ࡱ> JLIO7 7bjbjUU 7|7|3lXXX8,('4,(.(.(.(.(.(.($7* W,R("'R(g(,(,(B  Vh'@,( 1Q XT' ,(}(0('x,,,(SAML Domain model draft-sstc-use-domain-04 18-May-2001 Dave Orchard, Hal Lockhart [see end of this doc for changes from prior version and authors notes on this version] Introduction This domain model provides a description and categorization of the domain that SAML solves problems in. People, software, data, interactions, and behavior are described in the abstract, without binding the specification to a particular implementation. It provides a standardized or normalized description of concepts for the purposes of further discussion in requirements, use-cases, etc. It covers material out-of-scope for the specification in order to show the context that the specification solves problems in. It does not describe implementation information such as API details, Schema definitions and data representations. A typical use-case for this document is: "We all agree what we mean by term x and how entity y creates it and entity z consumes it. Is x in scope or out of scope for SAML?". Another use case "We have created an OASIS TC committee on functionality A. A is the standardization of term x that is out of scope for SAML". In the rational unified process, an artifact we are working on is the logical view,  HYPERLINK "http://www.rational.com/products/whitepapers/350.jsp#RTFToC2" http://www.rational.com/products/whitepapers/350.jsp#RTFToC2. Static Model  EMBED Visio.Drawing.6  ISSUES: Should there be a 1:1 relationship between credential and credential assertion, perhaps labeled represents? Should all the assertions relationships be 1:* to the authorities to represent that a given assertion can only be produced by 1 given authority, or left as *:* to represent that a given assertion can be produced by many authorities. Should there be explicit (perhaps *:*) relationships between the authorities? What names for relationships should be used? Glossary (abridged): Notation: Definitions that have been agreed upon by the use case subgroup are denoted(Conf) Assertion: TBD Attribute Authority: (Conf) A system entity that produces Attribute assertions, based upon TBD inputs. Attribute Assertion: An assertion about attributes of a principal. Authentication (from glossary with principal added) (Conf) Authentication is the process of confirming an  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "EntityDef" entitys asserted principal  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "IdentityDef" identity with a specified, or understood, level of confidence.  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "TrustInCyberspaceRef" [7] The process of verifying a principal identity claimed by or for a system entity.  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "AznAPIRef" [12] Authentication Assertion: Data vouching for the occurrence of an authentication of a principal at a particular time using a particular method of authentication. Synonym(s): name assertion. Authentication Authority: (Conf) A system entity that verifies credentials and produces authentication assertions Authorization Attributes: (Conf) Attributes about a principal which may be useful in an authorization decision (group, role, title, contract code,...). Authorization Decision Assertions: ( from glossary) In concept an authorization  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "AssertionDef" assertion is a statement of  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "PolicyDef" policy about a  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "ResourceDef" resource, such as: the user "noodles" is granted "execute" privileges on the resource "/usr/bin/guitar. Credential: (Conf) Data that is transferred or presented to establish a claimed principal identity. Policy Decision Point: (from glossary, access control decision) The place where a decision is arrived at as a result of evaluating the  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "RequesterDef" requesters  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "IdentityDef" identity, the requested operation, and the requested  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "ResourceDef" resource in light of applicable  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "SecurityPolicyDef" security policy. (surprisingly enough, not explicitly defined in  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "ISOAccessCntlFrmwkRef" [10] ) Policy Enforcement Point: (from glossary, access enforcement function) The place that is part of the access path between an  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "InitiatorDef" initiator and a  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "TargetDef" target on each access control request and enforces the decision made by the Access Decision Function  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "ISOSecArchRef" [10]. Principal, or Principle Identity: (Conf) An instantiation of a system entity within the security domain. Resource: (from glossary) Data contained in an information system (e.g. in the form of files, info in memory, etc); or a  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "ServiceDef" service provided by a system; or a system capability, such as processing power or communication bandwidth; or an item of system equipment (i.e., a system component--hardware, firmware, software, or documentation); or a facility that houses system operations and equipment. (definition from  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "InternetSecurityGlossaryRef" [1]) Security Domain: TBD Security Policies: (from glossary) A set of rules and practices specifying the who, what, when, why, where, and how of  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "AccessDef" access to  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "SystemResourceDef" system resources by  