Signed copy of the cover page attached.

Sarnoff Corporation (Sarnoff), in cooperation with AtomicTangerine Inc. (AtomicTangerine), is filing the "Registry Operator’s Proposal". NextDNS is a newly created entity that has been formed with the intention of operating the Registry and executing the business plan as outlined in this proposal. Sarnoff and AtomicTangerine are committed to supporting NextDNS’s operation of the Registry.

D4. The registry operator's type of business entity (e.g., corporation, partnership, etc.) and law (e.g., Denmark) under which it is organized.

For NextDNS:

Type of business entity: Delaware Corporation
Law: United States of America.

For Sarnoff:

Type of business entity: New Jersey Corporation
Law: United States of America.

For AtomicTangerine:

Type of business entity: Delaware Corporation
Law: United States of America.

www.nextdnsinc.com
www.sarnoff.com
www.atomictangerine.com

NextDNS: Not yet assigned

Sarnoff: 17-552-1103

AtomicTangerine: 12-675-1663

NextDNS: N/A (new entity)

Sarnoff: 800 Full time employees
AtomicTangerine: 250 Full time employees

NextDNS: N/A (new entity)

Sarnoff: US$116,915,000.00

AtomicTangerine: N/A (has not yet completed a full fiscal year)

The principal stakeholders of NextDNS include Sarnoff, AtomicTangerine, and Arnhold and S. Bleichroeder, Inc. Sarnoff and AtomicTangerine are currently engaged in discussions with various parties worldwide to expand the ownership and advisory base of NextDNS to include other global corporations and organizations.

Mr. Shailendra Suman
Telephone: (609) 734-3137
Fax: (609) 514-4061
Email : ssuman@sarnoff.com

D11. The full legal name, principal address, telephone and fax numbers, e-mail address, and Dun & Bradstreet D-U-N-S Number (if any) of all subcontractors identified in item D15.3 below.

2. BUSINESS CAPABILITIES AND PLAN

Note from Applicant: Answers to specific questions for subsections D13.1.1 follow the introduction given below. Sarnoff would welcome the opportunity to meet personally with the ICANN Board, its staff and all interested members of the ICANN community to discuss this proposal and the promise of this new TLD and its associated services and technologies.

Sarnoff Corporation (Sarnoff), in cooperation with AtomicTangerine, Inc. (Atomic Tangerine), is submitting this application on behalf of its new venture, NextDNS, Inc.

Sarnoff, AtomicTangerine, and their parent company, SRI International, have a long, illustrious history of spurring technological innovation. Over the past five decades, their companies and inventions have revolutionized the way the world works, plays, and communicates. This Registry Operator license for a new Top Level Domain (TLD) will enable the creation of pioneering services around the proposed TLD that will offer great enhancements to the way people communicate and how future business, leisure, and personal activities are conducted around the world.

The mission of the Registry is to provide a service provider-invariant Personal Domain Name to individuals that will enable them to configure any or all of their digital communications – whether via e-mail, cell phone, PDA, or pager - to their liking, using services offered by various vendors who will adopt the proposed domain as a platform for value-added services targeted at individuals.

With the convergence of information delivery services and, in particular, the adoption of wireless messaging and location services, there is a need for a central invariant point of contact around which an individual may configure and coordinate his or her access to such services. Our proposed Personal Domain Name will provide an innovative solution to the growing problem of information overload at the individual level, relying on the Internet’s Domain Name System. Unlike the naming conventions used in today’s .com, .edu, and .org domains, the applicant’s proposed domain will be people-centered rather than entity specific, enabling each person in the world to have his or her own Personal Domain Name, thus increasing the usefulness and reach of the DNS.

The proposed TLD will provide numerous benefits to individuals and to societies as a whole. In addition to creating a permanent, private, simpler means of communication, the TLD will also reduce switching barriers for individuals and their information appliances, thereby sparking enhanced competition among Access Service Providers and Telecom companies as well as cell phone, handheld, and paging manufacturers. The expansion of the DNS to serve the personal needs of Internet users and their information appliances is truly the next step in the evolution of the Internet. In bringing these benefits and services to individual Internet users, the proposed Registry will create new business opportunities that were not possible before. With their combined histories of exceptional technological innovation and successful new business creation, Sarnoff and AtomicTangerine are uniquely suited to lead the charge in enabling the next generation applications of the DNS that benefit all Internet users.

Notably, Sarnoff has a legacy as a leading and trusted developer of enabling platform technologies by which third party developers may enter new frontiers.  Sarnoff’s neutrality among commercial developers utilizing Sarnoff developments, and commitment to expanding opportunities for competitive commercialization of new technologies are widely known.  The objective of this proposal is to open new frontiers in the development and delivery of individualized personal services on a global scale and egalitarian basis.  Sarnoff possesses the technical depth and experience in collaborative development of new technologies to make the ideal of "the Internet for everyone" a reality.

Sarnoff is a global organization that has created some of the most pervasive technologies of the century. Sarnoff has a world-renowned history as a premier developer of entertainment, consumer, and commercial products that have fundamentally changed the modern world. Many of the products used by consumers today were invented by Sarnoff. In fact, Sarnoff has not only been a leader in industry, it has helped create new industries.

Sarnoff was established in 1942 as RCA Laboratories, the central research organization for the RCA Corporation. In April 1987 it became a subsidiary of SRI International, as part of an agreement with GE.

Sarnoff remains a leading global organization in video, broadcasting, and displays and has a worldwide reputation in the following areas of expertise. With the convergence of the Internet and broadcast media, and the promise of "Internet Everywhere", many of these technologies are becoming ever increasingly important to the Internet space.

• Communications Systems and Networking
• Vision Technologies
• Optoelectronics
• Integrated Circuit Systems
• Internet Technology
• Integrated Electronic and Display Products
• Emulation Products and Technology
• Life Sciences and Systems
• Microstructure and Display Systems
• Digital TV and Entertainment

Successful New Venture Creation: Sarnoff has a solid track record of successfully nurturing and spinning off new technology ventures regularly during the past 10 years. Sarnoff builds value and other sources of continuing revenue through equity positions in ventures that make use of its technical innovations. These ventures, referred to as Sarnoff Technology Ventures (STVs), reflect the breadth and depth of Sarnoff’s technology and managerial capabilities.

Sarnoff incubates these companies, building the value in each company by developing its technology to a pre-commercial level, and then raising funds for commercialization. Exclusive licenses may be granted to STVs in Sarnoff’s intellectual property in specific fields of use. Sarnoff’s staff acts to fill critical technical and leadership roles in the company until the STV can recruit a full management and technical team and reach critical mass on its own.

The benefit of this model is that Sarnoff lowers the risk of execution and can deliver on its commitments by having a team in place that has delivered on many highly challenging problems and milestones. This established business model has been put into practice to create many new companies over the past 10 years (see Appendix A). The proposed Registry Operator is a Sarnoff venture company. Sarnoff will assist in gaining the appropriate managerial, technological, and financial capital required for the successful operation of the Registry.

Tradition of Technological Innovation and Excellence: Today, Sarnoff is one of the most productive creators of technology in the US. Sarnoff’s partners and clients include multinational corporations, government agencies, research universities and leading high-tech organizations including Motorola, Thomson Multimedia, Toshiba, SmithKline Beecham, and government organizations such as the National Imagery and Mapping Agency (NIMA) and the Defense Advanced Research Projects Agency (DARPA).

Sarnoff has been vigorously developing capabilities in database management systems (DBMS) for commercial and government applications. These include Distributed Databases; Mobile Database Systems; Object-Oriented DBMS; Object-relational DBMS; Information System Architecture; Data Caching and Replication; DBMS Query Optimization; Distributed File Systems; Video on Demand; and Multimedia Storage Systems.

Sarnoff has also developed techniques for capturing and tracking information about an analysis process and enabling access to that information through querying and visualization processes. This approach, embodied in an object-oriented database framework, also provides a mechanism for explicit sharing of information among analysts. These techniques have been applied to a wide range of collaborative tasks including mapping (Infobase), open source analysis (NSA/ADE) and distance education (CLASS). For information on additional Sarnoff technologies, please see Section D15.1.

Sarnoff’s broad business base gives it a unique "high ground" perspective on emerging technologies. Sarnoff participates in the invention and development of hundreds of solutions for hundreds of companies. It works with trailblazers, setting industry trends and standards. Because it serves all major technology industries, Sarnoff is a unique resource in the development of products that are at the convergence of these technologies. Furthermore, Sarnoff brings the unique combination of broad commercial experience and broad government experience.

With a 58-year record of significant scientific contributions, achievements, inventions, collaborative development of new technologies, global standards and alliances creation, and successful new business creation, Sarnoff is well positioned to lead the charge in managing the proposed TLD as well as creating and enabling the related next generation of Internet applications.

National and World Record of Achievements: Sarnoff’s groundbreaking contributions to technology have changed the way we live: television, CRTs, CMOS ICs, laser diodes for CDs, LCDs, DVI, solid-state imagers, solid-state amplifiers for satellite transmission, the new HDTV standard, and DirecTV. In high bandwidth communications, Sarnoff’s R&D achievements include the US digital HDTV standard, new multimedia distribution systems (MMDS), and terrestrial and satellite communications developments. Sarnoff has assumed a leadership position in biotechnology with the development of the world’s first all-electronic fluid IC switch technology, with application to genomics and combinatorial chemistry.

Among the awards won by Sarnoff are seven Emmys for technical excellence. In like vein, Sarnoff intends to enable the next generation of pioneering technologies and services based on the Internet’s Domain Name System that will affect important aspects of our lives in beneficial ways. Some of the highlights of Sarnoff’s technology are detailed below (for a complete list, see Section D.15 and Appendix B, a Business Week article on Sarnoff and SRI International).

Proactive Leadership: Sarnoff is proactive in developing corporate, Government, and academic partnerships and commercializing technologies. This is Sarnoff’s business model. For example, Sarnoff was a major developer of the Advanced Television Research Consortium, and when the HDTV "Grand Alliance" was formed its members (AT&T, Zenith, Thomson, Philips, General Instrument, MIT) selected Sarnoff to be the host and site of HDTV system integration. Sarnoff is leading the team (IBM, HP, Philips) that is developing the next generation digital broadcast equipment. Sarnoff is also the technical lead for the model HDTV station in Washington, DC.

Sarnoff partnerships have significantly influenced a broad range of research areas as diverse as plasma physics, electronic highway and auto controls, ultrasonics in medicine, hyperthermia cancer research, solar energy, and solid state amplifiers for satellite communications. Some examples are:

AtomicTangerine was launched on December 26, 1999 as a spin-off of the consulting practice of SRI International, one of the world’s foremost technology innovation centers and the parent company of Sarnoff. AtomicTangerine is the first e-business venture consulting firm, combining the disciplines of venture capital, technology innovation and strategic consulting, to create category killers and incubate new industries for companies of all sizes and at all stages of evolution. AtomicTangerine’s delivery model facilitates rapid solutions that enable companies to go from concept to reality in 20 weeks or less. This model uses high-level customized approaches that apply revolutionary technology and futuristic thinking to create and sustain competitive advantage.

Within this framework, AtomicTangerine is capable of everything from turning an innovative idea into a successful business to completely revamping an entire e-commerce/e-business platform for a major corporation. Core capabilities include consulting practices in the Internet, telecommunications, supply chain management, and financial services sectors. Top-tier clients include Motorola, Sprint, Vodafone, NTT Data Corporation, Charles Schwab, DuPont, Bank of America, Prudential, Sainsbury Bank, Blakely Sokoloff, Mitsubishi Electric, and Oki-Electric. Internet clients include Amazon.com, Extant, Smile, Dream Train Internet, Hellonetwork.com, Informix, Intermec, Luna, Vitessa, and Worldspan.

Unparalleled expertise in Information Security: AtomicTangerine (and prior to that, SRI Consulting) is world-renowned for its information security practice. The AtomicTangerine Information Security practice is staffed by industry leading security professionals who have conducted more than 500 information security reviews worldwide and 3,500 cases in computer crime for financial services organizations, telecommunications companies, and the U.S. Departments of Justice and Defense. The company hosts the International Information Integrity Institute (I-4®), providing ongoing best practices and information security breakthroughs for a closed-door, invite-only list of FORTUNE 500 companies and government agencies. AtomicTangerine’s Information Security professionals will provide key insights and input as the Registry prepares to run the proposed TLD.

AtomicTangerine’s experienced management team combines skills from the high tech, Internet, e-commerce, management consulting, and research sectors. The company, which operates out of 12 offices, maintains three overseas offices (in London, Tokyo, and Zurich) allowing it to better understand and serve its global customers throughout the world. AtomicTangerine’s employees represent diverse international heritages and are expected to bring their unique cultural perspectives to their consulting work.

AtomicTangerine’s in-depth business expertise will serve as a complement to Sarnoff’s core strengths in technology. As sister companies, Sarnoff and AtomicTangerine share many of the same values, especially the driving passion to use technology to change the world.

Registry Experience — The parent of both Sarnoff and AtomicTangerine, SRI International’s precursor – Stanford Research Institute – was one of the original creators of the ARPAnet, including developing and managing HOSTS.TXT (DNS’s predecessor). Later, when HOSTS.TXT encountered difficulties scaling to accommodate the exponential growth in Internet use, SRI International helped to craft a new standard, the Domain Name System (DNS). With 15 years of experience as the first operator of Internet domains, SRI International has a unique and in-depth understanding of how to develop and maintain a successful Registry Operation. SRI International’s collective history and experience will assist the Registry in creating and maintaining an efficient, quality Registry for the proposed TLD.

Database Experience — Sarnoff has been vigorously developing capabilities in database management systems (DBMS) for commercial and government applications. These include: Distributed Databases; Mobile Database Systems; Object-Oriented DBMS; Object-relational DBMS; Information System Architecture; Data Caching and Replication; DBMS Query Optimization; Distributed File Systems; Video on Demand; and Multimedia Storage Systems.

Sarnoff has also developed techniques for capturing and tracking information about an analysis process and enabling access to that information through querying and visualization processes. This approach, embodied in an object-oriented database framework, also provides a mechanism for explicit sharing of information among analysts. These techniques have been applied to a wide range of collaborative tasks including mapping (Infobase), open source analysis (NSA/ADE) and distance education (CLASS).

Internet Experience — AtomicTangerine (and before that, SRI Consulting) has a thriving Internet consulting practice. Highlights include:

In addition to e-business strategy and Internet design and development expertise, AtomicTangerine also has deep knowledge of Internet security issues, having grown a world-renowned information security practice that encompasses all facets of security, including cyber-security. As a major sponsor and the host of the May, 2000 Internet Defense Summit, AtomicTangerine was a key player in crafting the first Internet security "Priority Action Plan" for Global 1000 companies.

