ids https://w3id.org/idsa/core/ This ontology defines classes and properties for describing participants, infrastructure, data and services of the Industrial Dataspace. IDS Information Model https://w3id.org/idsa/core/2.0.1> 2.0.1 Andreas Müller Anna Kasprzik Constraint that refines an Action. action refinement References the connector that is affected by the runtime condition change. affected Connector true The affected data app that is referenced in the App-related messages. affected AppResource true References the participant that is referenced in the participant-related notification messages. affected Participant true The affected resource that is referenced in the resource-related notification messages. affected Resource true IRI reference to the ids:Artifact, whose corresponding data is transfered as payload of the AppUploadMessage. The Artifact IRI reference must match the IRI of the instance IRI for the corresponding ids:AppRepresentation. app artifact reference true Endpoints of a data app app endpoint Mediatype, such as IANA types, of the data an endpoint expects or returns . app endpoint media type Type of an app endpoint. Data apps have different endpoint types, e.g., for input, output or health status. App endpoint type Constraint that refines a (composite) Digital Content. content refinement The 'aud' (audience) claim identifies the recipients that the JWT is intended for. aud Information of the authentication service used by the Connector. authInfo The standard used by the authentication service that is provided by the Connector. authStandard An authorization token like JSON Web Token. Authorization token Beginning of an Interval. beginning This LeftOperand is transitively included in the object LeftOperand. broader LeftOperand Level of certification (based on a combination of requierements, evaluation method etc.) certification level Certification issued for the given Infrastructure Component. component certification Reference to catalog of Connectors, which are listed in the Broker. connector Catalog Consumer of a Resource or Service that is the subject matter of the Contract. This party may differ from the Assignee specified by the Contract rules. Consumer true Reference to a Digital Content (physically or logically) included, definition of part-whole hierarchies. content part Detailed type, genre or interpretation of the Digital Content. content type Any type of resource related to the Contract. Annex to contract Equivalent human-readable encoding of this machine-interpretable Contract. Contract document Reference to a Contract Offer defining the authorized use of the Resource. contract offer Correlated message, e.g. a response to a previous request. consumer connector true Participant responsible for the correctness of the content offered by the InfrastructureComponent. curator true Information about the concrete data app implementation data app information Indicates the data type schema of the Representation. Data Type Schema Default representation of the content. Default representation End of an Interval. end Content instance mediated via this individual endpoint (1:1 mapping). endpoint artifact Evaluation Facility that performed and issued given Certification evaluation facility Reference to a security guarantee that, if used in combination with a security profile instance, overrides the respective guarantee of the given predefined instance. extended guarantee Refers to a GeoPoint that is member of a BoundingPolygon. geoPoint The Agents for which this Connector may initiate and receive Messages. has Agent true Indicates the default endpoint that should be used for basic infrastructure interactions, e.g., providing the self description. has default endpoint Reference to the Endpoints serving the resource's content or let you exchange messages with an IDS Connector. has endpoint Certification Level transitively implied by given Certification Level of same root type. included certification level The subject transitively asserts the object Action. is included in Reference to an instance of given representation, i.e. inline value or file placeholder. instance Type of the public key. Key Type Natural language(s) used within the content. language A Connector, that is part of a Connector catalog. listed Connector Participant responsible for technical maintenance of the InfrastructureComponent. maintainer true Media Type of the Representation. media type A Participant, that is part of a participant catalog. member A Resource that is part of a resource catalog, indicating an offering (of, e.g., data). offered resource List of participants a ParIS may expose. participant catalog Certification issued for the given Participant. participant certification Conditions which needs to be satisfied that a single Participant can be seen as a member of the subject Participant. For instance, all Participants with their headquarter in Europe might be a potential consumer of GDPR-releated data. participant refinment The location where the Connector is physically deployed. physicalLocation Provider of a Resource or Service that is the subject matter of the contract. This party may differ from the Assigner specified by the Contract rules. Provider true Public Key that has been created for the Component. Public Key The publisher of the resource (which may differ from the sovereign). publisher true This property specifies the language of the query. queryLanguage Refers to the scope property of a query message, see ids:QueryScope. queryScope The Connector which is the recipient of the message. recipient connector true Refers to the target property of a query message, see ids:QueryTarget. recipient scope Specifies the reason of the rejection. rejectionReason Representation of the content. representation References an artifact in the context of a request. Requested Artifact true References a Participant in the context of a request. Requested Participant true A Resource that is part of a resource catalog, indicating a request (of, e.g., data, software,...). requested resource References the Catalog of published or requested resource by this Connector. resource catalog Reference to the Endpoints serving the resource's content or let you exchange messages with an IDS Connector. resource endpoint Reference to a Resource (physically or logically) included, definition of part-whole hierarchies. resource part Sample Resource instance. sample Reference to a security guarantee supported by given profile. Security guarantee The SecurityProfile supported by the Connector. securityProfile A token representing a claim that the message sender supports a certain security profile. Security token The 'owner', i.e. sovereign of the data. sovereign true Named spatial entity covered by the Resource. spatial coverage The subject of the policy statement (ids:Rule). target true Temporal period or instance covered by the content. temporal coverage Abstract or concrete concept related to or referred by the content. theme true Describes the format of the authentication token. tokenFormat The contract which is (or will be) the legal basis of the data transfer. transferContract true (Equivalent) variant of given Resource, e.g. a translation. variant Access URL of an endpoint. access URL text documentation of the data app app documentation Port used to access the endpoint. app endpoint port Size of the Artifact in bytes. byte size Checksum of the artifact checksum IRI containing document, which defines the standard for the given Digital Content. The content is assumed to conform to that Standard. content standard Version of the content in the payload. Use digits and semantic versioning pattern like MAJOR.MINOR.PATCH. contentVersion Absolute datetime of singing the Contract. Contract date Absolute datetime the Contract is requested, offered or expected to end. If omitted, the