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "EntityDef" entities (often, but not always, people). Sign-on: The process of presenting credentials to an authentication authority for requesting access to a resource System Entity: (from glossary) (Conf) An active element of a system--e.g., an automated process, a subsystem, a person or group of persons--that incorporates a specific set of capabilities. (definition from  HYPERLINK "http://www.oasis-open.org/committees/security/docs/" \l "InternetSecurityGlossaryRef" [1]) User: (Conf) A human individual that makes use of resources for application purposes. This may also be non-human such as parties and processes. Producer Consumer model  This diagram provides a view of the elements of the SAML problem space that is focused on the architectural entities and their inputs and outputs. Its main purpose is to achieve a sufficient commonality of understanding the meanings of the various terms used to allow productive discussion. The names have been chosen either to be consistent with standard usage in the field or suggestive of their purpose or action, in many cases their exact nature or contents are not fully agreed upon. Although the diagram is intended to be neutral on the SAML design, the choice of which elements to include and which to leave out anticipates likely elements of the design. This diagram should not be interpreted as describe message flows or a single processing flow. It merely attempts to describe which entities are capable of producing certain outputs and which entities may make use of certain inputs. For example, all of the following are consistent with this diagram: A PDP collects various assertions from their sources in order to make a policy decision An Attribute Assertion is returned to the System Entity that initiated the interaction (lower left) who presents it as required A PDP makes a decision without the use of any assertions All of the entities shown may be a part of distinct security domains, or some of them may be in the same domain. Typically there will only be two or three security domains involved. Common groupings include: Combined Authentication Authority and Attribute Authority Combined PEP and PDP All combined except for PEP Many of the components can have multiple instances. For example, there can be multiple Attribute Authorities or multiple PDPs. This may introduce relationships not shown in the diagram, for example, a PDP might provide assertions to another PDP. There is an asymmetry between input and output. The outputs that are standardized have the names shown, by definition. The entities may or may not use the inputs identified for any particular action. This is represented by the use of solid and dashed lines respectively. The entities that have an associated policy store, are assumed to use that policy to modulate the outputs they produce. This policy store is assumed to be non-volatile and capable of being administered in some way. The unlabeled arrows at the top represent other inputs and outputs, not specified by SAML. For inputs these fall into two categories: 1) inputs which have the same semantics as SAML defined Assertions, but are in unspecified format and 2) items which are not specified by SAML at all. An example of #1 is an X.509 Attribute Certificate. An example of #2 is the current date and time. The diagram anticipates the design of SAML by identifying only the security assertions that could be output by these entities. SAML will also have protocol messages to send and receive these assertions and will make use of existing communications protocols to transmit these assertions. The central gray box labeled SAML indicates which assertions may be specified by SAML. In particular, the inclusion of Credentials Assertions and Sessions Assertions has not been settled. The definitions of these items can be found elsewhere. The following comments cover points that may not be completely evident. The System Entity in the diagram is the one requesting some action that will ultimately be permitted or denied. As a preliminary step it may provide credentials to authenticate itself. The Credentials are not merely limited to a password, but might involve a sequence of messages exchanges, for example in a Public Key authentication protocol. The Credentials Collector is an entity that can front-end the authentication process and pass to the Authentication Authority the information necessary for it to authenticate the System Entity. This is similar to the functionality provided by the RADIUS protocol. The Authorization Decision Assertion might simply provide a yes/no response, or it might provide specific information about why access is denied, or it might provide statements of policy. The Policy Enforcement Point is defined to have no policy, but to act directly on the contents of the Authorization Decision Assertion. Changes from Prior Version - Converted diagram from Together to Visio. This should make it more readable. I don't think powerpoint is an effective engineering diagram tool for the details that we want to represent, imho. - Removed Sessions - Changed authorization assertion to Attribute assertion - Added indicator (grey area) to show SAML. - removed reference to life cycle management - made sure terminology between prod/cons model matches - set principal/entity cardinalities to 1 to represent that a principal represents 1 entity - set credential/principal cardinality to 1 to represent that a credential represents 1 principal - set resource/PEP cardinality to 1 to represent that a given resource is policed by 1 PEP - cardinalities all represented, most currently at *. I need specific feedback on each of the links hence... - I added a number of ISSUES on cardinality and relationships to the static model. Feedback would be great. - Updated definition of User in static model glossary - Removed Authorization Assertion from glossary - Removed log-off from