The Registry’s mission is to create a new TLD to provide the underpinnings for the next generation of applications and services that benefit all Internet users. Leveraging Sarnoff’s and AtomicTangerine’s history of creating technologies that change the world, the Registry’s new TLD will enable every user to have a personal domain name that serves as a service provider-invariant point of contact, globally, through which various services and applications can be enabled that are of great benefit. True to the spirit of the Internet, Sarnoff and AtomicTangerine are interested in making the power of the DNS pervasive and available to every Internet user.

Sarnoff has a heritage of independence and of creating and promoting technologies that benefit the widest possible audience. This stands in contrast to a service provider or to a product or software manufacturer who may have an interest in building in high switching costs so as to lock-in the customer. Sarnoff is committed to supporting the proposed Registry’s goal of enabling the services and applications around the proposed Personal Domain Name system in a fair and open standards manner. Development of services and applications on top of the enabling platform will be open to everyone, including participation by ISPs, telecom and wireless providers, application and software system developers, etc.

The Registry will bring together global Internet communities to develop the next generation of services and applications based on the proposed TLD. Schematic of the proposed vision appears above.

Sarnoff and AtomicTangerine together provide unique strengths that are essential for this important mission to enable the next generation applications of the DNS in order to bring the benefits of the DNS to all Internet users:

• Broad capabilities across multiple disciplines that allow world-leading teams to be assembled rapidly
• Recognition of Sarnoff as the premier independent consumer/commercial research organization in the world
• New-venture entrepreneurial skills
• Ability to work with any company
• In-depth experience with new commercial ventures
• Ability to attract leading commercial and academic partners and to negotiate acceptable business arrangements
• Management, broadly experienced in technology, that is able to work with top government leaders and business executives
• A committed team with the experience, vision, and passion to make this plan a success.

Sarnoff has played a pioneering role in the creation, sustenance, and growth of some of the most pervasive consumer technologies. Sarnoff, together with AtomicTangerine, is the ideal team to assume the leading role in enabling the use of the DNS for individual Internet users.

Sarnoff and AtomicTangerine both attribute their success to their greatest asset: their people. Both sister firms have created a culture of proactive leadership at every level of the organization.

At Sarnoff, "champions" are any members of the staff who have agreed to take responsibility for the success of a program; who are passionate and articulate about their vision; who have the breadth of knowledge and experience to succeed; and who are leaders, and have teams who believe in them and will follow them. In addition, Sarnoff’s management, scientists, and engineers are leaders in scientific, engineering, and professional societies and technology conferences, both national and international. As technology leaders they present and publish papers on state of the art technical results and program developments. Often they are active in the leadership and management of those societies and conferences.

At AtomicTangerine, the venture consulting model has infused the firm with an emphasis on entrepreneurial skills and a strong culture of entrepreneurship. Employees share their clients’ mission to create breakthrough services that provide sustainable competitive advantage, and often receive an equity stake in the client. In doing so they become true partners with the client, and hence many AtomicTangerine employees have borne the weighty responsibility of launching new businesses that depend on their management, technology, and strategy expertise. The following list of new ventures provides a solid example of AtomicTangerine’s ability to build teams and companies internally as well as externally, as well as to find them funding:

On the business side, the proposed Registry Operator is being assisted by a variety of key individuals from Sarnoff and AtomicTangerine, including several program directors. Please see D15.1 for biographical information for technical managers, and see Appendix C for full resumes.

Dr. James E. Carnes is President and CEO of the Sarnoff Corporation. A recognized authority in the field of charge-coupled devices, he has played a major role in the development of High Definition Television (HDTV) in the U.S. since 1987. He joined RCA Laboratories in 1969 as a Member of the Technical Staff and worked in the area of MOS device structures, particularly CCD technology and applications. Since 1977 he has served in a variety of management positions in the company’s Consumer Electronics Division, culminating in his appointment as Vice President, Consumer Electronics and Information Sciences Research in 1987, when Sarnoff became a subsidiary of SRI International. Dr. Carnes has been issued nine U.S. patents and is the author of more than 100 papers and presentations. In 1981 he was a recipient of the David Sarnoff Award for Outstanding Technical Achievement "for the development and implementation of a CCD comb filter integrated circuit in color television receivers." He received a B.S. degree in Engineering Science from The Pennsylvania State University in 1961 and a Ph.D. degree in Electrical Engineering from Princeton University in 1970. Dr. Carnes is a Fellow of the IEEE and a member of the National Academy of Engineering. He currently sits on the Board of Directors of the Sarnoff Corporation, SRI International, Sensar Inc (a Sarnoff Technology Venture), and Sarif, Inc.

Norman D. Winarsky is Corporate Vice President of Sarnoff Corporation, responsible for Internet and Multimedia Technologies. Business units within Sarnoff reporting to Dr. Winarsky include the National Information Display Laboratory (NIDL), Vision Technologies, and Computational Science. Dr. Winarsky is a founder of the National Information Display Laboratory - a center of excellence for the government in information processing and display technologies. A recipient of Sarnoff's highest honor, the David Sarnoff Award for Outstanding Technical Achievement., he was also founder of five of Sarnoff’s sixteen spinoffs. Dr. Winarsky received the BS, MS, and Ph.D. degrees in Mathematics from the University of Chicago, graduating Summa Cum Laude and Phi Beta Kappa. He has written over 50 papers and given hundreds of invited talks, lectures, and presentations throughout the world. His primary responsibility is to advance and execute the Sarnoff Internet Strategy.

Glenn Reitmeier is Vice President of Internet Technology Strategy and Development at Sarnoff Corporation. His career has pioneered the development of digital television, digital media and digital convergence. He has created and led world-leading developments in Digital Cinema, object coding and wavelet image compression in MPEG-4, MPEG-2 compressed bitstream processing and integrated circuits for digital television receivers. His efforts have contributed to the formation of six new startup companies and resulted in three technical Emmy awards. Mr. Reitmeier was one of the leading contributors to establishing the ATSC Digital Television standard that was approved by the FCC in 1996. In the Digital HDTV Grand Alliance, he performed in both technical and strategic capacities, and was the leader of Grand Alliance computer interoperability efforts. He has also led projects related to developing new technologies for consumer information services, including computer and network architectures, Digital Signal Processing modems and natural language software. Earlier, Mr. Reitmeier was a contributor to the establishment of the world’s first digital television standards (the ITU 601 sampling standard and the D1 tape standard) that are now in widespread use in the broadcast industry. He holds over 40 patents in digital television technology. He received the B.E.E. degree summa cum laude in 1977 and an M.S.E. degree in Systems Engineering from the University of Pennsylvania in 1979.

Shailendra K. Suman is responsible for the business and strategy development, market analysis, and strategic alliances for nVention and its ventures. Prior to joining Sarnoff, Mr. Suman served in various management capacities for several energy-related companies, including responsibilities for strategy as well as new venture development. Mr. Suman received his BS in Mechanical Engineering from B.I.T. Sindri, India, an MS in Control Systems from University of Alabama, and an MBA in Finance and Strategy from University of Minnesota in 1986, 1989, and 1995 respectively. He completed all the coursework towards a Ph.D. in Mechanical Engineering at Columbia University, NY in 1989. Mr. Suman is a member of the Conference Board’s International Council of Innovation & Technology Management and the Institute of Electronics and Electrical Engineers.

Anne M. VanLent serves as Sarnoff’s Vice President, Ventures and Licensing. Her responsibilities include identifying technologies that can serve as the foundation of new commercial businesses, and helping to assemble the technical, managerial, and financial resources to create those businesses. She also manages and oversees all of the patent and licensing activities of Sarnoff. Ms. VanLent has extensive experience in founding and building technology-based companies. In addition, she is experienced with emerging growth companies and has a broad background in science, finance, and business development. Before joining the Sarnoff Corporation in July of 1997, Ms. VanLent was the founder of AMV Associates, a life-sciences consulting firm; co-founder of Trophix Pharmaceuticals Inc., a venture-backed neuroscience company; and Senior Vice President and CFO of The Liposome Company, Inc. Her undergraduate degree in physics, conferred with honors and great distinction, was received from Mount Holyoke College. She conducted graduate studies at the Universite de Strasbourg, Strasbourg, France. Anne currently serves as a director of two public companies and several private emerging growth technology companies.

Nova Spivack is Founder, President and CEO of Lucid Ventures Inc. and Co-Founder and CEO of Lucid Associates, LLC. Mr Spivack has been an Internet venture strategy advisor to Sarnoff Corporation for the past year and a prime mover in its decision to create nVention. From 1994, Mr Spivack was a Co-Founder, Executive Vice President, and Director of EarthWeb Inc., an industry-leading Internet venture. He co-led the company from startup through an historic IPO (the first business-to-business IPO and one of the all-time best first-day gainers) and a secondary public offering, serving as executive vice-president for product development and strategy. Mr. Spivack, a published author and frequent keynote speaker, is currently developing several new proprietary patents in the areas of GPS technology, Internet television, wireless consumer electronics, Internet radio, artificial intelligence and augmented reality, and is the principle inventor of multiple fundamental patents related to simulcasting Internet content with television broadcasts for use in entertainment, education, sports, news and information services. Mr Spivack is among the top-rated featured "Internet Business Experts" on Expert-central.com, part of the About.com network and has been interviewed by many prominent publications.

Anil Rungta worked in Investment Banking at JP Morgan for 5 years. Mr. Rungta played a variety of roles in his career at JP Morgan, including technology banking, capital markets, syndicate and derivatives. Most recently Mr. Rungta was a member of the West Coast senior banking team at JP Morgan continuing the effort to build out JP Morgan’s technology/ Internet franchise. Mr. Rungta was primarily responsible for business development with Internet/ High Tech companies to provide financing and strategic advisory services, as well as to manage client relationships. Mr. Rungta was a key member of the core equity team that grew JP Morgan’s equity business from #18 in the league tables in 1995 to #6 in 1999, with annual revenues approaching $800MM. As part of the Convertibles marketing team, Mr. Rungta helped create a proprietary dividend exchange product that was heavily marketed to and utilized by several RBOCs and Utilities to preserve cash in order to invest in higher growth opportunities. Some of the clients that Mr. Rungta was involved with in his work at JP Morgan include Swisscom, EarthWeb, CyberSource, Network Commerce, Network Solutions, ActivCard, Sycamore Networks, Pharmacia & Upjohn, Telefonica de Espana, Telecom Italia, Ford, Gillette, ENI, Cable and Wireless, STET Hellas, Telstra, MATAV, MGM, China Telecom, Unibanco, Bayerische Vereinsbank, etc. Mr. Rungta is a graduate of Williams College and the London School of Economics. While at Williams, Mr. Rungta was the Founder and President of a collegiate direct marketing company called Impact Marketing. Mr. Rungta has two patents pending.

Dileep Agrawal founded and established Nepal’s first ISP. His company, WorldLink Communications was one of the first Internet companies in the Indian Subcontinent, has grown to be not only the largest ISP in Nepal, but one of the largest IT services companies employing more than 100 people. At WorldLink Communications, Dileep implemented all necessary technology, including setting up Unix-based servers with ISP applications, configuring entry-level Cisco routers, and establishing international data connectivity to upstream Internet provider. Mr. Agrawal was in-charge of overall corporate management, product development, and system administration. WorldLink has registered tremendous sustained growth and provides services ranging from Internet connectivity and related services to VSAT networking and software development. Mr. Agrawal has received various honors and awards, which include: a) member of National IT Infrastructure Development Committee - invited by His Majesty’s Government of Nepal to advise the National IT Infrastructure Development Committee on behalf of the private sector in the country; b) expert Speaker at National Y2K Conference (January 29, 1999) - invited to make an expert presentation at the National Y2K Conference in Katmandu organized by His Majesty’s Government of Nepal. Amongst other things, Mr. Agrawal’s technical experience includes setting up Nepal’s first nation-wide TCP/IP network and designing and supervising the installation of Katmandu’s first broadband wireless network based on wireless Ethernet technology. Mr. Agrawal is a graduate of Bates College.

William J. Burke has been Sarnoff’s Vice President for Intellectual Property and Licensing since 1997. Joining RCA Laboratories in 1967, in 1978 Dr. Burke transferred to the RCA Patent Operations in 1978 and was named a Managing Patent Attorney in 1983. In 1987 when the David Sarnoff Research Center was transferred to SRI International by General Electric, he was named Director of Law and Patent Operations as well as Assistant Secretary for the new company, becoming Acting General Counsel in 1995. In 1997 Dr. Burke was named Vice President, Intellectual Property and Licensing. He received his JD from New York Law School and has been admitted to the New York Bar, New Jersey Bar, Court of Appeals of the Federal Circuit and Court of Federal Claims and is registered to practice before the U.S. Patent and Trademark Office. His undergraduate degree in Physics is from Boston College and his PhD degree is from Tufts University. Dr. Burke was a National Science Foundation Postdoctoral Fellow at University of Illinois, Urbana.

Before joining AtomicTangerine, Mr. Fornaci served as chief operating officer of Luna Information Systems, an e-business software company. In previous work, he served as chief executive officer at IBIS Consulting, Inc., chief information and technology officer of a GE Capital Services Company, and vice president and chief information and technology officer of several other international companies. A sought-after speaker, Mr. Fornaci has spoken at the IT Metrics Summit (sponsored by the World Research Group), International HR (sponsored by the National Foreign Trade Council), Intranet ’98 (sponsored by Business Intelligence), HR Internet ’97 (World Research Group), the Zonerthon Internet Conference, the Software 500 Executive Forum, the 16^th Annual Software Forum, Software Marketing Perspectives, the IDG Global Summit, Corporate Intranet (sponsored by Business Intelligence), SIMS, IDG, and the Morgan Stanley Investment Conference. Mr. Fornaci holds a B.A. in physics from the University of California at Berkeley.

AtomicTangerine’s chief technology officer, specializes in speech recognition and computer networking technologies, and is currently working with the Nuance speech recognition system. He periodically teaches graduate classes on digital multimedia technology at Stanford University, where his students have done projects ranging from Java-based Internet shopping applications to voice control for networked virtual environments. Dr. Zambre has also been an invited speaker on Internet technology and its applications at international scientific conferences and at artists’ guild workshops in Hollywood. He has applied and integrated new and old technologies in a wide variety of settings. He has experience programming Sun, VAX, Xerox, IBM, and PC systems with C/C++, Java, Fortran, and assembler. Before joining AtomicTangerine and, previously, SRI International, Dr. Zambre cofounded a company that wrote software for diagnosing and analyzing errors in particle accelerators. The software was sold to international and U.S. laboratories and, on average, has reduced accelerator downtime by a factor of five. In many cases, the resulting cost reduction per incident exceeds US $200,000. Dr. Zambre holds a B.S. (cum laude) and M.S. (awarded simultaneously with the B.S.) in engineering from Yale University, and a Ph.D. in applied physics from Stanford University.

