4.22) by the cost of that infringement, summed up over all types of infringement.
4 © ISO 2014 – All rights reserved
---------------------- Page: 10 ----------------------
ISO 19153:2014(E)
4.14
fair use
uses of content that are considered valid defences to copyright infringement (4.21 and 4.22), such as for
criticism or educational purposes
[SOURCE: U.S. legal term derived from Title 17 of the United States Code, Section 107]
Note 1 to entry: Fair use is based on case-law precedents derived from general principles. The term is often
misapplied to refer to the reasonable expectations of consumers to be able to use purchased content on all owned
[29]
devices.
4.15
general public licence
GPL
licence (4.26) containing rights (4.42) accorded to the general public without an existing agreement
Note 1 to entry: GPLs can be granted by the owner (4.34) of a resource (4.40) or can be applied to a resource by
law, usually as part of the copyright law. The most obvious GPL concept is fair use (4.14) in the United States for
copyrighted material. Other GPL rights can be demanded by the source of the resource or other “public good”
considerations.
Note 2 to entry: The most widespread use of GPL is in reference to the GNU GPL, which is commonly abbreviated
simply as GPL when it is understood that the term refers to the GNU GPL. One of the basic tenets of the GPL is that
anyone who acquires the material shall make it available to anyone else under the same licensing agreement. The
GPL does not cover activities other than the copying, distributing, and modifying of the source code. A GPL is also
[29]
referred to as a copyleft (4.10), in contrast to a copyright, which identifies the proprietary rights of material.
4.16
GeoDRM enabled
capable of maintaining GeoDRM extended (4.17)resources (4.40) and enforcing GeoDRM defined rights
(4.42) and protections (4.38)
Note 1 to entry: Applied to processing resources.
4.17
GeoDRM extended (applied to resources)
associated to GeoDRM metadata indicating types of licences (4.26) that apply
4.18
GeoLicence
licence (4.26) related to geoinformation
4.19
GeoLicence resolution
settling or resolving the status of a GeoLicence (4.18)
4.20
GeoLicence infringement
act or an instance of the unauthorized access or use of protected, copyrighted, or patented material or
of a trademark, trade name, or trade dress
[SOURCE: FindLaw, modified]
4.21
infringement (of a licence)
act of a principal (4.35) contrary to rights (4.42) granted to that principal on a resource (4.40)
Note 1 to entry: Infringement of a licence (4.26) will require the DRM (4.12) system to be bypassed in some manner.
If licences can be infringed without bypassing the DRM system, then the system is not sufficient (4.48).
© ISO 2014 – All rights reserved 5
---------------------- Page: 11 ----------------------
ISO 19153:2014(E)
4.22
infringement (of a right)
prevention of an act of a principal (4.35) consistent with rights (4.42) granted to that principal on a
resource (4.40)
Note 1 to entry: Infringement of a right is a fault in the DRM (4.12) system. If rights can be infringed without
b
...
NORME ISO
INTERNATIONALE 19153
Première édition
2014-02-15
Modèle de référence pour la gestion
numérique des droits d’utilisation de
l’information géographique
Geospatial Digital Rights Management Reference Model (GeoDRM
RM)
Numéro de référence
ISO 19153:2014(F)
©
ISO 2014
---------------------- Page: 1 ----------------------
ISO 19153:2014(F)
DOCUMENT PROTÉGÉ PAR COPYRIGHT
© ISO 2014
Droits de reproduction réservés. Sauf indication contraire, aucune partie de cette publication ne peut être reproduite ni utilisée
sous quelque forme que ce soit et par aucun procédé, électronique ou mécanique, y compris la photocopie, l’affichage sur
l’internet ou sur un Intranet, sans autorisation écrite préalable. Les demandes d’autorisation peuvent être adressées à l’ISO à
l’adresse ci-après ou au comité membre de l’ISO dans le pays du demandeur.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail copyright@iso.org
Web www.iso.org
Publié en Suisse
ii © ISO 2014 – Tous droits réservés
---------------------- Page: 2 ----------------------
ISO 19153:2014(F)
Sommaire Page
Avant-propos .v
Introduction .vi
1 Domaine d’application . 1
2 Conformité . 2
3 Références normatives . 2
4 Termes et définitions . 3
5 Conventions .10
5.1 Termes abrégés .10
5.2 Notation UML .11