glossary - Removed Session from the pubcon model. Authors Notes on this Version I did not understand the following or wasn't sure exactly what to do from the various minutes: - what to do about authorization attributes. I noted some tendency to want to remove, but it seems to me that the association between attributes and the authorization authority seems relevent. Need resolution on keep or remove. - The mention of a life-cycle model or diagram. I wasn't sure if this was meant to be a UML state transition diagram (assertion created, revoked, etc), a UML sequence diagram, a yourdon data flow diagram. - The mention that the domain model has containment and "other" relationships. There are no containment/aggregation relationships listed, only a single inheritance (isa) relationship. So this confused me and I did nothing. - I wasn't sure what to do about the domain glossary. I recall discussion about nuking it, but I didn't see any particular action to that regard. - I didn't see a decision to change security policies. draft-sstc-use-domain-04 8   W X Z h i u w  M b P Q Y Z n o ^_bc  (C[] 5\aJCJOJQJaJ0JjB*Uph B*ph CJOJQJ5\OJPJQJ^J jmUj> UV jU0JaJjUaJ jUaJaJ?:U78yzZ [ h 5 b w x  & F ]^[$\$77 L M d BCi$%s]d,-ST\]$%:e  abjk fgvw  (WCDJK*5B*\ph 0JB*ph5\0JjB*Uph B*ph 5\aJaJS*1s{>?FGbc]^$%)*z{'LMPQTUV\d!!**7 jU0JjB*Uph5\ 0JOJQJjB*OJQJUphB*OJQJphOJPJQJ^J5OJPJQJ\^J B*ph@UV!!""####$$$%%%&& & Fh^h & F[$\$&' 'w)x)**T+++++,/-0-8.9...~////`0s0001=1111V2223h333333344e4C5K5667777777777$a$ 1h/ =!"#$%`!-oհeR8m#q`+$[-xtY7;efZ\ ,n])nkE -n_ˢaa2] ws=ͿLL! vٜ'rlC*>5@%fKf;V|kl C@r$7&ٱB=I.b9q>-m6[E ~\N>.!twAFgloڽ[vO'nAte\#Z6ŋcm.%H|QQi|a=9zL[ 2v {{zzz{axpx]YO>mszn-ւގi>UgƟj\F|X<{6s;??n<{s?[#4>Olu}[=O?7_~N8l'<Ӽ:-ctyEoIny$q[k$#N>U];=Gv}6G߂jց~;Unۺa5:icϠsi}0gsu|?h;HjC:#Hn*O.;잛nM(>TVبCWZ{.b>,q?.G rt8KR%9JYJyb+RG\ٻԶP@OKi|oӍYŭrb1BNYMQo!nۉS$O˫U~q|R\$_/ř&h*WaF܎^C˺kYgy(?fdCd?)H~;JƒKfoߖ6ҿ{}=iޥ^wZud?N+88gsxy{o?qFY~~b1E$䱛הps}`'.#bOoM"7eJ+S[i}4)*Q>TGjp)G@4/ywg|>{y#<w//ớWn![仙/#|7Bj6`<(m3\yhσ`PKpH`kvozD~Fz{c3Ksj~~q`O3s|˂U4YVȚQ6r\Pi 'VZ~JW/'UF92r"e@Y'SqQYWN˪rI<]_ɔGr%JΧܔK(JU V"aIyrB^Q~*`|JY$-QBe =K)FK6/p#i*KdY[WsL/ʨ-2:Ɨ ˟u>?m8dݯ1c ;z6MW]V> y{=L!qgwH!Bͮ)09>HΫ=zg,[˓=P^7wu_Z%R"kTsZF9Jy}*~siTq?%Yjyl\<{>Bv rlg9)];z؍ح?r縦l .*_>GH$n I _;a,=N5*&e"ٕ;6Fp5FR+5AVȂڏs@>#/B>/CaL>Sl>&!ODm0 귌F%|$!Fcc01hܺqkA_>ƭ ŭ ۑ~x'B7؛=7{`ovǽ{- q=1 14@̎sx,K"ՄTGCœRYG*+xRE_@BRQ/?Jrjy&~ 8$Q;IO P C"HVj31\L?VbZ_,urmj կZI,V*PbZJlPVT &~ռb;5PPl`Uf2If@dx58NM%USCx58&$X&jBHxR5#[6Au:ȦQ7fT<* ىC<ţpwQ}I/5^Rp>WPKwxlkQv pڵԡݢNp!98 p4vƅ8V!vЎQc4+M! r>m7ͯy;j4VR:ZR[OKh䍴62P6ԖF2XŴփVVL6 fK[ihkm>mmihm"L06V0m a0F0m$0y֗.@o^ t>CBj]uNȝ ]u`=A5=%r ԚZ3!["zV@CF4RkLjM98@Aj#TEZez_D]d$}P7Z9V+O{d] 壆;/lKBB69hRwNEAr4;4T4;%ِ~E܉hawbHIq'Ei1(\Kk}h tk'lk&@ fn6w˴D@zߓP;xt&=ܯHwl~H)~F0y67u2}̄Vsd<\p,w_&+WH8D>Aïp vv&`'{ս^G$BBܛ&؈_-zrn [g;V""ݫ ^!+|υ9ȳQEd/>'xd<$Чt#,HUÑ6CfVzO ? >jzWR]tD U2XH5DH#=i MMHW143t`W'DE`^LˑzY(\Rd LI`[z!@/ EEz1RszNCّl~t䠞2@FDa8Gẞ'?H IPKLop~u@8⑇z| 0C D(@@^0a؈a؉i8$Bz㹐x&d4Bz㑐Brm!w {BnyqEh\*" _mP8'jg:PAq@1> {P-vV^f6zۅP }`FhUQ[!q0~slc0X s%\a1]dL6Sa d& XVF%6F^cd .+Eetnݠ;BKw8lAڠZ >cfA1)4j4pI͆P_3y%5 I:BbW"39;.T4nϓmVh}+$#z!^X:8j'༞B霞Z:" iNaŗ. zB\+pXv[wl- 7w5,y?Gy ȹPˉe1϶xC "2=VƸ wXi#PV ˬ~eX+k\dKqU8Vaj;Xu\*XfizkY-cmgu.ԃDzftSYSc 4&&j ,գ1 g͍1F5u0:Ba!F0 PkeVF:MY'l4g]+r7ԺaY_rQ6ʰPXs6ȏ ~FA`` ƲQFjH)Y #`8 Cm(YFX/mecxlPe3 |g;qV S'6 ˬ~3X8x(2a̅yòeF$R㔸8).E Q[e1;az{>q_ 7+ajVc&#VrqLzXZ,m2cfcŘ%n5f y;j۱l1@q1@kn]2~,0!8 G(jG@}QO<'GW,1*`bQIvˬ~O ֳO p ^"B(j7o-j3oM[}ct6ÌzgC-.YJè9&)PKe4َ5hH Xsvl f 3ÏeͲPJ\f)r@vȆZV,6`45|f D 0wf2Z B(Z!,0MCK2PʡV˪H5-!UפTJQeVjwT7}ԄZPX<'id' ԇz2_s'ib$C{I3hX\H;s) 2bZ#BŜ4bi03Ht Xjُ4AWԺb/ #mv"}Τ/C,aևzdY 3됡fm2#BmYFny@FI0X6 93;lf#̬d"L@x,9nĺ 5f!āYƲŦ*Yd*d)0\boNXlFv #@-~1oMayCXg.5 k`5*Va4=6f؂V,cF6aUenvE`o뮀paRg䃨²#"X(6:}Xwu?YfwIoVJ Y6T>^i׆?OOBNͲ m}?U'q)X|-g*|l, _gx7'vf(qoLp%_;bvk_>X@z/މ^BdcE`"93j$etp#|j%R"DN%%a ++ecq|D͐0]c'1"cD`L @A ^D~+{+Bd_];6 gy0Go h>Ύn(_8Nz(f;`;D6Զ0V)lVX Oi0<<|,e󺜍MIȓ&6ofS؊| 忲!0@p늣_7='?z,_X[Xkh3j-}wӧW>@CF5k߰&-Cx敡T *( />/"PAq xI!g9yfC6ȊZw<<N i -㹰Fn"C^[V8fe4'.qu:nA ܒpjB- ;x={5k713;av=ݑ?':C u6_c#op jq_½~ ~ ̘l?`DbDbDbD|[ Pɖl1,B1l7aFo,~ p/eX `!j >}VSx4ģ$ 'h8gS|&; g ȺG]Rc͚@ 4f85Ǒx-pkJ?tR ^ՐVԐʓ?&ѷ$4rM*˲KXȉ\GRR^VZsP ~UU2B&̬ UqՑHG8rͥ4@y/iᙠᙡ=!LJ.6Hrx6,ّm}@'}:1Zz*asxR-X B܄;j5qE"p,pA\)]WjX{^鐸O:O-wNӧhIţ B<&mp~V7p#/Cmx]Z"^ߐcG)>f0yP'>yH0F(D"4`k-! dlbk9F! >rJONɑ'PV᲏8Lq .rؔuԮ5V~{x'Ǖy)a,E+2(TLI42& GmM!/2U4PQt'/(E<p\Pp΂r:Nn(7M&([yQWb^JM\ `? 9$T7D/yjkI|q!S\b򃺄P2$Ԑ3H^u:L0$:䂜VRD a0 FR C %>B{֓ 5:ry;=iFjt@HH 4fEmFM!@cjC :"=ZQkOPjjm!P JB Ԋ j12![fy,5/PV 90z53ED6!rzґujZ [vIv5)P rrCMAv. gTD 5SpRt WT'@B\G~^υ3xDx>Sx>ExCi7-%ص;C+8G;/Y3|LiA8iDŽ9Mȡm-6QY! X j˅ J(5B!(\U#Tf յY0yjӅ*P*AoUhz6!kD!4B 0C? Z=>}Iu. =B/0Fk%~i-rsԚ (CyRUb1V/zou%d5*WZ,]շ8m@b%si3?yip6Hpv;[ ; j~gYᰳpYHtU\h*+ \ nVBOWkꚀ˹9MX Gqc19~wov±l3T޳wͳBu! cy1=^`17X-}/ z>@(lӳoB21-cQ§hKǖҖ*8 1s krjk%'vמaN?__6CYz-c7=3K,¹mwnf;ls;dzQ,.A#(5qMey+usmf=]Y/W$ uSl\+)o3)t&ǝ>S6۽{a`6GCcz_co[\ =^|Qug[:P?7fpK=fp"==!63؏Bxlgp{ ǵoP%{Jc%zwTc7Өvpg~]ryUt^Q.A#UuW v=S:lj7tW{Ҩ,+^[jZm\m \rU#-&agmu"W͉{a`6*1(c{1X`ݷ\5z@'N϶uom UQ3==!638HsUc;Gchgff[3?٫Fkosسg7˧G?{4" kwa'1;Ff\F.E6.v\~F7W+U. Իay?7p0~Cзwv&n l3٦ݸ1Da,0' 5uຯz=Am\wz*4gg?f~5Flg*#Ze|1/?\ΊN{|x=џ1oͿo^i۪U`㐶탋}~(y7nXǿ;]qlԵ;\rAW5 Y\Zw y0 HCIGy+Ҏw#mT҆GЀ =sܛ_4ۿ,ryf;п|f}?9{> 3NPSx0,Hg [!uVl*0#aiX~7|f_c!n#H˶NMqc=ssi?~ wzHmDyK =http://www.rational.com/products/whitepapers/350.jsp#RTFToC2yK jhttp://www.rational.com/products/whitepapers/350.jspRTFToC2'Dd*0  # A2=L ru4 8{`!w=L ru4 8Xf Yh|5Ex] tU~]U$A̎!d 6D'L q fD`,rYԐqg<ºz\Gœ]Ag3F%"a}:ݩtT7뜛W]~{{A\wt?QSHVn.v) _&!se"I'\C'n)f,4׸4B΍!#89Hߑ[HЏx:%sH"d m S8[ձŋe#ʬR^z~ ƻ lx|&4ya?\Ů9E*$SX_Ox>4R{w{}B#,x_1K'W0l!"rcyۍ/LMGG.#݄qW&.a\5S86K11~v^a!h:LwF!S]j$v#8_i#ҍcSkṞ 4K3,]e穤ggg27+0UjX(?p>_߻Ε/\V f P[*!WCyX)1quLBdW!1>L`̓9值"v) +\9, #pe p5D[#qV]4>L*ސNs#tC ij?3ui'}*qzz@B=+5Pk^\du5~nb2ɭ`i%Dh,я?TՏ4ܠMJ)x°R"QG.wQ8oX|!X=X5VӀ>^}<2lk2F=EPћYB"l3S )thv;?A K83'| @R20z~lGK| q~t7dg @=wΐy4;sW[#Fl<{!!6ZLfl1ϰ!ix1X){f)<وaD `Nb<;1dzq-C*<$<;:YeI"o{3Fg1E;eFkEB6zm/~bYkxA o8G[X+kEp-A?&D31n)ƅ8|ރ]X={Bt/N~޺7E{o{OC]+1uePڨz/ l >/,b&쵿BZWZ#KOƹi`zHo7IW O±,\ˏ~#`Sh}]AD_- \'y .*gH7ͿarydMMGB./J.