Sterling Stoudenmire has more than 11 years of experience in strategy and information technology consulting, and has worked with numerous "dot-com" clients in the formation, capitalization and emergent stages. He has a unique combination of business acumen across a variety of industries and expertise in emerging technologies, frequently acting as overall architect for new business opportunities. Before joining AtomicTangerine, Mr. Stoudenmire served as director, e-business strategy, for Arthur Andersen LLP. He is a frequent public speaker on e-business, information rules, and "innovation through information technology" for organizational change and competitive advantage. Past audiences include the World Economic Forum, AA’s E-Business Video Series, and the Florida Institute of Certified Public Accountants. Mr. Stoudenmire holds a B.S. in finance from Florida State University.

Don Holden has more than 20 years of experience in information systems, security, encryption, business continuity and disaster recovery planning. He has written numerous white papers and given presentations on information security management and technology issues such as intrusion detection, firewalls, biometric authentication and digital watermarking. Mr. Holden is currently the chairman of the IEEE Computer Society working group on recommended best practices for Internet security. He is also participating in the development of security standards for the financial industry. Before joining AtomicTangerine, Mr. Holden was a senior consultant for SRI Consulting, where he was a project leader for an Internet startup assignment to plan a revolutionary secure electronic commerce portal-based business. He previously served as program manager for Compaq’s Security Program Office and as the director of operations research at a major Boston bank. Mr. Holden holds an MBA from Wharton and a B.S. in business and accounting from Georgetown University. He is a Certified Information System Security Professional (CISSP) and a member of the IEEE Computer Society, the Computer Security Institute, and the Information Systems Security Association.

Laura Bilodeau specializes in market strategy, business modeling, and business case development for entrepreneurial ventures as well as Fortune 500 companies. In particular, she focuses on the use of quantitative techniques and market assessment to validate the business plans for new e-commerce ventures. Ms. Bilodeau has worked closely with service providers to build market sizing and revenue forecasting models, with a focus on broadband Internet access and the e-commerce capabilities they make possible. Before joining AtomicTangerine, Ms. Bilodeau was a consultant in the telecommunications practice at A. T. Kearney. Previously she worked at D. E. Shaw & Company, a proprietary trading firm in New York, where she was responsible for conducting financial analysis and due diligence for potential new ventures. Ms. Bilodeau holds a B.A. in astrophysics from Princeton University and an MBA from the Wharton School of Business.

Sue Mundell’s background is at the juncture between Internet consulting and venture capital. Before joining AtomicTangerine Ms. Mundell worked at Axxon Capital, a Massachusetts venture capital firm, where she assessed and selected venture start-ups applying for funding. She has also helped numerous Internet companies improve their business models, write their business plans, and fine-tune their pitches for the venture capital community. Previously she launched and led a project at The Library of Congress to digitize fifty volumes of a bibliographic reference work for conversion to CD-ROM and Web formats. Ms. Mundell holds a MS/BS in political science from MIT and an MBA, magna cum laude, from Babson College, the top-ranked entrepreneurship program in the US.

Current Staff and Future Employee Expansion: Sarnoff and AtomicTangerine (formerly SRI Consulting) have a history of attracting the best people and staffing their operations and incubated ventures with the most talented teams available. Currently, Sarnoff has 800 employees and AtomicTangerine has 250. AtomicTangerine’s employee headcount has grown extremely rapidly, from a mere 80 employees when AtomicTangerine spun off from SRI in January 2000 to 250 employees in September 2000. AtomicTangerine’s compelling venture consulting model and strong reputation among clients have enabled it to attract and recruit top talent at high speed. AtomicTangerine’s Vice President of People and other human resources managers stand ready to advise the Registry as it grows its employee base.

Hiring and Employment Policies: As one of the Sarnoff Technology Venture companies, the Registry will adopt the employment standards, policies, and procedures in place at Sarnoff, including adherence to the Equal Employment Opportunity law. Given its primary responsibility to safeguard Registry information, the Registry will require all employees who have access to secured information to undergo a thorough background security check. For similar reasons, the Registry will maintain a Drug-Free Workplace, implementing Sarnoff’s policies in this regard. Excerpts from Sarnoff’s "Standards of Business Conduct" are briefly described below.

Training: The Registry will develop training programs and extensive reference manuals in support of them. All employees and consultants will be required to undergo rigorous training and will be expected to have a thorough familiarity with the material in the reference manuals. New hires will attend a company boot camp modeled on that of AtomicTangerine to get acquainted with colleagues, learn company culture and values, and foster cross-functional teamwork among employees.

Physical Expansion: The Registry will be housed in new facilities in New Jersey that will accommodate rapid expansion to a large staff size of up to 200 people.

Sarnoff has obtained commercial general liability insurance from Marsh Risk & Insurance services of Three Embarcadero Center, 3^rd Floor, San Francisco, CA 94111. As one of the Sarnoff portfolio companies, the Registry will obtain and/or extend this coverage as necessary to cover all reasonable risks involved. AtomicTangerine is also covered by Marsh Risk & Insurance Services.

The insurance documents are confidential, but can be provided upon request.

The proposed TLD will allow individuals to register a service-provider-independent point of contact for configuring Internet-enabled applications and create an addressing mechanism for an individual’s Internet-enabled devices. Our services can be broadly grouped into three subcategories: (a) conducting registration services for the proposed TLD; (b) enabling the next generation of middleware, applications, services and technologies around the DNS in an open and competitive manner; and (c) creating a global base for the Registry.

As a Registry, we will provide equivalent registration services to all current and future ICANN Accredited Registrars and will implement fair and equitable conflict resolution mechanisms in connection with these obligations. We will maintain the master directory of all second and third level domain names in the proposed TLD for those domain names entered in the Registry (see Naming Conventions, Section E3). We will also provide and maintain the shared registration system that will allow all registrars to enter new second and third level domain names into the master directory and to submit modifications, transfers, re-registrations and deletions for existing second and third level domain names. We will offer variable registration terms, up to 10 years, and for longer periods of time to be implemented later, including lifetime and perpetual registrations.

The Registry will maintain the integrity of the domain name records in its databases and ensure full uptime. Continuous availability of nameservers at all times to resolve the proposed TLD will be the top priority of the Registry. The central database will be available for access by accredited registrars on a 24/ 7 basis. In addition, the Registry will cooperate in resolution of domain name disputes based on TLD Policies, as outlined in Section E6. The Registry will also provide "pre-emption" and "pre-registration" services to fully protect intellectual property and registered trademarks, as outlined in the TLD policies document. Whois service will be provided as outlined in the TLD policies document, Sections E5.6 and E7.

Name Space for Everyone and Every Device: The Registry’s proposed naming scheme (see Section E3) lays out a plan to ensure that everyone has cheap and equitable access to a Personal Domain Name registration. This naming scheme covers all the individuals of the world, as well as Internet enabled devices. The naming scheme is descriptive with respect to the individual, yet generic in that all individuals are covered.

In accordance with its mission of aiding the proliferation of the DNS to serve the needs of individuals and their Internet enabled devices globally, the Registry will provide a certain type of domain name, in certain quantities, over certain time frames (discussed in more detail in the TLD policies document) completely free of charge. Rather than compete with the registrars in the provision of these free domain names to the end user, the Registry will provide them for free to the registrars, with the hope that they be provided to the end user for free.

Customer Support/Technical Assistance Services: High quality customer support and technical assistance will be vital to the satisfaction of our customers, the registrars. Prior to going into a production environment, we will develop an operation test and evaluation environment for the registrars to test their systems. Furthermore, we will be assigning one point of contact to each registrar to help resolve issues. In addition, a trained team of engineers will be on standby to address any operational issues that adversely impact the registrars.

The Registry will also develop and implement standards, policies, and functions designed to enhance the ease, speed, and security of the registration process by adding new capabilities to facilitate the registration process and by providing quality customer service and support to registrars, as well as to retail customers when needed.

As the Registry for individual domain names, we will engage as many Registrars as possible in a geographically dispersed manner to provide global reach and support. As a critical infrastructure for mapping the global Personal Domain Name system, we will provide secure, reliable, and globally accessible registration facilities.

Personalization and Privacy Protection: The Registry Operator will abide by the strictest standards of privacy protection in order to protect registrants’ information, while protecting the rights and addressing the concerns of Intellectual Property and trademark holders as well as aggrieved parties. A Whois directory will be maintained, by which the registrant's contact information can be obtained in response to a manual query identifying any Particular Domain Name (please see the TLD policies document for more detail on the Whois policy). However, complete registration information for an individual in the proposed TLD will be made available only upon presentation of a legitimate inquiry indicating the name, address, and bar registration number (or international equivalent) of an attorney making the request and identifying the trademark sought to be enforced. This will prevent this data from being obtained by would-be stalkers, thieves, etc. (See Section E5.6 for further information on the Whois policy.)

Because one of the possible services to be added to the proposed TLD involves personalization, protecting the privacy of personal data is of paramount importance. The Registry Operator will ensure, to the greatest extent possible technologically and under the law, that any personal information used at the registry level is maintained according to the user’s established preferences and in a secure and verifiable manner.

It is appropriate and fitting that the DNS evolve to accommodate the needs of individuals and their information appliances. The underpinnings of the next generation of applications and services on the Internet are rooted in the DNS. The Registry’s mission is to make the power of the DNS pervasive and available to every Internet user. Key to the notion of creating the proposed TLD is the availability of a unique ID for every individual and device on our planet in a cheap, fair and equitable manner.

Some of the potential middleware, applications, and services that can be developed are outlined below. This is just an indicative list of some of the potential technologies that will benefit and open new opportunities for both consumers and businesses. The proposed Registry has already received verbal interest from companies interested in forming alliances with it to bring such middleware and services to market (see Appendix D for a letter of intent from Compaq, the first of many such expected letters).

Aliasing: Individuals may utilize a service whereby they will use different aliases for different purposes, such as segmenting and managing different aspects of their lives that are conducted in Internet space. The specific use of aliases facilitates redirection and remediation of communications as life events dictate, with minimal disruption to sender and receiver of messages. When used in conjunction with possible messaging capabilities described below, this could become an even more powerful tool to simplify life.

Message Management Services: The proposed TLD enables the creation of new services associated with managing the flow of multi-format messages to an individual with multiple receiving devices. The range of services that can be provided is extremely broad, and includes such services as message routing, message transcoding, message binning/blocking, and message status services for the sender. Consider the following categories of services, which -- when combined into an integrated service offering -- will be revolutionary in their impact upon personal communications:

• Message Routing will allow the user to route messages to the device that he/she is using. Users may directly specify their device, or they may set up rules-based defaults. For example, the user could specify that he can be reached "in the office" Monday-Friday from 8 to 6, "on the cell phone" from 6 to 7, "at home" from 7 to 9, and "through voice-mail" all other hours.
• Message Transcoding will allow users to be reached on specific device types of their preference. For example, text e-mail messages could be transcoded to voice for cell phone delivery or vice versa.
• Message Binning/Blocking will allow users to automatically organize and manage incoming messages by category (e.g., personal messages, workgroup messages, urgent messages from the boss, etc.). This might be automatically inferred from the alias used to address the message (e.g., personal messages are sent to john-s-smith.hometown.TLD, while work messages are sent to john-s-smith.profession.TLD). Once categorized, messages may be organized into different electronic folders, prioritized by category, routed by category, and transcoded by category. For example, an e-mail to an alias used by one’s boss might be transcoded to voice and delivered via cell phone while other categories are treated quite differently. Conversely, users may want to specify to block certain categories at certain times, for example "no business messages after 11 pm…"
• Message Status Services could be provided to the sender. One of the problems with e-mail communication today is the inability to know whether or not the message was delivered or went into a vacuum. The simplest form of message status is notifying the sender if a message is undeliverable, but more advanced tracing could produce information such as "John S. Smith is out of the office, but your message was transcoded to voice-mail", etc. Obviously in order to implement such a service, the users would also have to be provided with the ability to block this feature if they so desired.

With the United States’ electronic signature act taking effect October 1, 2000, a more secure and pervasive solution to Internet security is called for.

The most secure solution right now is based on public/private key encryption. One "signs" a document by adding the "private key" encrypted text to the original document, after which the recipient can decrypt the "signature" with the public key of the signer. If the encrypted text equals that of the original document, the signature is authentic. The Registry could play a future role by serving as the trusted source for an individual’s public key, thus enhancing security in the proposed TLD. To enhance security further, the Registry could form partnerships with cell phone operators and PC and PDA manufacturers to imbed the public key of the Registry Operator in the hardware. Although this authentication technology is currently in use, to date it has been used to link to a device rather than to a person. Expanding it to identify people using the Personal Domain Name system would be a natural extension.

The Internet is going to shift from the computer desktop as the primary access device to other mediums and channels, such as TV, handheld devices, automobiles, smart mobile devices, etc. Sarnoff has great knowledge and understanding of these various mediums and is recognized as the premier consumer/commercial research and innovating organization in the world. As such, Sarnoff is very well positioned to lead the charge into the next- generation application of the DNS and to bring digital identifiers not just to people, but to Internet-enabled devices, home and residential gateways, information appliances, and personal networking environments.

The proposed TLD will enable individuals to create a personal multimedia legacy of their lives for future generations. Family histories and genealogy will have an increasing online component, as the life memories of stories, images, and sounds are preserved for future generations. We envision new services dedicated to the creation, management (e.g., creating new links as families grow and change), and "perpetual care" of these personal archives. Once created, an individual Personal Domain Name could be maintained by friends and/or family as a memorial to that individual after his/her passing. Alternatively, the Personal Domain Name holder could pay to have his/her domain name registered for the highest period permitted by law or the life of the Registry. The Registry expects to enable lifetime and perpetual registrations in due time.

The creation of the proposed TLD will greatly facilitate the use of network-based computing and user-interface environments that can roam the world with users, independent of an association with a physical device, providing a focal point for the true convergence of platforms and devices. With the Personal Domain Name system, Internet-enabled telephony, file sharing, remote workgroup coordination, personal communications, and wireless devices such as personal digital assistants could be configured via a unitary interface to each individual’s specifications.

This will be important to travelers and mobile professionals who may have readily available Internet access, but not necessarily through their own PC. The personalization gained from user preferences, cookies, etc., can become network-based if the proposed TLD domain is used to associate a personal environment with a user (while keeping all personal information private and secure, as discussed above). The same approach will facilitate the growth of casual use in Internet cafes and other public and semi-public venues, serving to expand more and more consumer behavior on Web-based applications. Even those who cannot afford their own device will benefit, via individualized access to Internet service through PCs or other devices that are shared among multiple families or that are publicly available at libraries or schools.

Other uses of the Personal Domain Name system are also of great social benefit, including:

The Registry seeks to enable the next generation of middleware, services and technologies around the DNS in an open and competitive manner. We also seek to create and lead alliances such that industry standards can be developed to enable the development of applications based on the DNS that benefit everyone. Further, we intend to fully participate in efforts by the IETF (Internet Engineering Task Force), MINC (Multilingual Internet Names Consortium), and other Internet standards organizations to further develop DNS processes, procedures, protocols, and other solutions to expand the capabilities of the DNS systems.