6 Principes de conception d’une géo-DRM .11
6.1 Feuille de route d’un carte routière géo-DRM .11
6.2 Principes fondamentaux .12
6.3 Modèle de flux de géo-DRM .12
6.4 Garde-barrière géo-DRM .12
6.5 Métadonnées DRM — Modèle de licence .16
6.6 Lignes directrices de croissance .17
6.7 Les composants du risque exécutif.18
7 Point de vue de l’entreprise et modèle de droits abstraits de la géo-DRM .20
7.1 Généralités .20
7.2 Ressource géospatiale .21
7.3 Étendue de la géo-licence .21
7.4 Expression d’un géo-licence .22
7.5 Création et mise en application d’une géo-licence.23
7.6 Délégation et gestion d’une géo-licence .23
7.7 Chaînage d’une géo-licence .24
7.8 Communautés de cession de géo-licence .25
7.9 Lignée de cession de géo-licence et de ressource .27
7.10 Traitement d’une violation de géo-licence — et le principe du «break-the-glass»
(«franchir une barrière invisible») .27
7.11 Révocation/expiration automatisée de licence — besoin de révoquer un privilège .28
8 Point de vue du calcul de la géo-DRM .28
8.1 Vue d’ensemble — rôles et responsabilités .28
8.2 Mandants .31
8.3 Propriétaire de ressource .32
8.4 Agent .32
8.5 Courtier de licence ou agent de cession de licence.32
8.6 Courtier de services .33
8.7 Fournisseur de services.33
8.8 Utilisateur final .33
8.9 Gestionnaire de licence .33
9 Point de vue d’information .33
9.1 Vue d’ensemble .33
9.2 Métadonnées de l’utilisateur .35
9.3 Propriétés et structures .35
9.4 Métadonnées de ressource .36
9.5 Métadonnées de licence .36
9.6 Métadonnées du processus .47
Annexe A (normative) Suite de tests abstraits .48
Annexe B (informative) Modèle UML du géo-DRM .50
© ISO 2014 – Tous droits réservés iii
---------------------- Page: 3 ----------------------
ISO 19153:2014(F)
Annexe C (informative) Scénarios .92
Annexe D (informative) Notes de l’éditeur — Orthographe de licence en anglais (license/licence)
dans ses différentes formes .98
Bibliographie .99
iv © ISO 2014 – Tous droits réservés
---------------------- Page: 4 ----------------------
ISO 19153:2014(F)
Avant-propos
L’ISO (Organisation internationale de normalisation) est une fédération mondiale d’organismes
nationaux de normalisation (comités membres de l’ISO). L’élaboration des Normes internationales est
en général confiée aux comités techniques de l’ISO. Chaque comité membre intéressé par une étude
a le droit de faire partie du comité technique créé à cet effet. Les organisations internationales,
gouvernementales et non gouvernementales, en liaison avec l’ISO participent également aux travaux.
L’ISO collabore étroitement avec la Commission électrotechnique internationale (CEI) en ce qui concerne
la normalisation électrotechnique.
Les procédures utilisées pour élaborer le présent document et celles destinées à sa mise à jour sont
décrites dans les Directives ISO/CEI, Partie 1. Il convient, en particulier de prendre note des différents
critères d’approbation requis pour les différents types de documents ISO. Le présent document a été
rédigé conformément aux règles de rédaction données dans les Directives ISO/CEI, Partie 2 (voir www.
iso.org/directives).
L’attention est appelée sur le fait que certains des éléments du présent document peuvent faire l’objet de
droits de propriété intellectuelle ou de droits analogues. L’ISO ne saurait être tenue pour responsable
de ne pas avoir identifié de tels droits de propriété et averti de leur existence. Les détails concernant les
références aux droits de propriété intellectuelle ou autres droits analogues identifiés lors de l’élaboration
du document sont indiqués dans l’Introduction et/ou sur la liste ISO des déclarations de brevets reçues
(voir www.iso.org/brevets).
Les éventuelles appellations commerciales utilisées dans le présent document sont données pour
information à l’intention des utilisateurs et ne constituent pas une approbation ou une recommandation.
Pour une explication de la signification des termes et expressions spécifiques de l’ISO liés à l’évaluation
de la conformité, aussi bien que pour des informations au sujet de l’adhésion de l’ISO aux principes de
l’OMC concernant les obstacles techniques au commerce (OTC) voir le lien suivant: Avant-propos —
Informations supplémentaires.
Le comité chargé de l’élaboration du présent document est l’ISO/TC 211, Information
géographique/Géomatique, conjointement avec l’OGC (Open Geospatial Consortium, Inc.).