^+E[N/ ~]tNiω5Ib:E7D )V%cry,^4!֋@ H4)bX/zk6F-H1lX/22 SR/$J9 2a&EÅX'^41׋>}N0=y oMYLE+@>ְgaD[7=נh5@6J|#zc ]0g'k5+\|_[<}5Wr)(t!X:ָt}5K<}5#O)`a&k\ wYX㚸k\?q}5;ݽü5s=\RW9ݠ>#XKcK^e;'\rnă ǝ컈I'&V` _+BNV'A\x Ḑ}gx/0~bD y7<בH}7{GD/A.P' 3?c3#џ7Y0~y_z;ӱ ǝ컈_DϰpA,q!1\``:%1ܛ[yW00~0!/G G׻}4=73]B_x / um >ɋ$!#P8^6yX_x 1X+23A O70eN"I%6/z{ p+e]n 9Yqӑ6J<]z0hmԿk(HIX~>m7:3H[tb_s0lBi^xȰ_mё&u_c8bD̑1n!ALy~dz}z#yl\UԗǻF-SM N;q|ubٯ;>7'TѹՃwv;nD|Mm1X٬u7eg|ã-I'Q75{)Fjh%,s_h yuﴦ.s#RBϰX69Wh/r}B.ָ31|L~b ,kDlpyb\a짙eü|tP5Puzc^֪xZyl}k-b,/oNo=#9^ bp0# ]OCxYϰr\?xup_Z 36@/t'}}ƼzVÉ۠nLuü.cׁYe}GoZGM[|HD"h]&e4Rߥv5~A P8ߴX'1_1 }x| 3]Pk-}A]/rΘw+>f;swþ 7:a^Q(P;hPCj*RDR`4t㥁a%H q(  !"#$%&'()*+,-./0123456789:;<=>?@BCDEFGHKNQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~Root Entry  F1QMData AWordDocument ObjectPoolP"z1Q1Q_1051702694FP"z1QP1QOle CompObjlObjInfo  FVisio 2000 DrawingVISIO 6.0 ShapesVisio.Drawing.69q՜.+,D՜.+,R@HP\h t   VisioDocument P8VisioInformation"SummaryInformation( FDocumentSummaryInformation8Visio (TM) Drawing 80r6Rd !fffMMM333$ $ U68@ Td Arial@N@Monotype Sorts@"NuWOingd# NtSymbUo^,eb5T?? Y@-1U&J:DT1EW-hPT8* z%U~b 0{GzK?@*:]\IbsUssU  t %sB>/P&+P$g? m A]P&,,H'/h&q&Tt s sy  trt)t?2  s s ssssssRs$?k|+a4BU:E:E:E:E:E:E:@?>S`t4B:E:EU:E:E:E:E:E:@$O+F)A@#Y2; AGVGVAY T?YI?C,?\ #!+\T%\J\\W|G QE_ "FMWEdfAOo*4OFOXOjO@|O????7ܻeI?ʵ}~~xsUqvooo*<N`ql~tR]vڌvJv5ڌڌ uZ ss4 IFI̟ @#cb6E]—U   i| o['0rUBYI?[?m4jk2#DB B B B Bԃ0j֧P/!M3󿎶(D~///AP?dc~4BAkI?Us%1"(@6-(]p ɻ %A-4ҙR#+)8/kh/z/2Dϰ/g?y2SܿPt~7%߽5G($u߹%7 ѮŬ !`١smU , >Pb)#|+#U2q?b/q,,'l sX)qGO贁Nk@ޙA6&5$?/*&,5=%5M%0'Ȫ3֯6c}FBEA&E?d=9\d9o?/2ODOVOhOzOOA_&_8_?Q?_u_aWWtqO*<G_AtwрީABkҲAy.__T|.?U2IZ$ bVSq*oUC-3?7AU:U U./0Ul4, ףp=@j@ 0 1UC-37AU*U./01Ul4,  ףp=@j@ W0$C-U36A_*<@PU4`0E KcV0m40< Jc8U5 H<( H<( H<( H<( _*<EA0 RDx,x>PU`0 _VL0-m0:_UFDfP 7h-RTUUUIV?Au?eJ ){ bY/b))teqYk\ZUHu %U13 VGcGic]WRNJ Jfmb?DzG(\?z??HDB H# 4AhZ >T7?U@??@İ?]P} >u`|]?$e u#j! b*^d d>%kC`9Copyright 1998 Visio Corporation. All s reseroved.f`l>,>Ud@9 #@ a*W"]%] } N i" &4/>//5!#) ?"?Z!2/%RrA^23Hl-  4 )F\ ϡ0 # 0T ? W0]Deko+tO0]=?4M0 rUFDfP h-RTUUh UIv???d x$)))00 byb} aeqYkzUGu ? ?????GXFFflGYUQ D3Represents an association between two clifiers.bԿ?m:mԿ8?>?>? UG HD # #h@>TB(E=J AU]?ԿP6 u` ^?A[u#u 'u`E@b]Ku B ^:xsJ.JLAXA҉a )% bJB"7"A/KE\&L'u->U2NN{?<#2r0\"[#!"ב?u!&Q&n&:yc3 [!3 -2362H ?3 "4*02Q?c;#?$8&7[#2 ##z"a,#Qc,%E A#5 !`UML Background Add-on` /CMD=1?001yk'A4RV3"%V39V 3bMV3aV ]A%?#AbD V JVQ#S 5 8:?A~aĿ@q`K?m*g @P"*>L'A-[ySab \g-2r3A3b?au!R'cRbiui20K@u!%|#HqMt5 p`7Copyright 1999 Visio Corporation. All rrs reserved.ec`}p_D112.chm!#;20pe>ha0rE m %5 3ɘ8QaR  R xr9rl1Ud Q)#Q8T&&b b>%aH'@`Xq#҃cݏbG aWqc?aA?QOQ;#}[#%V9Vou#%V9Vu!&bfq2,#3!B'a%l'7 gRt" X߯6 f?6HG ?ףp= h#żoK#}# VWaV#4LWaVpLFA=g貾?A-T9 B~AUAhf߾?A 3@q?@wI?@jP6 Bus`p   } b bAu uLA-(vb .`? z3*h>&h a-$5 M #>QmU5 qKl*(&{"&'v Z'|!/ -\ (/">% bBO%f&?A"[@#>6F"4?0l( @Ud%='6$.#5%5%5 rL(`X#l1$24HiA!^| =!9Z-f'0f&"FHD H# =hZ(>TE=AUA23?Ahf~@q?@IS?@P6 Bu`p A  ۢ b bA)u# ]uLA-(vb .> z3p*h>&hm a-$5  #>QU5 qKl( $2{"&'H\%E!/ \ (A" bS6X#O%f&?A"[@#56 51l @UdP%='6/"a.#5%*5%5 L(`X#P9XY1 B4BH(/!aiBA^| =98Z-f'0f& "FHD: H ;hZ(>T9 B~AUAaf?A3@q?@;I?@P6 Bu`p    b bAMu uLJA-(}vb .? z3*h[>&mh a-$5  #>QU65 qKl(&{"&'A\%|!/ _b (~A" bBO%f&?A"[B@#56F"$60l @Ud!%='6/"aU.#5%5%5 L(`X#c1I248iBA^| =98Z-f'0f& "FHD: H ;hZ(>T9 BAUA3?Aaf@q?@I?P6 Bu`p    b bA7@u +uLA-*(vb .> *z3*nh >&h.!a-$5  #>QډU5 qKPl(${"&'\%|!/ b *(A" bBO%f&?A"[@#56F"$60Ql @Ud(%='6/"Wa.#5%5%5 L(`X#c1H248iA^| =9Z-f'Q0f&"F_H'^4 | }O F\0R#N0|?:0]}p=e?UG D # h0T`UU0ސU@??A?Aѫ?Py t_L` -@rb & b R- :v@@qtY09Gou҈`Su(/%A#A#A#B&i#i#i#i#i#Ui#f&f&i#oi#9"3"'9#&#6]#*/&9&C&82Q"82["82e"86_3y"L6_3"82"82"82"82"82"82"822"67V8' .&3Q"."["U"C!CC2@.7$6GCQ"$2["FUF%F/F+BCuaD@o +BY`UML Background Add-on` /CMD=1001y)ZCDBCX Z BbDpVRpV AB pQ!I 0T |CQTK`Vis_D112.chm!#20`B`7Copyright 1999 `io Corporation. All *bs reserved./?Q!8e!a]$!tiH#UjSUUHaEd!g3Ud!gUdgUdog9%d9gxd]g!hc0Xdo t9tb]g9`]' tt*PT%BBe3RtR.R/9"YYxpr~rHkQfQ!/&.'& R'< 2CfЁ3U>ZR ЁU[?@dQnRЁU[4@QnېЁckT!QBjS`KxW[ݓa 3U2UeD$DuC$9`dWdS]dSy?ME͙ܟЁBu,2`& 8"G"8"Q"8"["vLvsf EPbt%F%FɁnRooſ # [Q Á` Diagrams..\`7c-List the d associated withis Cl\`BB$_]4(TBVKEX cViewecontaining shape vL ofW5 3UWiq`Show RelAbshipsN`&"r!) forW6UY q`_rU_'RV/VW+CS`Display Seman_tic Er, 5rK`G.^/p/\2(Ti2rA͐@G7K?E////?u%8?"cS{P5OpT$"-c#K O editydQ4oD]/?]8/u^O `%PropertieJ&VJApVWHOO 1_qDu/!0qr(:P+qWeqqo鴾AgfYa?* cɏNG1ܠ:J;aeGnB _oqooJЧoȹoju!?Wo|sFdD{Rjy~o9wh5yu+=8JsHun5GeȏЏrA|+ ܠkUEyuǼh}*ϑ -!Uy{Fs+=OnuoKAiv!+=Na[vh3aȿп'ğCbjϲ,ai1i1ArbT P?b2.HD: # =ih(>TA9 #:AUA?A?AN<@P-DT! ABu `u bwu  -B *@Buv` ?FSu#Q"B0 ChV>h Ba b>0{Gz?JgbKBد] Bt` @n"qt x(dp A ('B$$'"/%7-? 6p@b6 1l>#!Ud#3 A5R$n!0R@CaU:йC9GM-B4KMOZeMHD: # =ih(>TA9 #:AUA?A?AN<@P-DT! ABu `u bwu  -B *@Buv` ?FSu#Q"B0 ChV>h Ba b>0{Gz?JgbKBد] Bt` @n"qt x(dp  ('B$$'"/%7-? 6p@b6 1l>#!Ud#3 A5R$n!0R@CaU:йC9GM-B4KMOZeMHD: # =ih(>TA9 #:AUA?A?AN<@P-DT! ABu `u bwu  -B *@Buv` ?FSu#Q"B0 ChV>h Ba b>0{Gz?JgbKBد] Bt` @n"qt x(dp # ('B$$'"/%7-? 6p@b6 1l>#!Ud#3 A5R$n!0R@CaU:йC9GM-B4KMOZeMHD: # =ih(>TA9 #}:AUA?A?AYaD+ج<@P3žm>Bu `u bu  -RB *@Bu` n?Fu#Q"B0 Ch >jh]a^ b>BU0{Gz?gbB?ABt` @n"t x(dsp  ('$$'B"/% 7-? 6@b6 1l8>#!UdP#3 A5R$n!u0R@Ca:H$C9GnMB4EMOZeMHD # =h0>T@dYY9 #AUA?AfV?P6 t`z ?@u#`J Spbw@3 b&uLb S. 5 uZ8A U  a$ M g>U2qJ ?I/[&l$?:" "[&* ",,',"2!MC${Gzl#e@@#tL$t5'+C#5 LIC#Q:%8'@ I1R+#b*$62!BJ<'0r U# % l>YUdvjE4I@  K 7(`C#FCHA "R(!O^5Q3A^Z_l_W5Q|5A[@@_O_5QE2OL;2rA2I[c0iWDA^8|59 7^J< '%l"'fj{ooCK3l$<! 3Zr]bv 4:","2!0{6!aHD # =h0>T@dYY9 #|AUA?A??Af?P6 t` ?t#` ub@'Spb@3} b&uL .T) )'u8xA  a $  f>U2q? ?>/P&Va$?T/"P&,,'!"'!M8${Gza#@@#t$tI 5'+8#5 I8#/%-'@ H1Q #b$6'! B8YUdv!?1C.H**K ,(`8#[FDCA "R (kDON%Q31^J_\_W%Qq51[@_O_%QE12O;2rA%2Kc0iLDA^q59 7P]?< '%a"'fjko}oB@3a$,7!3Jr] Rv 4/"!"'! 0p6!aHDD # hj0>TdYY9 M#A{UA?A̹??A?P6 JtM`  ?)JMt#`  ub.@J1UJuL) W.3M 3p rbA3?0Ju)'$ AW kma$, " #  >JUo2qk ?j/|&[#?ȯ[""|&,"R';8q#$|&21"%'J+d#5 fd${G[z#@@e6Jp ])rn3%n5*:"=##">3@36FC)!BFd#[%6 " stB"#b!$oF)!-;"% i^E9 JBI3O '%i"'VlJ4>UdA!ETgQV,1" X(`d#V"QRY "1# b8|1_^!a3.mFoXcW3r"'1'tA`rua<4,$$QE|oeR3r!cb,b\rbQbQtb`]oYb!aELQZg#[sUbdasbgQ)2_;JrA"%p@[8!aCFHD  # =ih,>T!E=#tAU}A?A?