Enterprise Privacy Authorization Language (EPAL) is a
formal language
In logic, mathematics, computer science, and linguistics, a formal language consists of words whose letters are taken from an alphabet and are well-formed according to a specific set of rules.
The alphabet of a formal language consists of symb ...
for writing enterprise privacy policies to govern data handling practices in IT systems according to fine-grained positive and negative authorization rights. It was submitted by
IBM to the
World Wide Web Consortium
The World Wide Web Consortium (W3C) is the main international standards organization for the World Wide Web. Founded in 1994 and led by Tim Berners-Lee, the consortium is made up of member organizations that maintain full-time staff working to ...
(W3C) in 2003 to be considered for recommendation. In 2004, a lawsuit was filed by
Zero-Knowledge Systems
Zero-Knowledge Systems (also known as ZKS) was a Canadian privacy technology software and services company, best known for the Freedom Network, its privacy network. It was founded by brothers Austin Hill & Hamnett Hill and their father Hamnett ...
claiming that IBM breached a copyright agreement from when they worked together in 2001 - 2002 to create Privacy Rights Markup Language (PRML). EPAL is based on PRML, which means Zero-Knowledge argued they should be a co-owner of the standard.
See also
*
XACML
XACML stands for "eXtensible Access Control Markup Language". The standard defines a declarative fine-grained, attribute-based access control policy language, an architecture, and a processing model describing how to evaluate access requests a ...
- eXtensible Access Control Markup Language, a standard by OASIS.
References
EPAL 1.2submission to the W3C 10 Nov 2003
from OASIS
Sun Microsystem Laboratories
Computer security procedures
XML-based standards
IBM software
{{compu-lang-stub