Versions Compared

Old Version 17

changes.mady.by.user Unknown User (stain)

Saved on

compared with

New Version Current

changes.mady.by.user Unknown User (stain)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

For http://www.apache.org/licenses/exports/ - see

Jira
serverASF JIRA
columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyTAVERNA-959
Jira
serverASF JIRA
columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyLEGAL-250

 

Also described in READMEs:

ECCN classification

To consider if Taverna code is classified, we follow Flowchart 1 from https://

...

www.bis.doc.gov/index.php/policy-guidance/encryption/identifying-encryption-items, with the questions:

  • Is the item designed to use cryptography or does it contain cryptography?  (exempt if No)
  • Is the hardware or software specially designed for medical end use? (exempt if  Yes)
  • Is the product described by Note 4? (exempt if Yes)

  • Is the encryption functionality limited to intellectual property or copyright protection functions? (exempt if Yes)

If we get through this, then we are controlled under Category 5, part 2 and must consider flow chart 2 to determine if we can self-classify using https://www.bis.doc.gov/index.php/policy-guidance/encryption/registration.

  • Is the item publicly available encryption source code? (If yes, self-classify as ECCN 5D002)
  • Beta Test Software? (If yes, self-classify as ECCN 5200d)
  • Encryption using key length <= 56 symmetric, <= 512 assymmetric or <= 112 elliptic curve? (If yes, self-classify as ECCN 5x992 NLR)
  • Is the item described in Note for 5A002? (If yes, self-classify as 5x992)
  • Is the item limited to authentication only? (If yes, self-classify as 5x992)
  • Does the item meet the criteria for Mass Market?

So for each of our repositories:

incubator-taverna-maven-parent:

  • Is the item designed to use cryptography or does it contain cryptography?  No

    • Not controlled

incubator-taverna-language:

  • Is the item designed to use cryptography or does it contain cryptography?  Yes
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4?  No
    • Set of function includes taverna-robundle and taverna-databundle, which primary function is to store information
  • Is the encryption functionality limited to intellectual property or copyright protection functions? No
  • Is the item publicly available encryption source code? Yes
    • ECCN 5D002

incubator-taverna-osgi:

  • Is the item designed to use cryptography or does it contain cryptography?  Yes
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Set of function include taverna-download-impl, which primary function is to receive information

  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes
    • ECCN 5D002

incubator-taverna-engine

...

 

ECCN classification

To consider if Taverna code is classified, we follow Flowchart 1 from https://www.bis.doc.gov/index.php/policy-guidance/encryption/identifying-encryption-items, with the questions:

  • Is the item designed to use cryptography or does it contain cryptography?  (exempt if No)
  • Is the hardware or software specially designed for medical end use? (exempt if  Yes)
  • Is the product described by Note 4? (exempt if Yes)

  • Is the encryption functionality limited to intellectual property or copyright protection functions? (exempt if Yes)

If we get through this, then we are controlled under Category 5, part 2 and must consider flow chart 2 to determine if we can self-classify using https://www.bis.doc.gov/index.php/policy-guidance/encryption/registration.

  • Is the item publicly available encryption source code? (If yes, self-classify as ECCN 5D002)
  • Beta Test Software? (If yes, self-classify as ECCN 5200d)
  • Encryption using key length <= 56 symmetric, <= 512 assymmetric or <= 112 elliptic curve? (If yes, self-classify as ECCN 5x992 NLR)
  • Is the item described in Note for 5A002? (If yes, self-classify as 5x992)
  • Is the item limited to authentication only? (If yes, self-classify as 5x992)
  • Does the item meet the criteria for Mass Market?

So for each of our repositories:

incubator-taverna-maven-parent:

  • Is the item designed to use cryptography or does it contain cryptography?  No

    • Not controlled

incubator-taverna-commandlineincubator-taverna-language:

incubator-taverna-common-osgi:activities

incubator-taverna-engine:server

incubator-taverna-databundle-commandlineviewer

  • Is the item designed to use cryptography or does it contain cryptography? Yescryptography? Yes
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Primary function is to execute workflows - however those workflows generally do Sending, receiving or and storing information

