Difference between revisions of "Higgins XDI Harmonization"
(→Simple-valued attributes) |
(→Introduction) |
||
(25 intermediate revisions by the same user not shown) | |||
Line 14: | Line 14: | ||
===Two kinds of graphs=== | ===Two kinds of graphs=== | ||
− | The | + | The [[Context Data Model 2.0 | CDM]], [[Higgins Data Model 2.0 | HDM]], and [[Persona Data Model 2.0 | PDM]] models taken together define the types of graphs that will be found in production Higgins-based systems. On the other hand the XDI defines the types of graphs that will be found in XDI conformant systems. So we have two kinds of graphs with differences between them. Our goal is to ensure that these graphs can be losslessly transformed bi-directionally. Our goal is NOT to make them the same graphs. In order to make the graphs transformable we need to ensure that the semantics are equivalent between the two. |
With that as background, here are the kinds of issues we need to address: | With that as background, here are the kinds of issues we need to address: | ||
Line 38: | Line 38: | ||
*BTW, perhaps IdAS needs to support ordered values. | *BTW, perhaps IdAS needs to support ordered values. | ||
− | ===HDM=== | + | === HDM === |
− | ==== | + | ==== h:correlation ==== |
− | *For privacy reasons h:correlation links are directed | + | |
+ | Semantics: | ||
+ | |||
+ | *For privacy reasons h:correlation links are directed | ||
*The semantics are reversible except for the issue of privilege. | *The semantics are reversible except for the issue of privilege. | ||
− | *''Resolution'': <code>h:correlation</code> is the same as <code>$is</code> | + | *''Resolution'': <code>h:correlation</code> is the same as <code>$is</code>. '''--Paul: I'm not sure I buy this. Seems to me that $is is the same as owl:sameAs not h:correlation.''' |
+ | |||
+ | Cross-context usage: | ||
+ | |||
+ | *An entity in one context may be linked to entities in another context via an h:correlation link. | ||
+ | *This is identical in XDI | ||
+ | *''Resolution: they are the same'' | ||
+ | |||
+ | ==== h:relation ==== | ||
+ | |||
+ | Semantics: | ||
+ | * A directed relation between two entities (possibly in two different contexts) that are asserted to NOT be representing the same person, group, object or concept | ||
+ | *''Resolution'': | ||
+ | |||
+ | ==== h:indeterminate ==== | ||
+ | |||
+ | Semantics: | ||
+ | A directed relation between two entities (possibly in different contexts) for which it is unknown as to whether they represent the same (person, group, object or concept) thing or a different thing. | ||
+ | *''Resolution'': | ||
+ | |||
+ | ==== Other complex-valued attributes ==== | ||
− | + | See [[Higgins Data Model 2.0#Classes_and_Attributes]] for other complex valued attributes beyond h:correlation: | |
− | + | ||
− | + | ||
− | + | ||
− | + | Resolved: | |
− | + | ||
− | + | *<code>part</code>: - same as $has | |
− | *<code>part</code>: - same as $has | + | |
*<code>partOf</code>: - same as $is$has | *<code>partOf</code>: - same as $is$has | ||
− | Still unresolved: | + | Still unresolved: |
− | *<code>issuer</code>: | + | |
− | *<code>member</code> (sub-property of h:part): - no equivalent in PDX | + | *<code>issuer</code>: - no equivalent in PDX |
− | *<code>memberOf</code> (sub-property of h:partOf): - no equivalent in PDX | + | *<code>member</code> (sub-property of h:part): - no equivalent in PDX |
+ | *<code>memberOf</code> (sub-property of h:partOf): - no equivalent in PDX | ||
*<code>timespan</code>: - no equivalent in PDX. BTW, XDI has timestamps which is similar | *<code>timespan</code>: - no equivalent in PDX. BTW, XDI has timestamps which is similar | ||
− | ====Simple-valued attributes==== | + | ==== Simple-valued attributes ==== |
− | + | ||
− | + | ||
− | + | ||
− | + | *<code>synonym</code>: - Joseph: this corresponds to some usages of $is | |
− | * | + | *<code>start</code>: - same as $d$first |
− | * | + | *<code>end</code>: - same as $d$last |
− | * | + | |
− | + | ||
− | + | ||
− | + | ||
− | + | ==== Entity Class ==== | |
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | The following two must be dealt with together. It appears that an examination of surrounding context (on the XDI side) is required to disambiguate. | |
+ | *rdfs:type (instance to class; recommended on each instance) - in XDI is $is$a | ||
+ | *rdfs:subclassOf (class to class) - in XDI is $is$a | ||
− | + | Others: | |
− | * | + | *rdf:comment - Joseph: this is equivalent to "<-- comment -->" in XDI (however the proposed JSON mapping of XDI does not support comments) |
− | + | *skos:prefLabel (as opposed to rdf:label of which there may be many) - no equivalent in XDI (confirmed by Joseph) | |