ள?P6 tj` ct# ]uLA-@ >@ 4Ju >]  Fa  bA ; >U2{Goz?@"#6p0#2$?N2&* [*i!^b5 =5 24@&,#r :!#%!'@m! ["m!d b|1l>]$Udd11+$WB + "%U"["d b@i["a#>-# (`,#Fu6~A 'B(A!OOAA3N __A<5K@X_O|_AE2O;)2rA)2c}0iA^<59 L73/'2q`h:"#"fj(.o@oSjg:#lo!3 r`!@v4#"koojj_PH'-d) ) ?W|OFT0"$#W0KO? 0D%}lad0oD+ko7?G,0oU P<00=/L70Z1ڸ w3 ,FO05$DM0:N0=g0:AUFDfP h-RTUUh U@V??Id Rx I)))` byb >aeqYkzUJG /2/D/V/h/z&u| n%  1:{<B:72/\Indicates a classifion relship betweenmore general and!spec element.bϿ?,؂-؂ݿ?_3OP?  UG HD  # #hT,E=TJ U }AU@?ϿP6 ډu`u `bA@u`+u E:/*Pu` ?hu#xBJLAAJ)ia6)C% bJc"m(c!q$#>U2N贁N{?<M@"'`Generalization Arrow{jA 2r0n"#2]2?c!&G&%6@0_ 048?_ M4U0m!H_ 22^?p;1%%6Y"bJ񢢰#@#N?$d&'GBm#1H"BeG #FBoH`!5 (FB :CBC,CF1`UML Background Add-on` /CMD=1001y >#3"^aX#X%pU oQ!$A97Y"1Y"U V V1484?A$a@q,`?@I5`,c3e? @EBDLA- Rdbb .of~2r33#A3b?c"G ob#BMbuyi22K(@c!|#5 '`7Copyright 1999 Visio Corpor". All rs reserved.`p_D112.chm!#20peMFaE9 7Y")Uɴ8^A`T@  9 MAUAޭA@q?@I?P6 .Jp|  @z3VA9JuM`$b+ b 6cFuVibtB>kJWuLTA-Jb  Ja$' uM >OJU5 3"9!k" J#J#A%T*@a'BL'&K'%0% b&6$A%(A3"2#L6 L1ir&!^59 )*'2X&"M6lJM >EUd59 '(6$ #'%'%' >(`3@JR1T}BD?H~u-r..  =OFy09E#{0Be? \}0mB[ar0BD{+U~0B.?GL0BNPϪ0EO (T?4P0 lRצ0+!BDd'G b/W0SX .@Rdi0f#|wj0QFDx0DQw PA4FuDTeMy  ahm qTBB R^UI ףp=@Ioj@A? I?*RBTf)@?q^RNu`huae$5!5! aU U J! "#!H<$RG$!$7$!$7p!(!$7t!(!$7x!(!$7|!(,!:$5!:!(:!:!(?!:!(e$7!(M!:!(V!:!(_!:!($7(q!:!(z!:!($7!(!:!(!:(!:(9!$7!(!:(!:!(!:!(!:!(!:!(!:!(ˈ!:!(:!(ш!:$!:!(ۈ!:!(!:!(!6 P0!!!R9(q"!AA!!!b!11!;\q!>iq1%A%A1A%ABqe#Cq_AeeF|AEqAYDY$1$1A1D1A**BJ*QKGQLdQ_A_A9!cN9QOFQQQ`QRmacSz/aTLaU𔁆a|A|AaWacXaYȁaEۏ$1R!e PCR!t!@|5p!(Ep!h5`-q(\?@II?A` j ?%Av."!p!"K9!K[18RR!-3-%8 d/z#x!/U?$a..))6B^KҲK7LJ'nq11'9jM2XPpEf3EWiY 82k,] ~U+.T2]k(4WOupI0Է@-؂-4  "VCmWEzCredentials Collector9Z1EyQW( m锥#>E'2qw@\ Oѭ!E8,A#4NyQqU /d./?_8Sc/t^/"X[_ y/ ~ /?"?48`_S8,SުQQ?,>XbtOVҜONґO_/5_W`T_Eh]/o*_,Gb#%"ۃe1o=mJ5GYkzoU@y5h?@>链?@ ٠0-+&СPJ|skeg,JbVx'A@&B1:D%~A9a |ba h|w*>1eB!8E ,J9qxaeta 'a hvq  O u E+q D|s\E6Ӛ ?ta'avq|O+qߓOz xyxTU6vv$uh.ď/ĶqqrBnՑ h|  @, Q`*+Ӷ~A-'t`&{D2B74B8A-4BB2-11D5-BB37-0080C7F0E927} Eq?'בۀ&؀9)@ |(O'A'A+qB䶱",pt@RίzxִDZ?`e״Q*hHZlq%qytatiٯ s!y(řxq QI e/}rGYQAd1F  9#hr D2#rUur~/bE r"t"8/J/bJ5r/Z ,//@"1,K?r?wŵt,?^?%?aal܂q=oOo]iͩem{oPobotoooooooo(:L^pt5L"4FXjē?AS[:XLQPbo48ׁ 6u & {IT]tc ʱXϐ!2#D#VНSystem Entity;1Ҵ({ɔ޸#N.;'2q 2ʱ(U8<b4ɧ1ݹaa3E/Oa?(3 ? K/?ZPʱ gqߥگ ?osUtttVhzE/_/ѱ?ɲ J?Bu߄?$?o:W?oARof#LoGo-qNsuOM-q¿Կ^j_U@p= ף?OOt)_$sXZe+_beA!qpAgQs\bPWe\d8wɟu_o$3Saxv*e8@8q!C8}5q}D叔@Se@@I5j}ss\sPq*#?mu\q!qБjgD_zgs+xyBT `&VOe.2/4a4aSbPqPqI2Ȃ\\hcƠ @BNb!Ơt^3d`&{D2B74B92-4BB2-11D5-BB37-0080C7F0E927}BI5N?^ȃL]=m5儳qq!q!0Б"!jy('U<q-dA}t4ayAI.c &1x4a5wd"6΃-qэefxHۈ^M+soU#@ow2Fo5w|({\$//+/=/O/a/s////////??'?9?K?]?o?4y??Tq?????O!O3OEOWOiO{OOOOOOOO __/_A__T^_p_0________sS[O:XL!hs3hG'4|RACt1'VARAY7oh?z;nň5RA[)ʴTH7f`>o>ߕпtk"dPUڿ,֚AHVp@,ru`u`YSZ1VV8d@lPaP[[п@6@IV `?de*W@#?tET 2Tv=U?Ap= ף8'}W'}T)jp''rg@z3Qboo|R!pngoo~tSIrVp %=/.V@SvRRRR!RE$p4!e}y'Ͱ~Dgm VA]B?bOq0 m10pXJ}y/ʴ AQ1RARA,^7ɱx.=OAD? 9Q(aSҿPU)"u0{` ?u@`69>ȿ?؉؉I VRUS"@ؓ%9]qD1!55X\着>î3a5#1sfŮ}5 VP b2DŘ'goA1?aA1VAI;Tꡍqq22]1]1B1Z"AARBAA|2x5SS2ꢴ8usTi\4`&{D2B74B9A-4BB2-11D5-BB37-0080C7F0E927}%A/P-DT!?#RE~ @+#GS[ 51A=01D㽁I|1s&VAۯV[/UAoT6/A=uA24O3q@OO751M 8)'ϕU rץUA]x n?A b@AJ atPWb_4Ru3 `u`}@U_R(!᠍S1'" 6!_4PBA3h?@ ` `oӁ$lla5 0{(\@@y_5heg 1 /q c}A+u5!48 Ir,Sy3aE?ocfisS#&6s#&uy8#S2N?贁N{!T2rD!ep/&3#?5:DuA:GƋ9U4I15)`7DS!]:E)"1W@L ?$pᤁ116+tﲤPϒх1|B}A1? ?2?UANaPcQOAȿL?OL6RA{GMA_Ly@IX^:<~OSnqYUXЗj֕1.oxHo֕oovӥcOUA 链?zdUenzJOށ5rfvcfHV9ѽDBf8Ui.Z,e4=8PF=I#XS1@sI%Vz-ENt&Vz5Nt'VzٕNtQYwNt)VzNt+Vz?Nt*VvSS\P@cZ ?_rqq qQq gdPVS䯏XyJ(6*-BB2lalaْ/ 11?UbHEG 4-EGYTcT5Z`&{D2B74BDD-4BB2-11D5-BB37-0080C7F0E927};?5.śuddhQu0q‘ (upt__2X!?Aa &o?`cE"1e*<-ESew5q7tѫ1STɀ&sQa9iQ,dd^d@@bo pEϦp-Ece56Zoºu߼ؑu0|߼ro=oYqc?GgaE1OJ`5E_<忠<dP-DT'! g`Hq.h޿B5B8WE_U6p'_AZHrq93?Qcu);M_q@qQ//#/5/G/Y/k/}//////// ??1?C?U?g?y??4q??a???OO+O=OS(S?[:XLkH6c}H>uXBdqq2l~c @aq {s%3Tr`&{D2B74BE6-4BB2-11D5-BB37-0080C7F0E?927}a {?wXC{xb(:tqaD2y1 nQQcdQ4%q:b4 OP!A[(d* 4һ+O *O(@ʁ5ڏ"gʁCEMcv_ɂօO%S?%MMUq%ӛ߯񯀕J5M4.xuӟhzɂuЯɂie0σpZ?l?(4Q$ި6@05ȽCE ߙ)@;M߬QACAC "9ozAG5 AfĿI ?yߠ<@,lP-DT! m5"@H&*8r5@-랅/U 0/mU/kSSA߻A,>Pbt(:L^|4Q{!"4FXj| 0NcsOa|pN3S?[:XL(3"(_oURC^R]Ou_q_Hfƃؒ___8oJo\ono;ooooooL`Pw/7pwbܚ7$#13i#<M j}z???_MKљJJϓOЕ\PrincipalБYWyEi#А'2Eq*>{@}BcQ\PKҲK7s'FA4SGڱ񚟬ȟv%YE'hSUۖz,j ϯ%fHBdOqR)UV%V%V%Ϗ󆉿 DVhzϰϫx ?(c߼G`P5~'mFߠcW1Ff^RuπpJEFOD(\?A'}'UUV%UV%Uۗ&@ @@au`u`RA@mmQB4R L'?@* -'`P I(:}?.>链C@)&pb~'@z@"x"~//tpF!&//.cQr28DcR1. 6  Fh0xDm2N贁N{1SveX_j_uQp!6riCwD7J"wD8JwD9F4C1LHåO C俠m~AAAA8A8@bf~A A45AvB wAApLH4OFOXO/l9\˫?ABwϭ^0eQU( bAU"nlU :TQ`?colUx#emfnhEFp'9_EPyW&u`PruZuD5KN`uqiox\~Q T^c}Qp]5EWh}ҁx= ף0ꡏŏgxףp= Ӏgc)1>Q u8Tљ11@QQQQ1ɔ2֔FUpF$ l5wARQ0r3TդaP`&{D2B74C0A-4BB2-11D5-BB37-0080C7F0E927}NP-?DT!?cNFpΤsA@jNgL"˧rV,uVIu;,G LP)2wATY[Ex4^'0 %[B~Aql p_9qT,K\{OUAU@T. 'IK (u)5@W UstAAϘS#e9]nIewߋJ*߲@ A4FbQcoyaindAߞ%7n[BA0B'9xi` M R1"/FXjGP:t<1ơo3W1uơ_4WYUUuqAơ'))԰K~?A'}'}?AAT FEo-up`uw@`m@BBuc`u/QEq<13<11~CArvFFBB8(բAɿAKARLGp)P( 0(\?AOO?@r@ t?A>链5p)p,7OWw/@z3UA"IRO_a_CBp!/QV__^ޱtC8RFTB8\RFx&(y*́2!Z/C3fB2uB2!èqva<`3T2N_贁N{~$#2e5Ĥ(77s}q(!!;A4Zs)pv%ssL3vE o?Y1oqqqq5oqqq"!qp%7I($ 9ʾAcQЏ$5Ʌ"Ҍ?%Ʌ< !A۞,ݸ&?TɅӚ\!ơ1p"!) ơ!/U9 uu `nMu0W(2NK?ay2#EI3=гrPدtUhɤ e=aq41pA5+\)CL7A`({1ea39|r5F{/AϓU"~Ҭk%F@liϩϞ^ȼ_sNZg4!gߡ#/uBbTS1aa2Ɂ Ɂ"ёё1ԥ2Լbɑɑ2a" 䀯!`baaQ"!24S2(rcTД`&{D2B74C11-4BB2-11D5-BB37-0080C7F0E?927}D᥅P-DT! @Dea?XAD5]%bA@%ID5nS3B(aaLҲK7' i$11pegq??A??? ?OO$OR_/_nOOO/?O_OO_#_ARq>_P_m_y___oo_V]nhfo'o9oO*ko}ojoooz:GMl|PɑʃwɑGu28k22ѠOqɑyżxVt?A>>?A(}'}dEUmdE}Lquܰ`u `]9@Lqw,ѱOqۓOqвӖݖx%0A3?@Wϊ9QKyyНCy(;Lpd\d)LrpCSҬNx@z3ɑpJ) ѓ.JܖM&܂qP9`Ͷ9Ғ9.2ްtJ2NN{fBra蓁0c?iX{s?Y1et(܇<գW |aY@H PCDVUCla iLruOp`<u?CoXaq!dsԅOq\Vޟ:&q+ Q>u) 21~4%RKQ,< ףp= [g*Pa.!:TDZDZr``10$D$N1Q$2^$ 8$Z$2$$\a$A Šsqn$9CT*tF"`&{D2B74C18-4BB2-11D5-BB37-0080C7F0E?927}!!& v!4?F5$V4 A@"!Zx:%22;2#"S7D7"8^?n5>O+q2LK7'Pa"$HUses4 ias?,<&'0 eBu,q,O]1H XOZj$q(Kbd6_!3RG!>rV%tU? `BkD__"ao撴$'9K1C*Zir@9Uxv!,PbtDѤoooooo-z@/?P8Lfx&)!x1..* 5G~dp }ʏB^0jWiğ$!"4F+=| 8@]nQƯد e%I[mG 3!