Virtual World Model - Revision history

MakoBot: Robot: Replacing 'OpenSim' to 'OpenSimulator', which is the precise name

2012-03-04T07:04:00Z

Robot: Replacing 'OpenSim' to 'OpenSimulator', which is the precise name

MakoBot: Removed 'Template:' prefix from template includings and/or changed external-link into internal-link

2011-06-10T23:47:22Z

Removed 'Template:' prefix from template includings and/or changed external-link into internal-link

Morgaine: Spelling corrections

2009-06-09T21:56:59Z

Spelling corrections

Ideia Boa at 00:30, 22 May 2009

2009-05-22T00:30:12Z

Diva at 00:21, 21 April 2009

2009-04-21T00:21:28Z

Diva at 00:21, 21 April 2009

2009-04-21T00:21:06Z

Diva at 00:04, 21 April 2009

2009-04-21T00:04:41Z

Diva at 00:03, 21 April 2009

2009-04-21T00:03:32Z

Diva at 23:54, 20 April 2009

2009-04-20T23:54:39Z

Diva at 23:07, 20 April 2009

2009-04-20T23:07:21Z

@@ Line 3: / Line 3: @@
 <br />
-What follows are working definitions for the model of virtual worlds supported by OpenSim. They are intended to clarify terminology, and to sharpen the requirements with respect to security of users' data and world assets. Please use the [[Talk:Virtual_World_Model|Discussion]] tab to comment on these definitions -- they are live and subject to improvements.
+What follows are working definitions for the model of virtual worlds supported by OpenSimulator. They are intended to clarify terminology, and to sharpen the requirements with respect to security of users' data and world assets. Please use the [[Talk:Virtual_World_Model|Discussion]] tab to comment on these definitions -- they are live and subject to improvements.
   '''Simulator Trust Domain''': One or more simulators that completely trust each other, operated by one single

@@ Line 1: / Line 1: @@
 __NOTOC__
-{{Template:Quicklinks}}
+{{Quicklinks}}
 <br />

@@ Line 57: / Line 57: @@
 * Regions hold COPIES of the assets needed to render whatever is currently in world. Normally, this will be "by value", e.g. the sim will have a full and valid copy of the data and be able to supply everything needed to render its content independent of any outside servers.
-* Grids are one or more trust domains, they are groups of regions sharing asset and user services. The access the same servers for their data and anything within one region can be moved to any other region without the need to copy assets. Regions within a trust domain are able to destroy storage needed by other regions to render data, but cannot access user inventories unless authorized, and with very limited scope. Typically, but not mandatory, all sims in one gridwill be owned and operated by a single individual/organization.
+* Grids are one or more trust domains, they are groups of regions sharing asset and user services. They access the same servers for their data and anything within one region can be moved to any other region without the need to copy assets. Regions within a trust domain are able to destroy storage needed by other regions to render data, but cannot access user inventories unless authorized, and with very limited scope. Typically, but not mandatory, all sims in one gridwill be owned and operated by a single individual/organization.
-* User services authenticate user for access to a trust domain. They may require username/password, X.509 certificates, oAuth, openID or any other form of authentication, or none. They may decree that, if you don't authenticate, your access may be limited to observation only, or in any other way they, as the trust domain controller, see fit.
+* User services authenticate users for access to a trust domain. They may require username/password, X.509 certificates, oAuth, openID or any other form of authentication, or none. They may decree that, if you don't authenticate, your access may be limited to observation only, or in any other way they, as the trust domain controller, see fit.
 * Sim asset services are the storage at the heart of a grid, sims in a grid share these asset services. That is distinct from user asset services, which are out of scope for regions.
 * Optionally, user asset services may pass an object to a region "by reference". This assumes a basic level of trust with the region, which is advised to not keep a copy, but request the current data from the user asset service each time it is needed. This required continuous authorization for that item, which will be limited to specific sims, Therefore, such items can't leave the sim, they cannot be given or sold, but only be taken by the owner. This is useful for allowing the update of scripts in-place, e.g. for applications like sloodle, which may want to update all inworld terminals all at once. It it a marked departure from the Linden way of doing things.

← Older revision		Revision as of 00:30, 22 May 2009
Line 1:		Line 1:
		+	__NOTOC__
		+	{{Template:Quicklinks}}
		+	<br />
		+
	What follows are working definitions for the model of virtual worlds supported by OpenSim. They are intended to clarify terminology, and to sharpen the requirements with respect to security of users' data and world assets. Please use the [[Talk:Virtual_World_Model\|Discussion]] tab to comment on these definitions -- they are live and subject to improvements.		What follows are working definitions for the model of virtual worlds supported by OpenSim. They are intended to clarify terminology, and to sharpen the requirements with respect to security of users' data and world assets. Please use the [[Talk:Virtual_World_Model\|Discussion]] tab to comment on these definitions -- they are live and subject to improvements.