contract has to be explicitly terminated by any of the parties. Contract end Human-readable text describing the reason for contract rejection. Contract Rejection Reason Absolute datetime the Contract is requested, offered or expected to start, depending on the type of Contract. Contract start The date of the creation of the Digital Content. In contrast to the ids:temporalCoverage, creation dates of ids:Representation, ids:Artifacts or any other form of meta-data, this property describes the creation date of referenced Digital Content itself. created Date (as xsd:dateTimeStamp) when the artifact was created, i.e. persisted. creation date URL reference to a custom license regulating the general usage of the Resource. Custom License Indicates the data type of the Representation. Data type Absolute date time with a defined time zone. date time 2018-12-31T13:20:00+02:00 Explanation of the resource in a natural language text. description Duration of the media resource in seconds. duration IRI reference to a documentation of the endpoint, e.g., reference to an OpenAPI-based documentation. endpoint documentation Human-readable information and description of the endpoint. endpoint information The 'exp' (expiration time) claim identifies the expiration time on or after which the JWT MUST NOT be accepted for processing. exp Name of the Artifcat file. file name Suffix of a file name, typically separated by a period, indicating the nature and intended processing of the file. filename extension Video frame rate, as frames/second. frame rate Duration (relative time interval) of a temporal specification. Different to the TIME Ontology, durations are expressed using the xsd:duration datatype. In case it is used with a instance of ids:Instant, the value must be 'P0Y0M0DT0H0M0S'^^xsd:duration. has duration P2Y6M5DT12H35M30S Height of the visible frame. height The 'iat' (issued at) claim contains the point in time when the JWT was created. iat Information Model version that the InfrastructureComponent is capable of reading/processing. inboundModelVersion Relative path used for inbound communication via this endpoint, i.e. input messages and faults only. inbound topic The 'iss' (issuer) claim identifies the principal that issued the JWT. iss Binary representation of the key. Key Value Controlled keywords that describe the nature, purpose, or use of the content. keyword Last date (as xsd:dateTimeStamp) the given Certification is considered valid. last valid date End of the participant's IDS membership. membership end Version of the Information Model against which the Message should be interpreted. model version The date/time this Digital Content has been changed the last time. Only one 'modified' attribute is usually needed. modified Entity name unique within a specified context. name The 'aud' (audience) claim identifies the recipients that the JWT is intended for. nbf Information Model version being produced by the InfrastructureComponent. outbound model version Relative path used for outbound communication via this endpoint, i.e. output messages and faults only. outbound topic Relative path, topic or queue at which the content is published by the related host. path Standards document defining the given Representation (in contrast to general Resource content). The Representation is assumed to conform to that Standard. representation standard The element whose metadata is requested. requested Element Plain Text containing the reason for revoking an existing certificate of either a connector or participant. Revocation Reason Audio sampling rate. sampling rate Currently, the scope is limited to 'Connector' but can be used for scoping purposes in the future. Scope is currently fixed to 'https://w3id.org/idsa/core/Connector'. scope Indicates an address for the site. site address Reference to a well-known License regulating the general usage of the Resource. Check wikidata license documentation for an extensive list of licenses. License IRI should refer to the direct of link for a given standard license, e.g., MIT license (https://www.wikidata.org/wiki/Q334661). The label of the resolved wikidata license IRI can be used to present the license in human-readable form. Standard License The 'sub' (subject) claim identifies the principal that is the subject of the JWT. sub (Localized) name of the entity. title An authentication token value like JSON Web Token. tokenValue Separate certificates for IDS identification and transport encryption opens an attack vector for relay attacks. In order to prevent these attacks, a binding of this transport certificates to the connector is required. The inclusion of SHA256 fingerprints of currently valid transport certificates, mainly into the DAT, enables the client to relate the transport layer security with the IDS interactions. transportCertsSha256 Version identifier of the Managed Entity version Width of the visible frame. width Message requesting an access token. This is intended for point-to-point communication with, e.g., Brokers. AccessToken Request Message Response to an access token request, intended for point-to-point communication. Access Token Response A thing one might be permitted to do or prohibited from doing to something. Action Internal or external Agent interacting with the Industrial Data Space, not necessarily an IDS Participant. Agent Message indicating that a specific App should be available (again) in the AppStore. App Available Message Message indicating that an App should be deleted from the AppStore. App Delete Message Description of endpoints a DataApp offers. DataApp Endpoint Class of endpoint types a data app offers. App endpoint type Resource control for deployed services. App execution resources Superclass of all messages, indicating a change of a DataApp. Unlike Resource-related Messages, AppNotificationMessages should lead to a state change for an app at the recipient, the AppStore. App Notification Message true Message that asks for registration or update of a data app to the App Store. Payload contains app-related metadata (instance of class ids:AppResource). Message header may contain an app identifier parameter of a prior registered data app. If the app identifier is supplied, the message should be interpreted as a registration for an app update. Otherwise this message is used to register a new app. App Registration Request Message Message that follows up an AppRegistrationRequestMessage and contains the app registration confimation. App Registration Response Message App representation App Representation Resource comprising IDS data apps. App Resource Secure platform for distributing Data Apps. App Store Message indicating that a specific App should be unavailable in the AppStore. App Unavailable Message Message that usually follows a AppRegistrationResponseMessage and is used to upload a data app to the app store. Payload contains data app. Note that the message must refer to the prior sent, corresponding AppResource instance. The IRI of the ids:appArtifactReference must must match the IRI of the artifact which is the value for the ids:instance property. The ids:instance is specific for each representation. Therefore, if someone wants to upload multiple representations for an app, he has to state them using multiple ids:instance properties inside the AppRepresentation (and therefore inside the AppResource). Otherwise no mapping between payload and app metadata can be achieved. App Upload Message Message that follows up an AppUploadMessage and contains the app upload confimation. App Upload Response Message Instance of a Representation materialized at a partiuclar version and point in time. Possesses characteristics like file name, size, creation date etc. Artifact Message asking for retrieving the specified Artifact as the payload of an ArtifactResponse message. Artifact Request Message