ACL - A list of entities, together with their access rights, the members of which have authorized access to a resource.

Access Control - Restrictions of a subject's access to a resource.

Access Controller - An application component that is responsible for access control decisions.

accessPoint - A binding template element that indicates where you can find the endpoint of the Web service that is described by this entity. This may be a URL, an electronic mail address, or even a telephone number.

Account - frequently synonymous with User Account.

Assertion - also known as a publisherAssertion. A record establishing an organizational relationship between two Providers (Businesses). For an assertion to be valid it must be published by both Providers concerned.

Authentication - The process of establishing the validity of a claimed identity, it usually consists of two steps: 1/ identification - presenting identity credentials to the security system, 2/ verification - generating identity that corroborates the binding between the identity principals and credentials.

Authorization - The process of determining what types of activities are permitted. Usually, authorization is in the context of authentication. Once you have authenticated principals, they may be authorized different types of access or activity.

Binding Template - For a businessService (Service) entry, a list of binding templates that point to specifications and other technical information about the service is associated. For example, a binding template might point to a URL that supplies information on how to invoke the service. The binding template also associates the service with a service type. Also called an Endpoint

Business - An organization that provides and maintains Services and their associated resources. A record in the registry representing such an organization.

Business Entity - A representation of information about a business. Each business entity contains a unique identifier, the business name, a short description of the business, some basic contact information, a list of categories and identifiers that describe the business, and a URL pointing to more information about the business. Also called a Provider.

Business Service - A structure associated with a businessEntity that consists of a list of businessService structures offered by the businessEntity. Each businessService entry contains a business description of the service, a list of categories that describe the service, and a list of pointers to references and information related to the service. Also called a Service

Category - A general class of concepts, aspects, or properties that divides and coordinates members in a conceptual scheme. In UDDI, a Category is a Keyed Reference within a Category System used to describe an entity.

Category System - A system that divides and coordinates its members into classes based on similarities and differences between their concepts, aspects and properties. In UDDI Category Systems are identified by tModels. Categories within are represented by Keyed References.

Certificate - An electronic identifier from a certification authority that includes the certification authority signature made with its private key. The authenticity of the signature is validated by other users who trust the certification authority public key.

Certificate Chain - A list of Certificates (usually X.509 Certificates), starting with a certificate for a given subject that is signed by the authority represented by the next certificate in the list. This list usually ends with the root certification authority certificate.

Certificate Revocation List - A data structure that enumerates digital certificates that have been invalidated by their issuer prior to when they were scheduled to expire.

Certification Authority - An entity that issues digital certificates (especially X.509 certificates) and vouches for the binding between the data items in a certificate.

Credentials - Data that is transferred to establish the claimed identity of an entity. According to RFC2828, a credential is the information one entity presents to another to authenticate the other's identity.

Endpoint - An access point at which you can reach an actual service instance. A referenceable entity (using, for example, URL or URI). In the context of Subscriptions, the point in time from which the subscription will no longer return results.

Group - A set of users collected together to simplify access policy management.

HTTP - HyperText Transfer Protocol. The Internet protocol, based on TCP/IP.

HTTPS - HyperText Transfer Protocol layered over the SSL protocol.

Identifier - A token or value used to mark an entity as unique within a system. In UDDI this if frequently done with a Key or when working with some Taxonomies with a Keyed Reference. A value within an Identifier System.

Identifier System - A system of assigning identifiers marking the uniqueness of entities within a system. For example a tax authority assigns tax numbers as identifiers to businesses.

Identity - Information that is unique within a security domain and that is recognized as denoting a particular entity within that domain.

Interface - A set of operations allowing data to be pushed into or pulled out of a system. In the context of Web services an Interface is comprised of operations and the messages they produce and consume. In the context of the Registry an Interface is a record type or its instance representing a Web service interface.

Java Security - A set of Java security concepts based on the security framework provided by Java itself: JSSE, JCE, JAAS

Java Server Pages - An approach to creating Java Servlets using special programmatic instructions and special tags directly in mark-up pages. User consoles are predominantly written and customizable using this approach.

JAXM - A standard created by SUN's Java Community Process (#67) intended as a low-level API for calling Web services.

JAX-RPC - A standard created by SUN's Java Community Process (#101) intended as a high-level API for calling Web services.

JMS - The Java Message Service API.

JSP - The Java Server Pages API.

JSSE - The Java Secure Socket Extension - a set of Java packages that enable secure Internet communications. It implements a Java version of SSL (Secure Sockets Layer) and TLS (Transport Layer Security) protocols and includes functionality for data encryption, server authentication, message integrity, and optional client authentication. Using JSSE, developers can provide for the secure passage of data between a client and a server running any application protocol (such as HTTP, Telnet, NNTP, and FTP) over TCP/IP.

JTA - The Java Transaction API.

Key - Also uddiKey. A Unique Identifier assigned to a record instance the moment it is published to the registry. Keys are necessary to make sure that all records are kept separate and that they are accessed individually, in other words, that they are "Unique".

