Versions Compared

Old Version 16

changes.mady.by.user Unknown User (stain)

Saved on

compared with

New Version Current

changes.mady.by.user Unknown User (stain)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

For http://www.apache.org/licenses/exports/ - see

Jira
serverASF JIRA
columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyTAVERNA-959
Jira
serverASF JIRA
columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyLEGAL-250

 

Also described in READMEs:

ECCN classification

To consider if Taverna code is classified, we follow Flowchart 1 from https://

...

www.bis.doc.gov/index.php/policy-guidance/encryption/identifying-encryption-items, with the questions:

  • Is the item designed to use cryptography or does it contain cryptography?  (exempt if No)
  • Is the hardware or software specially designed for medical end use? (exempt if  Yes)
  • Is the product described by Note 4? (exempt if Yes)

  • Is the encryption functionality limited to intellectual property or copyright protection functions? (exempt if Yes)

If we get through this, then we are controlled under Category 5, part 2 and must consider flow chart 2 to determine if we can self-classify using https://www.bis.doc.gov/index.php/policy-guidance/encryption/registration.

  • Is the item publicly available encryption source code? (If yes, self-classify as ECCN 5D002)
  • Beta Test Software? (If yes, self-classify as ECCN 5200d)
  • Encryption using key length <= 56 symmetric, <= 512 assymmetric or <= 112 elliptic curve? (If yes, self-classify as ECCN 5x992 NLR)
  • Is the item described in Note for 5A002? (If yes, self-classify as 5x992)
  • Is the item limited to authentication only? (If yes, self-classify as 5x992)
  • Does the item meet the criteria for Mass Market?

So for each of our repositories:

incubator-taverna-maven-parent:

  • Is the item designed to use cryptography or does it contain cryptography?  No

    • Not controlled

incubator-taverna-language:

  • Is the item designed to use cryptography or does it contain cryptography?  Yes
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4?  No
    • Set of function includes taverna-robundle and taverna-databundle, which primary function is to store information
  • Is the encryption functionality limited to intellectual property or copyright protection functions? No
  • Is the item publicly available encryption source code? Yes
    • ECCN 5D002

incubator-taverna-osgi:

  • Is the item designed to use cryptography or does it contain cryptography?  Yes
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Set of function include taverna-download-impl, which primary function is to receive information

  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes
    • ECCN 5D002

incubator-taverna-engine:

incubator-taverna-commandline

...

 

ECCN classification

To consider if Taverna code is classified, we follow Flowchart 1 from https://www.bis.doc.gov/index.php/policy-guidance/encryption/identifying-encryption-items, with the questions:

If we get through this, then we are controlled under Category 5, part 2 and must consider flow chart 2 to determine if we can self-classify using https://www.bis.doc.gov/index.php/policy-guidance/encryption/registration.

  • Is the item publicly available encryption source code? (If yes, self-classify as ECCN 5D002)
  • Beta Test Software? (If yes, self-classify as ECCN 5200d)
  • Encryption using key length <= 56 symmetric, <= 512 assymmetric or <= 112 elliptic curve? (If yes, self-classify as ECCN 5x992 NLR)
  • Is the item described in Note for 5A002? (If yes, self-classify as 5x992)
  • Is the item limited to authentication only? (If yes, self-classify as 5x992)
  • Does the item meet the criteria for Mass Market?

So for each of our repositories:

incubator-taverna-maven-parent:

  • Is the item designed to use cryptography or does it contain cryptography?  No

    • Not controlled
  • ? No
    • Primary function is to execute workflows - however those workflows generally do Sending, receiving or storing information

  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes

    • ECCN 5D002

incubator-taverna-common-activities

incubator-taverna-serverincubator-taverna-language:

  • Is the item designed to use cryptography or does it contain cryptography?   Yes
    Yes
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4?   No
    • Set of function includes taverna-robundle and taverna-databundle, which primary function is to store Sending, receiving and storing information