© ISO 2014 – Tous droits réservés v
---------------------- Page: 5 ----------------------
ISO 19153:2014(F)
Introduction
Pour créer un marché, les individus possédant quelque chose ayant de la valeur (ici une ressource) doivent
s’assurer dans une certaine mesure qu’ils pourront obtenir une valeur correcte pour son utilisation ou
son achat. Dans un monde numérique, en raison de la nature des ressources numériques et du commerce,
la plupart des entités numériques ne sont pas vendues, au sens usuel du terme. Lorsqu’un utilisateur
acquiert une application, il acquiert en fait le droit d’utiliser une copie de l’application. La jouissance
n’est pas égale à la possession, et un système de cession de licences de logiciels et de ressources s’est
développé dans le monde numérique pour assurer les types de moyens suivants.
— L’utilisateur peut légitimement exécuter une ressource s’il possède une licence correspondant à
cette exécution
— Il convient que le propriétaire maintienne la ressource, corrige les erreurs («bug-fix») et assure un
niveau garanti de fonctionnalités.
— De manière facultative, sur la base de critères convenus, il peut être demandé à l’utilisateur de
payer au propriétaire de la ressource un droit unique, un droit par machine, un droit d’usage ou
quelque autre mécanisme, exprimés dans le contrat ou la licence en vigueur entre l’utilisateur et le
propriétaire.
— L’utilisateur accepte de protéger les droits du propriétaire sur la base de l’accord. Cela signifie
généralement qu’il ne peut pas désosser le code ou la ressource, ni redistribuer la ressource, sans
permission correcte.
— Le propriétaire accepte de maintenir la ressource et de permettre un accès raisonnable aux
utilisateurs, pour toute réparation qui pourrait être requise. Ici de même, l’étendue ou le degré de
maintenance sont indiqués dans l’accord de l’utilisateur.
— Pour créer et soutenir dans les ressources géospatiales un marché à grande échelle ouvert, ce type
de protection est nécessaire, afin d’assurer qu’une «valeur correcte de travail (investissement)»
éthique puisse être garantie, de sorte que les fournisseurs puissent être assurés d’un bénéfice correct
sur les ventes individuelles, et que les utilisateurs puissent être assurés d’une valeur correcte pour
les achats ou les utilisations de ressources.
La présente Norme internationale décrit la manière de parvenir à ce résultat.
La présente Norme internationale ne remplace aucune norme ISO ou OGC antérieure, mais dépend d’elles.
Chaque norme de ressource et de service qui existe ou existera devient une description de ressource
dans la présente Norme internationale, et espérons-le, doit être soumise à la même sorte de protection
que celle qui est concédée à d’autres ressources numériques.
vi © ISO 2014 – Tous droits réservés
---------------------- Page: 6 ----------------------
NORME INTERNATIONALE ISO 19153:2014(F)
Modèle de référence pour la gestion numérique des droits
d’utilisation de l’information géographique
1 Domaine d’application
La présente Norme internationale est un modèle de référence pour la fonctionnalité de la gestion
numérique des droits (DRM) des ressources géospatiales (géo-DRM). En tant que telle, elle est reliée au
marché général de la DRM, étant donné que les ressources géospatiales doivent être traitées autant que
possible comme d’autres ressources, telles que de la musique, des textes, ou des services.
La présente Norme internationale définit:
— Un modèle conceptuel pour une gestion numérique des droits des ressources géospatiales,
fournissant un cadre et une référence à une spécification plus détaillée dans ce domaine
— Un modèle de métadonnées pour l’expression de droits qui associe les utilisateurs aux actions
qu’ils peuvent accomplir envers une ressource géospatiale particulière, et une information associée
utilisée dans la mise en application et la concession de ces droits, tels que des métadonnées de
propriétaire, des droits disponibles et des émetteurs de ces droits.
— Des exigences placées sur des systèmes de gestion de droits pour la mise en application de ces droits.
NOTE Un système de gestion des droits doit être nécessaire et suffisant: il doit mettre uniquement en œuvre
les restrictions nécessaires pour imposer les droits qui y sont définis, et doit être suffisant pour imposer ces
droits.
— La manière dont cela doit fonctionner du point de vue conceptuel dans le contexte plus vaste de DRM
afin d’assurer l’omniprésence des ressources géographiques sur le marché général des services.
Une ressource dans ce contexte est un fichier de données, un service d’information ou de méthodes
géographiques.
La présente Norme internationale descriptive abstraite se fonde sur les normes existantes et les
complète, et définit à un niveau abstrait un modèle de droits qui permet la gestion numérique des droits
des ressources géospatiales basées sur des normes. Les futures normes géo-DRM seront rédigées de
manière à mettre en œuvre les concepts définis dans la présente Norme internationale.