− | + | *skos:prefSymbol (e.g. an icon of a telephone next to a telephone number in a UI) - no equivalent is XDI | |
− | + | *owl:disjointWith | |
− | + | ||
− | * skos:prefLabel: - | + | |
− | * skos:prefSymbol | + | |
− | + | ||
− | + | ||
− | * | + | |
− | + | ||
− | + | ||
− | + | ''Attribute Restrictions'' | |
− | + | ||
− | + | ||
− | + | The following additional attributes are used to define characteristics of a specific attribute of an entity class: | |
− | + | ||
− | + | ||
− | ====Entity classes==== | + | *owl:maxCardinality: |
− | * Agent | + | *owl:minCardinality: |
− | ** Person | + | *owl:cardinality: |
− | * Group | + | *owl:hasValue: |
− | * Organization | + | *owl:someValuesFrom: |
+ | *owl:allValuesFrom: | ||
+ | *spl:defaultValue: | ||
+ | |||
+ | ==== Attributes ==== | ||
+ | |||
+ | *rdf:type: | ||
+ | **Resolution: Markus: you can tell in XDI if it is a literal valued because you'll see a $foo $is$a statement | ||
+ | *rdfs:domain: | ||
+ | **Resolution: - XDI $has is the inverse of rdf:domain; this should suffice | ||
+ | *rdfs:range: - | ||
+ | *skos:description: - | ||
+ | *skos:prefLabel: - | ||
+ | *skos:prefSymbol: - | ||
+ | *skos:example - an example value | ||
+ | *h:category: - | ||
+ | *rdfs:subPropertyOf: - | ||
+ | *rdfs:label: - | ||
+ | *rdfs:comment: - | ||
+ | |||
+ | ==== Access Control ==== | ||
+ | |||
+ | *lots of predicates and classes designed but not yet implemented in Higgins | ||
+ | *In Higgins we consider XDI Link Contracts to be attributes associated with a context. If a single entity is being shared, then it would be placed in its own context and the link contract metadata attached to the context (not the entity). | ||
+ | |||
+ | ==== Entity classes ==== | ||
+ | |||
+ | *Agent | ||
+ | **Person | ||
+ | *Group | ||
+ | *Organization | ||
=== PDM === | === PDM === | ||
Line 120: | Line 144: | ||
*In PDM an entityId is is a URI UDI that is either absolute or relative (# fragment) by syntactic inspection. | *In PDM an entityId is is a URI UDI that is either absolute or relative (# fragment) by syntactic inspection. | ||
* Resolution: Non issue. In XDI a relative XRI is (by definition) relative to the XDI within the context that contains it | * Resolution: Non issue. In XDI a relative XRI is (by definition) relative to the XDI within the context that contains it | ||
+ | ====Multi-contextual Person==== | ||
Higgins represents a single person as a meta context + 0..N other contexts. XDI represents a single person as a single XDI document which can have multiple personas. | Higgins represents a single person as a meta context + 0..N other contexts. XDI represents a single person as a single XDI document which can have multiple personas. | ||
*''Resolution'': [[Attribute Service 2.0]] will map between representations. [It already does this] | *''Resolution'': [[Attribute Service 2.0]] will map between representations. [It already does this] | ||
====Root persona==== | ====Root persona==== | ||
− | In PDM there is a root | + | In PDM there is a root <code>h:Person</code> node of fixed name "MetaMe". In XDI there is an "account root" i-number (globally resolvable). This would change from one PDS to another PDS. |
====MetaMe-to-sub-entities==== | ====MetaMe-to-sub-entities==== | ||
− | * In Higgins we use h:correlation from the MetaMe to each/all (sub-) | + | * In Higgins we use h:correlation from the MetaMe <code>h:Person</code> node to each/all (sub-)<code>h:Person</code> nodes. |
* In PDX $has$a is used sometimes and $is in other cases. | * In PDX $has$a is used sometimes and $is in other cases. | ||
Line 135: | Line 160: | ||
====Persona Contexts, typed contexts==== | ====Persona Contexts, typed contexts==== | ||
− | The set of h:correlation and | + | The set of <code>h:correlation</code>, <code>h:relation</code>, and <code>h:indeterminate</code> links define a multi-entity graph explicitly. This allows software to know how to navigate and process the graph. This means that software that ONLY knows these 3 predicates can ignore all others and still walk the graph. |
====Misc==== | ====Misc==== | ||
− | * PDM uses vCard [w3c 2010 member submission] except for tel URI telephone numbers. | + | * PDM uses vCard [w3c 2010 member submission] except for tel URI telephone numbers. An <code>h:Person</code> node effectively "is" a vCard (we don't use explicit vCard classes). Not sure I see the point here. |
− | + | ||
====i-cards==== | ====i-cards==== |
Latest revision as of 13:49, 24 June 2010
{{#eclipseproject:technology.higgins|eclipse_custom_style.css}}
This document summarizes some of the notes and conversations that started at the European Identity Conference in Munich.
