This HTML5 document contains 108 embedded RDF statements represented using HTML+Microdata notation.

The embedded RDF content will be recognized by any processor of HTML5 Microdata.

PrefixNamespace IRI
n16http://ods.openlinksw.com/dataspace/services/wiki/
n8http://docs.openlinksw.com/virtuoso/rdfsparql.html#
n13http://blogs.sun.com/bblfish/entry/
n38http://lists.foaf-project.org/mailman/listinfo/
n15http://rdfs.org/sioc/services#
n29http://ods.openlinksw.com/dataspace/dav#
dchttp://purl.org/dc/elements/1.1/
n32http://ods.openlinksw.com/wiki/main/ODS/VirtODSSecurityWebID/Picture_5.
n21https://foaf.me/simpleLogin.
dctermshttp://purl.org/dc/terms/
n37http://ods.openlinksw.com/dataspace/person/owiki#
rdfshttp://www.w3.org/2000/01/rdf-schema#
rdfhttp://www.w3.org/1999/02/22-rdf-syntax-ns#
n35http://ods.openlinksw.com/wiki/main/ODS/VirtODSSecurityWebID/Picture_3.
atomhttp://atomowl.org/ontologies/atomrdf#
n18http://ods.openlinksw.com/dataspace/person/dav#
n39http://www.foaf-project.org/
xsdhhttp://www.w3.org/2001/XMLSchema#
n5http://docs.openlinksw.com/virtuoso/rdfsparql.
n2http://ods.openlinksw.com/dataspace/owiki/wiki/ODS/
n34http://ods.openlinksw.com/wiki/main/ODS/VirtODSSecurityWebID/vf1.
n25http://ods.openlinksw.com/wiki/main/ODS/VirtODSSecurityWebID/vf2.
siochttp://rdfs.org/sioc/ns#
n26http://ods.openlinksw.com/wiki/main/ODS/VirtODSSecurityWebID/vf3.
n14http://ods.openlinksw.com/dataspace/%28NULL%29/wiki/ODS/
n12http://id.myopenlink.net/ods/webid_demo.
oplhttp://www.openlinksw.com/schema/attribution#
n7http://ods.openlinksw.com/dataspace/owiki/wiki/
n24http://ods.openlinksw.com/dataspace/owiki/wiki/ODS/VirtODSSecurityWebID/sioc.
n30http://ods.openlinksw.com/wiki/main/ODS/VirtODSSecurityWebID/Picture_1.
n36http://ods.openlinksw.com/wiki/main/ODS/VirtODSSecurityWebID/Picture_4.
n9http://docs.openlinksw.com/virtuoso/
foafhttp://xmlns.com/foaf/0.1/
n27http://virtuoso.openlinksw.com/wiki/main/Main/
n20http://esw.w3.org/topic/foaf+
siocthttp://rdfs.org/sioc/types#
n28http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/
n31http://ods.openlinksw.com/wiki/main/ODS/VirtODSSecurityWebID/Picture_2.
n19http://test.foafssl.org/cert/
n10http://ods.openlinksw.com/dataspace/owiki#
Subject Item
n18:this
foaf:made
n2:VirtODSSecurityWebID
Subject Item
n16:item
n15:services_of
n2:VirtODSSecurityWebID
Subject Item
n10:this
sioc:creator_of
n2:VirtODSSecurityWebID
Subject Item
n2:ODSWebIDIdpProxy
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:VirtPubSubHubACL
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:OdsBriefcaseAmazonS3WebIDACL
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:OdsBriefcaseSkyDriveWebIDACL
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:OdsBriefcaseGoogleDriveWebIDACL
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:VirtPubSubHubACLDefinePSHSSL
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n7:ODS
sioc:container_of
n2:VirtODSSecurityWebID
atom:entry
n2:VirtODSSecurityWebID
atom:contains
n2:VirtODSSecurityWebID
Subject Item
n2:ODSAddressBookWebIDACLShareContact
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:ODSBookmarksWebIDACLShareBookmark
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:ODSCalendarWebIDACLShareEvent
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:ODSCalendarWebIDACLShareTask
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:ODSFeedManagerWebIDACLShareSubscription
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n29:this
sioc:creator_of
n2:VirtODSSecurityWebID
Subject Item
n2:ODSSetupSSL
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:OdsBriefcaseDropBoxWebIDACL
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:OdsBriefcaseBoxNetWebIDACL
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:VirtODSSecurityWebID
rdf:type
sioct:Comment atom:Entry
dcterms:created
2017-06-13T06:01:53.878673
dcterms:modified