Figure 1 — Contexte géo-DRM du modèle de référence
© ISO 2014 – Tous droits réservés 1
---------------------- Page: 7 ----------------------
ISO 19153:2014(F)
La Figure 1 représente une vue simplifiée de la manière dont la présente Norme internationale, modèle
de référence de la gestion des droits numériques géospatiaux (indiqués en gris), se rattache à la norme
ISO relative au traitement réparti ouvert, au modèle de référence de l’OGC (Open Geospatial Consortium)
et à l’initiative commune des OWS (ou services web OGC pour OGC Web Services). La présente Norme
internationale vise à définir le modèle de cadre et de droits conceptuels pour les futures normes géo-
DRM de mise en œuvre qui permettront la gestion numérique des droits des ressources géospatiales.
La présente Norme internationale n’a pas pour but d’examiner les questions de morale, d’éthique, de
modèle de marché, ou de mises en œuvre, plus qu’il n’est nécessaire pour exprimer des exigences envers
les fonctionnalités et systèmes de gestion des droits.
2 Conformité
Étant donné que la nature normative d’un modèle de référence est intégrée dans la description de
«référence» de la sémantique de l’environnement qu’elle décrit, l’exigence centrale de la présente Norme
internationale est:
Toute norme ou mise en œuvre conforme à la présente Norme internationale doit être compatible
avec la sémantique décrite dans la présente Norme internationale ou dans les références normatives
de ladite présente Norme internationale.
La conformité à la présente spécification doit être vérifiée en utilisant les tests spécifiés à l’Annexe A.
Les classes de conformité de la présente Norme internationale sont:
— l’alignement de l’expression des droits sur le modèle des droits abstraits,
— l’expression de l’applicabilité des droits pour des ressources géospatiales, et
— la mise en application des droits des ressources géospatiales.
Les ressources qui sont ajoutées par les métadonnées d’une licence géo-DRM seront désignées comme
ressources géo-DRM étendues ou habilitées. Les ressources de traitement qui ont satisfait aux exigences
pour maintenir la ressource géo-DRM et imposer les procédures de cession de licence doivent être
désignées comme habilitées géo-DRM.
Il s’agit d’un sujet complexe, les Annexes B à D sont des annexes informatives permettant de mieux
comprendre la spécification normative du langage d’expression des droits.
3 Références normatives
Les documents suivants, en tout ou partie, sont référencés de manière normative dans le présent
document et sont indispensables pour son application. Pour les références datées, seule l’édition citée
s’applique. Pour les références non datées, la dernière édition du document de référence s’applique (y
compris les éventuels amendements).
ISO 2382-6, Systèmes de traitement de l’information — Vocabulaire — Partie 6: Préparation et manipulation
des données
ISO/CEI 15408, Technologies de l’information — Techniques de sécurité — Critères d’évaluation pour la
sécurité TI
1)
ISO/CEI 21000 (toutes les parties), Technologies de l’information — Cadre multimédia (MPEG-21)
ISO/CEI 21000-5, Technologies de l’information — Cadre multimédia (MPEG-21) — Partie 5: Langage
d’expression des droits
1) La norme MPEG 21 (ISO/CEI 21000) est en cours d’élaboration. Finalement, elle comportera au moins
14 parties. Seules quelques-unes des premières sont actuellement disponibles. L’objectif vise finalement à
incorporer dans la présente Norme internationale autant de l’ISO/CEI 21000 que possible, de manière à assurer
l’interopérabilité de la ressource géospatiale DRM avec celle utilisée pour une autre information multimédia.
2 © ISO 2014 – Tous droits réservés
---------------------- Page: 8 ----------------------
ISO 19153:2014(F)
4 Termes et définitions
Pour les besoins du présent document, les termes et définitions de l’ISO 2382-6 et l’ISO/CEI 15408 ainsi
que les suivants s’appliquent.
NOTE Si un terme n’est pas défini dans le présent document, il sera défini par le contexte original de la
dernière référence dans laquelle il apparaît dans la liste suivante, ou, s’il reste non défini, par sa définition usuelle
en anglais [Dictionnaire Anglais Oxford (OED) ou Webster].
— ISO 2382-6: Pour des termes communs de traitement tels que lire, écrire, copier, photocopier,
entrée, sortie, collecte, acquisition, transformer, convertir, encoder, décoder, chercher, index, éditer,
et extraire.
— ISO/CEI 15408: Pour des termes de sécurité dans la technologie commune de l’information (IT),
tels que ressource d’authentification, utilisateur autorisé, identité, attribut de sécurité, conduite de
sécurité, et canal de confiance.