Sarnoff has many years’ experience working with industry organizations to develop new standards for various industries, including very recently the Grand Alliance to develop the HDTV system standard. The Registry will leverage that expertise to create an unofficial policymaking organization to develop consensus standards of a global nature around the Personal Domain Name system. As a result, Internet application standards and protocols, mutually agreed upon by industry leaders, various relevant constituencies, and consumer advocates, can be developed. Because the Registry is not an access service provider, application service provider, nor device manufacturer, it will have better credibility to lead such a standards-setting initiative.

International advisors, sponsorships, and marketing will be critical areas of focus for the Registry. Sarnoff and AtomicTangerine are currently in active discussion with a variety of international organizations to form partnerships. A global advisory group will be established to help the Registry consider the needs of all constituents, regardless of nationality. Alliances will be sought with foreign and multinational companies on a continuous basis to enable the development of middleware and innovative services that appeal to various communities around the world. Likewise, a global base of corporate sponsors will be sought to further communicate the Registry’s international message. Initial marketing efforts will target those areas of the world where individuals are most ready to embrace applications and services based on the Personal Domain Name system, i.e., Europe and Asia, where the growth rate of wireless web-enabled devices is the highest.

As described in the mission statement, the Registry seeks to enable all individuals to obtain a Personal Domain Name while still maintaining a financially sound business. The proposed pricing and tiers are as follows.

The proposed service will offer three price tiers of names:

• Free personal numeric domain names
• Standard format third-level domain names at US $2 wholesale
• Customized domain names at US $4 wholesale

These tiers and the reasoning behind them are explained in greater detail below. Please note the naming convention is discussed in greater detail in the TLD Policies document, E3.

Free Personal Numeric Domain Names: Domain names of the form tendigits.twoletters.TLD (as described in D13.2.1 above) will be provided free of charge in order to provide equitable access to a Personal Domain Name irrespective of an individual’s ability to pay. Our projections predict that in Year 1 around 20% of registrations in the proposed TLD will be requests for free numeric domain names, a figure predicted to grow to 40% by the end of Year 4. (See Section D13.2.5, Estimated Demand for Registry Services, for further information.) Revenues from fee-based registrations will be used in part to subsidize the free domain name program.

Standard Format Third-Level Domain Names: Domain names of the format firstname-middleinitial-lastname.fourdigits.TLD represent the Registry’s standard offering. At the low price of US $2 wholesale, these names give users the opportunity to have a personalized name at an extremely economical price. The four digits enable creation of multiple domain names of the same firstname-middleinitial-lastname combination.

Customized Domain Names: For individuals who want a customized domain name, they will have the opportunity to request a third- or second-level domain name of their choosing. During the Startup period, requests for domain names will be handled by lottery. At the conclusion of the lottery, a registrant will be selected at random from the pool of parties indicating an interest. The base registration fee charged the winning registrant may be determined by the number of participants in the lottery in order to recover overhead costs based on the volume of entry requests. The annual renewal fee for a domain name bought by lottery will be the price charged for the initial registration of the domain name.

After the startup period, all customized domain names will be sold on a first come, first served basis. Customized domain names registered after the Startup period will be priced at US $4 wholesale, and an annual renewal fee of US $4 wholesale per name will be required to maintain them.

Projected Revenues: Using these values for the variables in our revenue model(base case or 50% confidence level), we calculate resulting fee revenues at roughly US $6.6 M, US $31.7 M, US $66.1 M, and US $134.1 M for the first 4 years, respectively.

The general market for the proposed personalized domain is Internet users who want to use the Internet for centralizing and/or routing communications (e-mail, instant messaging, VoIP, etc.), managing and conducting financial transactions, shopping online, storing and managing personal information electronically, mobile computing, maintaining a Web presence, etc. Any individual who stands to benefit from portability and a service provider invariant point of contact and communication is a target for the proposed TLD registration and services surrounding it. Ultimately, the Registry is proposing a revolutionary new service offering that will bring new, innovative technology, applications, and services to Internet users.

Market research indicates that Personal Domain Names and the portability and simplicity they bring are of great interest to several target markets, including: (1) business travelers who are already "wired" to their home office while traveling – either through a cell phone, pager, laptop, and/or PDA with Internet capability; and (2) general consumers seeking to simplify their lives. In both cases, Personal Domain Name owners will be able to reduce the amount of time they spend checking multiple e-mail and voice-mail systems for messages, and will feel secure that the messages they want to receive are being sent according to their preferences as to when, where, and how they wish to receive them. Even more compellingly, owners of a Personal Domain Name will no longer risk losing important e-mail from colleagues and friends each time they switch jobs, schools, or Internet service providers, since their Personal Domain Name is portable across employers, colleges, and service providers. Given the increasingly transient nature of the world’s workforce, this is a particularly attractive feature and will provide us with easy access to our target market.

Our modest pricing policies (free for a numeric domain name and US $2-4 per year for most domain names) will assist in sparking demand quickly in a market that is already in severe need of an organized name space. Although we intend to roll out a formal marketing campaign, we expect that we will also benefit from word of mouth, e-mail campaigns, and positive press coverage of our creative solution to a very tangible problem.

To quantify the size of the market, we first consider the total base of Internet users:

Additional trends suggest the increasing need for e-mail consolidation and simplification:

• The Yankee Group’s 1999 Mobile User Survey found that the average user of mobile devices received 4.03 voice-mails and 8.22 e-mails per day.
• Dataquest’s May 1999 survey found that each US e-mail user in the year 2000 manages an average of 2.5 e-mail accounts (and some, many more).
• The same survey found that half of all Internet users surveyed would use a service that displayed all of their e-mail accounts and let them execute all of their financial transactions on one site.

Within the starting base of Internet users, a moderate percentage will shift towards the more sophisticated services enabled by our proposed TLD. This adoption, however, will stagger across different groups at different rates. We expect two particular segments to surface as early adopters:

One group of likely early adopters will be youth ages 13 to 23. These individuals are very mobile, early adopters of new services and technologies and spend a lot of time on the Internet. An exceptionally mobile and sociable group, Generation Y college students will seize the opportunity to obtain a globally accessible service provider invariant identifier that can serve their needs and simplify their lives.

According to the US Census Bureau, there are currently 42 million people in the age group 13-23 in the US alone. Globally, the number is much higher. We estimate that by 2001, 1-1.5% or approximately 500,000 youth, in the US alone, will have purchased their own Personal Domain Name, while by 2004, nearly 12-15% or approximately 5 million youth in the US alone will have done so. Adding in the rest of the world’s teenagers and college students could easily double these figures or more, depending on adoption rates overseas.

For this segment, one can find promising indicators in a wide variety of sources. According to the Travel Industry of America, 63% of the 43.9 million US business travelers in 1999 were "wired" to their home office while traveling, through either a cell phone, pager, laptop, and/or PDA. One can also assume that the number of e-mails and voice mails received by business travelers far exceeds the number of messages for the average US user cited above.

Further validation of expected demand for our proposed service is offered from another outside source: a 1998 Yankee Group survey found that many wireless users were either very or somewhat interested in a single number service that would integrate home, wireless, and pager numbers. This trend was particularly prevalent among those on the road more than 6 days a month (61%), those who use wireless primarily for business (61%), and those whose cell phone bills were more than US $50 per month (67%). These describe the profile of the typical wired business traveler.

Clearly one can conclude that for the wired business traveler who handles a large volume of e-mails, pages, cell phone calls, and other transactions each day, a communications routing solution based on Personal Domain Names is particularly attractive. Therefore, we expect high demand among this target segment.

From both 1996 to 1997 and 1997 to 1998, the number of US business travelers increased 2% each year. Using this historical growth rate, we project that the number of wired US business travelers will increase from 28.2 million in 2000 to 30.5 million in 2004. Assuming an initially low but fast-growing adoption rate for the proposed Personal Domain Name service within this segment, we project the US component of these early adopters at 1 million in 2001, increasing to 9 million individuals by 2004. For projections purpose, we assume that there are at least an equal number of business travelers outside the US, and that therefore the totals for the following years will be double the US figure. This gives us a global early adopter market of 1 million in 2001 and 18 million in 2004.

The above groups represent only a portion of the total market appeal of the Personal Domain Name. The broader market is comprised of all individuals who can use a Personal Domain Name as a service provider-invariant point of contact for configuring Internet-enabled applications and create an addressing mechanism for themselves as well their information appliances.

According to a March 2000 Lehman Brothers report, the number of worldwide users expected to connect to the Internet via wireless devices and PDAs is expected to reach 50 million by the end of 2000, with projections of 1.2 billion users by 2005. Of these users, a substantial portion will want to avail themselves of the Personal Domain Name service to better manage, screen, and route their communications from multiple channels to their preferred device at any given point in time.

Within this enormous consumer market, it is difficult to predict the adoption rate of our TLD by leisure users. However, the findings of the Yankee Group’s Sept. 1999 US Mobile User Survey provide some clues:

• 61% of e-mail messages are personal, with only 39% business-related. Therefore, the ability to better manage one’s non-business inbound communications will hold great appeal.
• 37% of mobile users said they accessed e-mail mainly from home, while 14% did so from work. This statistic bodes well for personal use of the Personal Domain Name service, which will permit users to set their own preferences for routing and handling all their incoming communications to their satisfaction.

While we expect that general consumers will be outnumbered by the early adopters in 2001, for 2002 onward we assume that general consumers will equal or outpace specific subcategories. Taking the 60-40 ratio of personal to business-related e-mails and applying that same ratio to the number of users, we expect roughly 500,000 consumer users in 2001, increasing to about 27 million in 2004.

To target the individual and Internet enabled devices market for the proposed TLD, the Registry will use the appropriate combination of marketing, sales channels and pricing. Given our low prices and the widespread use of simple communications tools such as e-mail, the above target markets for the DNS-based Digital IDs (Personal Domain Names) are easily accessed. The channels to be utilized include Registrars, applications developers, different types of service providers (e.g., communications, telecom, finance), etc. In a way, the proposed TLD will require little marketing because there is a tremendous pent up demand for the type of name space proposed here. No TLD exists today to serve this need. The proposed TLD will have the right branding as well as the right purpose to attract registrants. To enhance this awareness and branding, the Registry will undertake a comprehensive marketing campaign to inform and familiarize individuals globally of the new TLD and the purpose and market it serves.

The Registry will work closely with a top-flight public relation firms interested in representing the marketing efforts of the proposed TLD. Please see attached letter of interest from Ruder Finn.

Our top priorities in the marketplace are to undertake a comprehensive global awareness campaign aimed at the end user. In addition, we are seeking to provide significant and reliable applications, services and support to the technology and middleware development circles. Co-promotions with distribution channels and expansion of the distribution channels to include traditional service providers (such as Telcos, ISPs, etc.) will be a focus as well.

In general marketing campaigns directed at end users as well as the distribution channels, the purpose and value proposition of the Proposed TLD will be strongly emphasized. Security, utility, efficiency, trust, and privacy protection are some of the other key themes.

The Registry will work closely with the selected Public Relations and Marketing firm to effect a strategically sequenced market entry and technology advocacy program for the Registry to gain early traction and technical recognition among its target customer base of individuals seeking unique digital identities on the Internet. The PR firm will also closely assist in a) enabling industry analysts and editors to better evaluate, understand and report on the Registry products and services through effective strategic messaging and technology communications; b) establish the Registry as a credible authority leader in interpreting customer needs and requirements in the evolving domain name market; and c) gain optimum news coverage and analyst validation of the Registry’s strategic marketing agenda, technology development efforts and category positioning.

The marketing initiatives of year one would include:

• Intensive, personalized communications with ICANN’s At Large membership and Supporting Organizations to discuss their needs, and the opportunities and services made possible by the new TLD.
• Intensive, personalized presentations and communications to industry analysts and leading journalists in key centers of the world
• Intensive, personalized presentations and communications to partners/retailers in North America, Northern Europe, Japan and Asia
• Intensive, personalized communications to public interest groups, consumer advocates, government agencies in key centers of the world
• Trade show / conference presentations in USA, Europe, Japan, Hong Kong
• A promotional website – in, at least, English, German, Spanish, French, Japanese, Mandarin
• HTML newsletter – multilingual
• Internet marketing, including online advertising, affiliate marketing, newsgroup seedings
• Offline advertising, B2B and B2C, high-impact business publications and business oriented broadcast/cable
• Offline, grassroots promotion and events
• Continuing, phased media relations – Internet, general business, and consumer – focus on global-reach media (Financial Times, Wall Street Journal, Economist, AP, Bloomberg, Agence France Presse, CNNI, BBC, Sky, etc.)

Messaging and positioning – establish a vocabulary and terminologies suitable for consumers, businesses, and government/public interest audiences

• Corporate messaging and materials
• Briefing book / dossier on company, service, expectations, market context
• Branding / "look and feel" of the new enterprise
• Full Marketing Scenario Blueprint and metrics analysis

Handle the public announcement in coordination with ICANN

• Media release distribution
• Background materials, Fans, executive bios, etc.
• Online media conference
• Begin Interactive newsroom

Educate media about new domain names, on and offline

• Write and distribute background info, Q&As, etc. about DNS and digital IDs
• Plant sees for inclusion in trend and wrap up stories

Educate industry analysts

• Prepare materials
• Personal briefings with key analysts who are following the evolution of the Internet

Explore relationships/partnerships with other organizations focused on online security and consumer trust

• Associations
• Consumer advocacy groups

Identify government and or public policy organizations whose actions could affect the Registry; create a plan for constructive engagement

• Create a database and monitoring system

Identify trade shows and conferences for 2001 participation

• Begin bookings

Consumer research on early I-adopters

• Collect and/or commission research

Educational microsite gets posted on the web

• Goal: to introduce and explain meta-domain name concept to consumers and create viral stickiness
• Includes information from the briefing book and media materials, analyst presentation, etc.
• Includes an email/customer service feature
• Links to relevant sites
• Continue industry analyst meetings
• Media relations – targeted on Internet media and business media – focusing on long term trend stories
• Begin active contacts to potential partners – application and service providers and distribution channels

• Offline information/marketing collateral
• Seed key e-influencers/newsgroup influentials
• Target early adopters (consumers) through existing marketing channels such as high-end consumer technology and innovative Internet products
• Continue booking trade shows and conference
• Plan grassroots marketing effort for key communities in high Internet use areas
• Identify grassroots marketing / promotion / communications activities
• HTML newsletter

On and offline media relations focused on consumers

• Phase I: Online advertising – education focus
• Phase I: Offline advertising – education focus
• Print only; targeted to early adopters

Second round contacts with technology analyst firms

Planning and logistics of grassroots promotions

Initial contacts with financial analysts

HTML newsletter continues

Ongoing media relations

• Consumer
• Business

Implementation of grassroots marketing / promotion / communications in several key areas

• Phase II: Online advertising – drive consumers to create/register I address
• Phase II: Offline advertising – drive consumers to create/register I address

Full consumer advertising launch, TV, radio, print

HTML newsletter continues

Affiliate marketing continues

Update technology analysts on rate of registrations

We estimate that the number of requests for Personal Domain Names by 2004 could be as high as 6% of all Internet users, or around 70 million at the 10% confidence level. At a bare minimum, within a 90% confidence level, we believe that 1.2% of worldwide Internet users will request a Personal Domain Name by that year, translating into about 15 million registrations. However, a more likely scenario is that about 3.8% of the world’s Internet population, or around 46 million users, will purchase a Personal Domain Name by the end of 2004, which corresponds to a 50% confidence level.

