view Side-By-Side changes
INTERNET DRAFTInternet Draft Leslie L. Daigle November 19, 1997 Bunyip Information Systems draft-ietf-urn-nid-req-02.txt Dirk-Willem van Gulik ISIS/CEO, JRC Ispra Renato Iannelladraft-ietf-urn-nid-req-01.txtDSTC Pty Ltd25 March, 1997Patrik Faltstrom Tele2/SwipnetNamespace Identifier Requirements forURNServicesNamespace Registration and Standardization Process Mechanisms Status of thisMemo ===================Document This document is an Internet-Draft. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet- Drafts as reference material or to cite them other than as`work"work inprogress.'progress." Tolearnview thecurrent statusentire list ofany Internet-Draft,current Internet-Drafts, please check the`1id-abstracts.txt'"1id-abstracts.txt" listing contained in theInternet- DraftsInternet-Drafts Shadow Directories on ftp.is.co.za (Africa),nic.nordu.netftp.nordu.net (Europe), munnari.oz.au (Pacific Rim), ds.internic.net (US East Coast), or ftp.isi.edu (US West Coast).This draft expires 25 September, 1997. Abstract: ========= Services that offer to resolve Uniform Resource Names implicitly require that they supportAbstract The URN WG has defined apersistent and reliable service for an indeterminate length of time. This draft outlines the requirementssyntax forany such service that wishes to participate as a Namespace Identifier. Introduction: ============= TheUniform ResourceName (URN) Working Group has definedNames (URNs) [RFC2141], as well as some proposed mechanisms forboth the syntax [4] andtheir resolutionof URNs [1,2]. An framework for URN discovery systems has also been outlined [3]. This draft discussesandrecommendsuse in Internet applications ([RFC2168, RFC2169]). The whole rests on therequirements for entities that wish to act as Namespace Identifiers (NIDs)concept of individual ''namespaces'' within the URNsystem. The URN syntax includes the NID which acts asstructure. Apart from proof-of-concept namespaces, thescoping indicatoruse of existing identifiers in URNs has been discussed (??? biblio id document). This document lays out general definitions of and mechanisms forthe URN. The NID indicates which Namespace theestablishing URNbelongs to and gives hints''namespaces''. Foreword tothe underlying resolution service. Consider the following example URNs: urn:znet:metadata.net:dc urn:buns:555555:annual-report urn:hoptus:priv:555-ABCDthis Edition This document is a very drafty draft. TheNIDs in these cases, "znet", "buns", and "hoptus" all act as top-level namespaces, and hence, must meet certain guidelinesintention of this version is toensure meeting all the URN requirements [5]. In particular: - Global Scope and Uniqueness - Persistence - Independence - Resolution Requirements: ============= Given the four categories above,lay out therequirementsgroundwork foreach our now outlined. Global Scope and Uniqueness. - The NID mustsome proposed processes. Detail will beregistered withneeded. No one has formally approached IANA toensure uniqueness and demonstrating that it meetsset up therequirements listed inregistry thisdocument. -is defining. The model here is not unlike media type registrations. Introduction For the purposes of URNs, a "namespace" is a collection of uniquely-assigned identifiers. Asimple and limited character set should be imposedURN namespace itself has an identifier in order tosupport. ensure globalaccess (as described in [4]). - Rules on howuniqueness of URNs . (where desired) provide a cue for theNamespace Specific Stringstructure of the identifier For example, ISBNs and ISSNs areallocated must be documented. - Definitionsboth collections ofterms like "equal"identifiers used in the traditional publishing world; while there may some number (or numbers) that is both a valid ISBN identifier and"different"ISSN identifier, using different designators forresources must be published. Persistence - The NID service providers must showthe two collections ensures thatthey intend to supportno two URNs will be theservicesame for different resources. The development of anindefinite periodidentifier structure, and thereby a collection oftime. - Support facilities mustidentifiers, is a process that is inherently dependent on the needs of the identifiers, how they will bedescribedassigned, andhowtheservice intendsuses tooperate, including "disaster recovery"-like operations. - Demonstrated experience in managing an established namespace system is essential. - One URN should neverwhich they will bereusedput. All of these issues are beyond the scope of the URN work. This document concerns itself with the mechanical processes of associating an identifier string with a predefined namespace and publication of identifier structures. Of particular concern are: . selection of strings to associate with a namespace . publication of structural elements of the identifiers . identification of support infrastructure for assignment and resolution of URNs for adifferent resource (where "different" is defined as in previous paragraph bygiven namespace . determination of failure of support for a namespace Different levels of disclosure are expected/defined for namespaces. According to thenamespace). Thelevel of discussion and standardization surrounding the disclosure, a URNshouldnamespace may bepersistent for all times, even though the resource goes away. Independence - The NID service providers must also show any relationship (both technical and administrative) thatassigned or mayimpede onrequest a particular identifier. Note that this document restricts itself to theprovisiondescription of processes for the creation of URNservice. - However, multi-party participation in the NID servicenamespaces. If "resolution" of any so-created URN identifiers isan advantage. Resolution - Thedesired, a separate process of registration in a global NIDservice providers must produce an RFC describingdirectory, such as that provided by thetechnical