Message that follows up a RetrieveArtifact Message and contains the Artifact's data in the payload section. Artifact Response Message The class of audiences (recipients) used in the JWT. Audience Audio representation Audio Representation Resource (at least partially) comprising audio content. Audio Resource Local audit logging (including integrity protection) is the baseline for auditing and clearing. Remote audit log tracing provides means to do external audit verification. Audit guarantee Holds authentication information so that connections to the Connector's data offerings can be establised. AuthInfo The class of authentication standards that may be supported by Connectors. AuthStandard Authentication mechanism applied prior to opening a connection. Examples are the verification server's identity or doing mutual authentication. Authentication Implementation of the Connector specification providing only restricted security capabilities. Base Connector The class of binary operators. BinaryOperator Defines an area of interest as a set of connected points. BoundingPolygon Broker holding an index of published data endpoints. Broker Class that represents (distributable) Catalogs. Catalog true Abstract certification of compliance according to given Certification Scheme. Certification true Level of Certification Certification Level true The Clearing House provides clearing and settlement services B2B interactions within the International Data Spaces. Clearing House Command messages are usually sent when a response is expected by the sender. Changes state on the recipient side. Therefore, commands are not 'safe' in the sense of REST. Command Message true Process and result of certifying a software component/servivce in order to become a certified part of the International Data Space infrastructure. Component Certification Level of a Component Certification Component Certification Level Class of categories for classification of Resources. Concept true Dedicated communication server for sending and receiving data in compliance with the Connector specification. There are different types of Connectors according to provided capabilities. Connector true Class that aggregates Connectors which, as a whole, from a (distributable) Catalog. Connector Catalog Whenever a Connector has been successfully certified by the Certification Body, the Identity Provider can use this message to notify Infrastructure Components. Connector Certificate Granted Message Indicates that a (previously certified) Connector is no more certified. This could happen, for instance, if the Certification Body revokes a granted certificate or if the certificate just expires. Connector Certificate Revoked Message Connector-specific endpoint exposing Artifacts. Connector Endpoint Superclass of all messages, indicating a change of a connector's conditions. Connector Notification Message true Event notifying the recipient(s) that a connector will be unavailable. The same connector may be available again in the future. Connector Unavailable Message Event notifying the recipient(s) about the availability and current configuration of a connector. The payload of the message must contain the updated connector's self-description. Connector Update Message Enumerated types of content expanding upon the Digital Content hierarchy. Content type Instances of Content Type are used to more precisely specify the type, genre or interpretation of a Digital Content. Abstract set of rules governing the usage of a Resource. Contract true Contract governing the actual usage of a Resource that has been agreed by all parties. Contract agreement Message containing a contract, as an instance of ids:ContractAgreement, with resource access modalities on which two parties have agreed in the payload. Contract Agreement Message Contract issued by the Data Provider offering the usage of a Resource at particular conditions. Contract offer Message containing a offered content contract (as offered by a data provider to the data consumer) in the associated payload (which is an instance of ContractOffer). In contrast to the ids:ContractResponseMessage, the ids:ContractOfferMessage is not related to a previous contract Contract Offer Message Message indicating rejection of a contract. Contract Rejection Message Contract issued by the Data Consumer requesting the usage of a Resource at particular conditions. Contract request Message containing a suggested content contract (as offered by the data consumer to the data provider) in the associated payload (which is an instance of ContractRequest). Contract Request Message Message containing a response to a contract request (of a data consumer) in form of a counter-proposal of a contract in the associated payload (which is an instance of ContractOffcer). Contract Response Message Message containing supplemental information to access resources of a contract (e.g. resource access tokens). Contract Supplement Message A selection of custom media types to be used for data published on the IDS when no IANA type is available. Custom Media Type The Dynamic Attribute Provisioning Service (DAPS) is a component of the Identity Provider and manages and issues the Dynamic Attribute Tokens (DAT), acting as digtial proofs for dynamic attributes of both connectors and participants. Dynamic Attribute Provisioning Service The Dynamic Attribute Token (DAT) Payload is the JSON Element of any DAT containing the claims of the token bearer. This payload itself is a JSON-LD encoded RDF class with a defined set of attributes. These attributes are either defined by RFC 7519 or by the IDS Information Model. As a direct consequence of regarding the DAT Payload as JSON-LD, *all* DAT Payloads must have exactly one "@context" attribute with the IDS context URI as its value and a "@type" with ids:DatPayload as its value. DAT Payload The Dynamic Attribute Token (DAT) *Request* Payload is the JSON Element of any DAT containing the claims of the token bearer. This payload itself is a JSON-LD encoded RDF class with a defined set of attributes. These attributes are either defined by RFC 7519 or by the IDS Information Model. As a direct consequence of regarding the DAT Payload as JSON-LD, *all* DAT Payloads must have exactly one "@context" attribute with the IDS context URI as its value and a "@type" with ids:DatPayload as its value. Note that, different to the DatPayload, the DatRequestPayload contains the *self-claims* of a connector and is not yet signed by any DAPS. Consequently, no other connector must accept a DatRequest object as a DAT. A DatRequest and its contained DatRequestPayload is *only* intended for interactions with a DAPS and *nothing else*! DAT Request Payload Self-contained, self-descriptive software package that is distributed via the App Store and deployed inside a Connector; provides access to data and data processing capa­bilities; the interface of a Data App is semantically described by the IDS Information Model. DataApp true Physical representation of (structured) data. Data representation Resource (at least partially) comprising data content. Data Resource Entity described by a minimal textual annotation, i.e. a title and description. described true Message requesting metadata. If no URI is supplied via the ids:requestedElement field, this messages is treated like a self-description request and the recipient should return its self-description via an ids:DescriptionResponseMessage. However, if a URI is supplied, the Connector should either return metadata about the requested element via an ids:DescriptionResponseMessage, or send an ids:RejectionMessage, e.g. because the element was not found. Description Request Message Message containing the metadata, which a Connector previously requested via the ids:DescriptionRequestMessage, in its payload. Description Response Message Digital content of a