  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes

    • ECCN 5D002

incubator-taverna-databundle-osgi:viewer

  • Is the item designed to use cryptography or does it contain cryptography?   YesYes
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Set of function include taverna-download-impl, which primary function is to receive Primary function is Sending, receiving and storing information

  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes

    • ECCN 5D002

incubator-taverna-engine:mobile

  • Is the item designed to use cryptography or does it contain cryptography? Yes
    • Designed for use with Android SDK https support, Dropbox Android SDK and Apache HttpComponent
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Primary function is Sending, receiving and storing information

  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes

    • ECCN 5D002

incubator-taverna-plugin-bioinformatics

incubator-taverna-commandlineplugin-component

  • Is the item designed to use cryptography or does it contain cryptography? Yes
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Set of function includes Receiving information
    • As it retrieves workflows from http://www.myexperiment.org/Primary function is to execute workflows - however those workflows generally do Sending, receiving or storing information

  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes

    • ECCN 5D002

 

incubator-taverna-commonplugin-activitiesgis

  • Is the item designed to use cryptography or does it contain cryptography? No
    • Not controlled

incubator-taverna-workbench

  • Is the item designed to use cryptography or does it contain cryptography? Yes
    • Designed for use with Taverna Engine's Credential Manager
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Primary function is to design workflows, but set of functions includes UI for the Credential Manager
  • Is the encryption functionality limited to intellectual property or copyright protection functions? No
  • Is the item publicly available encryption source code? Yes
    • ECCN 5D002

incubator-taverna-workbench-common-activities

  • Is the item designed to use cryptography or does it contain cryptography? Yes
    • Designed for use with Taverna Engine's Credential Manager, HttpComponents and Taverna Common Activities WSS4j support.
      Yes
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? NNo
    • Primary function is Sending and receiving informationSet of function includes  Receiving information (for Service Discovery)
  • Is the encryption functionality limited to intellectual property or copyright protection functions? No
  • Is the item publicly available encryption source code? Yes
    • ECCN 5D002

 

incubator-taverna-workbench-serverproduct

  • Is the item designed to use cryptography or does it contain cryptography? Yes
    • Designed for use with Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE), BouncyCastle crypto, Apache CXF and Apache Taverna Command LineBuilds distribution that includes Apache WSS4J, Apache XML Security for Java, Apache HttpComponents and BouncyCastle crypto
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Set of function includes Primary function is to design and run workflows, but those workflows generally do Sending, receiving or storing information
  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes

    • ECCN 5D002

incubator-taverna-databundle-viewer

 

incubator-taverna-mobile

 

incubator-taverna-plugin-bioinformatics

incubator-taverna-plugin-component

incubator-taverna-plugin-gis

 

incubator-taverna-workbench

incubator-taverna-workbench-common-activities

incubator-taverna-workbench-product

...

  • protection functions? No
  • Is the item publicly available encryption source code? Yes
    • ECCN 5D002

 

Not (yet) classified

https://github.com/apache/incubator-taverna-maven-parent (exempt)

...

Code Block
languagetext
   TO: crypt AT bis.doc.gov, 
       enc AT nsa.gov, 
       web_site AT bis.doc.gov
   CC: {applicable project list}, 
       {legal-archive AT a.o}

   SUBJ: TSU NOTIFICATION - Encryption

SUBMISSION TYPE:      TSU

SUBMITTED BY:         Ted Dunning

SUBMITTED FOR:        Apache Software Foundation

POINT OF CONTACT:     Secretary, Apache Software Foundation

FAX:                  +1-919-573-9199
				
MANUFACTURER(S):   
    
The Apache Software Foundation
Bouncy Castle
The Eclipse Foundation
Oracle
Dropbox
Google
Ruby Programming Language
The OpenSSL Project

PRODUCT NAME/MODEL #: Apache Taverna

ECCN:                 5D002

NOTIFICATION:         httphttp://www.apache.org/licenses/exports/

 

README updates

Also described in READMEs:

...

...

 

...