[13]
— Spécification de mise en œuvre commune des OWS (OGC 05-008 ).
[14]
— Glossaire de l’OGC pour des termes et exemples spécifiquement liés aux services web normalisés
de l’OGC.
— Modèle de référence de traitement réparti ouvert (ou RM-ODP pour Reference Model of Open
[8]
Distributed Processing ) pour des termes de modélisation du système tels que l’entreprise, les
points de vue de calcul et d’information.
[19]
— ODRL (ou langage ouvert des droits numériques pour Open Digital Rights Language) , OMA (ou
Open Mobile Alliance) DRM (ou gestion numériques des droits pour Digital Rights Management)
[15]
REL (ou langage d’expression des droits pour Rights Expression Language) et ISO/CEI 21000,
pour des termes spécifiques aux langages d’expressions des droits, tels que mandant, licence, droit,
cession, condition, et ressource.
Les termes qui sont définis différemment dans ces ressources doivent, dans le contexte géo-DRM,
prendre la définition fournie ici.
4.1
contrôle d’accès
combinaison d’authentification (4.4) et d’autorisation (4.5)
4.2
Agence
relation légale d’une personne [nommée agent (4.3)] qui agit au nom d’une autre personne, société ou
gouvernement
[SOURCE: nommée mandant (4.35)]
4.3
agent
celui qui agit au nom d’un autre
4.4
authentification
vérification qu’un associé potentiel dans une conversation est capable de représenter une personne ou
organisation
[SOURCE: W3C, glossaire des services web]
© ISO 2014 – Tous droits réservés 3
---------------------- Page: 9 ----------------------
ISO 19153:2014(F)
4.5
autorisation
détermination si un sujet est autorisé à avoir les types spécifiés d’accès à une ressource (4.40) particulière
Note 1 à l’article: Généralement, l’autorisation a lieu dans le contexte de l’authentification (4.4). Une fois qu’un sujet
est authentifié, il peut être autorisé à accomplir différents types d’accès.
4.6
bypass
mécanisme pour faire échouer l’objet d’un sous-ensemble, en évitant son invocation
[SOURCE: W3C, Glossaire des services web]
Note 1 à l’article: L’utilisation de défaillances de sécurité dans le système d’exploitation permet en général
de contourner les systèmes de sécurité. De telles transgressions (4.21 et 4.22) sont plus un aspect du système
d’exploitation que du système de sécurité. Afin de corriger cela, la relation entre le système de sécurité et le
système d’exploitation doit être modifiée afin d’éviter des mécanismes de bypass.
4.7
chaîne d’agence
séquence d’agence (4.2) dans laquelle l’agent (4.3) de chaque relation est le mandant (4.35) du suivant
dans la chaîne
Note 1 à l’article: Une chaîne d’agence, avec les accords corrects à chaque phase, crée une agence transitive entre
l’agent du premier maillon et le mandant du dernier. On peut parler de cette chaîne dans l’une ou l’autre direction,
soit comme «mandant → agent = mandant → agent» (ordre normal ou ordre de cession) soit «agent → mandant =
agent → mandant» (l’inverse, acceptation, vérification ou ordre de repérage).
4.8
chaîne de licence
séquence de licences (4.26) qui suit la trace d’une chaîne d’agence (4.7), où une licence est attribuée à
chaque maillon de la chaîne, permettant à l’agent (4.3) de ce maillon d’agir comme mandant (4.35) dans
le suivant
Note 1 à l’article: Comme pour la chaîne d’agence, on peut parler de cette chaîne dans l’une ou l’autre direction.
4.9
contrat
accord, entre deux ou un plus grand nombre de mandants (4.35), créant pour chaque mandant un devoir
de faire ou de ne pas faire quelque chose et un droit d’exécuter le devoir de l’autre ou un remède à la
violation du devoir de l’autre
[SOURCE: FindLaw, modifiée]
4.10
copyleft
licence (4.26) accompagnant certains logiciels de source ouverts, détaillant la manière dont le logiciel et
son code source d’accompagnement peuvent être librement copiés, distribués et modifiés
Note 1 à l’article: Le copyleft est une forme de licence publique générale (4.15).
4.11
licence numérique
document ou sa représentation spécifiant les droits (4.42) concédés à un utilisateur ou organisation
particuliers par rapport à un contenu ou à un groupe de contenus spécifiques
Note 1 à l’article: Le concept fondamental du DRM (4.12) est l’utilisation de licences numériques. Plutôt que
d’acheter le contenu numérique, le consommateur achète une licence (4.26) qui octroie certains droits relativement
au contenu. Une licence est le mécanisme par lequel le détenteur de droits (4.43) transfère des droits à une autre
partie (4.35), par exemple à un consommateur ou un distributeur.
