Publicly available specification. A new paradigm for developinginternational standards

Formal standards groups have been criticized in recent years for the time required to develop standards. With notable exceptions, standards groups have earned this criticism. One body, ISO/IEC JTC1 (Joint Technical Committee 1), is aggressively addressing the time required to develop formal international standards (ISs) for the information technology industry. With its latest addition, publicly available specification (PAS), JTC1 now has three standards development paradigms: traditional, fast-track and PAS. All three paradigms share the same final approval procedures but have different development processes. The PAS paradigm resembles both the traditional and fast-track paradigms in its process for moving from a draft IS to an IS. The PAS paradigm even more closely resembles the fast-track paradigm in that it lets a standard be initially developed outside ISO. However, whereas the fast-track paradigm lets a standard be developed by a JTC1 member, the PAS paradigm lets it be developed by any organization     

浅谈软件质量度量和软件产品评价

软件质量度量和软件产品评价系列标准是国际标准化组织ISO／IEC JTC1近年来在软件工程标准方面的研究重点之一,对于通过量化手段进行软件产品的度量和评价,规范软件产品的质量管理,这两个系列标准提供了一条可以参考的实施途径。本文在多年跟踪研究国际上软件工程标准和制定软件工程国家标准的基础上,对ISO／IEC JTC1近年推出的ISO／IEC 9126和ISO／IEC 14598系列,以及正在研制的ISO／IEC 25000系列标准进行综合介绍。     

中国在ISO/ IEC JTC1/ SC2 的活动与中文编码的国际标准化

标准化是实现技术产业化的基础。中文信息处理技术是我国特有的、具有国际领先水平的技术。我国自 20 世纪80 年代参与ISO/ IEC J TC1/ SC2 的活动以来,在中文编码技术的国际标准化工作中取得了显著成绩。本文介绍了ISO/ IEC J TC1/ SC2 的工作领域、工作方式和组织结构;我国参与ISO/ IEC J TC1/ SC2 及其下属该组织活动的方式;国际标准ISO/ IEC 10646 的大致情况和我国在参与此国际标准研制工作中取得的成绩、当前的工作和未来工作的计划。本文论述了我国参与本文ISO/ IEC J TC1/ SC2 活动的意义,以及我国在ISO/ IEC J TC1/ SC2 活动中的作用、地位和影响。作者还提出了对未来工作的建议。     

From Interfaces for Application Portability (IAP) to Open System Environment profiles (OSE)

The ISO/IEC JTC 1 Technical Study Group 1's report on Interfaces for Application Portability has initiated a worldwide attempt at specifying a Reference Model for Open System Environments. This article provides a concise but comprehensive view of the current State of the Art and emphasizes the interaction with the ‘user’ of such a Reference Model.     

Coming to Terms: The SEVOCA Project

The Software Engineering Glossary department was started in 2003 to replace the outdated IEEE Standard 610.12-1990. Since then, the ISO/IEC JTC1/SC7 Working Group on Vocabulary has assumed the role of developing and distributing software engineering vocabulary standards. In the final installment of the department, Annette D. Reilly describes the new standards effort as a bridge between the past and the future in software engineering glossaries.     

一种匿名口令鉴别构件系统

作为隐私保护的重要手段,匿名鉴别机制引起了各界的广泛关注,口令鉴别作为应用最广泛的鉴别方式,研究设计仅依赖于口令的匿名鉴别系统具有重要意义.在此背景下,国际标准化组织ISO/IEC JTC1/SC27启动了ISO/IEC20009-4标准项目,专门针对基于口令的匿名鉴别机制开展标准化工作,目前收录了三种匿名口令鉴别协议.本文基于该标准中的SKI协议研究设计了一种匿名口令鉴别构件系统,同时系统可支持标准中收录的其它两种协议.本文针对该构件系统的安全性、匿名性以及性能方面进行了系统的分析设计,从系统初始化、匿名分组构建到标准协议执行等各环节进行了安全保护,填补了标准本身到实际应用的差距.本文主要解决了SKI协议应用时面临的安全及效率问题,包括:协议中“公告板信息不一致”将导致合法用户认证失败、群组公告信息的“首次请求”面临超长等待延时等问题.构件系统通过引入“双重公告信息”、“请求绑定会话”、“Cache机制”等多种手段解决了上述问题.最后,我们对匿名口令鉴别构件系统的性能进行了实验分析.目前尚未见国内外同类系统被提出.     