2017-06-29T07:32:47.701440
rdfs:label
VirtODSSecurityWebID
foaf:maker
n18:this n37:this
dc:title
VirtODSSecurityWebID
opl:isDescribedUsing
n24:rdf
sioc:has_creator
n10:this n29:this
sioc:attachment
n25:png n26:png n30:png n31:png n32:png n34:png n35:png n36:png
sioc:content
---+ <nowiki>WebID</nowiki> Protocol Support in <nowiki>OpenLink</nowiki> Data Spaces %TOC% ---++What is the <nowiki>WebID</nowiki> Protocol? The <b><nowiki>WebID</nowiki> Protocol</b> is an authentication and authorization protocol that links a ''[[../VOS/GetAPersonalURIIn5MinutesOrLess][Web ID]]'' or "[[../VOS/GetAPersonalURIIn5MinutesOrLess][Personal URI]]" to a public key to create a global, decentralized, distributed, and secure authentication system that functions with existing browsers. The <nowiki>WebID</nowiki> Protocol uses PKI standards &mdash; usually thought of as hierarchical trust management tools &mdash; [[http://blogs.sun.com/bblfish/entry/foaf_ssl_pki_and_the][in a decentralized web-of-trust way]]. The web of trust is built using semantic web vocabularies (particularly [[http://www.foaf-project.org/][FOAF]]) published in RESTful manner to form [[Linked Data]]. Based on well known existing standards, the <nowiki>WebID</nowiki> Protocol is currently in development, and is being discussed on the [[http://lists.foaf-project.org/mailman/listinfo/foaf-protocols][FOAF protocols mailing list]]. For the most recent description of the protocol, read the one-page <i>[[http://blogs.sun.com/bblfish/entry/foaf_ssl_adding_security_to][WebID Protocol: Adding Security to Open Distributed Social Networks]].</i> For a more detailed explanation of how the authentication works, see <i>[[http://blogs.sun.com/bblfish/entry/more_on_authorization_in_foaf][WebID Protocol: Creating a Web of Trust without Key Signing Parties]].</i> ---++Why use the <nowiki>WebID</nowiki> Protocol? Automatic discovery of interpersonal trust relationships enables automatic application of appropriate permissions. In other words, data owners can set fuzzy permissions like "only let my friends see this" or "only let my family edit this." Applications can discover the relationships between the data owner and the data requester/user, and permit (or disallow) any attempted actions, without needing the data owner to explicitly set permissions for each potential user. One example might be a parent setting permissions on a photo gallery, to permit viewing only by "immediate family". The parent need not list each and every such relative specifically for this application -- and need not add new permissions for a new family member (whether by marriage, birth, or otherwise), though they *do* need to be added to the owner's FOAF. When a new user comes and asks to see the pictures, the gallery application would check the relationships declared by each person (the owner and the visitor), and if they matched up (in other words, the visitor could not get in simply by *claiming* a family relationship; the relationship must be confirmed by the owner's FOAF data), the pictures would be shown. ---++How can I use the <nowiki>WebID</nowiki> Protocol? ---+++ Prerequisites * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtGenerateX509Cert][Generate x.509 certificate]]. * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSetupSSLFileSystem][Set up Virtuoso HTTPS]]. ---+++ Configure your ODS Account to use the <nowiki>WebID</nowiki> Protocol 1 Log in to your ODS account, and edit your profile. 1 Click to the Security Tab, and scroll to the bottom, where you will find the X.509 certificate entry area. 1 Copy & paste the PEM format of the certificate (i.e., the content of <code>mykey.pem</code>, from earlier). 