particular type providing hints on its usage, e.g. listening to an Audio, navigating a Structure or accessing a List by an index. Digital content true A relative temporal entity of a certain length. Different to ids:Interval, the starting point is not (yet) defined. Specifying a starting or ending point automatically transformes an instance of ids:DurationEntity to an ids:Interval. Duration The class of Duties as defined in the ODRL ontology. Duty A JSON Web Token (e.g., for authorization) mediated as part of the message, formerly known as the 'DAPS Token'. The complete JWT *including* header, payload and signiture is referenced by this class and *not* only the JSON element in the payload. See ids:DatPayload for the payload definition. Dynamic Attribute Token (DAT). Access point of data exchange, service interaction and service description. Endpoint Evaluation Facilities carry out the evaluation work during a certification process and issue the corresponding Certifications. Evaluation Facility Class of all frequencies. Frequency A location identified by a geonames URL. GeoFeature A location identified by geo coordinates. GeoPoint Geometrical shape indicating a spatial area of interest. Geometry true The class of media types registered with IANA. IANA Media Type <https://w3id.org/spar/mediatype/text/csv> a ids:IANAMediaType . # the retrieved representation (HTML, turtle, RDF/XML) depends on content negotiation Definition of an ids:IANAMediaType should define individual equivalence to corresponding SPAR-Media Type. The Identity Provider manages and validates the digital identity of International Data Spaces Participants. Identity provider Image representation Image Representation Resource (at least partially) comprising image content. Image Resource The class of all infrastructure components of the IDS. InfrastructureComponent true A defined point in time with zero duration. Instant Level of integrity protection and verification of the installed software stack. Trusted boot is an example of local integrity protection, remote integrity verification comprises, for example, remote attestation. Integrity protection and verification Level/extent of verifying the software stack. Integrity verification scope A temporal entity with extent or duration, fixed in time (different to ids:DurationEntity). Interval Message requesting the recipient to invoke a specific operation. Invoke Operation Message The payload of an JSON Web Token as a RDF class. Is used as the common parent of e.g. DatPayload and DatRequestPayload. JWT Payload true Cryptographic Key Type. Key Type The class of languages potentially being used by textual Data Assets. Language Instances of the LeftOperand class are used as the leftOperand of a Constraint. LeftOperand Class of Licences to be referred to by Resources. License Means by which local data is protected. Local data confidentiality Class of all locations. Location true Log Message which can be used to transfer logs e.g. to the clearing house. Log Message The class of mutable individuals. Managed entity true General class of media types (formerly known as MIME types). Media Type true ids:CustomMediaType is used only when no ids:IANAMediaType available. Metadata describing payload exchanged by interacting Connectors. Message true Notification that a message has been successfully processed (i.e. not ignored or rejected). Message Processed Notification Message 1 Entity that is identifiable within a context by means of a name. Named Event messages are informative and no response is expected by the sender. Notification Message Message indicating that the result of a former InvokeOperation message is available. May transfer the result data in its associated payload section. Operation Result Message Apps for orchestrating System Adapter Apps or Smart Data Apps, inside a Connector. Orchestration App The Participant Information Service (ParIS) provides metadata and relevant information about participants (humans and organizations) in the International Data Spaces. Participant Information Service Stakeholder in the Industrial Data Space, assuming one or more of the predefined roles; every participant is given a unique identity by the Identity Provider. Participant Class that aggregates Participants which, as a whole, from a (distributable) Catalog. Participant Catalog Whenever a Participant has been successfully certified by the Certification Body, the Identity Provider can use this message to notify Infrastructure Components. Participant Certificate Granted Message Indicates that a (previously certified) Participant is no more certified. This could happen, for instance, if the Certification Body revokes a granted certificate or if the certificate just expires. Participant Certificate Revoked Message Process and result of certifying an interested party in order to become a certified member of the International Data Space. Participant Certification Level of a Participant Certification Participant Certification Level Superclass of all messages, indicating a change of a particpants's conditions. Participant Notification Message true Message asking for retrieving the specified Participants information as the payload of an ParticipantResponse message. Participant Request Message Message that follows up a ParticipantRequestMessage and contains the Participant's information in the payload section. Participant Response Message Event notifying the recipient(s) that a participant will be unavailable. The same participant may be available again in the future. Participant Unavailable Message Event notifying the recipient(s) about the availability and current description of a participant. The payload of the message must contain the participant's self-description. Participant Available Message The class of Permissions as defined in the ODRL ontology. Permission The class of persons (people) Person The class of Prohibitions as defined in the ODRL ontology. Prohibition Public key as used in asymmetric cryptography. Public Key Class of query languages in which query strings may be formalized. QueryLanguage Query commands are intended to annotate query strings in a specified query language or address a specific resource. Query message intended to be consumed by a component. Query Command Query Message true Class of scopes that may limit the space of query results, e.g. ALL, ACTIVE_ONLY. Query Scope Class of recipients of a query message, e.g. BROKER, APPSTORE, ANY. Query Target Rejection messages are specialized response messages that notify the sender of a message that processing of this message has failed. Rejection Message Class of reasons that might lead to issuing a Rejection message. RejectionReason Syntactic template of a Resource. Representation A particular instance of given representation. Representation instance true Notification that a request has been accepted and is being processed. Request In Process Message Client-generated message initiating a communication, motivated by a certain reason and with an answer expected. Request Message Resource is a single digital content or a coherent set of digital contents. Resource content is formalized in Representations and optionally materialized as Artifacts. The Resource's content is exposed via defined Interfaces at various protocol Endpoints. Resource Class that aggregates Resources which, as a whole, form a (distributable) Catalog. Resource Catalog Superclass of all messages, indicating a change of a resource. Resource Notification Message true Message indicating that a specific resource is unavailable. The same resource may be available again in the future. Resource Unavailable Message Message indicating the availability and current description of a specific resource. The resource must be present in the payload of this message. Resource Update Message Response messages hold information about the