9.1 Terminology

The following table explains the main terms used in this Developer's Guide.

Table 9-1 Terminology

Term Description

Classification System

A classification system describes a model for classifiying content. A classification system defines what metadata is sealed into content, how that metadata is used to grant access to that content and how cryptography is used with that content.


The set of metadata that tells the Oracle IRM Desktop what server to contact for rights, what cryptography keys to use to encrypt/decrypt/sign/verify the content, and the metadata used to associate rights with content (the classification cookie).

Classification Cookie

The set of metadata added to sealed content that is used by the Oracle IRM Desktop and IRM J2EE application to associate rights with content. The cookie is an opaque string of XML whose structure is defined by the classification system.

Public Header

The complete set of metadata added to sealed content, this includes the classification and custom data.

Custom Data

The set of metadata added to sealed content by third parties. This metadata is also signed and tamperproof, but the contents are ignored by the Oracle IRM products.

Sealed Content

Content that has been encrypted using Oracle IRM. Sealed content also contains signed metadata that is used by Oracle IRM.


Peeking is the process of extracting the classification and custom data metadata from sealed content.


Sealing is the process of taking content, adding metadata, signing this metadata and encrypting the content. The result of this transformation is called sealed content.


Unsealing is the process of taking sealed content and extracting the original, plaintext content. Unsealing can be considered the reverse process of sealing.


Resealing is the process of altering the custom metadata or editing the encrypted content.


Reclassifying sealed content is the process of altering the classification of the sealed content. Reclassificating is typically used when content changes sensitivity, for example when a top secret document becomes a company confidential document.

Sealing Server

The sealing server is a J2EE application that allows sealed content to be processed remotely.

Context Journal

The context journal contains records of actions performed on context classified sealed content. The Oracle IRM Desktop maintains an audit of activity and uploads this to the IRM J2EE application. Context related activity is then stored in the context journal.