Introduction
Higgins speaks an XDI dialect that we'll call Higgins XDI. The XDI community is developing a dialect of XDI called PDX XDI. PDX is defined here http://wiki.oasis-open.org/xdi/PdxExample.
There is no need or reason to have Higgins XDI "standardized" and in fact over time we hope to gradually adjust the Higgins code (mostly in the Attribute Service and client components, but possibly one or two minor changes to IdAS itself) so that it is conformant with the PDX XDI dialect.
Markus had created a page very similar and related to this one here: IdAS XDI Mapping.
Two kinds of graphs
The CDM, HDM, and PDM models taken together define the types of graphs that will be found in production Higgins-based systems. On the other hand the XDI defines the types of graphs that will be found in XDI conformant systems. So we have two kinds of graphs with differences between them. Our goal is to ensure that these graphs can be losslessly transformed bi-directionally. Our goal is NOT to make them the same graphs. In order to make the graphs transformable we need to ensure that the semantics are equivalent between the two.
With that as background, here are the kinds of issues we need to address:
- Semantics are undefined in PDX - need to add the semantics to PDX
- Semantics are undefined in Higgins - need to add the semantics to Higgins
- Semantics are different but in a shallow or unimportant way - need to adopt one or the other
- Semantics are incompatible
- Non-issues: the semantics are equivalent and losslessly transformable back and forth
CDM
Global URIs
- In Higgins global URIs if resolvable, resolve to exactly one external description.
- Resolution: Non issue. XDI is the same.
Multiple values
- CDM allows multiple values of an attribute but XDI does not.
- Resolution: This can be mapped into a sub-context (in XDI) and back out losslessly. This is already implemented in the Attribute Service 2.0
Identifying values
- In PDX you can identify individual values of an attribute with a persistent identifier that won't change when the value changes (and you can have order).
- In CDM you cannot.
- BTW, perhaps IdAS needs to support ordered values.
HDM
h:correlation
Semantics:
- For privacy reasons h:correlation links are directed
- The semantics are reversible except for the issue of privilege.
- Resolution:
h:correlation
is the same as$is
. --Paul: I'm not sure I buy this. Seems to me that $is is the same as owl:sameAs not h:correlation.
Cross-context usage:
- An entity in one context may be linked to entities in another context via an h:correlation link.
- This is identical in XDI
- Resolution: they are the same
h:relation
Semantics:
- A directed relation between two entities (possibly in two different contexts) that are asserted to NOT be representing the same person, group, object or concept
- Resolution:
h:indeterminate
Semantics: A directed relation between two entities (possibly in different contexts) for which it is unknown as to whether they represent the same (person, group, object or concept) thing or a different thing.
- Resolution:
Other complex-valued attributes
See Higgins Data Model 2.0#Classes_and_Attributes for other complex valued attributes beyond h:correlation:
Resolved:
part
: - same as $haspartOf
: - same as $is$has
Still unresolved:
issuer
: - no equivalent in PDXmember
(sub-property of h:part): - no equivalent in PDXmemberOf
(sub-property of h:partOf): - no equivalent in PDXtimespan
: - no equivalent in PDX. BTW, XDI has timestamps which is similar
Simple-valued attributes
synonym
: - Joseph: this corresponds to some usages of $isstart
: - same as $d$firstend
: - same as $d$last
Entity Class
The following two must be dealt with together. It appears that an examination of surrounding context (on the XDI side) is required to disambiguate.