← Older revision		Revision as of 00:21, 21 April 2009
Line 1:		Line 1:
−	What follows are working definitions for the model of virtual worlds supported by OpenSim. They are intended to clarify terminology, and to sharpen the requirements with respect to security of users' data and world assets. Please use the [[Talk:Virtual_World_Model\|Discussion]] tab to comment on these definitions -- they are live and ~~evolving~~.	+	What follows are working definitions for the model of virtual worlds supported by OpenSim. They are intended to clarify terminology, and to sharpen the requirements with respect to security of users' data and world assets. Please use the [[Talk:Virtual_World_Model\|Discussion]] tab to comment on these definitions -- they are live and subject to improvements.

	'''Simulator Trust Domain''': One or more simulators that completely trust each other, operated by one single		'''Simulator Trust Domain''': One or more simulators that completely trust each other, operated by one single

@@ Line 24: / Line 24: @@
   grids; social networking services being bridged, etc. The Hypergrid architecture enables, but does not impose,
   the emergence of independent Hypergrid-wide resource services such as User Services, Asset Storage, Social
-  Networking, Search, etc. that serve several grids and are not be coupled with any one grid in particular.
+  Networking, Search, etc. that serve several grids and are not coupled with any one grid in particular.
   '''Walled-Garden Grid''': A grid that only handles resources directly managed by its own resource services. It

@@ Line 14: / Line 14: @@
   simulators in a grid share assets, but many more services are possible (see above). A Grid includes one or
   more simulator trust domains. Normally one would expect one grid to be one single trust domain, but that
-  doesn't necessarily need to happen. The Linden Lab Grid, although one single trust domain at the moment, might
+  doesn't necessarily need to happen. Given that a Grid may include more than one simulator
- support several trust domains in the future, where different groups of simulators are controlled by different
- authorities at the level of the simulator code, but still share the central resources. OSGrid and trust
- domains...[[Talk:Virtual_World_Model|discuss here]].  Given that a Grid may include more than one simulator
   trust domain, there can be untrusted connections within the same grid. In deploying security schemes, this
-  needs to be taken into account.
+  needs to be taken into account. (OSGrid and trust domains...[[Talk:Virtual_World_Model|discuss here]]).
   '''Hypergrid''': The interconnection of grids. Hypergrid simulator connections are necessarily untrusted, so

@@ Line 31: / Line 31: @@
   '''Walled-Garden Grid''': A grid that only handles resources directly managed by its own resource services. It
   does not recognize or allow users and assets from other grids, and it does not allow the export of its own
-  users and assets.
+  users and assets. It may, however, import/export assets in bulk via backend storage systems (e.g. OARs).

@@ Line 1: / Line 1: @@
 What follows are working definitions for the model of virtual worlds supported by OpenSim. They are intended to clarify terminology, and to sharpen the requirements with respect to security of users' data and world assets. Please use the [[Talk:Virtual_World_Model|Discussion]] tab to comment on these definitions.
-'''Simulator Trust Domain''': One or more simulators that completely trust each other, operated by one single authority. Trust means that these simulators can safely exchange messages and share data with each other. Specifically, trusting simulators can engage in exchanges that enable useful features, such as server-side teleports, that are unsafe when done between non-trusting simulators.
+ '''Simulator Trust Domain''': One or more simulators that completely trust each other, operated by one single
-Trust domains can be extended to include simulators in other trust domains, but in these extensions trust is neither commutative nor transitive. [[Talk:Virtual_World_Model|discuss here]]
+ authority. Trust means that these simulators can safely exchange messages and share data with each other.
-'''Resource Services''': A set of zero or more services serving resources for simulators. Resources include: assets, user accounts, and assorted services like map, lookup, social networking, forums, etc.
+ '''Resource Services''': A set of zero or more services serving resources for simulators. Resources include:
-'''Grid''': One or more simulators that share resources via resource services. At the very minimum, the simulators in a grid share assets, but many more services are possible (see above). A Grid includes one or more simulator trust domains. Normally one would expect one grid to be one single trust domain, but that doesn't necessarily need to happen. The Linden Lab Grid, although one single trust domain at the moment, might support several trust domains in the future, where different groups of simulators are controlled by different authorities at the level of the simulator code, but still share the central resources. OSGrid and trust domains...[[Talk:Virtual_World_Model|discuss here]].  Given that a Grid may include more than one simulator trust domain, there can be untrusted connections within the same grid. In deploying security schemes, this needs to be taken into account.
+ '''Grid''': One or more simulators that share resources via resource services. At the very minimum, the
-'''Hypergrid''': The interconnection of grids. Hypergrid simulator connections are necessarily untrusted, so security schemes need to take that into account. Besides safe simulator connectivity between grids, the Hypergrid addresses the interoperability of resource services -- that is, the ability for: user accounts in one user service being recognized in other grids; assets in one asset service being transferred to other grids; social networking services being bridged, etc. The Hypergrid architecture enables, but does not impose, the emergence of independent Hypergrid-wide resource services such as User Services, Asset Storage, Social Networking, Search, etc. that serve several grids and are not be coupled with any one grid in particular.
+ '''Hypergrid''': The interconnection of grids. Hypergrid simulator connections are necessarily untrusted, so
-'''Walled-Garden Grid''': A grid that only handles resources directly managed by its own resource services. It does not recognize or allow users and assets from other grids, and it does not allow the export of its own users and assets.
+ '''Walled-Garden Grid''': A grid that only handles resources directly managed by its own resource services. It