IEEE 1220: for practical systems engineering

IEEE 1220 guides enterprises or projects to a well-engineered solution for product-oriented systems. Annex C describes how to success fully use IEEE 1220 together with ISO/IEC 15288, but there are still gaps to bridge to fully harmonize the two standards. Although a "fast-track" ballot of IEEE Std 1220-2005 is currently under way in JTC1, planning joint committee activities to produce a coordinated IEEE-ISO/IEC version of IEEE 1220 should allow for completion of the ISO/IEC 15288:2002.     

The basic concepts for ISO/IEC's Image Interchange Format (IIF)

This paper describes the basic concepts for the Image Interchange Format (IIF) for the first International Image Processing and Interchange Standard (IPI), which is under elaboration by ISO/IEC JTC1/SC24 (International Standards Organization/International Electronics Commission, Joint Technical Committee, Computer Graphics)—i.e., “information processing”/“computer graphics”—committee work. Starting with a discussion of existing image formats and current image interchange practices, this study outlines the need for a new approach to a general image interchange format. A requirements list and corresponding design goals for the IIF are presented. Finally, the relation to the other parts of the IPI standard are described. The authors are coworkers and contributors to the relevant committees within the ISO/IEC and the DIN German Institute for Standardization (DIN Deutsches Institut für Normung).     

Graphics standards in the GDR

This article outlines implementations and applications of the GKS standard and GKS-3D standard in the German Democratic Republic (GDR). The graphical standardization in the GDR was highly stimulated by becoming a member of the ISO and by the active colaboration of the GDR in the ISO/IEC JTC1/SC24 “Computer Graphics.” Some of the national activities and efforts in this field are illustrated.     

The Software Life Cycle Processes standard

A new standard, Software Life Cycle Processes (ISO/IEC 12207), developed over the past six years, has recently been approved by JTC1 (Joint Technical Committee 1 of the International Organization for Standardization and the International Electrotechnical Commission). While software has been established as an integral part of scientific and business disciplines, environments for developing and managing software have proliferated without a common, uniform framework for the software life cycle. This standard provides such a framework, so that software practitioners can speak the same language when they create and manage software. Practitioners can use the framework to acquire, supply, develop, operate, and maintain software     

Universal Remote Console-based next-generation accessible television

This paper presents a new approach to make current and future television universally accessible. The proposed approach provides a means of universal accessibility both for remotely operating the TV set and for interacting with online services delivered through the TV. This proposal is based on the ISO/IEC 24752 “Universal Remote Console” (URC) standard. This standard defines an abstract user interface layer called the “user interface socket” and allows the development of pluggable (plug-in) user interfaces for any type of user and any control device. The proposed approach lays the foundation for the development of advanced user interfaces that can be interacted within various modalities. Different prototypes have been developed based on this approach and tested with end users. The user tests have shown this approach to be a viable option for the proposed scenarios. Based on the experience gathered with the prototypes, recommendations and implementation options are suggested for commercial adoption.     

An ontology for ISO software engineering standards: 1) Creating the infrastructure

Software engineering standards developed under the auspices of ISO/IEC JTC1's SC7 have been identified as employing terms whose definitions vary significantly between standards. This led to a request in 2012 to investigate the creation of an ontological infrastructure that aims to be a single coherent underpinning for all SC7 standards, present and future. Here, we develop that necessary infrastructure prior to its adoption by SC7 and its implementation (likely 2014). The proposal described here requires, firstly, the identification of a single comprehensive set of definitions, the definitional elements ontology (DEO). For the scope of an individual standard, only a subset of these definitional elements will be needed. Once configured, this definitional subset creates a configured definitional ontology or CDO. Both the DEO and the CDO are essentially foundational ontologies from which a domain-specific ontology known as a SDO or standard domain ontology can be created. Consequently, all such SDOs are conformant to a CDO and hence to the single DEO thus ensuring that all standards use the same ontological base. Standards developed in this fashion will therefore be not only of a higher quality but also, importantly, interoperable.     

