OASIS | RSA Information Security Glossary

OASIS

Organization for the Advancement of Structured Information Standards (OASIS) is an international, membership-based consortium that develops and promotes open standards for Internet commerce. OASIS was originally SGML Open, founded in 1993 to promote the use of SGML technologies, the precursor to XML. The name was changed to OASIS in 1998 following an expansion of scope and technical mission.

The consortium hosts two important portals for the promotion of primarily XML based standards, xml.org and Cover Pages at xml.coverpages.org.

From a security standpoint, two of their better known standards are Security Assertion Markup Language (SAML), now in version two and WS-Security 2004, which includes security extensions for SOAP (XML message transport).

21 CFR Part 11 access control, access management AES Alerting, alerts Anti-phishing service Anti-Phishing Working Group (APWG)authentication authorization Basel II Baseline, baselining biometrics/biometric authentication California AB 1950 and SB 1386 call center call center assist Card Management Systems (CMS)CAS certificate authority, certification authority (CA)Certificate Revocation List (CRL)Chip and PIN COBIT control framework credentials, credential store CVV DAS digital certificate digital identity digital rights management (DRM)digital signature directory service E-Authentication Initiative EMV™endpoint authentication EPS EU Data Protection Directive factoring, prime numbers Federal Information Processing Standards (FIPS)federated identity FFIEC FFIEC Online Banking Authentication Guidance FIPS 140 FIPS 201 GINA Gramm-Leach-Bliley Act (GLBA)hardware authenticator hijacking HIPAA Homeland Security Presidential Directive – Number 12 (HSPD-12)Identity and Access Management (IAM)identity theft Intelligent Questioning IPSec ISO 17799 ISO27002 key logging key management Knowledge Based Authentication (KBA)layered authentication LDAP Liberty Alliance, Liberty ID-FF logical access, physical access man-in-the-middle attacks (MITM)MasterCard's Chip Authentication Protocol (CAP)Microsoft.NET, Passport MPEG-LA mutual authentication NIST OASIS Open Mobile Alliance (OMA)OTP (One-Time Password)OTPS password, passcode, pass code Payment Card Industry (PCI) Data Security Standard Personal Identity Verification card (PIV Card)pharming phishing PKCS PKI provisioning RADIUS RBAC (Role Based Access Control)RC2, RC4, RC5, etc.RFID risk-based authentication RSA algorithm S/MIME SAML Sarbanes-Oxley Act (SOX)seed record sequential questions Service Oriented Architecture (SOA)single sign-on (SSO)smart badging smart card smart chip spoofing SSL-VPN strong authentication symmetric key cryptography time synchronous authentication token Trojans two-factor authentication U.K. Identity Cards Bill USB token user life-cycle management verification Visa's Dynamic Passcode Authentication (DPA)VPN web access management web services WS-Security XML	OASIS Organization for the Advancement of Structured Information Standards (OASIS) is an international, membership-based consortium that develops and promotes open standards for Internet commerce. OASIS was originally SGML Open, founded in 1993 to promote the use of SGML technologies, the precursor to XML. The name was changed to OASIS in 1998 following an expansion of scope and technical mission. The consortium hosts two important portals for the promotion of primarily XML based standards, xml.org and Cover Pages at xml.coverpages.org. From a security standpoint, two of their better known standards are Security Assertion Markup Language (SAML), now in version two and WS-Security 2004, which includes security extensions for SOAP (XML message transport). Top of Page	Related Terms SAML WS-Security XML Related Links Secure Web Access
		Email to a friend Print