reaction of a recipient to a formerly sent command or event. They must be correlated to this message. Response Message Result messages are intended to annotate the results of a query command. Result Message Superclass of Permissions, Prohibitions and Duties. Rule true Security guarantee claimed by a security profile. Security guarantee Set of security guarantees claimed by a Connector. Connectors may asses their mutual technical reliability and trustworthiness by evaluating each other’s security profile. SecurityProfile Service isolation mechanism supported by the Connector. Examples are process group (Docker) or by least privilege with clear separation and support for additional security modules as done by trustme. Service isolation An office or other premise at which the organization is located Site Smart DataApps are executing any kind of necessary data processing or transformation. Smart DataApp Software representation Software Representation Resource (at least partially) comprising Software. Software Resource Data Apps that integrate sources and sinks of digital content maintained internally on Participant's premises with a Connector. System Adapter A temporal interval, instant or a relative duration. TemporalEntity Representation of a textual content. Text representation Resource (at least partially) comprising textual content. Text Resource A token (e.g., for authorization) mediated as part of the message. Token. Possible formats for (security-related) tokens. Token format Hardened implementation of the Connector specification providing enhanced security capabilities. Trusted Connector Message used to upload a data to a recipient. Payload contains data. Upload Message Message that follows up a UploadMessage and contains the upload confirmation. Upload Response Message Extent of supporting usage control. Usage control Literal, inline value instantiation of a representation. Value Video representation Video Representation Resource (at least partially) comprising video content. Video Resource Sebastian Tramp Haydar Akyürek Matthias Böckmann Christian Mader Jaroslav Pullmann Sebastian Bader Afar Abkhaz The current geospatial position of the *consuming connector*. In case the connector only appears as a virtual entity, the physical location of the hosting server is referenced. Allowed operators are idsc:in. No other spatial operators (close to, north of, etc.) are currently allowed. Absolute geo-spatial position ACTIVE_ONLY Avestan Afrikaans If a temporal entity T1 is after another temporal entity T2, then the beginning of T1 is after the end of T2 and the beginning of T1 is different to the ending of T2. Temporal entities can either be a xsd:dateTimeStamp or an ids:TemporalEntity. after Data will be part of another piece of data so that it is not distinguishable anymore. aggregate by consumer This action is always evaluated at the consumer side. Data will be part of another piece of data so that it is not distinguishable anymore. aggregate by provider This action is always evaluated at the provider side. Akan ALL Amharic Aragonese To anonymize all, parts or certain attributes of the resource. anonymize This action is always evaluated at the provider side. ANY APPSTORE App Resources Local Enforcement App Resources None App Resources Remote Verification Arabic Assamese Audit Local Logging Audit None Audit Remote Tracing Authentication Mutual Authentication None Authentication Serverside Avaric Aymara Azerbaijani Bashkir At least one query or operation parameter is not acceptable for the sender of this rejection message. BAD_PARAMETERS Default security profile of a certified IDS Connector. Base security profile Belarusian If a temporal entity T1 is before another temporal entity T2, then the ending of T1 is before the end of T2 and the ending of T1 is different to the beginning of T2. Temporal entities can either be a xsd:dateTimeStamp or an ids:TemporalEntity. before Compares an instance of ids:TemporalEntity or a Literal of xsd:dateTimeStamp to an instance of ids:TemporalEntity or a Literal of xsd:dateTimeStamp. Bulgarian Bihari Bislama Bambara Bengali, Bangla Tibetan Standard, Tibetan, Central Breton BROKER Bosnian Catalan Chechen Chamorro CLEARING_HOUSE Corsican To pay a certain amount of money in order to use a resource. compensate This action must be evaluated both at the consumer and provider side. A compensation might be required before access is granted (provider-side), or each time the usage action is performed (consumer-side). Base Security Profile Certification of Components based on Checklist Approach Base Security Profile Certification of Components based on Concept Review Trust-Plus Security Profile Certification of Components based on Concept Review Trust-Plus Security Profile Certification of Components based on High AssuranceEvaluation Trust Security Profile Certification of Components based on Concept Review Trust Security Profile Certification of Components based on High Assurance Evaluation If a TemporalEntity (or xsd:dateTimeStamp) T1 contains another ids:TemporalEntity T2, then the beginning of T1 is idsc:AFTER the beginning of T2 and the ending of T1 is idsc:BEFORE the ending of T2. An Instant (or xsd:dateTimeStamp) cannot contain another Instant (or xsd:dateTimeStamp), neihter contains itself. contains Compares an instance of ids:Instant, ids:Interval or xsd:dateTimeStamp with an instance of ids:Interval. Evaluates to false if compared to a non ids:Interval. Numeric count of executions of the Rule. Operators can be idsc:LT, idsc:LTEQ, idsc:EQ, idsc:GT, idsc:GTEQ. Datatype is xsd:double. count Spatial operator 'covered by' as defined by the Egenhofer Topological Relations family: An object A is covered_by another object B if both objects share common bounding and interior faces; if A has interior faces which are bounding faces of B; and if none of B's interior faces are part of A's boundary. (https://doi.org/10.1007/3-540-51295-0_148 Definition 7) covered by Spatial operator 'covers' as defined by the Egenhofer Topological Relations family: An object A covers another object B if both objects share common bounding and interior faces; if B has interior faces which are bounding faces of A; and if none of A's interior faces are part of B's boundary. (https://doi.org/10.1007/3-540-51295-0_148 Definition 6) covers Cree Czech Old Church Slavonic, Church Slavonic, Old Bulgarian Chuvash Welsh Danish German Allows assignments similar to 'var x := {RightOperand}'. defines as Different to the other ids:BinaryOperator, idsc:DEFINES_AS does *not* compare a feature but tells the interpreter where to *find* one. Therefore, the constraint is not evaluated in the same way as with other operators. Delay the action. Use idsc:DURATION_EQ, idsc:LONGER, idsc:LONGER_EQ, idsc:SHORTER_EQ, or idsc:SHORTER with datatype xsd:duration. delay To remove a resource or inhibit any further access with reasonable measures. delete This action is evaluated at the consumer side if used in a duty clause. A provider cannot be forced to delete its data resources. If used in a permission clause, it is effecting the data provider as it allows the consumer to delete the provider's resource remotely. Spatial operator 'disjoint' as defined by the Egenhofer Topological Relations family: If all four intersections among all object parts are empty, then the two objects are disjoint. (https://doi.org/10.1007/3-540-51295-0_148 Definition 1) disjoint To forward or supply a resource to a third-party. distribute This action is always evaluated at the consumer side and allows it to become a data provider of this resource. DSA If a temporal entity T1 has the same duration as another temporal entity T2, then their length or their duration is equal. Instants and xsd:dateTimeStamp Literals have always the duration 'P0Y0M0DT0H0M0S'^^xsd:duration and therefore have always