Research shows that most early adopters will be more willing to pay a registration fee to get a non-numerical Personal Domain Name. Because of this, we estimate that in the first year only 20% of our projected 1.5 million users are likely to take advantage of the Registry’s free numeric domain name offering.

However, as the years pass and the Personal Domain Names system and its surrounding technology become more mainstream, we expect to see a growing demand for the free numerical Personal Domain Names. By Year 3, for instance, we expect that 35% of registered users within the proposed TLD will be using the free numerical Personal Domain Name. This growth in the free service will take place primarily at the expense of the paid names registrations (see the table below). However, we propose to cap our free numeric domain name offering at about equal to the number of paying subscribers, pending further evaluation once operational. The Registry is very committed to providing a low-price and equitable service to all individuals who demand it. These free names will pose additional costs to the Registry, so the Registry will continue to evaluate the feasibility of this plan once operating.

A rough proxy was used to estimate the percentage of users who would be likely to choose paid registration over a free numeric Personal Domain Name by comparing paid and free subscriptions to Internet access companies (i.e., AOL vs. Juno). We found that there is a roughly a 3-1 split, with more people subscribing to the paid services. Of the major players: AOL and Earthlink have 28 million subscribers, while Juno and NetZero together have 11 million. From this, we altered this ratio downward to account for the fact that the price of the proposed personal domain is an order of magnitude smaller than most paid Internet access subscriptions available today. Offsetting this slightly is the fact that among the Internet providers, the paid services usually offer more capabilities for that money, while for our proposed Registry the free proposition provides the exact same services as the paid names, giving people a slightly greater incentive to settle for a free name. Therefore we will assume that among the early adopters, only 20% will want a free name. As the service spreads globally, we predict that the percentage of free numeric domain names will increase to 40% by Year 4.

In addition to the 20% who receive free numeric domain names, we estimate that another 20% of registrants will be motivated to pay a slightly higher fee during the startup period, with the remaining 60% of registrants split evenly between those who seek a standard-format third-level domain name and those who prefer a customized domain name.

These estimates for fee-based vs. free Personal Domain Name registrations are based in part on the abovementioned research, which indicates more than half of Internet users would pay to consolidate their e-mails and over 61% of mobile users would pay to have a single number service. Because our customer value proposition incorporates notions of both voice and e-mail consolidation and improved communications routing capability, together with cross-platform and cross-service provider portability, we believe the Personal Domain Name will experience quick adoption rates, especially given our commitment to provide low-cost, accessible registration fees. By guaranteeing one free Personal Domain Name to anyone who wants one (within budgeted limits) and reasonable wholesale annual registration fees of US $2-4 for most names within the TLD, the end price to the user is expected to be competitive. This will have the effect of boosting Personal Domain Name adoption rates even further; we expect Personal Domain Names to become ubiquitous among the Internet population.

The Registry, working with Sarnoff and AtomicTangerine, will enable the next generation of applications for the DNS and enable unprecedented services and functionalities that are truly beneficial to the Internet users of the world. This process will also create opportunities for businesses and service providers to create new applications and tap into new markets. The commitment of the Registry to further these interests is also demonstrated by the proposed pricing structure, whereby the Registry is offering a free numeric domain name to all Internet users (within budgeted limits). It is our belief that all Internet users have the right to a permanent, portable, domain name.

The end result will be better services, more competition and user freedom. Our Registry will be the first mover in creating the market described in this document. A TLD that caters to Internet users and their information appliances, and that is targeted towards creating the next generation of applications and services based on the DNS does not exist today.

Because the proposed TLD will be open for registration services offered by any ICANN-Accredited Registrar, competition for registration services will be maintained. Additionally, there will be competition among the providers of Internet-enabled applications and devices that will utilize the individual addressing mechanism provided by the proposed TLD. It is in this area – freeing the individual from restrictions or service limitations imposed by the individual’s service providers – where competition will be enhanced and further benefits realized.

The key functional areas include technology, finance, legal, marketing, human resources, and customer service staff. As the number of registrations rapidly increases over the first year, the size of the company will expand by almost 50% by Year 2. The staffing requirements are detailed in the chart below.

Note that customer service is a key component of staffing. The customer support operations will be 24 x 7 and will be continually monitored to ensure proper staffing levels are maintained.

The technical requirements encompass a mix of hardware, software, and services necessary to architect, build, maintain, and monitor the Registry. The infrastructure is being designed for the 50% confidence level, with potential adjustments for significantly higher or lower levels of demand.

The hardware is comprised of networking equipment and servers. The servers will be from Sun while Cisco will provide the networking equipment. We estimate that the following equipment is required per facility to run at the 50% confidence level:

• 2 Cisco 7206 Routers
• 2 Cisco 2610 Routers
• 4 Cisco Pix 520 Firewalls
• 4 Cisco 3524 Routers
• 4 Cisco Local Directors
• 14 Sun Enterprise 450 Servers
• 3 Sun Enterprise 6500 Servers
• 1 EMC Symmetrix 8430-18.

Bind and Whois are freely distributed under the GNU public license. OpenSRS will be developed based upon an industry standard tool set. The database will be Oracle. Backup software will be Veritas NetBackup.

Several systems will be used for the necessary office software and hardware for business operations as discussed below:

• GreatPlains/Siebel would be used for web-enabled financial management, human resources, customer service, and customer relationship management.
• Microsoft back-office and desktop solutions provide for a collaborative work environment common in the work force today.
• Kana would be used to manage e-mail customer support system.

In addition, a state of the art MIS system will be implemented to enable delivery of necessary information to each individual within the company. (Please see Appendix E for letter of interest from Cap Gemini Ernst & Young US LLC.) All the software systems mentioned above adopt open architectures and industry standards. The MIS system will tap into the existent systems and present the information via a browser. On the hardware side, the following equipment is budgeted:

• 1 Cisco 3624 switch
• 1 Cisco Pix 520 firewall
• 6 Dell PowerEdge 6400 Servers
• 1 Lucent Definity G3
• 1 Lucent Intuity
• 1 CardKey System.

Cisco will provide the networking infrastructure equipment, Dell will provide the servers necessary to support the software above, and Lucent will provide the telephony solution. CardKey will provide the electronic card key access system.

The financial resources necessary to meet demand will vary according to usage. The hardware and software projected costs will not be significantly impacted by these exercises. This is based upon using the 50% projections for architecture design and evaluating the difference in total cost of ownership for upside and downside scenarios. Another architecture consideration was maintaining high quality of service even under estimated peak loads. The marketing and advertising numbers are expected to remain the same at each confidence level unless marketing analysis illustrates that a change in dollars will be beneficial. The financial resource most impacted will be in personnel expenses such as salary, benefits, rent, travel and administrative costs. The three charts below illustrate the different financial resource requirements at each confidence level.

The life-cycle of the electronic registry components are architecture, construction, monitoring and maintenance. Cisco is a dominant player in networking equipment and is supplying all the necessary networking equipment (e.g., firewall, routers and switches) for the electronic registry. Sun is the vendor for servers. Sun servers are scalable and robust. EMC is a proven industry leader in reliable mass storage. Alliant Technologies is an IT professional services firm experienced in architecture design and build. Alliant Technologies will provide the services necessary for architecting the electronic registry. Exodus is a leader in hosting and maintenance services of the Internet. Exodus will provide for the hosting, monitoring and maintenance of the electronic registry. Additionally Exodus will perform the actual site build.

Outsourced costs:

• Alliant Technologies: US $20,000 one time fee
• Exodus build: US $254,044 one time fee
• Exodus monitoring & maintenance: US $325,213 per month

Several systems provide the necessary business tools for business operations. GreatPlains/Siebel have formed a partnership providing for web enabled financial management, human resources, customer service and customer relationship management. Microsoft back office and desktop solutions provide for a collaborative work environment common in the workforce today. Kana will be used to manage the e-mail customer support system. Services will be provided by Alliant Technologies to implement GreatPlains/Siebel. An MIS system will be developed to deliver the necessary information to each individual within the company. All the software systems mentioned above adopt open architectures and industry standards. The MIS system will tap into the existing systems and present the information via a browser. Stringent security will be enforced.

Outsourced costs: Alliant Technologies (one-time fees)

• US $75,000 implementation of GreatPlains/Siebel
• US $150,000 MIS system development

Office space will be located in New Jersey. The facility will be extremely secure and in an accessible environment. The Registry will have security at the primary entrance. To secure the various entrances as well as internal entrances to secure areas, such as the data center, a card key system will be installed. In addition, video surveillance of the entrances will be monitored.

Recruiting: The Registry will recruit and hire a full-time Human Resources Manager to lead the recruiting of staff resources, and will be assisted by AtomicTangerine and Alliant Technologies to screen competencies of potential technical candidates. Internal recruiting will be supplemented by fee-based, external professional recruiting services. The Human Resource Manager will assure that job descriptions have been developed for all positions, which would include salary ranges. One of the benefits of being located in New Jersey, and in particular in the Princeton area, is the relatively fertile market for skilled technology personnel. The Registry will appeal to new recruits with its challenging and open work environment, and the added prestige of being a venture company of the Sarnoff Corporation.

Capacity for Expansion: As the Registry operations grow from 25 to 100 employees over a 3-year period, the Registry will recruit additional professional managers to help implement more formal lines of responsibility. Primary growth areas in staffing are projected to be in sales, customer support, and operations support.

Employee Training: One of the Registry’s main responsibilities will be to enhance the abilities of the employees and support them in the development of new skills. Technology companies need to provide their employees with a sense of challenge, so that they are motivated to continually improve and deepen their skills to meet the changes in the marketplace. This environment creates incentive among employees to pursue new methodologies and chart new territory. Alliant Technologies will provide Registry technical personnel with technical training, in addition to mentoring and knowledge transfer.

Hiring: The company’s hiring policy will involve selecting candidates with diverse backgrounds academically, professionally, and culturally.

Space for Additional Staff: Office space will initially be leased to accommodate approximately 60 employees, with opportunities to scale up quickly to 200 employees or more. The Registry will seek short-term leasing arrangements to provide flexibility to acquire additional space or move to larger facilities. In that respect, New Jersey and the Princeton area are very conducive to finding world class office space that is available with ease. Alliant Technologies is assisting with identifying the proper facility.

Additional Considerations: With Sarnoff and AtomicTangerine championing this new venture, there is especially strong capability to expand staff as needed to handle increasing demand and transaction volume. Both firms have the ability to provide the quantity and quality of individuals who are suited to scale the Registry organization under subcontract as needed. In addition, Alliant Technologies will be on standby to provide for any short-term increased staffing levels needed for provision of expanded technical, support, escrow, and registry services.

AtomicTangerine, as a 250-person venture consulting firm, has many staff who have worked at startups and who have extremely strong technical backgrounds. The majority of employees have built Internet exchanges, implemented security, or designed and implemented systems using cutting-edge technology. Moreover, AtomicTangerine’s venture launch services include individuals knowledgeable in corporate functions such as finance, legal, and branding and marketing. All of these capabilities are available to assist the Registry.

In addition, it is important to note that AtomicTangerine’s genesis was as SRI Consulting, the technology and strategy consulting arm of SRI International. SRI International continues to be a significant shareholder in AtomicTangerine and the two firms continue to partner on projects. SRI International, which was the first operator of Internet domains for 15 years, is similarly staffed with individuals who possess some of the world’s most cutting-edge technology innovation skills, and continues to give AtomicTangerine access to those staff.

AtomicTangerine’s chief technology officer, specializes in speech recognition and computer networking technologies, and is currently working with the Nuance speech recognition system. He periodically teaches graduate classes on digital multimedia technology at Stanford University, where his students have done projects ranging from Java-based Internet shopping applications to voice control for networked virtual environments. Dr. Zambre has also been an invited speaker on Internet technology and its applications at international scientific conferences and at artists’ guild workshops in Hollywood. He has applied and integrated new and old technologies in a wide variety of settings. He has experience programming Sun, VAX, Xerox, IBM, and PC systems with C/C++, Java, Fortran, and assembler. Before joining AtomicTangerine and, previously, SRI International, Dr. Zambre cofounded a company that wrote software for diagnosing and analyzing errors in particle accelerators. The software was sold to international and U.S. laboratories and, on average, has reduced accelerator downtime by a factor of five. In many cases, the resulting cost reduction per incident exceeds US $200,000. Dr. Zambre holds a B.S. (cum laude) and M.S. (awarded simultaneously with the B.S.) in engineering from Yale University, and a Ph.D. in applied physics from Stanford University.

Sterling Stoudenmire has more than 11 years of experience in strategy and information technology consulting, and has worked with numerous "dot-com" clients in the formation, capitalization and emergent stages. He has a unique combination of business acumen across a variety of industries and expertise in emerging technologies, frequently acting as overall architect for new business opportunities. Before joining AtomicTangerine, Mr. Stoudenmire served as director, e-business strategy, for Arthur Andersen LLP. He is a frequent public speaker on e-business, information rules, and "innovation through information technology" for organizational change and competitive advantage. Past audiences include the World Economic Forum, AA’s E-Business Video Series, and the Florida Institute of Certified Public Accountants. Mr. Stoudenmire holds a B.S. in finance from Florida State University.