- rdfs:type (instance to class; recommended on each instance) - in XDI is $is$a
- rdfs:subclassOf (class to class) - in XDI is $is$a
Others:
- rdf:comment - Joseph: this is equivalent to "<-- comment -->" in XDI (however the proposed JSON mapping of XDI does not support comments)
- skos:prefLabel (as opposed to rdf:label of which there may be many) - no equivalent in XDI (confirmed by Joseph)
- skos:prefSymbol (e.g. an icon of a telephone next to a telephone number in a UI) - no equivalent is XDI
- owl:disjointWith
Attribute Restrictions
The following additional attributes are used to define characteristics of a specific attribute of an entity class:
- owl:maxCardinality:
- owl:minCardinality:
- owl:cardinality:
- owl:hasValue:
- owl:someValuesFrom:
- owl:allValuesFrom:
- spl:defaultValue:
Attributes
- rdf:type:
- Resolution: Markus: you can tell in XDI if it is a literal valued because you'll see a $foo $is$a statement
- rdfs:domain:
- Resolution: - XDI $has is the inverse of rdf:domain; this should suffice
- rdfs:range: -
- skos:description: -
- skos:prefLabel: -
- skos:prefSymbol: -
- skos:example - an example value
- h:category: -
- rdfs:subPropertyOf: -
- rdfs:label: -
- rdfs:comment: -
Access Control
- lots of predicates and classes designed but not yet implemented in Higgins
- In Higgins we consider XDI Link Contracts to be attributes associated with a context. If a single entity is being shared, then it would be placed in its own context and the link contract metadata attached to the context (not the entity).
Entity classes
- Agent
- Person
- Group
- Organization
PDM
URI conventions
- In PDM an entityId is is a URI UDI that is either absolute or relative (# fragment) by syntactic inspection.
- Resolution: Non issue. In XDI a relative XRI is (by definition) relative to the XDI within the context that contains it
Multi-contextual Person
Higgins represents a single person as a meta context + 0..N other contexts. XDI represents a single person as a single XDI document which can have multiple personas.
- Resolution: Attribute Service 2.0 will map between representations. [It already does this]
Root persona
In PDM there is a root h:Person
node of fixed name "MetaMe". In XDI there is an "account root" i-number (globally resolvable). This would change from one PDS to another PDS.
MetaMe-to-sub-entities
- In Higgins we use h:correlation from the MetaMe
h:Person
node to each/all (sub-)h:Person
nodes. - In PDX $has$a is used sometimes and $is in other cases.
Inheritance
In PDX attributes are inherited "down" the graph. You can override an attribute on a lower Persona. If a lower Persona is shared, then the "upper" / inherited attributes would be pushed to the subscriber. Perhaps Higgins could adopt the PDX approach.
Persona Contexts, typed contexts
The set of h:correlation
, h:relation
, and h:indeterminate
links define a multi-entity graph explicitly. This allows software to know how to navigate and process the graph. This means that software that ONLY knows these 3 predicates can ignore all others and still walk the graph.
Misc
- PDM uses vCard [w3c 2010 member submission] except for tel URI telephone numbers. An
h:Person
node effectively "is" a vCard (we don't use explicit vCard classes). Not sure I see the point here.
i-cards
- PDM includes the icard.owl vocabulary. These are a set of attributes and values that are associated with context instances. A context is a card. For personal cards the context contains the entity whose attributes/values are the claims/values of the card. For managed cards the context contains an entity whose attributes/values are the claims/values of the display token retrieved from the card's associated STS.
Other PDM attribute classes
PDM defines some attributes not found in vCard, FOAF, etc. these include notions of p:home, p:work, p:receiving, etc.. These don't exist in PDX. PDM also defines some classes not found elsewhere like PaymentMethod
PDX
This section looks at PDX and tries to find equivalent terms in CDM, HDM, or PDM.
Dollar Words
$d$first
- dateTime when this subject was created
- in HDM hasn't been defined
$d$last
- dateTime when this subject was last modified
- in HDM hasn't been defined