  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes

    • ECCN 5D002

 

incubator-taverna-common-activities

incubator-taverna-mobile

  • Is the item designed to use cryptography or does it contain cryptography? Yes
    • Designed for use with Android SDK https support, Dropbox Android SDK and Apache HttpComponent
    Is the item designed to use cryptography or does it contain cryptography?  Yes
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? NNo
    • Primary function is Sending, receiving and receiving storing information

  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes

    • ECCN 5D002

incubator-taverna-serverplugin-bioinformatics

  • Is the item designed to use cryptography or does it contain cryptography? Yes
    • Designed for use with Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE), BouncyCastle crypto, Apache CXF and Apache Taverna Command LineTaverna Engine's Credential Manager
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Set of Primary function includes is Sending, receiving and storing information

  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes

    • ECCN 5D002

incubator-taverna-databundleplugin-viewercomponent

  • Is the item designed to use cryptography or does it contain cryptography? Yes
    • Designed for use with Ruby OpenSSLuse with Taverna Engine's Credential Manager
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Set of function includes Receiving information
    • As it retrieves workflows from http://www.myexperiment.org/Primary function is Sending, receiving and storing information

  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes

    • ECCN 5D002

incubator-taverna-plugin-gis

  • Is the item designed to use cryptography or does it contain cryptography? No
    • Not controlled

incubator-taverna-workbench-mobile

  • Is the item designed to use cryptography or does it contain cryptography? Yes
    • Designed for use with Android SDK https support, Dropbox Android SDK and Apache HttpComponentTaverna Engine's Credential Manager
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Primary function is Sending, receiving and storing informationto design workflows, but set of functions includes UI for the Credential Manager
  • Is the encryption functionality limited to intellectual property or copyright protection functions? No
  • Is the item publicly available encryption source code? Yes
    • ECCN 5D002

...

incubator-taverna-workbench-plugincommon-bioinformaticsactivities

  • Is the item designed to use cryptography or does it contain cryptography? Yes
    • Designed for use with Taverna Engine's Credential Manager, HttpComponents and Taverna Common Activities WSS4j support.
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Primary function is Sending, receiving and storing informationSet of function includes  Receiving information (for Service Discovery)
  • Is the encryption functionality limited to intellectual property or copyright protection functions? No
  • Is the item publicly available encryption source code? Yes
    • ECCN 5D002

 

incubator-taverna-pluginworkbench-componentproduct

  • Is the item designed to use cryptography or does it contain cryptography? Yes
    • Designed for use with Taverna Engine's Credential ManagerBuilds distribution that includes Apache WSS4J, Apache XML Security for Java, Apache HttpComponents and BouncyCastle crypto
  • Is the hardware or software specially designed for medical end use? No
  • Is the product described by Note 4? No
    • Set of function includes Receiving information
    • As it retrieves workflows from http://www.myexperiment.org/Primary function is to design and run workflows, but those workflows generally do Sending, receiving or storing information
  • Is the encryption functionality limited to intellectual property or copyright protection functions? No

  • Is the item publicly available encryption source code? Yes

    • ECCN 5D002

incubator-taverna-plugin-gis

 

incubator-taverna-workbench

incubator-taverna-workbench-common-activities

incubator-taverna-workbench-product

...

  • copyright protection functions? No
  • Is the item publicly available encryption source code? Yes
    • ECCN 5D002

 

Not (yet) classified

https://github.com/apache/incubator-taverna-maven-parent (exempt)

...

Code Block
languagetext
   TO: crypt AT bis.doc.gov, 
       enc AT nsa.gov, 
       web_site AT bis.doc.gov
   CC: {applicable project list}, 
       {legal-archive AT a.o}

   SUBJ: TSU NOTIFICATION - Encryption

SUBMISSION TYPE:      TSU

SUBMITTED BY:         Ted Dunning

SUBMITTED FOR:        Apache Software Foundation

POINT OF CONTACT:     Secretary, Apache Software Foundation

FAX:                  +1-919-573-9199
				
MANUFACTURER(S):   
    
The Apache Software Foundation
Bouncy Castle
The Eclipse Foundation
Oracle
Dropbox
Google
Ruby Programming Language
The OpenSSL Project

PRODUCT NAME/MODEL #: Apache Taverna

ECCN:                 5D002

NOTIFICATION:         httphttp://www.apache.org/licenses/exports/

 

README updates

Also described in READMEs:

...

...

 

...