Norm Nielsen has worked extensively with major corporations on four continents to assess and deploy information technology to achieve strategic business objectives and improve profitability. Dr. Nielsen specializes in computer systems design and architecture evaluation, information technology assessment and strategy, networked and distributed systems, data- and knowledge-based systems (e.g., data warehousing and data mining, intelligent scheduling), and information security and risk assessments. He has led numerous projects that assisted companies in using information technology to strategic advantage. Before joining AtomicTangerine and, previously, SRI International, Dr. Nielsen served as a faculty member at Stanford University. He is listed in Who’s Who in America and Who’s Who in Science and Engineering and is a member of Phi Beta Kappa and other national honor societies. In addition to serving as treasurer of AAAI, he is a member of AAAS, the ACM, the Computer Society of the IEEE, and INFORMS. He has written more than 75 articles and papers on information technology topics, as well as 2 books relating to the practical application of artificial intelligence technology. Dr. Nielsen holds a B.A. in mathematics (summa cum laude) from Pomona College, an MBA in management science and a Ph.D. in operations and systems analysis from Stanford University

Sanjay Deo has more than 10 years of experience in software development—custom as well as product—and has provided management consulting services to startups, spin-offs, and brick-and-mortar clients in the information services, telecommunications, entertainment, health care and high-tech industry sectors. His specific expertise lies in building B2B digital marketplaces and Internet security. He is also experienced in IT strategy, technology assessment, systems design and integration, and process innovation. Recent work includes a project involving the first MRO Latin American digital marketplace. Mr. Deo formulated business strategy, created internal business processes and procedures, integrated buyers and sellers, selected and implemented platform and infrastructure and a customer relationship management system, and provided overall internationalization, customization and integration of the digital marketplace engine. In another project for one of the largest U.S. retailers, Mr. Deo identified the software and hardware required to handle 60,000 orders per hour, scaling up to 240,000 orders per hour in the next 5 years Before joining AtomicTangerine, he was director of the Advanced Technology Group in Arthur Andersen’s Business Consulting practice. In previous work, Mr. Deo was with CyberGuard Corporation, where he focused on design and implementation of high-assurance operating systems, and architected three firewalls for three operating systems. He holds a B.E. in computer engineering from the University of Bombay and an M.S. in computer science from Texas A&M, College Station, Texas.

Don Holden has more than 20 years of experience in information systems, security, encryption, business continuity and disaster recovery planning. He has written numerous white papers and given presentations on information security management and technology issues such as intrusion detection, firewalls, biometric authentication and digital watermarking. Mr. Holden is currently the chairman of the IEEE Computer Society working group on recommended best practices for Internet security. He is also participating in the development of security standards for the financial industry. Before joining AtomicTangerine, Mr. Holden was a senior consultant for SRI Consulting, where he was a project leader for an Internet startup assignment to plan a revolutionary secure electronic commerce portal-based business. He previously served as program manager for Compaq’s Security Program Office and as the director of operations research at a major Boston bank. Mr. Holden holds an MBA from Wharton and a B.S. in business and accounting from Georgetown University. He is a Certified Information System Security Professional (CISSP) and a member of the IEEE Computer Society, the Computer Security Institute, and the Information Systems Security Association.

Stephen Whitlock specializes in cryptography, UNIX and network security. Mr. Whitlock is an internationally recognized expert in the field of information security. His background includes the development of tools for testing system security as well as publications and presentations on cryptography, UNIX and network security. For many years, he functioned as an internal corporate consultant on cryptographic and security issues. Among other work, Mr. Whitlock developed an encryption strategy for large, multi-platform enterprise environments, which was presented to the U.S. Office of Science and Technology Policy, the National Security Council and the FBI. The results directly affected the Clinton Administration’s U.S. Encryption Policy. Before joining AtomicTangerine, Stephen was an advanced computing technologist in the mathematics and computing technology division of Boeing’s Phantom Works. He has been an active participant in the security activities of the Electronic Messaging Association, Internet Engineering Task Force, Key Recovery Alliance, Object Management Group and the Open Group. He is currently the chair of the Open Group’s Security and Electronic Commerce Program Group and as such has been involved in the development of several standards, including the Architecture for a Public Key Infrastructure, Common Data Security Architecture and Advanced Authorization API. Mr. Whitlock holds a B.S. in electronic engineering technology from the Weber State University and an M.S. in software engineering from Seattle University.

Glenn Reitmeier is Vice President of Internet Technology Strategy and Development at Sarnoff Corporation. His career has pioneered the development of digital television, digital media and digital convergence. He has created and led world-leading developments in Digital Cinema, object coding and wavelet image compression in MPEG-4, MPEG-2 compressed bitstream processing and integrated circuits for digital television receivers. His efforts have contributed to the formation of six new startup companies and resulted in three technical Emmy awards. Mr. Reitmeier was one of the leading contributors to establishing the ATSC Digital Television standard that was approved by the FCC in 1996. In the Digital HDTV Grand Alliance, he performed in both technical and strategic capacities, and was the leader of Grand Alliance computer interoperability efforts. He has also led projects related to developing new technologies for consumer information services, including computer and network architectures, Digital Signal Processing modems and natural language software. Earlier, Mr. Reitmeier was a contributor to the establishment of the world’s first digital television standards (the ITU 601 sampling standard and the D1 tape standard) that are now in widespread use in the broadcast industry. He holds over 40 patents in digital television technology. He received the B.E.E. degree summa cum laude in 1977 and an M.S.E. degree in Systems Engineering from the University of Pennsylvania in 1979.

Shailendra K. Suman is Executive Director of Sarnoff Corporation and General Partner of nVention. He is responsible for the business and strategy development, market analysis and strategic alliances for nVention and its ventures. Prior to joining Sarnoff, Mr. Suman served in various management capacities for several energy-related companies, including responsibilities for strategy as well as new venture development. Mr. Suman received his BS in Mechanical Engineering from B.I.T. Sindri, India, an MS in Control Systems from University of Alabama, and an MBA in Finance and Strategy from University of Minnesota in 1986, 1989, and 1995 respectively. He completed all the coursework towards a Ph.D. in Mechanical Engineering at Columbia University, NY in 1989. Mr. Suman is a member of the Conference Board’s International Council of Innovation & Technology Management and the Institute of Electronics and Electrical Engineers.

Nova Spivack is Founder, President and CEO of Lucid Ventures Inc. and Co-Founder and CEO of Lucid Associates, LLC. Mr Spivack has been an Internet venture strategy advisor to Sarnoff Corporation for the past year and a prime mover in its decision to create nVention. Mr Spivack was a Co-Founder, Executive Vice President , and Director of EarthWeb Inc., an industry-leading Internet venture, since 1994. He co-led the company from startup through an historic IPO (the first business-to-business IPO and one of the all-time best first-day gainers) and a secondary public offering, serving as executive vice-president for product development and strategy. Mr. Spivack, a published author and frequent keynote speaker, is currently developing several new proprietary patents in the areas of GPS technology, Internet television, wireless consumer electronics, Internet radio, artificial intelligence and augmented reality, and is the principal inventor of multiple fundamental patents related to simulcasting Internet content with television broadcasts for use in entertainment, education, sports, news and information services. Mr Spivack is among the top-rated featured "Internet Business Experts" on Expert-central.com, part of the About.com network and has been interviewed by many prominent publications.

Rafael Alonso obtained a Ph.D. in Computer Science from U.C. Berkeley in 1986 where he held an IBM Fellowship. He was a faculty member at Princeton University from 1984 to 1992 where he graduated three doctoral students, obtained several government and industrial grants, and developed two new courses. In 1991 he co-founded the Matsushita Information Technology Laboratory to develop leading edge information and video systems for Panasonic. Dr. Alonso obtained two U.S. patents for his work, and his research team contributed software to a number of products, as well as developed a non-linear editing system prototype shown at the National Association of Broadcasters (NAB) Conference. Dr. Alonso is presently Head of Computing Systems Research at Sarnoff Corporation where he oversees research projects in a number of areas including Web-based collaboration tools, online learning, video databases, and development of MPEG encoding algorithms. He is also currently coordinating two product development efforts. Dr. Alonso's current research interests include organizational memory, multimedia database systems, video servers, mobile information systems, and heterogeneous database systems. Dr. Alonso has published over 40 refereed papers, been a member of more than 20 Program Committees, and is currently on the editorial board of several technical journals.

James R. Bergen, Head, Information Technologies Initiatives, Sarnoff Corporation

An initial Registry term of 10 years is proposed. The proposed TLD is targeting a new market need that has not been served so far. In addition, the creation of an open standards platform for applications and services development that will serve the interest of all constituents will play out over a number of years. Enough time has to be allotted for the full evolution of the applications and services detailed in this document, as well as the realization of the overall vision for the DNS to provide a name space for and enhance individual’s lifestyles.

D13.2.11. Expected costs associated with the operation of the proposed registry. Please break down the total estimated operational costs by the sources of the costs for each estimated demand level. Be sure to consider the TLD's share of ICANN's cost recovery needs. (See <http://www.icann.org/financials/budget-fy00-01-06jun00.htm#IIIB>.)

The costs associated with the Registry are categorized in the following manner.

1. Personnel
2. Electronic registry infrastructure
3. Registry office infrastructure
4. Registry office professional services costs
5. Registry office expendables

Personnel will grow with the increasing demands of the Registry. The major functional areas of personnel are Customer Service, Finance, HR, IT, and Marketing. For budgetary purposes we will view the personnel costs in the following structure: Management, Corporate Functions, Staff, Customer Support, Sr. Systems Administrators, Jr. Systems Administrator, System Engineers and Support Engineers. the financial plan (see D.13.3) are Personnel salaries and benefits per quarter for the first 4 years are detailed within the financial projections (see D.13.3).

The entire electronic registry infrastructure comprises hardware, software and services. Best of breed partners such as Alliant Technologies, Cisco, EMC, Exodus, Oracle, and Sun provide the hardware, software and services necessary to create, maintain and monitor the electronic registry.

Within the attached financial plan these items are categorized as hardware & software purchase costs, Registry monitoring and architecture maintenance fees, communication links, and hardware & software on-going maintenance.

A mix of vendors has been chosen for the tools necessary for office automation and business operations. The vendors for the infrastructure are Cisco, Dell, Microsoft, and Sun. The software providers are GreatPlains/Siebel, Kana, and Microsoft.

The Registry will be located within New Jersey for its favorable business environment and excellent access to resources.

The infrastructure line items within the financial projections (see Section D.13.3) are for equipment, software, services and maintenance, and rent and utilities.

The professional services line item consists of legal, auditing and accounting. In addition, the Registry will rely on the services of a professional marketing and advertising firm with a proven history and an understanding of the online space.

Administrative expenses within the financial plan are the day-to-day operating costs of the Registry, which are comprised of desktop hardware and software, office supplies, corporate insurance, postage, messenger, telephone costs and travel.

The Registry will reimburse ICANN its share of the cost-recovery needs. Currently that figure is estimated to be in the range of US $500,000-US $600,000.

The key revenue stream for the proposed Registry derives from the fees from the Startup period and the ongoing wholesale fees for standard and customized Personal Domain Names (see Section D13.2.5 for a discussion of the estimated demand for each). The calculation is a straightforward linear equation:

We have employed the following assumptions in our calculations:

• There will be roughly 1.5 million paying subscribers the first year, 10 million the second year, 22 million the third year, and 46 the fourth year.
• 10% of users will purchase their domain name at market prices during the startup period, at an average wholesale price of $10 per name, renewable annually at the same rate.
• Wholesale fee per customized name is US $4.
• Wholesale fee per standard format 3LD name is US $2.

Using these values for the variables in our revenue model, we calculate resulting fee revenues at roughly US $6.6 M, US $31.7 M, US $66.1 M, and US $134.8 M for the first 4 years, respectively.

Since 1987 Sarnoff revenues have grown from US $75 million to over US $120 million. During that same period the company’s value, including holding in new ventures, has increased from US $75 million to over US $250 million. Sarnoff has created and assisted in private equity financing from leading VC firms totaling more than $200 million for its over 19 new ventures. Sarnoff and AtomicTangerine will assist the proposed Registry in gaining required capital through its network of leading venture capital firms. Funding for the Registry has been additionally committed from Arnhold and S. Belishroeder, Inc. as discussed in the attached letter (see "Proof of Capital", Section D.13.4.4).

The novel services proposed in this application, specifically in section D13.2.1, represent numerous opportunities that could be pursued. In addition, there are other opportunities that may present themselves due to positive occurrences outside our control.

The business described in this application will face challenges as well. New players in any emerging field face three possible categories of business risk: market risk, management risk, and financial risk.

Market risk is that individuals may not request a Personal Domain Name as quickly as we have predicted or they may decide to request the free numeric domain name instead of a paid one. They may also elect not to buy many of the value-added services. There is the risk that demand among users will not match the supply presented by competing providers. However, there are several trends suggesting that this risk is minimal:

• Explosive technology adoption rates: The adoption of related communications devices and services witnessed to date (most notably cell phones, handhelds, and Internet usage) is increasing at an explosive rate.
• Increase in consumer power: Trends over the past two decades, including the rise of "mass customization" in the 80s and the vast availability of price information on the Internet, have changed the consumer mindset towards vendors. People expect choice and flexibility, and the domain concept proposed here makes it even easier for people to make changes in their purchasing activities.
• Increasingly fluid nature of society: As time progresses, individuals are becoming more and more likely to change jobs (even to new industries), geographic locations, spouses, etc. The concept of lifetime employment with one company is no longer a prevalent one. A permanent identifier permits users to make these changes while reducing the resulting disruption in their lives.

Management risk at start-ups falls along two key dimensions: industry and entrepreneurial. The first refers to the executives’ lack of direct experience in the business’s industry area; the second refers to the lack of previous start-up experience among the founding team. The combination of Sarnoff and AtomicTangerine mitigates both forms of risk.

• Sarnoff, SRI and AtomicTangerine all possess experience at the leading edge of the Internet; our team includes individuals who have run domains before and who have commercialized cutting-edge Internet technologies.
• Entrepreneurially, both the Sarnoff and AtomicTangerine members have launched numerous new companies before and have experienced first-hand the challenges of growth in a new market space. Sarnoff has taken its own technologies and launched an array of new companies based on these; AtomicTangerine, as a venture consulting firm, has spun off five new firms in the past seven months, and its employees have served as the executives at many client companies.

Financial risk stems from the need to subsidize the free identifiers with the fees collected from paid registration and value-added services. We believe, given the low market risk described above, we have a compelling model by which the collected revenues will be sufficient to run a successful Registry operation on an ongoing basis.

The Registry will take every step necessary to ensure that its customers and the users who rely on it are never without service. The first line in handling failure will be to ensure, to the greatest extent possible, that it never occurs. From a technical point of view, this means maintaining stable, robust equipment that is fully redundant, with all data backed-up and stored at off-site locations. The details of the Registry’s technical proposal, including the provisions for redundant equipment and back-up services, are set forth below in Section D.15.

In the unlikely event that the Registry fails as a business, it will make every effort to ensure that a transition to a new registry provider is seamless and invisible to its users and customers.

To this end, the Registry will work to set aside sufficient working capital to guarantee that it can continue to provide stable registry operations for a period of time sufficient to allow a smooth transition to a new registry even in the absence of revenue to the Registry.

To guarantee that any successor registry is able to take over the Registry’s operations in the event of a failure, the Registry will deliver all registry data and software to agreed escrow agent on any reasonable schedule specified by ICANN. The Registry will provide any ICANN-designated successor registry with a royalty-free, perpetual, worldwide license to any registry-related software, data or other work in which the Registry maintains a copyright.

In short, supporting its users and customers and maintaining the stability of the Internet are of paramount importance to the Registry, and it will take whatever steps necessary to ensure that the company's failure, however unlikely, does not impact the interests of others or the Internet as a whole.

