2.2.9.9 Use License

This section defines the format of the UL. The UL names an issued principal via the ISSUEDPRINCIPALS element and then grants a set of rights to that principal, one right per RIGHT element.

The UL SHOULD use the following template.

 <XrML version="1.2" xmlns="" purpose="Content-License">
    <BODY type="LICENSE" version="3.0">
       [[- issuedtime -]]
       [[- descriptor -]]
       [[- issuer -]]
       [[- issuedprincipals -]]
       [[- distributionpoint-ref -]]
       <WORK>
         [[- workobject -]]
         <METADATA>
            [[- owner -]]
         </METADATA>
         [[- revocationpoint -]]
         <RIGHTSGROUP name="Main-Rights">
            <RIGHTSLIST>
               [[- right -]]
            </RIGHTSLIST>
         </RIGHTSGROUP>
      </WORK>
      <CONDITIONLIST>
         [[- condition -]]
      </CONDITIONLIST>
      [[- exclusionpolicy -]]
      [[- inclusionpolicy -]]
    </BODY>
    [[- signature -]]
 </XrML>
  

[[- issuedtime -]]: MUST be an ISSUEDTIME (section 2.2.9.1.1) element containing the time the UL was generated, in UTC.

[[- descriptor -]]: MUST be a DESCRIPTOR (section 2.2.9.9.1) element describing the UL.

[[- issuer -]]: MUST be an ISSUER (section 2.2.9.9.2) element describing the issuer of the UL.

[[- issuedprincipals -]]: MUST be an ISSUEDPRINCIPALS (section 2.2.9.9.3) element describing the principal and the user public key for which the UL is issued.

[[- distributionpoint-ref -]]: An optional element containing the author's referral information. If present, MUST be a DISTRIBUTIONPOINT (section 2.2.9.9.4) element of type "Referral-Info".

[[- workobject -]]: MUST be an object element that identifies the content to which the UL applies. This object is created by the application used to create the PL from which the UL was generated, and therefore contains application-specific information.

[[- owner -]]: MAY be an OWNER (section 2.2.9.9.5) element that describes the author of the document.

[[- revocationpoint -]]: An optional field that specifies the location of a revocation list for the UL. If present, MUST be a CONDITIONLIST (section 2.2.9.9.10) element.

[[- right -]]: MUST be an element, as defined in section 2.2.9.9.6, that defines a right and the principal that possesses the right.

[[- condition -]]: MAY be an element, as defined in section 2.2.9.9.9, that defines an excluded OS version span.

[[- exclusionpolicy -]]: MAY be a POLICYLIST (section 2.2.9.7.7) element with type "exclusion" that identifies an exclusion policy list that applies to the UL and the information that the UL protects.

[[- inclusionpolicy -]]: MAY be a POLICYLIST (section 2.2.9.7.7) element with type "inclusion" that identifies an inclusion policy list that applies to the UL and the information that the UL protects.

[[- signature -]]: MUST be a SIGNATURE (section 2.2.9.1.12) element containing the cryptographic signature of the body of the certificate, generated by the issuer of the certificate. The hash MUST be the hash of the body. The signature MUST be the hash encrypted with the issuer's private key. The key length MUST be the length of the issuer's private key, which MUST match the length of the issuer's public key.