4 © ISO 2014 – Tous droits réservés
---------------------- Page: 10 ----------------------
ISO 19153:2014(F)
4.12
gestion numérique des droits
DRM
contenu d’emballage, de distribution, de contrôle et de dépistage, basé sur des droits (4.42) et une
information de cession de licence
Note 1 à l’article: La DRM couvre un spectre beaucoup plus large de capacités et de technologies sous-jacentes
confirmant la description, l’identification, l’échange, protégeant le contrôle et le dépistage de toutes formes
d’usages de droits pour des actifs à la fois tangibles et intangibles (électronique), y compris, la gestion des relations
de détenteurs de droits. Voir par exemple Iannella (Référence [5]).
«Numérique» se rapporte au matériel sur lequel le droit existe. «Droits» s’applique aux droits de la propriété
intellectuelle liés au matériel. «Gestion» couvre à la fois la définition d’une conduite et l’application de cette
conduite de telle manière que les droits soient respectés.
Le but ultime d’un système de DRM distribué est que les auteurs de contenu soient en mesure de projeter des
conduites dirigeant leur contenu vers des environnements distants, avec l’assurance que ces conduites seront
respectées par les nœuds distants (Référence [12]). Pour les besoins de la présente Norme internationale, DRM
prend la signification de technologie permettant une distribution sûre (et lorsque c’est approprié, la vente) du
contenu numérique du média sur l’internet(Référence [26]).
4.13
risque attendu
valeur attendue (statistique) de perte
Note 1 à l’article: Le risque (4.45) attendu est calculé en multipliant la probabilité des types de transgressions (4.21
et 4.22) par le coût de la transgression, récapitulée sur tous les types de transgressions.
4.14
utilisation correcte
utilisations de contenus considérés comme défenses valides d’une transgression (4.21 et 4.22) de
copyright, comme par exemple à des fins de critique ou d’éducation
[SOURCE: terme juridique américain dérivé du titre 17 du Code des États-Unis, Section 107]
Note 1 à l’article: L’utilisation correcte est basée sur des précédents jurisprudentiels provenant de principes
généraux. Le terme est souvent détourné
...
SLOVENSKI STANDARD
oSIST ISO/DIS 19153:2012
01-januar-2012
5HIHUHQþQLPRGHO]DXSUDYOMDQMHJHRSURVWRUVNLKGLJLWDOQLKDYWRUVNLKSUDYLF
*HR'50
Geospatial Digital Rights Management Reference Model (GeoDRM RM)
Modèle de référence de la gestion des droits numériques des données géographiques
Ta slovenski standard je istoveten z: ISO/DIS 19153
ICS:
07.040 Astronomija. Geodezija. Astronomy. Geodesy.
Geografija Geography
35.240.70 Uporabniške rešitve IT v IT applications in science
znanosti
oSIST ISO/DIS 19153:2012 en,fr,de
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
---------------------- Page: 1 ----------------------
oSIST ISO/DIS 19153:2012
---------------------- Page: 2 ----------------------
oSIST ISO/DIS 19153:2012
DRAFT INTERNATIONAL STANDARD ISO/DIS 19153
ISO/TC 211 Secretariat: SN
Voting begins on Voting terminates on
2011-10-18 2012-03-18
INTERNATIONAL ORGANIZATION FOR STANDARDIZATION МЕЖДУНАРОДНАЯ ОРГАНИЗАЦИЯ ПО СТАНДАРТИЗАЦИИ ORGANISATION INTERNATIONALE DE NORMALISATION
Geospatial Digital Rights Management Reference Model
(GeoDRM RM)
Modèle de référence de la gestion des droits numériques des données géographiques
ICS 35.240.70
In accordance with the provisions of Council Resolution 15/1993 this document is circulated in
the English language only.
Conformément aux dispositions de la Résolution du Conseil 15/1993, ce document est distribué
en version anglaise seulement.
To expedite distribution, this document is circulated as received from the committee
secretariat. ISO Central Secretariat work of editing and text composition will be undertaken at
publication stage.
Pour accélérer la distribution, le présent document est distribué tel qu'il est parvenu du
secrétariat du comité. Le travail de rédaction et de composition de texte sera effectué au
Secrétariat central de l'ISO au stade de publication.
THIS DOCUMENT IS A DRAFT CIRCULATED FOR COMMENT AND APPROVAL. IT IS THEREFORE SUBJECT TO CHANGE AND MAY NOT BE
REFERRED TO AS AN INTERNATIONAL STANDARD UNTIL PUBLISHED AS SUCH.