KeyedReference - A special UDDI structure frequently used with Categories, Identifiers and similar data. It is comprised of a tModelKey, Key Name and Key Value. The context in which it used determines how each of the properties should be understood.

Keyword - A special KeyedReference based on the uddi-org:general_keywords tModel. In this context the Key Name functions as a namespace or set-space identifier. Key Value signifies a particular type within the space.

Localname - A local part (without namespace) of a Qname.

Namespace - Namespaces are typically established to distinguish between multiple interpretations of a single token or phrase. For example, a "nut" in the "food" namespace is something to eat, while in the "hardware" namespace something to fasten to a bolt (something you would not want to attempt with a "food:nut" and vice-versa). In XML, it can be thought of as a collection of names, identified by a URI reference [RFC2396], that are used in XML documents.

Permission - An action that can be performed on a particular resource by a specific principal or role.

Principal - An entity whose identity can be authenticated. A principal can represent any entity, such as an in individual, a corporation, or a login id.

Profile - A lightweight representation of a user account, used with the Business Service Console.

Protected Store - A BEA AquaLogic Server component consisting of a user store and key store.

Provider - Synonymous in many contexts with Business. An organization responsible for providing and maintaining Services and their resources. A registry record representing such an organization.

Publish - To edit or add a record, or resource to the registry. To edit or add a record property in the registry. Once records are added and changes made they become instantly retrievable for anyone searching or browsing the registry.

QName - A name that consists of a namespace and a unique name from that namespace.

Registry - A record management system guaranteeing accessibility, reliability, and manageability of its contents. Also short hand for a UDDI Registry, a record management system for a Service Oriented Architecture based on UDDI Specifications.

Service - In this context short for a Web service. Also short for a Service record in the registry describing a Web service.

SOA - Service Oriented Architecture. An approach to Systems Design in which loosely coupled services exchange documents and messages.

SOAP - Simple Object Access Protocol. A W3C specification for the structure and interchange of XML documents representing objects and their interfaces.

Subscription - A part of the UDDI v3 API allowing clients (users) to register an interest in receiving notifications of changes in the Registry. A record of such a request.

Taxonomy - A system for classifying, ordering or identifying records. In UDDI Taxonomies are often identified using tModels. They are used to distinguish between specific Category and Identifier systems such as uddi-org:types, uddi-org:general_keywords and unspsc-org:unspsc:v6.0501 to name but three. Taxonomies can be either "checked" or "unchecked". Values used in checked taxonomies are subject to validation against algorithms or other norms used by the taxonomic system.

tModel - A structure that takes the form of keyed metadata (data about data). In a general sense, the purpose of a tModel within the UDDI registry is to provide a reference system based on abstraction. Among the roles that a tModel plays in UDDI is the ability to provide and to describe compliance with a specification or to represent a unique concept of construct such as a taxonomic system.

Transport - Any low level messaging protocol used to send or get a message from one application to another. Examples include HTTP, SMTP, JMS, Jabber and even FAX.

Transport Repository - A repository of all BEA Server transports.

UDDI - Universal Description Discovery and Invocation. The definition for a set of SOAP based services supporting the discovery of: businesses, organizations and Web services providers; the Web services that they make available; the technical interfaces and supporting resources which may be used to access such services. UDDI Specifications are established and maintained by an OASIS technical committee.

UDDI Key - A unique identifier conforming to a grammar specified in UDDI v3. All registry records must contain a uddiKey to insure their uniqueness. Also referred to as a "key".

UDDI Registry - A Registry implementing one or more UDDI specifications.

User Account - A record registered by a user through which the user's changes to the registry are recorded and through which access restrictions are applied. User accounts are secured through password authorization. Without a User Account it is not possible to publish to the registry. When searching the registry all anonymous users actually use the highly restricted "guest" user account.

UUID - Universally Unique IDentifier. A standard maintained by the Open Software Foundation for Distributed Computing Environments for uniquely naming and labelling resources. Used in UDDI v2. UDDI v3 specifies a more flexible identification grammar using uddiKeys under which UUIDs are still legal.

Web Service - Loosely coupled software components delivered over Internet standard technologies.

WSDL - An XML-based language that describes an interface of a Web service plus information on how to call the Web service and where to find it.

WS-I - Web Services Interoperability, a specification on conformance and testing of Web services which insures that they are interoperable across a wide range of platforms.

XML - eXtensible Markup Language - a W3C-sponsored format for structured documents and data, used mostly on the Web.

XML Schema - A means for defining the structure, content and semantics of XML documents through XML itself. It defines a richer set of data types - such as Booleans, numbers, dates and times, and currencies - than the more traditional DTD. XML Schemas make it easier to validate documents based on namespaces. It is defined in the W3C's XML Schema Working Group.

XSD - XML Schema Document. Extension frequently used with such documents. Short means of referring to such a document.

XSL - Extensible Stylesheet Language. A group of recommendations at W3C concerned with document presentation and transformation.

XSLT - XSL Transformations. A recommendation specifying how to transform one XML document into a different document. The resulting document may be XML or another format. Also, a document conforming to the recommendation which can be used with an XML/XSLT processing engine like SAXON or XALAN.