[Fiware-security] Public availability of FI-WARE GE Open Specifications

Juanjo Hierro jhierro at tid.es
Tue May 21 08:02:39 CEST 2013


Hi all,

  Based on the comments made by DT during our confcall during the joint WPLs/WPAS confcall that took place on May 13th, it seemed like there were some doubts about the public nature of FI-WARE GE Open Specifications.  During that same confcall, DT confirmed that the API specifications linked to the IdM GE hadn't still been made publicly available and had been only distributed to interested party upon request.

  I would like to make it clear that the public and royalty-free nature of the FI-WARE Open Specifications was a very basic fundamental principle adopted in FI-WARE.  This principle was agreed among the partners even at FI-WARE proposal time and was not only reflected in our DoW but also in our Consortium Agreement (see details at the end of this message).   To reinforce the requirement to make FI-WARE Open Specifications available, please note that the corresponding deliverables are marked as PU (public) in the DoW.

  Therefore, not making FI-WARE GE Open Specifications public available would be considered, you can take it as granted, an infringement of the contract by the EC.

  Bottom line, I kindly request that you make the specifications part of the FI-WARE Open Specifications available through the public wiki and also as part of the corresponding FI-WARE Open Specifications deliverable from the Security Chapter to be submitted.   Otherwise, we will accompany such submission with a note clarifying that the specifications have not been made publicly available despite the request.   We cannot respond on behalf of the EC but I can anticipate that they will consider this an infringement of the contract by the corresponding partners, most probably leading to consequences in the form of rejection of costs among others.

  I hope this will not become an issue and that specificications of the IdM GE APIs will be finally delivered as public.

  DT recently explained to me that "Until now we provided it only to those who have requested an instance. I don't want that everybody in the Internet has the possibility to have a try on our (DT) servers".   However, any potential issue is solved by means of dropping from the RESTfull specs any reference to the actual service end points linked to the DT GEi provided "as a Service" where the IdM GE RESTful API would be supported.   Such service end points indeed should not be part of the FI-WARE IdM GE Open Specifications (allowing other parties to implement the FI-WARE IdM GE Open Specifications, deploy that implementation somewhere and publish the associated service end points that specific deployment).   Therefore, I don't see the issue.    You just need to check the several examples of Restful API specifications associated to FI-WARE GEs (e.g., the NGSI RESTful specification) to see an example of RESTful API specification not tied to any concrete service end point.

  Best regards,

-- Juanjo


Relevant excerpts from the Consortium Agreement:

FI-WARE Generic Enabler Specifications are defined in Annex 1 of the Grant
Agreement and refer to the set of specifications establishing requirements for the FIWARE
Generic Enabler, particularly with respect to Application Programming
Interfaces (APIs), interfaces, and interoperable protocols, required to work with FIWARE
Generic Enablers of the FI-WARE Project platform or other complementary
platform products from third parties. Specifications of APIs, interfaces and
interoperable protocols described in such a FI-WARE Generic Enabler Specification
shall include a description of behaviour (e.g. methods and parameters or resource
endpoints and their digital representation) but would be limited to exhibited
behaviour.

FI-WARE Generic Enabler Specifications will be made
publically available (upon publication in accordance with clause 4.4.1) on
royalty free terms. For the sake of clarity, Parties signing this CA as well as
any other third party may, subject to additional conditions or agreement where
requested by a Party/ the Parties (provided that the right to obtain Access
Rights granted under this Agreement must not be negatively affected by such
request),develop and release implementations of the FI-WARE Generic
Enabler Specifications on a royalty-free basis.

clause 4.4.1 (althought it indeed applies to objection of a given party to publication
of specs from other party, because no objection by a party to publish its own specs
was actually foreseen):

A copy of any draft of FIWARE Generic Enabler specifications
shall be sent to the Project Coordinator and by the Project
Coordinator to the Parties at the earliest time possible. Any of the
Parties may object to the publication within 30 days after receipt of a
copy of the proposed publication on any of the following grounds: (i)
that they consider that the protection of the objecting Party's
Foreground would be adversely affected by the proposed
publication, (ii) that the proposed publication includes the
Confidential Information of the objecting Party, or (iii) the publication
of such information would be contrary to the commercial interests of
the objecting Party. The proposed publication shall not take place
until the expiry of the above period of 30 days. In the absence of any
objection within the above mentioned period, it is deemed that the
Parties agree to the proposed publication. Following the end of the
above mentioned period, the Project Coordinator shall inform the
Parties whether or not any objection has been received. Objections
to publication of the final specifications of a Generic Enabler
Specification will not apply if there were no objections to previously
distributed drafts of FIWARE Generic Enabler Specifications, unless
the changes between the draft and final version of the FIWARE
Generic Enabler Specifications precisely provide the ground for the
objection to publish the final version.
In the event that an objection is raised on any of the above defined
grounds within the above period of 30 days, the Party proposing the
publication and the Party objecting shall seek in good faith to agree a
solution on a timely basis, that will not exceed of 30 days, whereby
such objection is resolved. In case that the objection raised affects
the publication of the FIWARE Generic Enabler Specifications (as
defined in this Consortium Agreement) if no solution is found within
the term established in this paragraph, the parties will submit the
controversy to the General Assembly, which decision will be final and
binding and in accordance with the confidentiality provisions
established in this Consortium Agreement.






-------------
Product Development and Innovation (PDI) - Telefonica Digital
website: www.tid.es<http://www.tid.es>
email: jhierro at tid.es<mailto:jhierro at tid.es>
twitter: twitter.com/JuanjoHierro

FI-WARE (European Future Internet Core Platform) Coordinator
and Chief Architect

You can follow FI-WARE at:
  website:  http://www.fi-ware.eu
  facebook: http://www.facebook.com/pages/FI-WARE/251366491587242
  twitter:  http://twitter.com/FIware
  linkedIn: http://www.linkedin.com/groups/FIWARE-4239932


________________________________

Este mensaje se dirige exclusivamente a su destinatario. Puede consultar nuestra política de envío y recepción de correo electrónico en el enlace situado más abajo.
This message is intended exclusively for its addressee. We only send and receive email on the basis of the terms set out at:
http://www.tid.es/ES/PAGINAS/disclaimer.aspx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20130521/9e4e8533/attachment.html>


More information about the Old-Fiware-security mailing list

You can get more information about our cookies and privacy policies clicking on the following links: Privacy policy   Cookies policy