characteristicsNAPTR [Ref ??] system, is necessary. URN Namespace Categories There are 4 categories oftheURNresolution service, including security considerations. -namespaces defined here, distinguished by expected level of service and required procedures for registration. The first three are simple namespace types: I. Experimental: These are not registered with IANA. They take the form x-<NID> II. Informal: These are registered with IANA (see Section ??), and are assigned a number based on a private OID ("POID" namespaces). III. Standardized: These are processed through a full standards-track RFC review process. The NIDservice providersmayelectbe any valid NID string that does notto have the resolution service publically available. Example: ======= (1) urn:buns:555555:annual-report This URN, in the namespace called "buns"clash with an existing, registered NID. The fourth isreferring to the document named annual-report, in postscript format. Ata composite namespace type (i.e., one constructed for the express purpose of laterstage, that resourcesubdivision): IV. Top-level: These are processed through a full standards-track RFC review process. The result isreplaced bynot a NID so much as atext version,top-level NID structure, whichlackswill be subdivided by thepictures, but that is ok, becauserules laid out in thenamespace has decided that postscript format documents and text documentstop-level NID RFC. These NID strings must not clash with existing, registered NIDs; additionally, the RFC1766 country code strings areconsideredreserved for use by countries that desire to so-obtain a top-level NID. Registration Procedures To register a namespace (for type II namespaces, informal), thesame even thoughfollowing information must be provided to thefigures doesn't exist inIANA: Declared owner of thetextual version. Innamespace Description of: . uniqueness of identifiers assigned by thethird stage,namespace's naming authority . process of assignment of identfiers in thereport is removed, and replaced with a reportnamespace . rules for determining lexical equivalence between identifiers in the namespace . identification of validation mechanism (to ascertain whether or not adifferent year. This new report getsstring is in fact anewvalid URNbecause it is considered beingin the namespace). This can include: . adifferent document.syntax grammar . an on-line service . an off-line service . conformance with RFC1737 requirements (??? these should be listed out) Theold URNnamespace isnever reused. (2) urn:foo:bar:current-weather urn:foo:bar:weather/19970325 These are two URNs referring at one stagethen identified by the declared owner's private OID (POID) and a suffix to distinguish among different namespaces assigned to the sameresource, i.e. onPOID: POID.## Standardization Process To establish a standardized URN namespace, the25thfollowing information must be described and vetted in an IETF standards-track RFC: Declared owner ofMarch 1997. Onthe26thnamespace Desired NID Description of: . uniqueness ofMarch 1997, urn:foo:bar:current-weather is referring toidentifiers assigned by thesame resource as urn:foo:bar:weather/19970326. Conclusion: =========== This draft has outlinednamespace's naming authority . process of assignment of identfiers in therequirementsnamespace . rules forprovidersdetermining lexical equivalence between identifiers in the namespace . conformance with RFC1737 requirements (??? these should be listed out) . identification ofNID services for URN systems. The objectivevalidation mechanism (to ascertain whether or not a string isto maintainin fact ahigh persistence rate forvalid URNservices, and these requirements are aimed at ensuring a high levelin the namespace) (??? in this case, it is required to be one ofservice stability. References: =========== [1]whois, finger, mail service) . match of scope, ownership, and/or global applicability. (?? E.g., you can't ask for "social security numbers", but the US may ask for US social security numbers). Examples Security Considerations (??? THere will most assuredly be some!). References [RFC2168] Ron Daniel & Michael Mealling, "Resolution of Uniform Resource Identifiers using the Domain Name System",draft-ietf-urn-naptr-02.txt, February,RFC 2168 June 1997.[2][RFC2169] Ron Daniel, "A Trivial Convention for using HTTP in URN Resolution",draft-ietf-urn-http-conv-01.txt, February 1997 [3] Karen R Sollins, "Requirements and a Framework for URN Resolution Systems", draft-ietf-urn-req-frame-00.txt, November 1996 [4]RFC 2169, June 1997. [RFC2141] Ryan Moats, "URN Syntax",draft-ietf-urn-syntax-02, JanuaryRFC 2141, May 1997.[5][RFC1737] Karen R Sollins & Larry Masinter, "Functional Requirements for Uniform Resource Names", RFC1737, December 1994Security Considerations ======================= It is a requirement that it in the definitions of a namespace are included sections on security covering for example: + Spoofing of servers + Verification of responses Because a namespace can decide that a resolution service is not publically available, it is possible to use firewall installations and other traffic limiting constructions to diconnect the namespace from the global Internet. Author Contact Information: ===========================Authors' Addresses Leslie L. Daigle Bunyip Information Systems Inc 310 Ste. Catherine St. W Suite 300 Montreal, Quebec, CANADA H2X 2A1 voice: +1 514 875-8611 fax: +1 514 875-8134 email: leslie@bunyip.com Dirk-Willem van Gulik ISIS/STA/CEO - TP 270 Joint Research Centre Ispra 21020 Ispra (Va) Italy. voice: +39 332 78 9549 or 5044 fax: +39 332 78 9185 email: Dirk.vanGulik@jrc.it Renato Iannella DSTC Pty Ltd Gehrmann Labs, The Uni of Queensland AUSTRALIA, 4072 voice: +61 7 3365 4310 fax: +61 7 3365 4311 email: renato@dstc.edu.au Patrik Faltstrom Tele2/Swipnet Borgarfjordsgatan 16 P.O. Box 62 S-164 94 Kista SWEDEN voice: +46-5626 4000 fax: +46-5626 4200 email: paf@swip.net ----