ıN1Ŀн+O+U @ @@W4ͫ?oA` ? s#&1!"!n!!"d3atȜCCe8n!%p1 أCU)q.FD<?23I|5ć8<{,52n!V$c$9b:a}$YBN5fD.nLpm4ߵD Ҫ %T D3"%U?*<A?S?@e?!䵃???qndA$VĶAI@$!Qx%㙼A{BV.4[DjN !ONjEV{OO\CNO_\CjE$&I3IUUv1؋@z`!-?QcuϏ);M_qŔ<ğ֟6#5GYk}ůׯ 1CUgyCſѿ+=ɴJci3ժY$kȮ?snl~ϐ5>߄'9U#q!l $!ߣߦٸ//@hli*P뤢HF{FJ JG҄FӞyJўy*O$/KTl!S/_/W/?AIP'@-O-'T=A1ZM?_;7a4r7S\7a7e?dC1???c OoXUc?MoaOhik5coJZ!KAuthentication} \qorityB@ a)3U49Bh#^*0'2qp8@0aBp(5LҲK7Ǘ'dL!/a ؞ __n//P[X/P@bttɡ&8J\nȏڏ"4Fd3cuᒟŸԟ9o?ci3ժ&8snlK]o@ЯU7PA9 ^dprQc˿5'޿_bJDuųLJí\MEn€uѭM5(Ut% t*X!i(r԰A rR6BT߅htsϋT5f[Uv'3EWi{`\X7) Jw x~19^c ,|7¿_?AI`0ԯ@-؂-q4 , A4ij\AEe1#]}0SOo8"C /N//6HK]0O*OE1Attribute AuthorityU"Tuw 5H#>(@'/2qP &@jBHyr=LҲK7'91 ~ //;|@Xz(8nUll ??6HZlO>/EOK`hOh/z{OE/W/Pi/{//&cGD`V4@=om5bt߆LzooU@ ףp=w@@`2 @o6 {uQ.Ta V宕'f{ru sJ1ext18@܅9M3Aqbx,@WT{{uXuYuZu[\Au^5]&c!{ۚ?ʡ![>gTdF/z+bxyTbT!{rmV=urr/O"q"qAri2,exx @uTτ!t`&{D2B74C3F-4BB2-11D5-BB37-0080C7F0E927}15?ˀĮȎ¾Đu6!21[>RT>\p :tVrbxRA?Ambzp?{uLXlewu@@uq4Ga% "q/yGaGia@;s11!7bx"qGAR]{{uw0u?u= `u"ޘd Tb=CAuT'5= 5m O //ʗʘ W/q}a/i///#ga\Aqow,mA Uce[m+LC PbtAUp#Ṍ S>7 K}@?P2*YA5385ܕ8wU1CUQ|;u֥cuB$i0#8@>!jч¯ԯ [%f(*&*(n[ųſ׿ 1W8~Ϸ/3#~),H>PX]S>Ѡ߬ 0B?AI/@-؂- AS᧕43W.6+ ! Authorization Attributes@Vـ锏#('2q0BELҲK7Ǘ'^n A SePHsAuAuSew1TϾs+ @+_ Hg[D/ 3G0_cuQ?=J?U@ ףp= @@ @OnU!Oc րD ^FRPvA|W eD8zgae OhAHw `[4sUtaztbztcz5tdzUtqwEtgzjtfvyc3`m}`aM?Eoaq1Nkqp_j)cHy2TQQRQH&E.2/RAABДj rꔬHl{ @%U%1~TdD`&{D2B74C47-4BB2-11D5-BB37-0080C7F0E?927}j?s%7n5t2ua kqUV1.2U;4FCPqmy -?Qcu$1/"/a?/K/]/o/////////?#?5?G?Y?k?}???? ?4'??QOO/OAOSOeOwO/ci3ժHpcHsnlOOŻ__+_=_O_a_s__AUooSkl\ R__ il~|JogM?>P{1x7/Xxq@p4u2wb7h7y4reh`bNUp0BT9P{utbtEן#!it/"7hq pZ"ѵcro ZT$hf'%Ƒ'mZď֏ 0~ߠV}.̨2ɟ"}(+=$O(fb\Rc oo/oAo_?AI.@-؂-@R=ř 4g|è2ϯVءϵ5ܵSecurity Policies@UtՀ#''2qqBqpMLҲK7Ǘ'Qgmq @ RdߺhׯoPGC@E@ERdv0ﵿǿٿ뿎Sr#/ϗ_+C ߣGԞѿQT5! U@gE#@@@@O*4GmNmV4*F3+F>F+FRF++EfFVF{u'!l8r7 Y5gq@v!Q S.Tj6Z%.Tk6Zu.Ta9WD.Tm6Z%.Tn6ZD.Tp6Zi.To6Vq3\r3$o?ۚ:a?=?ѷ!RQoQaQQaQ C3/~:!3yTє!! !r.dA/d"tiB(tqc @8q%D{Xs%Ƽ`L4Tr`&{D2B74C4F-4BB2-11D5-BB37-0080C7F0E927}8qiD{?TwCB{Sx3rcutaȡDm1HQ`UQTUaoQ&%3N; Qm??Oa1%54?C= %3EW偲uqfQ _iQ13Amw Md]_'fO֢eO0P%\5m¯N@9Nq`ɯ[G[HٿP%\N\˫4Ϗi\_?,Œ_ew\5χuYO^:Bԥ*O뵟äe}߅ԥ>OQ%V d2'9Co' AI 0?8y_UNg[_lyXnsQzͅpz1vHeT=0wEHPn__QL___eCb_oBQ2oHf5ϕ$5Ϙ5{laBUoooo,>*^d؋w<@06'9K]o<. O+O=OOO!?AI<@-؂-N`54Gl򟾣 @dÙ߻C 5#Policy Decision PointG&ecTʎ#5BP'_2q(༒@PQB'aPULҲK7'1p{Q . `rȏ X_U#ު%%%%`r,>ß՟aMZ< )5* q QGq14a %Qa_ooU@V4K@@OO?@brO '{j /m.˛<&+=%P&oh x&bՖde%e8i kuQB@re 3 4s :D14t :4u :D*4v :Q4w :D4y :w4x 6\ O?$A?O1<1Y1v11111g䣁31T"QQ 6!6!*/DQұBDwe"TQCd @a"Q1.[c8BSQ#T^>R`&{D2B74C57-4BB2-11D5-BB37-0080C7F0E927}"Qw.[?8>W#,[=XR@M__TA*$2d1?d1bc1Yd18QEVM`/Ҫ(A(`A #b eao|1/Aa_qw1di/w"1(/AW/a t7 Fqs1FsW8̎@8*̋'pQRmu8FBcaywd _,Œda8P+b(WVv(D1%'9"k%aS}"@19E/Uy0/U7/I> S_Ze5OZmeg_F!i7L4_G 0aJa?(?6E?Q?c?5w#2/?!?D(fbuڀcƹxe<6A%BOTOfOxOOOOO.o`OW _FW|8_lY_z _~___$_xHra/o;oo_?AIoԾg@-؂-gmq);{ 4x'<t@lq_?_b~1=Dūlu?!Policy Enforcement? Pointd5呁4iy# '2Eq y1BLh10]LҲK7K'Hy_y1 Ў Jo(go/7o|%,# ,#oovEWi{O*߮w߯Ӭcu XGXz+OL1%aӡ$͔1.q???`ڃU@ ףp=J@@OO,Q,bbrҏ+ߏh 6OƏ҂ BBD)E"e.8 I.aUуv;1!{{Չ| "} B~ 8" ӥ U" :\ {g6?![>gh%aZvTӡӡ ҁQB.B$8A/O$Ӣ66Ui$5$;1#D @+A!՟+)C#ӥ "5`&{D2B74C5F-4BB2-11D5-BB37-0080C7F0E927}!+?'+Į("/$!864`4![4P>ӥʴ^ҼpRVAvR!!?Au??BLE]CZ@eOwLOOO@ABOOOՁ[% D6I[[aS.7%a1v6瘼Ԥ@_{DTշ_;¸_^U_#oB=o oaoR8U\ؘo^ӥooRUUTCcH!]klZlS._]O5doOQq5I6R@ݏAUў$ϴ@A DU wo?Ce _?@W4ͫ?A`U ސٙYBS@Ms>HUf_aeka86\ki4sαxZA̳ԆeԈX]炥ߡ]6u]5g\6B?c?αZAþ$?6> 5V?r?#e>`??#edh/?79YOBUO1X 5o&3O;O# 5`)OO#6uE@ t@OOKGgER_CHkeEW<-_?_3iC_1?__"No&o#T 5Vaoio3Ͳ빂Qmb٤lϘ5\<@hwP-DT! q& :u)o.VyiL{%UX?vݯdxooo'9K]o#5GYk}ᚏұɏՏ /ASewџ+@=Om0?*Pۤ9Fpj~<אa9ӄeVNw~VEH/1UsU} 3ai1{Q{["!?K]q}|ߔѮ>f"%0(0Y[f%9_:!;Authentication? Asser/>@OYb{\u`7?uЗrb9 yc,>Pb\E`_𕍢PQ- Z!6`sӉe_8FWOHsU2=r5#adnl{ GRpX-Q}k};}G*bDž~تu{rS az{{0vܕ@#e8ױƦ/@ASew߉ߛU!! hA7!//1`E`UTPbu=zD @xv#M= x!  !e\O#0UFXjOxfP 5x%9!i E/8Xq !   T:f=2$;5 H=5 "4F2@l'%DLH<8JK />N//A/S/$e/xd,h!//yg!3EW)?_?AIPD7@-؂-V7dh=1?; q47 qu?CaO$O/HOlOohcO~OhK{5oZkar(Attribute AssertionB.t  9$9>Qe#=n0'/2q.@0B/xvLҲK7_'!/ V^ h_z_/@/X?]LV5UվV5ծh?z??64oFo???OoiOo0o;0OJwYOOPO_"_G T!! ŬU U@ ףp=J_@@ޱD8NQIV8L2p5.[ơBCVnp~UQewQ8 qY}c֑@!kpԘ&"ԙ&UԚ&څ )׬Ԝ&֕Ԟ&eԸӉ»\"b6*?U"%рB_|Ѹg[!ۯ9 y[T*QpvҕR<KwSpӔ2A?Ayp 7#5GUewq|d܁! ܁܉ԓaQ*Qѫ!_ %GA]"5g-NpL.d/v.7 L%3?\//NU.//OㅥL%-?v.dY=s?{?[V2?_֕50g??7B3OO#_e+!O3O%U/ĤOw-?OOPL%F*_2_ONm_u_%7n!?֑3累5% _+x81N^x5A7ſ׿?A8u0 K`04 #/AA4~܁AEzF#rEhO87C!/ND/KHKrEO*dE)+Authorization DecisHQAsserGQj"1( E$H#> @'2qP @BRч~LҲK7'RN . //Pm=8 ??K]o$OS/ZO[`}Oh/-*OZ/l/~///HcG14UR+9&o2m45w߉nzoU@Gz@@쓟>链2 )|k"uQ$.za6.ϖЖ!H5_-Fe<޺9cudoIBzbϟ5kz㟺/45 qբk/}/s//!_ /?b\̉cq2owNmc/we}mMeB<|F`$$GP-DT! |Ax& Z;7vZgJrio;U9_H#Hbϡa?s????????OO,O>OPObOtOOOOOOOO__4T3_E_b_n_________o"o4oFoXojo|ooooooot 4@@Rdv Fci3ժxxsnlFv*Hmח}baP*W` :\6'DcWUZ`W#@Zř=U SewsÚπJϗFiʼREZ!jѩد' -OGטfJ15HLJ吼]1}տ /AS? y'28QUEKDV8rAphAvis2tvr2ₘv8є6=C5D1O.vcrbjrbɱUwDrHDH$42N贁NM{D2FQSae8"OXΡ 6dOU]e #emU]e3Lku߯ndo1aPd88^d670\p2,>O4/$Vn(?AcQ?ſU kǼFU^? CC?AVImUD'yyQȌaQwsmQFQ_B}@Y_BBuFP`c:9umPDրBYB6@t8=ANiYr0ߕTqD??\$&1]YqAf~EQ_KUWv ""sUW\qŠKFUP8qNhga_n$2T1R FRAAmR122RBQQa:EaTZpCA#{HbCXgT4D`&{D2B74C89-4BB2-11D5-BB37-0080C7F0E?927}5W\FU-DT!EwA@-BEL<_^l#HcN1iZ4b<aRo"// ??900=>niGOOMC4a5E4dU?$?CXA?S8SdmUp?S?ȟ?a?V?>59l0bNi!WCeFQwi+iu ǵ дwI@?(|[rqkcrmECšOOU Ox,OKlaWOcOuOOl_~_O$`L@]n Of__+_qB(*U_g_To__ _^__Hoo#o5o-ko}aKTOiooo=_O_4FXjR ɏۏ$@8o\noo@'G!7#EEb@!4|Z!ɜG%ə Զ?P١ @AO@ пA'}'}>Zӿ!u&@!u`u ` A!ù C.FD@( ʰ?y5?~Q𝊨YH7L@AGz?)"p>Q @z3paA.AS!82u"CM&.Đ#!e%38|C|†|uy'!$($2N贁N{"# fIe$(#x#/QI"깕ꂕ"xLźj~ )F8dDq QR)PQFp@ R)/yd*{3tA()PRII0%7A[t I¢%o)A3I?ۺ`-1I95lxV4Q?c?t$l.-?mcPߙ4>E???")gxԗuOC)T III0D1D%2@D)Se񂟎(N`2DV̏zïկF q1=OaFXlٿ`r21hzό 7GKṮc[uQώWqeQ 4q?A쿆6U.@u@`uNP`p!@[[Wq6"G@t ?AFOyڼ ԏ4K~ @Al@@ Ce@A'?)ppNQlNP'@z3rfl~bpԞ aWr /A&HAGuySA`Xs[whst2N7N{reTt Q(נÀU=Ou4q*`W#*ap'6e$m*e$m&"#Lӓ/ [l!a!!A8 Ql!&R'Qar q!3r4q!pX"/4/F/A~̵?Av߿º?CD25&άA5N<65 5XeGQObC5-\A!Al KDgE#@A_@пAOO䗵\%Ԫ T&7P@up`uft`# aq#\b&&"";m@2Tm 6i!<17 =-dijI \?A ףp=I >@)p@7;t@z3!21??"pM16??>A#}0B&Uq%&nOgB酟q##F""""CA@*2N贁N{ re(>+Cm%1P}S P;!W\TZ%TVHSL>% on!S俴@Q;!QQq%8>4?Q;!EF0QQp(H_Z_l_Aq?!ڸȿA˜-?oitb>e J{Ae6~|\e}8>aɿAM?wY|%ebhx~Yx8,b8 \@UVfh$W*ju\` Yo?lu%`^-Q5^%jL Ҁ%Qȼx4N@eǏ,qT@%!AוDo0\cZțK!dsA~.