1 Press "Save Certificate" button, and you are set. ---+++ Test the setup To test, we recommend [[http://id.myopenlink.net/ods/webid_demo.html][Virtuoso WebID Verification Proxy Service]]: 1 Go to [[http://id.myopenlink.net/ods/webid_demo.html][Virtuoso WebID Verification Proxy Service]] Endpoint: * Note: Optionally you can hatch the "Check Certificate Expiration" check-box. %BR%%BR%<img src="%ATTACHURLPATH%/vf1.png" style="wikiautogen"/>%BR%%BR% 1 Click the "Check" button. 1 Should be challenged to choose a certificate to present as identification. Select the certificate generated from above and click "Ok": %BR%%BR%<img src="%ATTACHURLPATH%/vf2.png" style="wikiautogen"/>%BR%%BR% 1 Should be presented the extracted WebID value, the subject, MD5, SHA1 and Timestamp in ISO 8601 format: %BR%%BR%<img src="%ATTACHURLPATH%/vf3.png" style="wikiautogen"/>%BR%%BR% ---+++ <nowiki>WebID</nowiki> Protocol ACLs You can set <nowiki>WebID</nowiki> Protocol ACLs (Access Control Lists) through the [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtAuthServerUI][Virtuoso Authentication Server UI]], for which there is [[http://virtuoso.openlinksw.com/wiki/main/Main/VirtSPARQLSecurityWebID][a tutorial]]. ---+++Setup ACL for ODS Applications * [[ODSBriefcaseWebID][ODS Briefcase WebID based ACL Guide]] * [[ODSFeedManagerWebIDACL][ODS Feed Manager WebID based ACL Guide]] * [[ODSCalendarWebIDACL][ODS Calendar WebID based ACL Guide]] * [[ODSBookmarksWebIDACL][ODS Bookmark Manager WebID based ACL Guide]] * [[ODSAddressBookWebIDACL][ODS Addressbook WebID based ACL Guide]] ---++Related * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLEndpointProtection][Safeguarding your Virtuoso-hosted SPARQL Endpoint]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuideSPARQLEndpointProtection][SPARQL Endpoint Protection Methods Collection]] * [[http://docs.openlinksw.com/virtuoso/][Virtuoso documentation]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#rdfsupportedprotocolendpoint][SPARQL Service Endpoint]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#rdfsupportedprotocolendpointuri][Service Endpoint Security]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#sparqwebservicetbl][Managing a SPARQL Web Service Endpoint]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html][SPARQL]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuide][Virtuoso Tips and Tricks Collection]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLDET][SPARQL Endpoint DET Configuration Guide]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLSecurityWebID][WebID Protocol & SPARQL Endpoint ACLs Tutorial]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtOAuthSPARQL][SPARQL OAuth Tutorial]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuideSPARQLEndpoints][Securing SPARQL endpoints]] * [[OdsSPARQLAuth][SPARUL over SPARQL using the http://cname:port/sparql-auth endpoint]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtAuthServerUI][Virtuoso Authentication Server UI]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLSSL][Manage a SPARQL-WebID based Endpoint]] * [[VirtODSSecurityWebID][WebID Protocol Support in OpenLink Data Spaces]]. * Manage ODS Datadspaces Objects WebID Access Control Lists (ACLs): * [[ODSBriefcaseWebID][ODS Briefcase WebID based ACL Guide]] * [[ODSBriefcaseWebIDPerson][Person Entity WebID based ACL Guide]] * [[ODSBriefcaseWebIDGroup][Group Entity WebID based ACL Guide]] * [[ODSBriefcaseWebIDPublic][Public WebID based ACL Guide]] * [[ODSFeedManagerWebIDACL][ODS Feed Manager WebID based ACL Guide]] * [[ODSFeedManagerWebIDACLPerson][Person Entity Specific ACL]] * [[ODSFeedManagerWebIDACLGroup][Group Entity Specific ACL]] * [[ODSFeedManagerWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[ODSCalendarWebIDACL][ODS Calendar WebID based ACL Guide]] * [[ODSCalendarWebIDACLPerson][Person Entity Specific ACL]] * [[ODSCalendarWebIDACLGroup][Group Entity Specific ACL]] * [[ODSCalendarWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[ODSBookmarksWebIDACL][ODS