the same duration. has same duration Compares an instance of ids:TemporalEntity with an instance of ids:TemporalEntity. If a TemporalEntity T1 is during another TemporalEntity T2, then the beginning of T1 is after the beginning of T2, and the end of T1 is before the end of T2. during Compares an instance of ids:Instant, ids:Interval or xsd:dateTimeStamp with an instance of ids:Interval. Evaluates to false if compared to a non ids:Interval. Divehi, Dhivehi, Maldivian Dzongkha ECDSA ED25519 Ewe Greek (modern) A continuous elapsed time period which may be used for exercising of the action of the Rule. Allowed operators are idsc:SHORTER, idsc:SHORTER_EQ, idsc:LONGER, idsc:LONGER_EQ, and idsc:DURATION_EQ with datatype xsd:duration. elapsed time English The data artifact or parts of it are encrypted and can not be read by neither the ids:DataConsumer nor any other third party. The encryption algorithm might be specified by a constraint. ecrypt This action is always evaluated at the provider side. Remote target for an action or information provider (PIP). Must be used together with idsc:IS or idsc:IN operators. RightOperand must be a xsd:anyURI or an URL which should point to an actually deployed endpoint. An example is a refinment of idsc:NOTIFY where idsc:REMOTE points to a Clearing House. endpoint Esperanto Arithmetic equals operator (5 = 5). equals Logical equals operator (true = true). equals Spanish Estonian Basque The feature dimension regarding whether current events are happening. Does NOT refer 'events' as in real-time data, sensor observations, or Complex Event Processing but rather as 'World Cup 2018' or 'Hannover Trade Fair'. current event Persian (Farsi) Fula, Fulah, Pulaar, Pular Finnish If an interval T1 is finished by another interval T2, then the beginning of T1 is before the beginning of T2, and the end of T1 is coincident with the end of T2. finished by Compares an instance of ids:Interval to another instance of ids:Interval. Evaluates to false if compared to a non ids:Interval or one interval is empty. If an Interval T1 finishes another interval T2, then the beginning of T1 is after the beginning of T2, and the end of T1 is coincident with the end of T2. finishes Compares an instance of ids:Interval to another instance of ids:Interval. Evaluates to false if compared to a non ids:Interval or one interval is empty. Fijian Faroese French Western Frisian Irish Scottish Gaelic, Gaelic Galician Guaraní To grant use of a resource to another party. Does *not* imply any other usage rights. grant use This action is always evaluated at the consumer side, at the moment a third party intends to access the resource as received by the original consumer. Greater-than operator. Can be used for numeric (5 idsc:GT 2) comparisons. greater than Greater-than-or-equals operator. Can be used for numeric (5 idsc:GTEQ 2) comparisons. greater than or equals Gujarati Manx Hausa If a user has a specific membership required for accessing a resource. A membership includes always a role and a related organisation (see also org:). Should be used together with a RightOperand pointing to an accessible endpoint providing this information. has Member If a user needs to be located at a certain site required for accessing a resource. A 'HAS_SITE' relation includes always a membership (role and related organisation) corresponding to the site. Should be used together with a RightOperand pointing to an accessible endpoint providing this information. has site Operator examining if the target resource has a certain state at the moment, for instance is anonymized (idsc:ANONYMIZED). has state Hebrew (modern) Hindi Hiri Motu Croatian Haitian, Haitian Creole Hungarian Armenian Herero Interlingua Indonesian Interlingue Igbo Nuosu Inupiaq Element-of operator. Allowed RightOperands are RDF collections('(A B C)'). in INACTIVE_ONLY Spatial operator 'inside' as defined by the Egenhofer Topological Relations family: An object A is inside of another object B if (1) A and B share interior, but not bounding faces, (2) if A has bounding faces which are interior faces of B, and (3) none of B's bounding faces coincides with any of A's interior faces. (https://doi.org/10.1007/3-540-51295-0_148 Definition 4) inside In addition, a point is inside a polygom iff the point is in the polygom's interior (the point itself has no interior). Is satisfied if a system is inside a specified target network or network range. inside network Integrity Protection Local Integrity Protection None Integrity Protection Remote Integrity Verification Scope Kernel Core Container Integrity Verification Scope Kernel Core Container Application Integrity Verification Scope None Formal, machine-interpretable definition of a protocol-specific API, e.g. OpenAPI, GraphQL, API Blueprint, WSDL. Interface definition The message recipient encountered an internal error while processing the message (e.g., storage capacity exceeded). INTERNAL_RECIPIENT_ERROR Ido Icelandic Italian Inuktitut Japanese Javanese Json Web Token Georgian Kongo Kikuyu, Gikuyu Kwanyama, Kuanyama Kazakh Kalaallisut, Greenlandic Khmer Kannada Korean Kanuri Kashmiri Kurdish Komi Cornish Kyrgyz Latin Luxembourgish, Letzeburgesch Ganda Limburgish, Limburgan, Limburger Lingala Lao Local Data Confidentiality Full Encryption Local Data Confidentiality None Local Data Confidentiality Secure Erasure To log information or store information about incidents in a local file or database. Is not necessarily available to external parties but can be used to create transparency on happened events. log This action is always evaluated at the consumer side. If a temporal entity T1 is longer than another temporal entity T2, then the length or duration of T1 is bigger. Instants and xsd:dateTimeStamp Literals have always the duration 'P0Y0M0DT0H0M0S'^^xsd:duration and therefore have always the same duration. longer Compares an instance of ids:TemporalEntity with an instance of xsd:duration. If temporal entity T1 is longer or equals than another temporal entity T2, then the length or duration of T1 is bigger or their length or their duration is equal. Instants and xsd:dateTimeStamp Literals have always the duration 'P0Y0M0DT0H0M0S'^^xsd:duration and therefore have always the same duration. longer or equals Compares an instance of ids:TemporalEntity with an instance of xsd:duration. Less-than operator. Can be used for numeric (2 idsc:LT 5) comparisons. Lithuanian less than Do not confuse with idsc:LT (which is a language). Less-than-or-equals operator. Can be used for numeric (2 idsc:LTEQ 5) comparisons. less than or equals Luba-Katanga Latvian The originating message is malformed or missing information. MALFORMED_MESSAGE Regex operator for strings. Evaluates to true iff the regex pattern of the RightOperand matches the LeftOperand. matches If a TemporalEntity or (xsd:dateTimeStamp Literal) T1 meets another TemporalEntity (or xsd:dateTimeStamp Literal) T2, then the end of T1 is coincident with the beginning of T2. meets Compares an instance of TemporalEntity or xsd:dateTimeStamp Literal to another instance of TemporalEntity or xsd:dateTimeStamp Literal. Evaluates to true if T1 or T2 are Instants (or xsd:dateTimeStamp Literal) and the condition in the comment holds. If a user is part of a certain organisation required for accessing a resource. Should be used together with a RightOperand pointing to an accessible endpoint providing this information. memberOf The sender of the rejection does not support the incoming message type (e.g., ids:QueryMessage). MESSAGE_TYPE_NOT_SUPPORTED The sender of the rejection does not implement a certain functionality stated in the message (e.g., query language). METHOD_NOT_SUPPORTED If a TemporalEntity or (xsd:dateTimeStamp Literal) T1 is met by another TemporalEntity or (xsd:dateTimeStamp Literal) T2, then the beginning of T1 is coincident with