מ`ҀБ>ܕ6j13э@5vȿ~Б\K XW ej|k @PҀg$:A3P8HRa"T @BABaa\0~%1b2e R " Q QFٴBAct\NCTq`&{D2B74CB4-4BB2-11D5-BB37-0080C7F0E927}ueܱ`P-DT!?snπ U.A@, % )˰䲍a~~Ǡ߀ YDBAALҲK7':ײCiAAiG0T'0Q Q,o#5X-k}dd 7!6F;M_qQ;#J\ !w 3p7u]n @'9KZ*utJa<%1CU;Myut`/]o0/TfxQ///:/uX&86|////?? ??/? GаW{@S@Akb)BpM܄Pw@z3a r#bp%CfcwPcu~6crAft[brref8&NO 0CRAASOkZcSRebR7bRȕA8c[D2N贁N{ңFC`Be]D(@7CW31H@TiI@2fCq55*2烘3L38eѥ1_A1NqP583U1BANq шp HxQcQ?Aq, ~ՋAܧ5~}?A^{xx5 b'bA2ÔBAIϵ=c~<1OUIAgXGBu0`6u0ƏHPT ?#B˒u;5˒_ K3X3ȋ` Uu~X|q1Va4SԽiӸ\?Zd;ߧ*`A!x>nE۔`R`&ȑ?25(^I W\ldf'XnngT!A4)#AXE2T"`KL`B221,2~c~~R0B!qA@"#QRMAMARYH4T4`&{D2B74CBB-4BB2-11D5-BB37-0080C7F0E?927},VP-DT!~dpd0A@"U E atQUt?t =BH#0LҲK7'!/inD`AtQp4g\EӸ/P/Qm/y///??/'']nÀ8N?/?A?>*k?}?jO???>u?T,2QO'O9OKO1_C_O/gEOOOS?e?&_oJ_\_n__R______oo0oBibOzooo__oo - GM|J[%~x'Sa(~u4wqcu~y6@AOo@܄пAxwґ䵿܄ϕԿ(yǖ@yuY`u` Wha4q,16YDʈ$@s AMI7&Uh(ք98C>@A ףp=*l?)ypq@z3 p7XDWidNYU&Dp97\IaN&Y +{ 97Q $2N贁N{F,"܆|beS(w9sݘqÀ_"Àuژu"ֻÎsLs,'"?\Fu8sю"b?f\p0nAlLwAFA,4;fRͅ_>wǿAGru_ANUu_x?$-x,Ձ}qUɉق ջyup` ?ups#tҔ* u/ k [ ;{:qq&tJ=\~GOhQjaMCͅO@y5gy^vrYޯu8;4~,;Zg{at/cN>bT b__r0$r1$;2 47}‚~24}}aL4gGCC2s4!çTt"`&{D2B74CC2-4BB2-11D5-BB37-0080C7F0E927}1;O1 PP,DT!015-=}\4A@21@~%J5:BGK4B03W27<7GFa7KX%1~2IIBvLҲK7?'aJ2oidajt;Rbđ'0WeRMqI}߄@dh q䓧݆ 2_V6]x:oҏ C"ѻ__~__oooPod @]n~h%ooo:X*oo0 BT~?i{bavoHZlooǏُ\*6QGSe w\nd.˖%vH@5G~1G 0a4ʬqU'E!014.RQ˵AL 1\&i6@A-؂-@A@ t@?AK43OFLkҿu`uJP`@@mwu `ud0 qqLG]e:m?A%HOңҘ#祹 0 Vb/@A>@A ףp=@A8t? )p!d100wd0@z3b~xp 4QӂmR"0mRL"E!&W´]U3ƿ!Ҫ!8qWδHT2N贁N{RHeд 1(. 531JQB@vďܹ@ȥ @I !ʥDZ L.37俤q !!8. 1Ť 5R6Q"JQJQp8Zl~1!cQ?A/Y$A,O'),L`?A/`޿/),΍_Tԑ(.)((5,R% 0UFɜ FuL`6NF~2u6Oc5HF%βȿ|;?;QQ01c>???1>r"qz;ur {r sbwFw*TwE*urIVB Ȗ1LҲK7?'*b3i1ϵB8$'0ԕϲʡƯq>% [A%$狶ZƋɿIՍٟ+=O aZl ]nÀľ9K] و*ϯd pN7CUgM(_ϝA$$ oB/fxϊϜϺՁ L@%jĿ!߲'(/AGGptifwqC[1Dqa4{jq95qA$6iS@A>>&?A'}_'}'ҿDn@@uu``up`%As[1PBHRu`@ X%?A\"qذDpA$ ףp=J?@?b/\s?)pg!'p@z3'"!/3/pAs'`/s/.dj "uQ&`/USxu.se}ajB6u Gx(19S0mx(2N贁N{FH'eoxq(UeM C{""JD"J"D"F3LHO3C!A>A[AxA8xq!Ab>AՁ[AxAp0h???a j6?An&G;_TnR{UZ=5X^\{UpX2?AKsLN߿o\{UP0hInXqq,{exqqU'1?uu` cݷ?bu`unBǿo ;Np'qWUeDVqasxn5~Bp!aBfY_h\m/RL!SN }0p_kPaуx˄ڎ &xA/{gрŸjT2;2<1{Q{Q0 1WR2'n2SUbn1O$Naah21c__7$3TQ`&{D2B74CD0-4BB2-11D5-BB37-0080C7F0E927}WUkP-DT!Sn5esA @AVcPsf c0~ 7P8ӹB1LҲK7c'fiWYn~7h4'0snWQi!AeVP- aO4`UoS**DVhRV _A>A$ 6-lU ]ÚA.JV*:@L^p[AeLddv߿ 7A4FRcoxP@JeA& /dQ/c/s.$& /35KR7T1=/O/5?s.lijb @@AA?@98@@rGE?jQDc!)'#uyACQ1BF)/f27L#f5/7F!VSAML 1.0G`}7BQ?uS/''5L47nIL[ZAy-%x)z ףp=@A_{@u4?AHU٣ecBf`@1mu`u`Wc,BQSBQf1cZA+zffbbc8y'g>`?l(g)PH])c@gb @)2pMvLSww@z3AbMrSeBpVEw~CeBfa1%&O/s R!yūOcStbRybRC1Z$62N贁N{u63f2e$y(7W'#7)A1!M8f\0GT>)\0TELT1%LT '#@1zeΟu_BQSp.(83tKS21pQ`R"fp!X -M8/z9\˫?Ans7?f5( ?AجE :‡?8ج1%xB{ب1yta!4P91!L?Ub9u1j'{B0OxqIP.( Pe#5'#@qȄ@1!2/'0\m0z[ꁈKܣf1xϊͪ?Q@f51e ,=͍AEHC-v߈ߚ<#a @gTF14FDT1%bTd`mnf2B0$1"1䉢2䠂p˂t02ˁˁR1@RER!!vHVT $ܡ`&{D2B74CD8-4BB2-11D5-BB37-0080C7F0E927}#sP-DT!?ܣ#˅CA@?#U<5!ƑU+ԑ+ JA5T _Oi$f1Q4%ӄK'0e"SBQ_Yˁ/@//??Ow/ :g&f//*. ?#?G?Y?k?}=p[mQ@//6&]nÀ(.:/L/^/`*//?///. ??OA8?D?V?h?NO`O?*D/s_?? Op//CO0_gOyOOOBOOOO___oM_:lU?Kf___O(O_ooo0oBo_GjlxoDuqEeqqFqyaei88@A!"_@tпA|S0%D}q膀v@quv`u`*hqUaMWzexzF``\ tN _s, LJΒ ԟ xgE#݀g@@ '@@> @)rpa[;@z3,U[mu0`kuf8e zpA-o ݢzhZT@*AzvՄX#3EyTq+arΒpB&b`VȨqent)2NN{vsrb(gVcD͵axpn|yp؄e|وʵe|ڄ9ëcLhcMD.ce| 9K]x^Q!ǿA~8[?:uZ%|$`js_QNo`o!EWi{Aŏяڟ+$I)mƟů GGv0$HECVUs"@ȱ#E񟥽14AZI1ک ףp=z@AOoO?RTE"tuE@`u@`.R@tRȱ/Zʡ'1LT?ŸU@"_ڿAbܬ#v0|Ѵ*@Až@A )tp0w @z3bpz2S?RdA%rB0&?ՠ42E 3DX!IӍ!Tҍ&҆v8G2L8T2N贁N{׶wȲeNA(@4lj% AZ݈ ʥ ߈L'{6" :WA!8AuAaAWp(i!yфA8\˫?aMȵZdK( ?ʥZQ`A4A:mZ|(.sy1A!EE6UCĹױyؼtuʠ`5"u%?+/ /!*1b#Pm/(\%?x|Eȱ%9KQ8?$1ȵ5}(??<?8lʥ5=0O4,O= UO$gvĨO4IѲT ȲZZʢ0>T1KT2XTM2xZ!Z!yTTbB>d>h2T#QNT@R`&{D2B74CE6-4BB2-11D5-BB37-0080C7F0E927}QQ PP,DT! QM.o@exPd.#A@RQy rjUbkbSRMg6>gBfü>gh5fBmRo tBᯠLK7'Ri_ȱe6M]('0dMHDV ɅٯzЀccÏ#5G~ƿؿ y7CUgL^Lq Yk@-dv@ȟ Kz0ՏIߏ'տ0 BWewĿϻ@^)-@` (@DVh˯X1@ϑϡG!Th3%Z!B@"eZ!n}Q4{q[pQ&a^Z!ٻ88@Axw@@ |j?A?ݙCCuh0`uԠ`0@u#P`uPb!@!a"%X@j$W?AX` pj fE#߼@AҀ?@@p=j@A@)CpAP@z3Hpn##5`qr o}ro%_&&eS+Q\`&%\\EhUw# ght2NN{CF e&a({XhU@=bԡ#)**b$&#XLh{l?D!1+1H1Qb8{&aD!XY1ƒ+1ӢԡH1apeX///~8Q cQA#w?ROD8>BKL?A]LGvLKF"χ?Ac@MvLbNZ?{xxH"UvHBcQY3TfW5V&a>!i!a}UtCu`fMRubYj芼U$[?[>#}g=Ixbӏ㏆M;|X"#Ei">!>!H,Yi! i!Fԡ mБ9jTQzA`&{D2B74CED-4BB2-11D5-BB37-0080C7F0E?927}}'EI͐P-DT!?zC}>%ۥLp}i%ۤSA@}H4YA.{QاۤA[!ڱxMBV~LҲK71'wDi.4~'IN'xXq$['0`'A!ԅ1i!?NenPf߶TE]D_`߄ 0/11)H`/ 0BT?c]ntضՇߙ߽߫Q4*FRiNYRYk_UY\&-3+1-PJ0nEDl~H10"4'9 \#Tq ?DVhzG[ s!#@G#140L)5N'A~U^T ףp=@A}'}g@?AP2bvtO4!u`uQ`@6y2uА`u^5 s!#s!3ZN 6622So?A  A_L%G( 16*;0X @43@A ` '`)"pqV G^'@z31BOOFz2p'GOON 3g$R62T2g$R6&&_Y"Wؑ33V22 22 !Qk9P2N贁N{"?#eWuq3'/-)3(QPx$cPjKF?#j)df\c/L05!m?俦/s!@aaaa)80W%a "!a/00aPQap\onoo3(WҪS ?A}9b Sr\K+NVMW?AX<Ή+ bׅ+",'T!)" W?@UABCDUEFGHUIJKLUMNOPUQRSTUUVWXY,Ul4,< ףp=@j@ F04&C-@0*7 AU2@$@0'7ORH<( U2El@0s'7 RUlL0R0#&@?0T'wRD,0;U$ 4(U1(5 O"D&U=Q Jf )h"/Ty*+Uv'Ʌ&Q- -H*9(TYgEQ/,UML NormalVisioExtendedData1UMLPresOption1UMLSuppressO?ptionUMLVersionend1_nameend1_mpend2_nameend2_mpWhite lineClassUMLTemplateDX1DY1DX3DY3UMLAutoLockTextEditUMLPresOption2OperationsGeneralization ArrowNavigabilityAttributesNameParametersGeneralizationDiscriminatorUMLShapeTypeUMLObjectGUIDUMLErrorBeginAngleEndAngleDynamic Conn?ectorGuidePage-1Class.10Class.19Class.35ConnectorBlack fillClass.44Dynamic Connector.53Dynamic Connector.58Dynamic Connector.63Class.68Class.77Class.86Class.95Class.104Class.113Class.122Class.131Class.141Class.150Class.159Dynamic Connector.168Dynamic Connector.173Dynamic Connector.178Dynamic Connector.183Dynamic Connector.188Dynamic Connector.193Dynamic Connector.198Dynamic Connector.203Dynamic Connector.209Dynamic Connector.214Dynamic Connector.219Dynamic Connector.224Dynamic Connector.229_l H3\ 0(E| *GX 0ZU). $qU 0 00" 9*4 HTfL ` wd {    0 \ |    S0+ < U40L0UI*d0 0*0{:0+@ 0:R00xt #00-:010 0<0~7\%0IJdVJ4(0LO@q00l*0J/00܅@J\20ˉJL0JD]0K@,:^J@@o_0,ZijZO@HZj>@Zk0dZdO@rZvt@@ Uԟ0Z f0Z|O@ZU?@ABCAtFUIJJKMUNOPQRSUVWXYZR[]^U_`abcefghijk_U0  2DbPw+=O5MNOPQRSTVWXY?@Abb 0/T. +/1"E/`i/{/)H/!UB a$ !3$!%%/#2!!*!9//1= 9FGHIJKL:;>*8<????<1OO%O7O@OdOvOOT!&3U-cd()A? __/_U8"D+'#OD)!-!*!!