Please see the following spreadsheets for Pro-forma financial projections.

1. Sarnoff Corporation
   Certificate of Incorporation document.
2. AtomicTangerine
1. Certificate of Incorporation document of Adario, Inc.
2. Restated Certificate of Adario, Inc. changing its name from Adario Inc. to AtomicTangerine, Inc.
3. NextDNS Inc. Certificate of Incorporation document.

D13.4.5. Proof of insurance. Please provide proof of the insurance described in item D13.1.8.

Insurance documents are confidential but can be provided upon request.

The Registry Operator will capitalize on the Sarnoff Corporation and AtomicTangerine’s superior technical knowledge. Specifically, the proposed Registry Operator will have access to:

• The collective memory of SRI International, one of the original creators of the ARPAnet, administrator of the HOSTS.TXT database, and first operator of Internet domains
• AtomicTangerine’s expert computer and Internet consultants
• AtomicTangerine’s world-renowned information security experts, with long-standing expertise in Internet security
• Sarnoff’s award-winning scientists and technologists
• Senior managers from both companies with exceptional experience in creating multiple new technology ventures and spinning them out successfully

The parent of both Sarnoff and AtomicTangerine, SRI International’s precursor -- Stanford Research Institute – created the ARPAnet, including developing and managing HOSTS.TXT (DNS’s predecessor). Later, when HOSTS.TXT encountered difficulties scaling to accommodate the exponential growth in Internet use, SRI International helped to craft a new standard, the Domain Name System (DNS). With 15 years of experience as the first operator of Internet domains, SRI International has a unique and in-depth understanding of how to develop and maintain a successful Registry Operation. Thus, SRI International’s collective memory will assist the proposed Registry Operator in creating and maintaining an efficient, quality Registry for the proposed TLD.

In addition to contributing its new venture creation expertise (see Section D13.1.6), AtomicTangerine managers will play a key technical role in building and maintaining the Registry and in ensuring that proper levels of security are consistently maintained. AtomicTangerine’s computer and Internet consultants are skilled in analyzing business requirements and creating functional specifications, as well as in designing site structure and information architecture, and its managers will be instrumental in ensuring the Registry’s success.

In addition, AtomicTangerine (and prior to that, SRI Consulting) is world-renowned for its information security practice. AtomicTangerine’s information security professionals will provide key insights and input as the joint venture with Sarnoff prepares to become the Registry Operator for the proposed TLD. The AtomicTangerine Information Security practice is staffed by industry leading security professionals who have conducted more than 500 information security reviews worldwide and 3,500 cases in computer crime for financial services organizations, telecommunications companies, and the U.S. Departments of Justice and Defense. The company hosts the International Information Integrity Institute (I-4®), providing ongoing best practices and information security breakthroughs for a closed-door, invite-only list of FORTUNE 500 companies and government agencies. For instance, recently an AtomicTangerine team developed an information-security vulnerability benchmarking methodology using extensive network attack data. Based on those data, AtomicTangerine created a spin-off company and built it into a portal for online information security content and consulting. As a result of this work, AtomicTangerine obtained US $5.5 M of funding on a US $20 M valuation.

As a global organization that has created some of the most pervasive technologies of the century, Sarnoff has a world-renowned history as a premier developer of entertainment, consumer, and commercial products that have fundamentally changed the modern world. Many of the products used by consumers today were invented by Sarnoff.

In fact, Sarnoff has not only been a leader in industry, it has helped create new industries, successfully nurturing and spinning off new ventures regularly during the past several decades. Sarnoff builds value and other sources of continuing revenue through equity positions in ventures that make use of its technical innovations. These ventures, referred to as Sarnoff Technology Ventures (STVs), reflect the breadth and depth of Sarnoff’s technology and managerial capabilities.

Sarnoff incubates these companies, building the value in each company by developing its technology to a pre-commercial level, and then raising funds for commercialization. Exclusive licenses may be granted to STVs in Sarnoff’s intellectual property in specific fields of use. Sarnoff’s staff acts to fill critical technical and leadership roles in the company until the STV can recruit a full management and technical team and reach critical mass on its own.

The benefit of this model is that Sarnoff lowers the risk of execution and can deliver on its commitments by having a team in place that has delivered on many highly challenging problems and milestones. This established business model has been put into practice to create many new companies over the past 10 years (See Appendix A). Among them are (partial list):

Sarnoff remains a leading US organization in video, broadcasting, and displays and has a worldwide reputation in the following areas of expertise. With the convergence of the Internet and broadcast media, many of these technologies are becoming increasingly relevant to those who would operate in the Internet space.

• Communications Systems and Networking
• Vision Technologies
• Optoelectronics
• Integrated Circuit Systems
• Internet Technology
• Integrated Electronic and Display Products
• Emulation Products and Technology
• Life Sciences and Systems
• Microstructure and Display Systems
• Digital TV and Entertainment

Today, Sarnoff files an average of two patents every week, making it one of the most productive generators of new technology in the US. Sarnoff’s partners and clients include multinational corporations, government agencies, research universities and leading high-tech organizations including Motorola, Thomson, Toshiba, SmithKline Beecham, and government organizations such as the National Imagery and Mapping Agency (NIMA) and the Defense Advanced Research Projects Agency (DARPA).

Sarnoff's technological achievements have changed the way information is stored, retrieved and shared. A sample of past developments is presented below, including a brief description of each technology.

With a 58-year record of significant scientific contributions, inventions, successful spinoffs, and achievements, including seven Emmys for technical excellence, Sarnoff is well positioned to lead the charge in creating and enabling the next TLD as well as the related next generation of Internet applications. For a complete list of Sarnoff’s pioneering contributions over the last 58 years, see Section D15.1.4.

Yadunath Zambre specializes in speech recognition and computer networking technologies, and is currently working with the Nuance speech recognition system. He periodically teaches graduate classes on digital multimedia technology at Stanford University, where his students have done projects ranging from Java-based Internet shopping applications to voice control for networked virtual environments. Dr. Zambre has also been an invited speaker on Internet technology and its applications at international scientific conferences and at artists’ guild workshops in Hollywood. He has applied and integrated new and old technologies in a wide variety of settings. He has experience programming Sun, VAX, Xerox, IBM, and PC systems with C/C++, Java, Fortran, and assembler. Before joining AtomicTangerine and, previously, SRI International, Dr. Zambre cofounded a company that wrote software for diagnosing and analyzing errors in particle accelerators. The software was sold to international and U.S. laboratories and, on average, has reduced accelerator downtime by a factor of five. In many cases, the resulting cost reduction per incident exceeds US $200,000. Dr. Zambre holds a B.S. (cum laude) and M.S. (awarded simultaneously with the B.S.) in engineering from Yale University, and a Ph.D. in applied physics from Stanford University.

Sterling Stoudenmire has more than 11 years of experience in strategy and information technology consulting, and has worked with numerous "dot-com" clients in the formation, capitalization and emergent stages. He has a unique combination of business acumen across a variety of industries and expertise in emerging technologies, frequently acting as overall architect for new business opportunities. Before joining AtomicTangerine, Mr. Stoudenmire served as director, e-business strategy, for Arthur Andersen LLP. He is a frequent public speaker on e-business, information rules, and "innovation through information technology" for organizational change and competitive advantage. Past audiences include the World Economic Forum, AA’s E-Business Video Series, and the Florida Institute of Certified Public Accountants. Mr. Stoudenmire holds a B.S. in finance from Florida State University.

Norm Nielsen has worked extensively with major corporations on four continents to assess and deploy information technology to achieve strategic business objectives and improve profitability. Dr. Nielsen specializes in computer systems design and architecture evaluation, information technology assessment and strategy, networked and distributed systems, data- and knowledge-based systems (e.g., data warehousing and data mining, intelligent scheduling), and information security and risk assessments. He has led numerous projects that assisted companies in using information technology to strategic advantage. Before joining AtomicTangerine and, previously, SRI International, Dr. Nielsen served as a faculty member at Stanford University. He is listed in Who’s Who in America and Who’s Who in Science and Engineering and is a member of Phi Beta Kappa and other national honor societies. In addition to serving as treasurer of AAAI, he is a member of AAAS, the ACM, the Computer Society of the IEEE, and INFORMS. He has written more than 75 articles and papers on information technology topics, as well as 2 books relating to the practical application of artificial intelligence technology. Dr. Nielsen holds a B.A. in mathematics (summa cum laude) from Pomona College, an MBA in management science and a Ph.D. in operations and systems analysis from Stanford University

Sanjay Deo has more than 10 years of experience in software development—custom as well as product—and has provided management consulting services to startups, spin-offs, and brick-and-mortar clients in the information services, telecommunications, entertainment, health care and high-tech industry sectors. His specific expertise lies in building B2B digital marketplaces and Internet security. He is also experienced in IT strategy, technology assessment, systems design and integration, and process innovation. Recent work includes a project involving the first MRO Latin American digital marketplace. Mr. Deo formulated business strategy, created internal business processes and procedures, integrated buyers and sellers, selected and implemented platform and infrastructure and a customer relationship management system, and provided overall internationalization, customization and integration of the digital marketplace engine. In another project for one of the largest U.S. retailers, Mr. Deo identified the software and hardware required to handle 60,000 orders per hour, scaling up to 240,000 orders per hour in the next 5 years Before joining AtomicTangerine, he was director of the Advanced Technology Group in Arthur Andersen’s Business Consulting practice. In previous work, Mr. Deo was with CyberGuard Corporation, where he focused on design and implementation of high-assurance operating systems, and architected three firewalls for three operating systems. He holds a B.E. in computer engineering from the University of Bombay and an M.S. in computer science from Texas A&M, College Station, Texas.

Don Holden has more than 20 years of experience in information systems, security, encryption, business continuity and disaster recovery planning. He has written numerous white papers and given presentations on information security management and technology issues such as intrusion detection, firewalls, biometric authentication and digital watermarking. Mr. Holden is currently the chairman of the IEEE Computer Society working group on recommended best practices for Internet security. He is also participating in the development of security standards for the financial industry. Before joining AtomicTangerine, Mr. Holden was a senior consultant for SRI Consulting, where he was a project leader for an Internet startup assignment to plan a revolutionary secure electronic commerce portal-based business. He previously served as program manager for Compaq’s Security Program Office and as the director of operations research at a major Boston bank. Mr. Holden holds an MBA from Wharton and a B.S. in business and accounting from Georgetown University. He is a Certified Information System Security Professional (CISSP) and a member of the IEEE Computer Society, the Computer Security Institute, and the Information Systems Security Association.

Stephen Whitlock specializes in cryptography, UNIX and network security. Stephen is an internationally recognized expert in the field of information security. His background includes the development of tools for testing system security as well as publications and presentations on cryptography, UNIX and network security. For many years, he functioned as an internal corporate consultant on cryptographic and security issues. Among other work, Stephen developed an encryption strategy for large, multi-platform enterprise environments, which was presented to the U.S. Office of Science and Technology Policy, the National Security Council and the FBI. The results directly affected the Clinton Administration’s U.S. Encryption Policy. Before joining AtomicTangerine, Stephen was an advanced computing technologist in the mathematics and computing technology division of Boeing’s Phantom Works. He has been an active participant in the security activities of the Electronic Messaging Association, Internet Engineering Task Force, Key Recovery Alliance, Object Management Group and the Open Group. He is currently the chair of the Open Group’s Security and Electronic Commerce Program Group and as such has been involved in the development of several standards, including the Architecture for a Public Key Infrastructure, Common Data Security Architecture and Advanced Authorization API. Stephen holds a B.S. in electronic engineering technology from the Weber State University and an M.S. in software engineering from Seattle University.

Glenn Reitmeier is Vice President of Internet Technology Strategy and Development at Sarnoff Corporation. His career has pioneered the development of digital television, digital media and digital convergence. He has created and led world-leading developments in Digital Cinema, object coding and wavelet image compression in MPEG-4, MPEG-2 compressed bitstream processing and integrated circuits for digital television receivers. His efforts have contributed to the formation of six new startup companies and resulted in three technical Emmy awards. Mr. Reitmeier was one of the leading contributors to establishing the ATSC Digital Television standard that was approved by the FCC in 1996. In the Digital HDTV Grand Alliance, he performed in both technical and strategic capacities, and was the leader of Grand Alliance computer interoperability efforts. He has also led projects related to developing new technologies for consumer information services, including computer and network architectures, Digital Signal Processing modems and natural language software. Earlier, Mr. Reitmeier was a contributor to the establishment of the world’s first digital television standards (the ITU 601 sampling standard and the D1 tape standard) that are now in widespread use in the broadcast industry. He holds over 40 patents in digital television technology. He received the B.E.E. degree summa cum laude in 1977 and an M.S.E. degree in Systems Engineering from the University of Pennsylvania in 1979.

Shailendra K. Suman is Executive Director of Sarnoff Corporation and General Partner of nVention. He is responsible for the business and strategy development, market analysis and strategic alliances for nVention and its ventures. Prior to joining Sarnoff, Mr. Suman served in various management capacities for several energy-related companies, including responsibilities for strategy as well as new venture development. Mr. Suman received his BS in Mechanical Engineering from B.I.T. Sindri, India, an MS in Control Systems from University of Alabama, and an MBA in Finance and Strategy from University of Minnesota in 1986, 1989, and 1995 respectively. He completed all the coursework towards a Ph.D. in Mechanical Engineering at Columbia University, NY in 1989. Mr. Suman is a member of the Conference Board’s International Council of Innovation & Technology Management and the Institute of Electronics and Electrical Engineers.

Nova Spivack is Founder, President and CEO of Lucid Ventures Inc. and Co-Founder and CEO of Lucid Associates, LLC. Mr Spivack has been an Internet venture strategy advisor to Sarnoff Corporation for the past year and a prime mover in its decision to create nVention. Mr Spivack was a Co-Founder, Executive Vice President , and Director of EarthWeb Inc., an industry-leading Internet venture, since 1994. He co-led the company from startup through an historic IPO (the first business-to-business IPO and one of the all-time best first-day gainers) and a secondary public offering, serving as executive vice-president for product development and strategy. Mr. Spivack, a published author and frequent keynote speaker, is currently developing several new proprietary patents in the areas of GPS technology, Internet television, wireless consumer electronics, Internet radio, artificial intelligence and augmented reality, and is the principal inventor of multiple fundamental patents related to simulcasting Internet content with television broadcasts for use in entertainment, education, sports, news and information services. Mr Spivack is among the top-rated featured "Internet Business Experts" on Expert-central.com, part of the About.com network and has been interviewed by many prominent publications.