IN ADDITION TO THEIR EVALUATION AS BEING ACCEPTABLE FOR INDUSTRIAL, TECHNOLOGICAL, COMMERCIAL AND USER PURPOSES,
DRAFT INTERNATIONAL STANDARDS MAY ON OCCASION HAVE TO BE CONSIDERED IN THE LIGHT OF THEIR POTENTIAL TO BECOME
STANDARDS TO WHICH REFERENCE MAY BE MADE IN NATIONAL REGULATIONS.
RECIPIENTS OF THIS DRAFT ARE INVITED TO SUBMIT, WITH THEIR COMMENTS, NOTIFICATION OF ANY RELEVANT PATENT RIGHTS OF WHICH
THEY ARE AWARE AND TO PROVIDE SUPPORTING DOCUMENTATION.
© International Organization for Standardization, 2011
---------------------- Page: 3 ----------------------
oSIST ISO/DIS 19153:2012
ISO/DIS 19153
Copyright notice
This ISO document is a Draft International Standard and is copyright-protected by ISO. Except as permitted
under the applicable laws of the user’s country, neither this ISO draft nor any extract from it may be
reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic,
photocopying, recording or otherwise, without prior written permission being secured.
Requests for permission to reproduce should be addressed to either ISO at the address below or ISO’s
member body in the country of the requester.
ISO copyright office
Case postale 56 CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail copyright@iso.org
Web www.iso.org
Reproduction may be subject to royalty payments or a licensing agreement.
Violators may be prosecuted.
ii © ISO 2011 – All rights reserved
---------------------- Page: 4 ----------------------
oSIST ISO/DIS 19153:2012
ISO/DIS 19153
Contents Page
Foreword . x
Introduction . xi
1 Scope . 1
2 Conformance . 2
3 Normative references . 3
4 Terms and definitions . 3
5 Conventions . 10
5.1 Abbreviated terms . 10
5.2 UML notation . 10
6 GeoDRM Design Principles . 10
6.1 GeoDRM Roadmap . 10
6.2 Basics . 11
6.3 Flow model of GeoDRM . 11
6.4 GeoDRM Gatekeeper . 12
6.5 DRM metadata – licence model . 15
6.6 Developmental Guidelines. 17
6.7 The components of managing risk . 18
6.7.1 General . 18
6.7.2 Trust . 18
6.7.3 Protection - security . 19
6.7.4 Remediation - enforcement . 19
6.7.5 Metadata in support of trust . 19
7 GeoDRM Enterprise Viewpoint and Abstract Rights Model . 20
7.1 Introduction . 20
7.2 Geospatial Resource . 20
7.3 GeoLicence Extents . 20
7.4 GeoLicence Expression . 22
7.5 GeoLicence Creation and Enforcement . 22
7.6 GeoLicence Delegation and Management . 22
7.7 GeoLicence Chaining . 23
7.8 GeoLicensing Communities . 24
7.9 GeoLicensing and resource lineage . 25
7.10 Handling GeoLicence Violation – and the break-the-glass principle . 26
7.11 Automated licence revocation/expiration – need to revoke privilege . 27
8 GeoDRM Computational Viewpoint . 27
8.1 Overview: Roles and Responsibilities . 27
8.2 Principals. 31
8.3 Resource owner . 31
8.4 Agent . 31
8.5 Licence broker or licensing agent . 32
8.6 Service broker . 32
8.7 Service provider . 32
8.8 End-User . 32
8.9 Licence Manager . 32
9 Information Viewpoint . 32
9.1 Overview . 32
9.2 User Metadata . 34
© ISO 2011 – All rights reserved iii
---------------------- Page: 5 ----------------------
oSIST ISO/DIS 19153:2012
ISO/DIS 19153
9.3 Properties and patterns . 34
9.4 Resource Metadata . 35
9.4.1 General metadata . 35
9.4.2 GeoInformation resource metadata . 35
9.4.3 GeoProcessing resource metadata . 35
9.5 Licence Metadata . 36
9.5.1 Licence . 36
9.5.2 Principal or Licensee . 36
9.5.3 Grants . 36
9.5.4 Issuer . 44
9.6 Process metadata . 45
Annex A (normative) Abstract Test Suite . 46
A.1 Items covered . 46
A.2 Rights expression languages conformance Class . 46
A.3 Metadata system Conformance Class . 46
A.4 Gatekeeper Conformance Class . 47
Annex B (informative) GeoDRM UML Model . 48