the end of T2. met by Compares an instance of TemporalEntity (or xsd:dateTimeStamp Literal) to another instance of TemporalEntity (or xsd:dateTimeStamp Literal). Evaluates to true if T1 or T2 are Instants (or xsd:dateTimeStamp Literal) and the condition in the comment holds. Malagasy Marshallese Māori Macedonian Malayalam Mongolian To change a resource locally. modify This action is always evaluated at the consumer side. It corresponds to 'allow changes of the copied resource'. Marathi (Marāṭhī) Malay Maltese Code indicates that several languages are used or no concrete language can be determined. Multilingual Burmese Nauruan Norwegian Bokmål Northern Ndebele Nepali To forward the resource under the same policy. Implies a permission to distribute. next policy This action is always evaluated at the consumer side. Ndonga Dutch Norwegian Nynorsk Norwegian Logical difference operator (false != true). not equals To log information or notify an instance about incidents. Can be used to define Clearing House interactions. notify This action can target the consumer and the data provider of the resource. Authenticity of a message sender has failed or is not verifiable. NOT_AUTHENTICATED Sender is not authorized to initiate the command. NOT_AUTHORIZED Requested Resource was not found. NOT_FOUND Southern Ndebele Navajo, Navaho Chichewa, Chewa, Nyanja OAUTH2 via JWT Occitan Ojibwe, Ojibwa Oromo Oriya Ossetian, Ossetic Other If a interval T1 is overlapped another proper interval T2, then the beginning of T1 is before the beginning of T2, the end of T1 is after the beginning of T2, and the end of T1 is before the end of T2. overlapped by Compares an instance of ids:Interval to another instance of ids:Interval. Evaluates to false if compared to a non ids:Interval or one interval is empty. If an ids:Interval T1 overlapps another ids:Interval T2, then the beginning of T1 is after the beginning of T2, the beginning of T1 is before the end of T2, and the end of T1 is after the end of T2. overlaps Compares an instance of ids:Interval to another instance of ids:Interval. Evaluates to false if compared to a non ids:Interval or one interval is empty. (Eastern) Punjabi PARTICIPANT INFORMATION SERVICE Central Level Control Framework Certification of Participants Central Level Management System Certification of Participants Entry Level Management System Certification of Participants Entry Level Self-Assessment Certification of Participants Member Level ControlFramework Certification of Participants Member Level Management System Certification of Participants Path to specific attribute (default JsonPath). Must be used together with idsc:STRING_EQ, idsc:STRING_CONTAINS, idsc:STRING_IS_CONTAINED, or idsc:MATCHES operators. RightOperand must be a xsd:string. path to attribute Monetary payment, without any further sepcification on the type, amount or purpose. payment Monetary amount to pay, usually used with idsc:EQ. Datatype is double. Currency required. payAmount Pāli Polish The current system time (as UTC xsd:dateTimeStamp) for evaluating a time-related constraint. Allowed operators are idsc:AFTER, idsc:BEFORE, idsc:CONTAINS, idsc:TEMPORAL_DISJOINT, idsc:DURING, idsc:TEMPORAL_EQUALS, idsc:FINISHED_BY, idsc:FINISHES, idsc:MEETS, idsc:MET_BY, idsc:OVERLAPS, idsc:OVERLAPPED_BY, idsc:STARTS, idsc:STARTED_BY and idsc:DURATION_EQ with RightOperand ids:TemporalEntity. policy evaluation time Pashto, Pushto Portuguese A defined purpose for exercising the action of the Rule. Use with idsc:IN or idsc:SAME_AS and RDF Resources. purpose Quechua Quantity limitation for exercising the action of the Rule. Operators can be idsc:LT, idsc:LTEQ, idsc:EQ, idsc:GT, idsc:GTEQ. Datatype is xsd:double. quantity To obtain data from the resource. read This action is always evaluated at the provider side. It corresponds to 'give access to a resource'. The limit how often exercising the action of the Rule may be possible. Operators can be idsc:LT, idsc:LTEQ, idsc:EQ, idsc:GT, idsc:GTEQ. Datatype is xsd:double. recurrence rate Romansh Kirundi Romanian RSA Russian Kinyarwanda A generic template for policy requests with one permission and several constraints Policy Request Template The <Consumer Participant URI> asks <Provider Participant URI> to [ids:use|ids:read|...] its [<Representation URI>|<Artifact URI>]. Optional: This only holds if <Attribute URI> is [equal|lower than|greater than] the [<Value URI>|<Value Literal>]. Optional: This only holds if also <Attribute URI> is [equal|lower than|greater than] the [<Value URI>|<Value Literal>]. @prefix ids: <https://w3id.org/idsa/core/> . @prefix idsc: <https://w3id.org/idsa/code/> . @prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> . @prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> . @prefix xsd: <http://www.w3.org/2001/XMLSchema#> . [<contract URI>| [] ] a ids:ContractRequest ; ids:uid <contract ID> ; ids:refersTo idsc:RequestTemplate ; ids:target [<Representation URI>|<Artifact URI>] ; ids:consumer <Consumer Participant URI> ; ids:provider <Provider Participant URI> [ids:permission [ ids:action ids:[use|read|...] ; ids:constraint [ ids:leftOperand <Attribute URI> ; ids:operator [ids:eq|ids:lt|ids:gt] ; ids:rightOperand [<Value URI>|<Value Literal>] ] ] ;]* . { "@context": "https://w3id.org/idsa/contexts/context.jsonld", "@type": "ContractRequest", "uid": "<contract ID>", "refersTo": "idsc:RequestTemplate" , "target": "[<Representation URI>|<Artifact URI>]", "ids:provider": "<Provider Participant URI>", "ids:consumer": "<Consumer Participant URI>", "ids:permission": { "ids:action": "[ids:use|ids:read|...]" , ["ids:constraint" : { "ids:leftOperand" : "<Attribute URI>", "ids:operator" : "[ids:eq|ids:lt|ids:gt]", "ids:rightOperand" : "[<Value URI>|<Value Literal>]" } [,]]* } } Sanskrit (Saṁskṛta) Logical equals operator comparing two RDF URIs. Is true if at least one owl:sameAs relation exists. is same as A owl:sameAs A is always true. Security Assertion Markup Language (SAML) 1.1 Security Assertion Markup Language (SAML) 2.0 Sardinian Formal, machine-interpretable definition of a data schema, e.g. XMLSchema, JSONSchema Schema definition Sindhi Northern Sami The security level the consuming connector must have. Use together with idsc:SAME_AS or idsc:IN. The value decides which attribute dimension is regarded. security level Service Isolation Least Privilege Service Isolation None Service Isolation Process Group Sango If a temporal entity T1 is shorter than another temporal entity T2, then the length or duration of T1 is shorter. Instants and xsd:dateTimeStamp Literals have always the duration 'P0Y0M0DT0H0M0S'^^xsd:duration and therefore have always the same duration. shorter Compares an instance of ids:TemporalEntity with an instance of xsd:duration. If a temporal entity T1 is shorter or equals than another temporal entity T2, then the length or duration of T1 is shorter or their length or their duration is equal. Instants and xsd:dateTimeStamp Literals have always the duration 'P0Y0M0DT0H0M0S'^^xsd:duration and therefore have always the same duration. shorter or equals Compares an instance of ids:TemporalEntity with an instance of xsd:duration. Sinhalese, Sinhala Slovak Slovene Samoan Shona Somali SPARQL Spatial operator 'contains' as defined by the Egenhofer Topological Relations family: An object A contains another object B if A and B share interior but no bounding faces; if B has bounding faces which are interior faces of , and none of A's bounding faces coincides with any of B's interior faces. (https://doi.org/10.1007/3-540-51295-0_148 Definition 5) contains In addition, a polygom contains a point iff the point is in the polygom's interior (the point itself has no interior). Spatial operator 'equals' as defined by the Egenhofer Topological Relations family: Two objects are equal if both intersections of bounding and interior