Transcription
IP tracking methodology at INRIALuc GrateauResponsible for Transfer StrategiesINRIA Technology Transfer and Innovation DepartmentGuillaume Rousseau* Head of antelink Project (spinoff@INRIA)Magali FitzgibbonOpenSource World Forum 2009Paris, October 2 2009* speakerCopyright INRIA 2009. All right reserved. Open Source World Forum 20091
Introduction 1/2Knowledge and technology transfer at INRIA Knowledge provider: Scientific Papers and Technical Reports Prototype Technology Provider Some direct Licensing (proprietary and open source) Toward big company, SME and spinoff, A FSF’s projects contributor i.e.Optimization of GCCMPFR (multiple-precision floating-point computations with correct rounding), now inGCC.Copyright INRIA 2009. All right reserved. Open Source World Forum 20092
Antelink INRIA Université Paris Diderot -2009 www.anteliIntroduction 2/2Software assets management at INRIAToday : 1600 Projects on gforge@INRIA(open source and non open source)INRIA forgeOW2 forgeParticipation to 400 Open Source projectshaving open repositoryMPFRReuse of pre-existing components(open source or not)1999 300 000 software development projectsrelease their source codeCopyright INRIA 2009. All right reserved. Open Source World Forum 2009200910 years3
Key Legal Issues and responsible open source developmentAssuming good practices (1/2)We assume “development in good faith”when it comes to use pre-existing componentsCopyright INRIA 2009. All right reserved. Open Source World Forum 20094
Key Legal Issues and responsible open source developmentAssuming good practices (2/2)Strong need for Tracking technologiesand intellectual assets management toolsCopyright INRIA 2009. All right reserved. Open Source World Forum 20095
Legal Situation 1/3Identify Rights and Obligations Identify all authors (? contributors) Identify copyright owners (? employee) Identify all components, kind of dependencies(! wording “combined”, “link”, “derived”) Contractual issues (Consortium agreement) Applicable law (moral and patrimonial rights) Related content repository NEED FOR A “HIGH LEVEL” FORMALISATIONCopyright INRIA 2009. All right reserved. Open Source World Forum 20096
Legal Situation 2/31. Positon in the chain of rights : initial software derived software heterogeneous softwareHigh level descripton domain nameDomain licensing schemeFor each componentnameVersion #locatonnaturelicenceIntegrityCompositon rule(Licence)(nature of the link)CompatbilityPackagingconstraintcomments0/12. Owner of intellectual Property RightsMoral rightsAuthor nameAffiliationAffiliation link(Employer, )(work contract, )Contribution naturespec.codedocPatrimonial rightsOrganisation3. Legal conditons of exploitatonLicensing Contact name4. Other enforceable IPR against sofwareRestricting agreementsPatentRestricting LawsTrademarkRestricting LicensesCopyrightOther binding rule or legal provisionDatabase EC lawcommentscomments
Legal Situation 3/3Need for a standardized implementation Toward a standardization process Definition of normalised OSS licence denominations High level description formalization / Composition rules Apply to a large set of source code from different development communities With a focus on licence compatibility issue (QualiPso A1 WP 1.3)Copyright INRIA 2009. All right reserved. Open Source World Forum 20098
QualiPSo IP Tracking methodology (A1 WP1.4.1)A definitionWe proposed a generic IPT methodology within Qualipso EC funded research project andimplemented it for our own organisation. The aim is to set up an appropriate legal governance and process to determine and follow the legal situation of a CBCD software during itsdevelopment process, in order to make sure that this legal status is compliant with the development andexploitation intends of the CBCD software editor.Copyright INRIA 2009. All right reserved. Open Source World Forum 20099
QualiPSo IP Tracking methodologyAn audit module based on 6 generic steps1. High levelDescription of the software(Description of the softwareArchitecture, functionalities, modules or components)2. Definition of the scopeof the Audit4. Problem Identificationand Risk Evaluation5. Solve Blocking/CriticalProblem(Main objectives)3. Determination of the LegalSituationCopyright INRIA 2009. All right reserved. Open Source World Forum 20096. Insurance, Disseminationand IP tracking10