<____j1z1r1r!n1Dk1~1v1vjQz4~_P_oqoo2U6O\RA!v]oLo%oCdE<_qu4yjqU 6<=Ul4, ףp=@j@ 05UC-3"7AUl4, @0s5 AJ- 3}7A_*<N@40(5 KRVg|0q6uH<( H<( _*<NE05 RVgD}06r [ { * g"40FX(dҳ@(>ު< z 蔧00:TR$0T |_z0W&$!B𔠷0E>~r hO!o,O0Q$U0R' 0'|N.0R) 1/0(=1`20h.zV02,F?O05) D06="R+=5YG }<60bG FC30lG a=       !",$%&'()*+-./0123456789:Oh+'0EHPdp| dorchardG,E EMF$Ed@VISIODrawingLD ??d(@(@ʦPagesMastersPage-1Generalization ArrowDynamic ConnectorClassGeneralization8_VPID_PREVIEWS_VPID_ALTERNATENAMESZA`_PID_LINKBASEI_ A Oh+'0  K-IH#ځv&yn8>@}S*YVO۠Uzbݗ9^v71쮐C|^R@`䞺yM'd.tO^X+Uގ튽g%$V^ z5/f/H)vsBBfBw ҠW¼WR!&u5Rc &_ I_ ] `}%E-h{Ռ$_A!U`vmRd1 9Dz ޯyDM񢇝r#5;g%PrrH6|=5?פG螐C,tFЯ7b=;/'i{~ B1tuB9Z|{ 99$[!ضG!mØ H^Z))>h_@; ;Rv H运Ca/ش%\61uU@Bb{:{`LQZ@5PoC]W@B֦SkSP1Z (U!.{.> ztJc:_+0C"r\I&I$¨ z6D?|rgCBb{/w;H _9P;|H$}^KC rrH6ۡs'}0O>Bb{t|}0/Q|G|Tf>xFTڨ1F/ |vx<eFHL㹘&| {Bн.׽q޺yVto2;/eWPgPl]έS>B ti=/-{0T_|gzkp!|ӑ^~k߯y&ȞU@ /OzUrBv/UZ=K6OBn=e;}s'! \s"eț%v!!dݻ!n 'Czif96{B1ѽ͠_[wbv8sl7A}~KUR~oߌxoU?2>ڸoLeKa#D\u'صyP)QyPD7RE,3_2#޷-5W.vPu1< .ٱcGU kkdJ]QH{i?K!wC $ǘ! b-W8$)Z(n*:r@^KRno챡u\ąԍ07A 9YKKRQ$7a..$mts[nn]d`m>{oR/[Y]Ց|KI.tٌzA`*e(8 T\paeE}M|+ݑ wBYwڏ&FK$) ErH{&4ڇhyW1t5G۫_}##Y 7d*`(@`:-R<~RB9Er߱ 8Y8EJtC ̺|fs7R~ZZP!_?/O=hU74l{Zq:[X* /rEq n~CRiriv~R?jMY꼚q1VWrof>v]ntx:ḓ}OfuSDž컝xΐ55.=3W=Y<>rG"7rc3 |Hpɾ'/d w 0@c*+cXnG<5 *oiq&o@C JH"_)pR8kJ־mm-8GMcʊ:w$,xӌ16/stʪo.ۢotf&:Hx9@N2˴-:DGe1=WR=r=y2 N5⎾wFVBJ9٬ukVzgsTs5ty #/iOvHlthZ!" y6w ygZrW^Ho(r9+_#N^s\BkX64)7?7{]'ʗsX.R=}9]`Ayi'oHaw#!^_ oW᏾}vo/ )H UoG([)vDA_ghklEXmfN_LI~FOzV yR⡠C ;e\^Əuyz :ciS{0ԍezrcg#v;챫6|'Ψ1Table,SummaryInformation(DocumentSummaryInformation8#<CompObjj < H T`hpx'OASIS Security Service TC domain model ASI dorcharduriorc Normal.doti Jeff Hodges8ffMicrosoft Word 9.0i@Q@@*Q~*  FMicrosoft Word Document MSWordDocWord.Document.89q   Jamc i8@8 NormalCJ_HaJmH sH tH N@N Heading 1$<@&5CJ KH OJQJ\aJ P@P Heading 2$<@&56CJOJQJ\]aJ2@2 Heading 3$@&5\<A@< Default Paragraph Font.U@. Hyperlink >*B*phJ^@J Normal (Web)dd[$\$OJPJQJ^J>V@> FollowedHyperlink >*B* ph,@", Header  !, @2, Footer  !3R:U78yzZ[h5bwxLMd  B C i$%sUV" !!!""# #w%x%&&T'''''(/)0)8*9***~++++`,s,,,-=---V..2/h///////00e0C1K122333333330000000000000000@ 0@ 0 0 000000000000000000000000000000000000@000000009090909090909 09 09 090909 09 09 090909090909090909090909090909090909090909090909000000000000000000000 0000000000000@0 0]*7 $% &17!#&'(7"WhP Y n  ^ b  , S\ aj fv CJ>Fb]$)zLP3X՜.+,D՜.+,\ hp   JamcrackerT[r4 'OASIS Security Service TC domain model Title 8@ _PID_HLINKSAZ B4http://www.oasis-open.org/committees/security/docs/InternetSecurityGlossaryRef<c?4http://www.oasis-open.org/committees/security/docs/ EntityDef+`<4http://www.oasis-open.org/committees/security/docs/SystemResourceDef(h94http://www.oasis-open.org/committees/security/docs/ AccessDefZ 64http://www.oasis-open.org/committees/security/docs/InternetSecurityGlossaryRefU 34http://www.oasis-open.org/committees/security/docs/ ServiceDef.d04http://www.oasis-open.org/committees/security/docs/ISOSecArchRef:o-4http://www.oasis-open.org/committees/security/docs/ TargetDef7n*4http://www.oasis-open.org/committees/security/docs/ InitiatorDef;h'4http://www.oasis-open.org/committees/security/docs/ISOAccessCntlFrmwkRef0b$4http://www.oasis-open.org/committees/security/docs/SecurityPolicyDefN!4http://www.oasis-open.org/committees/security/docs/ ResourceDefU4http://www.oasis-open.org/committees/security/docs/ IdentityDef8|4http://www.oasis-open.org/committees/security/docs/ RequesterDefN4http://www.oasis-open.org/committees/security/docs/ ResourceDef&b4http://www.oasis-open.org/committees/security/docs/ PolicyDef?w4http://www.oasis-open.org/committees/security/docs/ AssertionDef0o4http://www.oasis-open.org/committees/security/docs/ AznAPIRef(d 4http://www.oasis-open.org/committees/security/docs/TrustInCyberspaceRefU 4http://www.oasis-open.org/committees/security/docs/ IdentityDef<c4http://www.oasis-open.org/committees/security/docs/ EntityDef7=5http://www.rational.com/products/whitepapers/350.jspRTFToC2:XXXXXXXXXXXXXXXXtXtXXXX/X2$oհeR8m#-"R{2$hoS刢Cl[{@t(  <  # AB S  ?3!4 OLE_LINK2 OLE_LINK3 OLE_LINK5 _Hlt509059201 _Hlt509059202 OLE_LINK4i3@@yYZ Z 3!!+,Z,^,,,//1%11222333VY(*    ilz13R\bdcd+,,,- -?-B----.X.e.g0k0C1I133333333333333333333333333333336677[bhbvc m ~ ( [ d   #$$%%ccde*18TUU\cuu33dorchardRD:\perforce\jaws\base\itml\specifications\sstc-domain\draft-sstc-use-domain-03.docdorchardlC:\WINNT\Profiles\dorchard\Application Data\Microsoft\Word\AutoRecovery save of draft-sstc-use-domain-04.asddorchardlC:\WINNT\Profiles\dorchard\Application Data\Microsoft\Word\AutoRecovery save of draft-sstc-use-domain-04.asddorchardlC:\WINNT\Profiles\dorchard\Application Data\Microsoft\Word\AutoRecovery save of draft-sstc-use-domain-04.asddorchardlC:\WINNT\Profiles\dorchard\Application Data\Microsoft\Word\AutoRecovery save of draft-sstc-use-domain-04.asddorchardlC:\WINNT\Profiles\dorchard\Application Data\Microsoft\Word\AutoRecovery save of draft-sstc-use-domain-04.asddorchardlC:\WINNT\Profiles\dorchard\Application Data\Microsoft\Word\AutoRecovery save of draft-sstc-use-domain-04.asddorchardRD:\perforce\jaws\base\itml\specifications\sstc-domain\draft-sstc-use-domain-04.doc Jeff HodgessC:\Documents and Settings\jhodges\Application Data\Microsoft\Word\AutoRecovery save of draft-sstc-use-domain-04.asd Jeff HodgesF:\Work\Oblix\Intranet-work-in-progress\engineering\EnggInvestigations\Standards\OASIS\SecurityServicesTC-SSTC\html\docs\draft-sstc-use-domain-04.doci{⒋tq X.N h ^`OJQJo(h ^`OJQJo(oh pp^p`OJQJo(h @ @ ^@ `OJQJo(h ^`OJQJo(oh ^`OJQJo(h ^`OJQJo(h ^`OJQJo(oh PP^P`OJQJo(h ^`OJQJo(h ^`OJQJo(oh pp^p`OJQJo(h @ @ ^@ `OJQJo(h ^`OJQJo(oh ^`OJQJo(h ^`OJQJo(h ^`OJQJo(oh PP^P`OJQJo(h ^`OJQJo(h ^`OJQJo(oh pp^p`OJQJo(h @ @ ^@ `OJQJo(h ^`OJQJo(oh ^`OJQJo(h ^`OJQJo(h ^`OJQJo(oh PP^P`OJQJo(i{tX.                           @s3P@UnknownGz Times New Roman5Symbol3& z Arial?5 z Courier NewW6 ??Arial Unicode MSTahoma;Wingdings"qhsSf5U&~*[20dr4 2Q&OASIS Security Service TC domain modeldorchard Jeff Hodges