B.1 Semantics . 48
B.2 Class Diagrams . 48
B.3 Bind . 54
B.4 Binding . 54
B.5 principal . 55
B.6 principal::Licensee . 55
B.7 principalPattern . 56
B.8 Property . 56
B.9 PropertyType . 57
B.10 resource . 57
B.11 resourcePattern . 58
B.12 Agent . 58
B.13 ConditionParameter. 59
B.14 Combine . 59
B.15 Condition . 60
B.16 Copy . 61
B.17 CreateLicence . 61
B.18 Data . 61
B.19 DeriveGraphic . 62
B.20 DeriveResource. 62
B.21 Details . 63
B.22 Edit . 63
B.23 Encode . 64
B.24 Execute . 64
B.25 ExtractResource . 64
B.26 FunctionCall . 65
B.27 GeoLicence . 65
B.28 Grant . 66
B.29 GrantComponent . 67
B.30 Licensee . 68
B.31 LicenceManager . 69
B.32 LicensingAgent . 69
B.33 Licensor . 70
B.34 MetaRight . 71
B.35 Modify . 71
B.36 Owner . 72
B.37 Principal . 72
B.38 PrincipalGroup . 73
B.39 Print . 74
B.40 Process . 74
B.41 Processing . 75
B.42 ProcessInvocation . 76
iv © ISO 2011 – All rights reserved
---------------------- Page: 6 ----------------------
oSIST ISO/DIS 19153:2012
ISO/DIS 19153
B.43 PropertyInterface . 76
B.44 Request. 77
B.45 Resource . 78
B.46 Right . 80
B.47 Service . 80
B.48 ServiceBroker . 80
B.49 ServiceProvider . 81
B.50 ServiceRequest . 81
B.51 SideEffect . 82
B.52 SpatialFit. 83
B.53 SpatialGeometry . 83
B.54 SpatialOperations . 84
B.55 SpatialTransform . 84
B.56 Sublicense . 84
B.57 SubLicensee . 84
B.58 TemporalOperations . 85
B.59 Time . 85
B.60 TimeInterval . 86
B.61 TimePattern . 86
B.62 Use . 87
B.63 View . 87
Annex C (informative) Scenarios . 89
C.1 Introduction . 89
C.2 Scenario 1: User accesses content from single provider . 90
C.3 Scenario 2: Overlaying content from multiple providers . 91
C.4 Scenario 3: Joining content from multiple providers . 92
C.5 Scenario 4: Derived resource adding content . 93
Annex D (informative) Editor‘s notes . 95
D.1 The spelling of licence in its various forms. 95
Bibliography . 96
Figures
Figure 1 — GeoDRM Reference Model Context . 2
Figure 2 — Gatekeeper metaphor for GeoDRM . 13
Figure 3 — Topology for complex gatekeeper example . 14
Figure 4 — Sequence diagram for a two-stage geoserver interaction . 14
Figure 5 — General Licence Model (UML) . 16
Figure 6 — Structure of a Licence . 16
Figure 7 — Balancing trust with protection and remediation . 18
Figure 8 — GeoLicence Extents. 21
Figure 9 — GeoLicence Delegation and Management . 23
Figure 10 — GeoLicence Chaining – supporting distributed licensing . 24
Figure 11 — An example of GeoCommunity – based on geography . 25
Figure 12 — GeoDRM Roles and Responsibilities . 28
© ISO 2011 – All rights reserved v
---------------------- Page: 7 ----------------------
oSIST ISO/DIS 19153:2012
ISO/DIS 19153
Figure 13 — Example Business Model . 29
Figure 14 — Various Principals in a GeoDRM system . 31
Figure B.1 — Condition. 48
Figure B.2 — Condition Binding . 49
Figure B.3 — Grant . 49
Figure B.4 — Grant Components: Principal, Right, and Resource . 50
Figure B.5 — Licence . 50
Figure B.6 — Principal . 51
Figure B.7 — Processing Right . 51
Figure B.8 — Properties . 52
Figure B.9 — Request . 52
Figure B.10 — Resources . 53
Figure B.11 — Rights. 54
Figure C.1 — GeoDRM Game – Interactive Role Playing . 89
Figure C.2 — User accesses content from single provider . 90
Figure C.3 — Workflow for creating and enforcing a licence . 90
Figure C.4 — Overlaying content from multiple providers . 91
Figure C.5 — Workflow licensed access to content from multiple providers . 92
Figure C.6 — Joining resources from multiple providers . 93
Figure C.7 — Derived resource adding content . 94
Tables
Table 1 — Semantics of licence structure .
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.