QualiPSo IP Tracking methodology (A1 WP1.4.1)An implementation at INRIA This IPT policy is actually in test phase at INRIA and based on : A training program for developers and support staff to foster their awareness of IPtracking issues for CBCD software a multi-skilled team composed of technical staff, legal persons and technologytransfer officers in charge of the legal governance of the software development An IP tracking methodology using software tools (i.e. FOSSology license checker)Copyright INRIA 2009. All right reserved. Open Source World Forum 200911
QualiPSo IP Tracking methodology (Phase 3)Questionnaire assisted phaseCopyright INRIA 2009. All right reserved. Open Source World Forum 200912
QualiPSo IP Tracking methodology (Phase 3)Increase trust using tool based methodologyAutomatic source code comparisonbased on corpus (Palamida, Blackduck, .) Third Legal Situation (third part LS) , more expensive, legal due diligenceNeeded if you assume bad practicesAutomatic source code analysis (Fossology) Second Legal Situation (Determined LS)FREE, Can be done at large scaleAssumes good practicesAsk People (Questionnaire) First Legal Situation (Perceived LS)FREE, Can be done at large scaleAssume good practicesCopyright INRIA 2009. All right reserved. Open Source World Forum 200913
QualiPSo IP Tracking methodology (Phase 3)Increase trust using tool based methodologyAutomatic source code comparisonbased on corpus (Palamida, Blackduck, .) Third Legal Situation (third part LS) , more expensive, legal due diligenceNeeded if you assume bad practicesAutomatic source code analysis (Fossology) Second Legal Situation (Determined LS)FREE, Can be done at large scaleAssumes good practicesAsk People (Questionnaire) First Legal Situation (Perceived LS)FREE, Can be done at large scaleAssume good practicesCopyright INRIA 2009. All right reserved. Open Source World Forum 200914
QualiPSo IP Tracking methodology (Phase 3)Increase trust using tool based methodologyAutomatic source code comparisonbased on corpus (Palamida, Blackduck, .) Third Legal Situation (third part LS) , more expensive, legal due diligenceNeeded if you assume bad practicesAutomatic source code analysis (Fossology) Second Legal Situation (Determined LS)FREE, Can be done at large scaleAssumes good practicesAsk People (Questionnaire) First Legal Situation (Perceived LS)FREE, Can be done at large scaleAssume good practicesCopyright INRIA 2009. All right reserved. Open Source World Forum 200915
ConclusionIntellectual Property Tracking Methodology for components basedand collaboratively developed software is proposed within QualipsoEC Project and under testing at INRIA.Comply with governance or coordination level in charge of IP trackingissues (INRIA, EU, Others ?)Involve multi-skilled team (dev team, lawyers, management, .)A tool based process using FOSSology as license checker tool,covering XX % of our needs (Others ?)A better defined and enhanced “Legal” quality software towardstandardizationCopyright INRIA 2009. All right reserved. Open Source World Forum 200916
References and contact informations References Open (Research) issue toward a legal framework for OSS, FOSDEM h activities/downloads/fosdem2008/papers/INRIA-GR 20080218-final.pdf Guide de diagnostic du logiciel (INRIA Internal document, DTI/SPIV 2006) GRATEAUand FONTAINE Toward an open-source technology transfer model DALLE and ROUSSEAU,Proceeding of the 4th Workshop on Open Source Software Engineering IP Tracking: A methodology for Component Based and Collaboratively Developedsoftware M. FITZGIBBON, L. GRATEAU, G. ROUSSEAU Qualipso EC fundedProject, Deliverable D1.4.1, Diffusion Status : Public January 26th, 2009 @inria.frMatteo.Melideo@eng.itQualiPSo WP 1.4 LeaderQualiPSo WP 1.4 / antelinkQualiPSo WP 1.4QualiPSo A1 LeaderQualiPSo LeaderBob Gobeille, Open Source Program Office, HPMartin Michlmayr, Open Source Program Office, HPCopyright INRIA 2009. All right reserved. Open Source World Forum .orghttp://www.fossbazaar.org17
Open Source World Forum 2009 We proposed a generic IPT methodology within Qualipso EC funded research project and implemented it for our own organisation. The aim is to set up an appropriate legal governance and process to determine and follow the legal situation of a CBCD software during its