A family of standards for software and systems product lines

There is a drastic rise and evolution of Software and Systems Product Lines (SSPL) as a potential solution to deliver quality software products in a shorter time and with less effort. This has led to a plethora of diversified tools across the entire life cycle of SSPL, making it difficult for product line organizations to select the right set of tools for product line realization and tool vendors to develop interoperable tools. In this paper, we motivate the need for standardization of tools and methods for SSPL. The ISO/IEC JTC1/SC7 (Software and Systems Engineering) of the International Organization for Standardization (ISO) has proposed a set of interrelated standards in the area of SSPL to cater to the emerging demands of software and systems industry. We present the foundation of SSPL family of standards that are driven by market needs and discuss the core patterns and processes of SSPL. We then present an overview of ISO/IEC 26550, which is the reference model for SSPL family of standards and provide examples from current and ongoing standards. We highlight a few examples of industry adoption of SSPL and standards and emphasize the need for further research for standards in SSPL. We see this paper as a first step to bring standards knowledge into the academic world in the field of SSPL.     

Programming Paradigms in an Object-Oriented Multimedia Standard

Of the various programming paradigms in use today, object-orientation is probably the most successful in terms of industrial take-up and application, particularly in the field of multimedia. It is therefore unsurprising that this technology has been adopted by ISO/IEC JTC1/SC24 as the foundation for a forthcoming International Standard for Multimedia, called PREMO. Two important design aims of PREMO are that it be distributable, and that it provides a set of media-related services that can be extended in a disciplined way to support the needs of future applications and problem domains. While key aspects of the object-oriented paradigm provide a sound technical basis for achieving these aims, the need to balance extensibility and a high-level programming interface against the realities of efficiency and ease of implementation in a distributed setting meant that the task of synthesising a Standard from existing practice was non-trivial. Indeed, in order to meet the design aims of PREMO is was found necessary to augment the basic object infrastructure with facilities and ideas drawn from other programming paradigms, in particular concepts from constraint management and data flow. This paper describes the important trade-offs that have affected the development of PREMO and explains how these are addressed through the use of specific programming paradigms.     

The UNIX localization and Chinese Information Processing System

To facilitate the wider use of computers all over the world,it is necessary to provide National Language Support in the computer systems.This paper introduces some aspects of design and implementation of the UNIX-based Chinese Information Processing Systems (CIPS). Due to the special nature of the Oriental languages,and in order to be able to share resources and exchange in formation between different countries,it is necessary to create a standard of multilingual information exchange code.The unified Chinese/Japanese/Korean character code,Han Character Collection(HCC),was proposed to ISO/IEC JTC1/SC2/WG2 by China Computer and Information Processing Standardization Technical Committee.Based on this character set and the corresponding coding system,it is possible to create a true Internationalized UNIX System.     

ISO/IEC standardization of identity management and privacy technologies

To cover projects in the area of identity management, privacy, and biometrics ISO/IEC JTC 1/ SC 27 “IT Security techniques” in 2006 established Working Group 5 “Identity Management and Privacy Technologies”. This text describes the reasoning to have this Working Group within SC 27 and introduces WG 5 and its projects.     

Standardization in information security management

The paper describes the state of the art in the standardization in information security management. The requirements to the standards being developed, the types of standards, and the principles to adhere to are discussed. The study is based on the documents adopted within the subcommittee 27 “IT Security techniques” of the joint technical committee ISO/IEC JTC 1 “Information technology”.     

Why Java™ was - not - standardized twice

This paper examines two attempts by Sun Microsystems to standardize its Java™ Technology (a proprietary de facto standard). Sun approached ISO/IEC JTC1 and later the ECMA consortium, but it withdrew both times. In this paper, I analyse Sun's actions. A conceptual framework is applied that distinguishes two levels of coordination in standardization: ‘technology-oriented compatibility control’ and ‘orchestration of market orientation’. Sun's actions addressed both levels. It initially used standardization to focus attention on Java™ and increase confidence in an open, stable Java specification process. But it turned to proprietary ‘compatibility control’ in reaction to standard politics and developments in the market.