source: fedd/abac-src/rtml/examples/will/ussh.xml @ 705233b

<?xml version="1.0" encoding="UTF-8"?>
<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0
  http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
        <ApplicationDomainSpecification uri="" id="FakeHashADSD02">
                <RoleDeclaration name="friendly">
                        <Plain issuerTraces="all" subjectTraces="none"/>
                </RoleDeclaration>
                <RoleDeclaration name="getsSLocs">
                        <Plain issuerTraces="def" subjectTraces="none"/>
                </RoleDeclaration>
                <RoleDeclaration name="NRetTacCom">
                        <Plain issuerTraces="def" subjectTraces="none"/>
                </RoleDeclaration>
                <RoleDeclaration name="usr">
                        <Plain issuerTraces="none" subjectTraces="all"/>
                </RoleDeclaration>
                <RoleDeclaration name="NRetTacUsr">
                        <Plain issuerTraces="none" subjectTraces="all"/>
                </RoleDeclaration>
                <RoleDeclaration name="NRetUSTacCom">
                        <Plain issuerTraces="none" subjectTraces="all"/>
                </RoleDeclaration>
                <RoleDeclaration name="assignedNRet">
                        <Plain issuerTraces="none" subjectTraces="all"/>
                </RoleDeclaration>
                <RoleDeclaration name="friendlyUsr">
                        <Plain issuerTraces="none" subjectTraces="all"/>
                </RoleDeclaration>
        </ApplicationDomainSpecification>
        <Credential id="FakeHashCredential01">
                <!-- USN.assignedNRet <- USSH -->
                <Preamble>
                        <ImportDomain name="s" idref="FakeHashADSD02"/>
                        <Principal shortName="USN">
                                <KeyHash>FakeHashKeyUSN</KeyHash>
                        </Principal>
                        <Principal shortName="USSH">
                                <KeyHash>FakeHashKeyUSSH</KeyHash>
                        </Principal>
                </Preamble>
                <Issuer>
                        <PrincipalRef shortName="USN"/>
                </Issuer>
                <SimpleMember>
                        <HeadRoleTerm name="assignedNRet" domain="s"/>
                        <PrincipalRef shortName="USSH"/>
                </SimpleMember>
                <ValidityTime>
                        <IssueTime>2002-09-01T13:20:00</IssueTime>
                        <NotAfter>2004-09-01T13:20:00</NotAfter>
                </ValidityTime>
        </Credential>
        <Credential id="FakeHashCredential02">
                <!-- US.usr <- USSH -->
                <Preamble>
                        <ImportDomain name="s" idref="FakeHashADSD02"/>
                        <Principal shortName="USSH">
                                <KeyHash>FakeHashKeyUSSH</KeyHash>
                        </Principal>
                        <Principal shortName="US">
                                <KeyHash>FakeHashKeyUS</KeyHash>
                        </Principal>
                </Preamble>
                <Issuer>
                        <PrincipalRef shortName="US"/>
                </Issuer>
                <SimpleMember>
                        <HeadRoleTerm name="usr" domain="s"/>
                        <PrincipalRef shortName="USSH"/>
                </SimpleMember>
                <ValidityTime>
                        <IssueTime>2002-09-01T13:20:00</IssueTime>
                        <NotAfter>2004-09-01T13:20:00</NotAfter>
                </ValidityTime>
        </Credential>
        <Credential id="FakeHashCredential03">
                <!-- USEUCOM.NRetUSTacCom <- RADMSmith -->
                <Preamble>
                        <ImportDomain name="s" idref="FakeHashADSD02"/>
                        <Principal shortName="USEUCOM">
                                <KeyHash>FakeHashKeyUSEUCOM</KeyHash>
                        </Principal>
                        <Principal shortName="RADMSmith">
                                <KeyHash>FakeHashKeyRADMSmith</KeyHash>
                        </Principal>
                </Preamble>
                <Issuer>
                        <PrincipalRef shortName="USEUCOM"/>
                </Issuer>
                <SimpleMember>
                        <HeadRoleTerm name="NRetUSTacCom" domain="s"/>
                        <PrincipalRef shortName="RADMSmith"/>
                </SimpleMember>
                <ValidityTime>
                        <IssueTime>2002-09-01T13:20:00</IssueTime>
                        <NotAfter>2004-09-01T13:20:00</NotAfter>
                </ValidityTime>
        </Credential>
        <Credential id="FakeHashCredential04">
                <!-- RADMSmith.NRetTacUsr <- USN.assignedNRet -->
                <Preamble>
                        <ImportDomain name="s" idref="FakeHashADSD02"/>
                        <Principal shortName="RADMSmith">
                                <KeyHash>FakeHashKeyRADMSmith</KeyHash>
                        </Principal>
                        <Principal shortName="USN">
                                <KeyHash>FakeHashKeyUSN</KeyHash>
                        </Principal>
                </Preamble>
                <Issuer>
                        <PrincipalRef shortName="USN"/>
                </Issuer>
                <SimpleContainment>
                        <HeadRoleTerm name="NRetTacUsr" domain="s"/>
                        <ExternalRole>
                                <PrincipalRef shortName="USN"/>
                                <RoleTerm name="assignedNRet" domain="s"/>
                        </ExternalRole>
                </SimpleContainment>
                <ValidityTime>
                        <IssueTime>2002-09-01T13:20:00</IssueTime>
                        <NotAfter>2004-09-01T13:20:00</NotAfter>
                </ValidityTime>
        </Credential>
        <Credential id="FakeHashCredential05">
                <!-- US.friendly <- SE -->
                <Preamble>
                        <ImportDomain name="s" idref="FakeHashADSD02"/>
                        <Principal shortName="SE">
                                <KeyHash>FakeHashKeySE</KeyHash>
                        </Principal>
                        <Principal shortName="US">
                                <KeyHash>FakeHashKeyUS</KeyHash>
                        </Principal>
                </Preamble>
                <Issuer>
                        <PrincipalRef shortName="US"/>
                </Issuer>
                <SimpleMember>
                        <HeadRoleTerm name="friendly" domain="s"/>
                        <PrincipalRef shortName="SE"/>
                </SimpleMember>
                <ValidityTime>
                        <IssueTime>2002-09-01T13:20:00</IssueTime>
                        <NotAfter>2004-09-01T13:20:00</NotAfter>
                </ValidityTime>
        </Credential>
</CredentialStore>