Information Exchange Policy Vocabulary Information Exchange Framework (IEF) Initial Submission

1. Information Exchange Policy VocabularyInformation Exchange Framework (IEF)Initial Submission March 20, 2012 Presented by: Mike Abramson President, Advanced Systems Management Group Special Adviser on public safety/security Open Interoperability Standards to Centre for Security Sciences (CSS) Architect to Chief Force Development Canadian Department of National Defence Co-chair OMG C4I Domain Task Force Chair IEF Working Group Co-chair Emergency, Crisis and Major Event Working Group

2. IEF Objectives • Focus on information content and Rules rather than mechanisms for discovery and distribution • Align information sharing and safeguarding to architecture • Separate business rules from the software services that enforce them, providing: • increased flexibility, adaptability and agility • Increased the retention of institutional knowledge and Memory • Increase traceability and audit-ability of information sharing and protection solutions • Provide Information Sharing and Safeguarding Policy Enforcement Support for multiple communities (NIEM, Hl7, EDXL, XBRL, CAP, MIP, …) • Enable Model Driven Architecture (MDA) services for Information Sharing and Safeguarding • Enable the use of reusable data and information patterns

3. IEF Key Concepts • Reusable Information Patterns Describing the rules for: • Information Sharing Contract • Message • Semantic • Data Transactional Patterns • Data Aggregation and Marshalling • Data Transformation • Domain Filters (Static and Dynamic (alterable at Runtime) • Semantic Guards (protected Semantic Patterns) • Simple Extensible Notations • Transformable into Executable Rules (MDA Process) • Direct Alignment to Architecture Frameworks • Open Standards / Open Architecture / Open Source

4. Types of Exchange • Publish and Discovery • Search and Request • Publish and Subscribe • Broadcast, multicast, event driven global update • QoS to disadvantaged networks

5. Where are the IE Policies Exchange Semantics, Syntax, Structure, Vocabulary & Business Use Case Metadata and Publishing Policies Information Sharing, Protection and Release-ability Policies Information Processing and Action Policies LEXS ? CAP, EDXL, NIEM, HL7, … ? Information System Information System IEF IEF Shared Middleware or Registry/Repository Infrastructure Security Services Identity, Credentials and Access Services Data Aggregation, Information Protection, & Release-ability Policy Enforce Access and Distribution Policies Receipt Actions & Acknowledgements Policy Management Services

6. Latest List of Policy Enforcement Services • Current IEPV Focus • Policy-based Packaging Services (IEPPS) • Focussed on packaging data  Information  Messages in a mannered that is: • Context Sensitive • Transformed for Use • Redacted for Release • IEPV Elements (current IEPV Focus) • Data aggregation, transformation and filtering • Message Packaging and Rendering • Minimal Distribution Specification • Future IEPV Work • Policy-based Distribution Services (IEPDS) • UML Profile for DDS / DDS (definitely a target) • But there are others • Policy-based Access Services (IEPAS) • Policy Based Credentialing Services (IEPCS) • Policy-based Identity Services (IEPIS) • Policy-based Information Release Services (IEIRS) • Policy-based Security Services (IEPSS)

7. Life-cycle Concept (not including ICAM and other services added Dec 2011)

8. MDA for IEF Architecture and Engineering Domain Operational Domain