faces are not empty while the two boundary-interior intersections are empty. (https://doi.org/10.1007/3-540-51295-0_148 Definition 3) equals In addition, two spatial points are equal iff both coordinates are equal (points have no interior). Spatial operator 'meet' as defined by the Egenhofer Topological Relations family: If the intersection among the bounding faces is not empty, whereas all other 3 intersections are empty, then the two objects meet. (https://doi.org/10.1007/3-540-51295-0_148 Definition 2) meet Spatial operator 'overlap' as defined by the Egenhofer Topological Relations family: Two objects overlap if they have common interior faces and the bounding faces have common parts with the opposite interior faces. (https://doi.org/10.1007/3-540-51295-0_148 Definition 8) overlap Albanian SQL Serbian Swati Southern Sotho If a TemporalEntity T1 is started by another proper interval T2, then the beginning of T1 is coincident with the beginning of T2, and the end of T1 is after the end of T2. started by Compares an instance of TemporalEntity (or xsd:dateTimeStamp Literal) to instance of ids:Interval. Evaluates to false if T1 is an Instant (or xsd:dateTimeStamp Literal) as the end of T1 can then not be idsc:AFTER the end of T2. If an interval T1 starts with a TemporalEntity T2, then the beginning of T1 is coincident with the beginning of T2, and the end of T1 is before the end of T2. starts Compares an instance of ids:Interval to another instance of TemporalEntity (or xsd:dateTimeStamp Literal). Evaluates to false if T2 is not an ids:Interval as then the end of T1 can never be idsc:BEFORE the end of T2 Specifies whether an (external) resource is true/false, active/inactive, has happened/not happened, etc. Operator must be idsc:EQUALS with RightOperands of datatype xsd:anyURI. The referenced URI should point to a (remote) resource which returns a xsd:boolean value. state Contains operator for strings. Evaluates to true iff the LeftOperand contains the complete RightOperand. string contains Equals operator for strings. Evaluates to true iff all characters and their sequence is the same. string equals Contained in operator for strings. Evaluates to true iff the LeftOperand is contained completely by the RightOperand. string is contained in Sundanese Swedish Swahili Simple Web Token Execution system or execution environment that is used to access the asset under consideration, usually an IDS Connector. The regarded data object should correspond to the IDS Connector class and its attributes. Must be used together with idsc:SAME_AS, idsc:NOT, idsc:HAS_STATE, idsc:IN, idsc:COVERED_BY idsc:INSIDE, idsc:SPATIAL_EQUALS, idsc:DISJOINT, or idsc:INSIDE_NETWORK operators. RightOperandReference must be a URI identifying the target system(s). execution system Tamil Telugu If a TemporalEntity (or xsd:dateTimeStamp) T1 is disjoint with another ids:TemporalEntity (or xsd:dateTimeStamp) T2, then T1 is idsc:BEFORE or idsc:AFTER to T2. disjoint Compares an instance of ids:TemporalEntity or xsd:dateTimeStamp Literal to an instance of ids:TemporalEntity or xsd:dateTimeStamp Literal. If a TemporalEntity (or xsd:dateTimeStamp Literal) T1 is equals another TemporalEntity (or xsd:dateTimeStamp Literal) T2, then the beginning of T1 is coincident with the beginning of T2, and the end of T1 is coincident with the end of T2. The beginning and ending is the same for instances of ids:Instant (or xsd:dateTimeStamp Literal). interval equals Compares an instance of TemporalEntity or xsd:dateTimeStamp Literal to another TemporalEntity or xsd:dateTimeStamp. Evaluates to false if a DurationEntity is involved. The requested resource, representation or artifact is temporarily not available but might be back later. TEMPORARILY_NOT_AVAILABLE Tajik Thai Tigrinya Turkmen Tagalog Tswana Tonga (Tonga Islands) Processing of the command would lead to too many results (computational or bandwidth limitations) TOO_MANY_RESULTS Turkish To accept that the use of the Asset may be tracked. track provenance This action is always evaluated at the consumer side. The Security Profile TRUST+ as defined by the IDS certification criteria. Trust Plus security profile The Security Profile TRUST as defined by the IDS certification criteria. Trust security profile Tsonga Tatar Twi Tahitian Uyghur Ukrainian Unknown Urdu Usage Control None Usage Control Policy Enforcement Usage Control Remote Compliance Verification To use a resource in any possible way. Includes all other actions. use This action is always evaluated at the consumer side. The user of a system at the *consuming connector* requesting access to a resource. Recommended usage for checking whether the user's role is sufficient for his/her desired action. Allowed operators are idsc:MEMBER_OF, idsc:HAS_MEMBERSHIP, idsc:HAS_SITE with a RightOperand referencing a (set of) acceptable organisations (ids:Participant),memberships, sites. Preferred behaviour is that the RightOperand dereferences to an endpoint hosting the required role information. user Uzbek Venda The version of the information model against which the referenced message should be interpreted, is not supported by the recipient. VERSION_NOT_SUPPORTED Vietnamese Volapük Walloon Wolof To change a remote resource. write This action is always evaluated at the provider side. It corresponds to 'allow changes of a resource' but *not* including its deletion. Xhosa XQUERY Yiddish Yoruba Zhuang, Chuang Chinese Zulu 2017-09-26 2019-11-07 The Industrial Dataspace Information Model International Data Spaces Association Apache License Version 2.0, January 2004 The regular period with which items are added to a collection. Accrual periodicity The operation relating to the asset for which permission is being granted. action The recipient of the policy statement. assignee true The issuer of the policy statement. assigner true The URL of the authentication service that is provided by the Connector. authService The constraint to be used for a specific rule. constraint Email address for contacting the participant on a general level. corporateEmailAddress General official homepage of the participant. corporateHomepage Email contact of a person. emailAddress Family name of a Person. familyName Given name of a Person. givenName Website providing additional information about a person. homepage Date (as xsd:dateTimeStamp) of issuing the Message. issued The Connector which is the origin of the message. issuer connector true Latitude of a GeoPoint (decimal degrees). latitude Longitude of a GeoPoint (decimal degrees). longitude Indicates that a participant has a member which is again a participant. This is useful for defining hierarchical relations in a participant's organization as well as identifying groups of participants to capture, e.g., members of a collaboration. member participant Indicates membership of a person to an organization. memberPerson A Duty imposed by the Contract. obligation References the operation to be invoked on the recipient's side by an URI. Operation Reference true A Permission granted by the Contract. permission Phone number of a person. phoneNumber A Duty imposed by the Rule, which must be executed after the Rule. post-duty A Duty imposed by the Rule, which must be executed before the Rule. pre-duty Indicates a primary site for the Organization, this is the default means by which an Organization can be contacted and is not necessarily the formal headquarters. primarySite A Prohibition imposed by the Contract. prohibition The Agent for which the Mesaage is intended. recipient agent true The RDF connector entity as referred to by the DAT, with its URI included as the value. The value MUST be its accessible URI. referringConnector true The Agent which initiated the Message. sender agent true Minimum time between collected data points in a time series within this content. temporal resolution