Bookmark Manager WebID based ACL Guide]] * [[ODSBookmarksWebIDACLPerson][Person Entity Specific ACL]] * [[ODSBookmarksWebIDACLGroup][Group Entity Specific ACL]] * [[ODSBookmarksWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[ODSAddressBookWebIDACL][ODS Addressbook WebID based ACL Guide]] * [[ODSAddressBookWebIDACLPerson][Person Entity Specific ACL]] * [[ODSAddressBookWebIDACLGroup][Group Entity Specific ACL]] * [[ODSAddressBookWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[ODSPkiSetup][Guide for Set up a X.509 certificate issuer and HTTPS listener and generate ODS user certificates.]] * [[ODSSetupSSL][Configure Virtuoso+ODS instance as an X.509 Certificate Authority and HTTPS listener]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSetupSSL][Configure Virtuoso instance as an X.509 Certificate Authority and HTTPS listener]] * [[VirtODSPubSubHub][Setting up PubSubHub in ODS]] * [[VirtPubSubHub][PubSubHubBub Demo Client Example]] * [[VirtFeedPubSubHub][Feed subscription via PubSubHub protocol Example ]] * [[VirtPubSubHubACL][Setting Up PubSubHub to use WebID Protocol or IP based control lists]] * [[OdsKeyImport][CA Keys Import using Conductor]] * [[ODSGenerateX509Certificate][Generate an X.509 Certificate hosted WebID Guide]] * [[ODSGenerateWebIDX509CertOSKeystore][Generate an X.509 Certificate (with a WebID watermark) to be managed by host operating system keystore]] * [[ODSGenerateWebIDX509CertBrsKeystore][Generate an X.509 Certificate (with a WebID watermark) to be managed by a browser-based keystore]] * [[ODSWebIDIdP][Using Virtuoso's WebID Verification Proxy Service with a WebID-bearing X.509 certificate]] * [[ODSWebIDIdpProxy][Using Virtuoso's WebID Identity Provider (IdP) Proxy Service with an X.509 certificate]] * [[ODSBriefcaseWebIDShareFile][ODS Briefcase WebID Protocol Share File Guide]] * [[http://esw.w3.org/topic/foaf+ssl][WebID Protocol Specification]] * [[https://foaf.me/simpleLogin.php][Test WebID Protocol Certificate page]] * [[http://test.foafssl.org/cert/][WebID Protocol Certificate Generation page]]
sioc:id
49f32435bcbad4ff06fc21cd79187d56
sioc:link
n2:VirtODSSecurityWebID
sioc:has_container
n7:ODS
n15:has_services
n16:item
atom:title
VirtODSSecurityWebID
sioc:links_to
n5:html n8:rdfsupportedprotocolendpointuri n8:sparqwebservicetbl n2:ODSAddressBookWebIDACLGroup n9: n8:rdfsupportedprotocolendpoint n2:ODSGenerateWebIDX509CertOSKeystore n2:ODSAddressBookWebIDACLPerson n2:OdsKeyImport n12:html n13:more_on_authorization_in_foaf n14:LinkedData n2:ODSGenerateWebIDX509CertBrsKeystore n2:VirtODSSecurityWebID n19: n20:ssl n21:php n14:WebID n27:VirtSPARQLSecurityWebID n28:VirtGenerateX509Cert n28:VirtSetupSSLFileSystem n2:ODSFeedManagerWebIDACL n2:ODSBriefcaseWebIDPublic n2:ODSBriefcaseWebIDPerson n2:ODSBriefcaseWebID n28:VirtSPARQLSecurityWebID n28:VirtTipsAndTricksGuideSPARQLEndpoints n28:VirtTipsAndTricksGuide n28:VirtSPARQLDET n28:VirtSPARQLEndpointProtection n2:ODSCalendarWebIDACL n2:ODSFeedManagerWebIDACLPublic n2:ODSFeedManagerWebIDACLGroup n2:ODSFeedManagerWebIDACLPerson n2:OdsSPARQLAuth n2:ODSBookmarksWebIDACLPerson n2:ODSBookmarksWebIDACL n2:ODSCalendarWebIDACLPerson n2:ODSGenerateX509Certificate n2:ODSCalendarWebIDACLPublic n28:VirtOAuthSPARQL n28:VirtTipsAndTricksGuideSPARQLEndpointProtection n2:ODSBriefcaseWebIDGroup n28:VirtSPARQLSSL n28:VirtSetupSSL n28:VirtAuthServerUI n2:ODSCalendarWebIDACLGroup n2:ODSAddressBookWebIDACLPublic n2:ODSAddressBookWebIDACL n2:ODSBookmarksWebIDACLPublic n38:foaf-protocols n13:foaf_ssl_adding_security_to n13:foaf_ssl_pki_and_the n2:ODSBookmarksWebIDACLGroup n39:
atom:source
n7:ODS
atom:author
n18:this
atom:published
2017-06-13T06:01:53Z
atom:updated
2017-06-29T07:32:47Z
sioc:topic
n7:ODS
Subject Item
n2:ODSWebIDIdP
sioc:links_to
n2:VirtODSSecurityWebID
Subject Item
n2:VirtODSPubSubHub
sioc:links_to
n2:VirtODSSecurityWebID