Rafael Alonso obtained a Ph.D. in Computer Science from U.C. Berkeley in 1986 where he held an IBM Fellowship. He was a faculty member at Princeton University from 1984 to 1992 where he graduated three doctoral students, obtained several government and industrial grants, and developed two new courses. In 1991 he co-founded the Matsushita Information Technology Laboratory to develop leading edge information and video systems for Panasonic. Dr. Alonso obtained two U.S. patents for his work, and his research team contributed software to a number of products, as well as developed a non-linear editing system prototype shown at the National Association of Broadcasters (NAB) Conference. Dr. Alonso is presently Head of Computing Systems Research at Sarnoff Corporation where he oversees research projects in a number of areas including Web-based collaboration tools, online learning, video databases, and development of MPEG encoding algorithms. He is also currently coordinating two product development efforts. Dr. Alonso's current research interests include organizational memory, multimedia database systems, video servers, mobile information systems, and heterogeneous database systems. Dr. Alonso has published over 40 refereed papers, been a member of more than 20 Program Committees, and is currently on the editorial board of several technical journals.

James R. Bergen, Head, Information Technologies Initiatives, Sarnoff Corporation

Combined, Sarnoff and Atomic Tangerine have a technical workforce that is in the several hundreds. Each will be assisting the proposed Registry with technical personnel and relevant experience. In addition, Sarnoff and AtomicTangerine will help shape the structure and staffing of the Registry.

Through Sarnoff and Atomic Tangerine, the proposed Registry will be able to access almost every popular systems development tool. However, for the purposes of its operations, very little systems development will be required. Nearly all software to be used will be packaged solutions with one exception, the SRS server, which will be developed using a published toolkit. The development environment will be Sun Workshop –Forte for development. It is a Sun package and will enable a finely tuned application to be developed. Merant’s PVCS will be used for version control. PVCS is a moderate package for version control adequate for the needs of development of the SRS server software.

Among the awards won by Sarnoff are seven Emmys for technical excellence. In like vein, Sarnoff intends to enable the next generation of pioneering technologies and services based on the Internet’s Domain Name System that will affect important aspects of our lives. Highlights of Sarnoff’s pioneering technical achievements are given below (see also Appendix B, a Business Week article on Sarnoff and SRI International).

The proposed Registry Operator aims to establish a robust and reliable registry with domain nameservers that are available at all times to resolve domain names under the TLD. In order to ensure smooth registry operation, the most robust and reliable technical infrastructure will be implemented. Only products and services from industry leaders like Cisco, EMC, Exodus, Oracle and Sun will be used to ensure interoperability, maximum availability and overall system dependability and resilience.

In order to ensure the Registry is functional at all times, a superior network architecture has been designed and resources will be heavily invested in technical infrastructure. The infrastructure design ensures there is no single point of failure by building in redundancy. The Registry will have the reliable, redundant and high-performance infrastructure demanded by such a critical application. Please see Figure 1: Diagram of Technical Infrastructure.

The front-end of the infrastructure will be available for serving DNS and Whois requests. Registrars will maintain registry records using the back-end portion of the infrastructure. They will have the ability to add, delete and modify domain name records in the Oracle database, which is hosted in the back-end and is the authoritative source of DNS records. This database populates the DNS and Whois servers as well as internal systems used for billing and reporting.

Each layer of the infrastructure will have redundancy. This redundancy will ensure that there is no single point of failure within the infrastructure. Load balancing is utilized to provide for a high level of quality of service to the user base. Load balancing ensures response in the event of device failure. DNS servers are load balanced by software design.

In the beginning there will be two identical set-ups of equipment, one in New York, NY and the other in Santa Clara, California. The back-ends of the two facilities will be networked to the proposed Registry’s corporate headquarters using Cisco 2610 routers and multiple T1 digital circuits (see Figure 2). The front end at both facilities will be active to provide DNS service. The backend at the New York location will remain active, but the backend at Santa Clara will remain dormant. However, the EMC Symmetrix storage in Santa Clara will be kept in sync with the EMC Symmetrix storage in New York over two T1 links using the Symmetrix Remote Data Facility (SRDF). In the highly unlikely event of catastrophic failure of the entire New York hosting facility, the Santa Clara backend will be activated to provide service.

Every hardware component will be from a world-class vendor. These vendors provide best of breed support and service. All vendors are global in scope to ensure that future global growth will be enabled. This will provide for a highly scalable growth path with minimal emphasis on re-creating the infrastructure at each location or region of the world. Teaming with industry leaders will also provide a continued growth path and help avoid the technological dead-ends that all too often are the fate of non-top-tier vendors. Leading vendors also provide a variety of equipment so that the most appropriate equipment is used for each function while minimizing the technical diversity. This will help simplify maintenance, training, and support.

The technical facilities associated with the Registry will be collocated at Exodus Data Centers in New York, NY and Santa Clara, CA. As and when required, additional nameservers will be collocated at Exodus Data Centers in Tokyo, Japan and London, UK.

At each of the data centers, Exodus will provide a virtual data center (VDC), which is a secured private area within the Exodus Communications Data Center for hosting the Registry infrastructure. The VDC is designed with steel mesh walls and a key lock sliding access door. Below are the specifications for the VDC, as per the sub-proposal from Exodus Communications (see Appendix F).

The hardware used will be a combination of servers, networking equipment and storage equipment from prestigious companies like Sun, Cisco and EMC. These companies are recognized as leaders in their respective industries and their products are unsurpassed in terms of features, quality, scalability and reliability.

Two Cisco 7206VXR with NPE-300 and I/O Controller with fast Ethernet will serve as the border routers at each site. The routers will run the IP feature set of the Cisco Internetworking Operating System (IOS). Each router is connected to a different Internet service provider and BGP is used to load-balance the out-bound traffic.

Two Cisco 3524 switches will bring the traffic from the border routers to the Cisco Pix 520 firewalls. The switches provide for redundancy in the event of failure of one of the switches. They also protect against firewall failure. The back-end network also employs two Cisco 3524 switches.

The core network switch is the Cisco Catalyst 6509. This switch has 48 10/100 ports, which will be sufficient for future expansion within a hosting facility. Each data center will have two Catalyst 6509 switches for redundancy.

Cisco LocalDirector load balancers will provide for load balancing requests across available equipment. They automatically route data only to responsive equipment. The end results are rapid response due to load distribution as well as guaranteed results from re-routing traffic from failed equipment to operational equipment. There are two sets of two Local Directors, one in the front-end and the other in the back-end. The set in the front-end is used to load-balance incoming traffic to the Whois servers. It is also used to route incoming traffic to the backup "phantom" primary nameserver in case the first one fails. The set in the back-end is used to load-balance the SRS servers. Each set contains two Local Directors for redundancy.

Cisco Pix 520 firewalls will provide for full featured firewall protection. These firewalls will disable all but necessary traffic from the Internet. For security purposes one firewall will remain active while the other is in a live waitful state in the event of failure of the first device.

All servers are from Sun Microsystems. The servers include primary nameservers, secondary nameservers, Whois servers, Oracle database servers, SRS servers and a zone file generation server. Each type of server will be the appropriate model for its specific purpose. The Oracle databases will run on Sun Enterprise 6500 with 4 processors and 4 gigabytes of random access memory (RAM). All other servers, including, the nameservers, are Sun Enterprise 450 with 1 processor and 1 gigabyte of RAM.

There are a total of three database servers. The first is used for read/write operations to make changes to the database and can handle as many as 150 writes per second. The second is optimized for read-only operations and can handle as many as 500 transactions per second. The third database is a fully configured database that will serve as a hot spare for either of the other two.

The Oracle servers will use an EMC Symmetrix 8430-18 for data storage. This is the optimum solution for reliable data storage. It also allows two Oracle servers to share the same logical drive. EMC has been the dominant player in high performance storage media for several years.

Operating system: All devices will run the manufacturer’s operating system. The latest well-tested production version of each operating system will be used. These will provide for the greatest functionality and security. All Sun servers will run Solaris 2.x. Cisco hardware will run the Internetworking Operating System (IOS).

Domain Nameservers: A combination BIND 8.0 and BIND 9.0 will run on the nameservers to serve DNS queries. BIND is the industry standard for nameserver software and is distributed under the GNU public license (GPL).

Database: Oracle 8i (Enterprise edition) with Oracle Parallel Server (OPS) will be the database software running on the database servers. 8i is Oracle’s latest version that expands upon Oracle’s long-standing technology leadership in the areas of data management, transaction processing, and data warehousing. The OPS enables multiple Oracle instances running on separate servers to share the same database, thereby enhancing the database throughput. Oracle Reports will be used to generate reports.

Security: Cisco Pix will run the standard Cisco Pix software and operating system. This offering from Cisco provides for stateful service of session inspection, user authentication and authorization as well as automatic stateful fail-over should a path in the network fail. High availability in conjunction with the fastest performance of any firewall on the market makes this the right choice. All Sun servers will run tripwire, a file system integrity-checking program for UNIX operating systems.

Backup: As part of its DataVault Service, Exodus Communications will be using the Veritas NetBackup solution for backup and restore.

Zone File Generation: SQL*Plus will be used to generate the zone files from domain name records stored in the Oracle database. Encrypted SQL*Net will be used for secure data transport between the Oracle server and the zone file generation server.

SRS Software: Based on the Registry-Registrar Protocol (RRP), the SRS system allows accredited registrars to add, delete and modify domain name records in the Oracle database. It has two components: the SRS server software at the Registry and the SRS client software at the registrar. SSL encryption is used to protect the data in transit between the SRS server software and the SRS client software.

ACE Server: This is the server software from industry leading RSA. The RSA ACE SecurID Server will be used for authentication and access control for maintenance as well as registrars.

Whois Server: This server will run Whois software that has been tested and used by other registries and registrars. It will serve domain name Whois information from a text file. Once the number of domain names registered under the proposed TLD approaches 1 million, the server will use the Veritas File System to store the text files.

Each Exodus facility is built on raised floors and has high-volume, zoned temperature control systems. Exodus has multiple air conditioning units to ensure proper heat dissipation. In the event one system fails, the other units are able to assume the full load of cooling the collocated equipment.

At each data center, Exodus will provide a 100 mbps connection to the Internet as part of its bandwidth services. This connectivity utilizes Exodus’s extensive network and peering arrangements. More information on the network is available in the Exodus proposal (see Appendix F).

In addition to this connectivity, each data center will have additional connectivity through the AT&T IP global network. This service is delivered through AT&T and the bandwidth is 100 mbps.

Exodus will be providing four 20 Amp circuits at each virtual data center. These circuits provide in-line UPS and diesel generator backup in the event of grid power failure.

The primary networking scheme will be 100 mbps switched Ethernet. There will be one network in the front-end that is selectively accessible via the Internet. This network contains the nameservers and the Whois servers. The back-end has a separate physical network and contains the Oracle servers and the SRS servers.

A separate physical network connects all servers that need to be backed up to a Sun 11000 storage array through a Cisco switch. The backup service is provided by Exodus Communications. This overlay network is used solely for backup and is not accessible via the Internet.

A third network consists of asynchronous serial links from each device at the facility to two Cisco 2610 terminal servers. This allows for highly secure and reliable device monitoring and management as well as for backing up configurations of servers and network equipment.

The present registry-registrar model and protocol used by Verisign Global Registry Services (formerly Network Solutions) is time-tested and known to work. It has also been widely implemented by registrars. Rather than develop a new system, the proposed Registry intends to adopt Verisign’s model and protocol. Not only is this a stable system, its adoption will accelerate the process of bringing registrars online with the new Registry.

The proposed Registry will use the Registry Registrar Protocol (RRP), which allows registrars to register, modify and delete domain names from the Registry’s central database. Shared Registry System (SRS) software based on the RRP will be developed using the software development kit made available by Verisign and the RRP specifications in RFC2832. The existing client-side SRS software at the registrar-end can be easily modified to interoperate with the server-side SRS software. Development assistance, training, and support will be provided to interested ICANN-Accredited Registrars to make the modification and come on-line with the proposed Registry.

Under the registry-registrar model, a registrant is required to go through an accredited registrar in order to register a new domain name or modify an existing one. The Registry will not accept registrations directly from the registrant. Similarly, the registrar is responsible for all interactions with the registrant, which includes customer support as well as billing and collection. The registrar is also responsible for enforcing the Registry policies on the registrants.

Business projections are for 140 million domain names (best case scenario) in the proposed TLD by the end of the fourth year, which translates into a projected database size of 70 gigabytes assuming a high estimate of 0.5 kilobytes per record.

The Oracle server optimized for read-only transactions can handle up to 500 reads per second. The other Oracle server that will perform both read and write operations can handle up to 150 transactions per second. These figures are based on tests conducted jointly by Sun and Oracle.

Oracle is one of the most scalable databases in the market today. The scalability of the database is dependent upon a number of factors, such as the server architecture, size of RAM, CPU power, number of CPUs, and disk access speeds. The Sun servers used for the database support multiple processors. Additionally, the services of read-only and read/write will operate on separate servers, thereby allowing scalability and growth paths based on the type of traffic. The machines at Day One support hundreds of simultaneous connections with scalability to thousands while maintaining industry-leading performance figures. The Sun Enterprise 6500 can address over 30 terabytes of storage. It can handle 6500 concurrent users and still deliver over 3000 transactions per minute, where a transaction is a database read, a CPU process and a database write. Initial configuration of the databases will be 4 CPUs with 4 gigabytes of memory. The Sun Enterprise 6500 is scalable to 32 CPUs with 60 gigabytes of memory. Sun also has other servers of considerably more capacity. Though not top-of-the-line, the Sun Enterprise 10000 can perform 102,000 i/o’s per second.

The maximum projected database size at the end of the fourth year is 70 gigabytes, which can easily be handled by Oracle. It would be safe to assume that the database can scale far beyond the purposes of the proposed Registry.

Before explaining the procedures, it is necessary to provide some definitions.

Only the registrar associated with the domain name will be allowed to edit or delete the domain.

All changes to a domain name record in the database will be recorded in a history table, which can be used to generate a report of all past modifications to the domain name. Such a report would be necessary to resolve a domain name dispute, especially over unauthorized or incorrect modifications.

Whois information with the contact details of the domain name holder is stored on the registrar’s Whois server, not the Registry’s. The Registry does not store the registrant’s e-mail address, and therefore, cannot e-mail the registrant if any modifications are made to his/her domain name. The registrars will be required to send change notifications to the registrants. The Registry will e-mail change notifications to the registrars as well as to a standard e-mail address associated with the domain name, e.g. registration@domain-name.TLD. Registrants willing to receive these change notifications will be instructed to allow receipt of these e-mails by making arrangements with their e-mail service provider.

These procedures are similar to what the Verisign Global Registry Services follows. The registrant initiates a registrar transfer at the new registrar. The new registrar’s SCS sends the transfer command to the SSS. The SSS notifies the old registrar and waits for positive acknowledgement. If a positive acknowledgement is received or none is received within 48 hours, the SSS completes the transfer by instructing the DBS to modify the appropriate field of the domain name record in the database. If the old registrar provides a negative acknowledgement ("no, don't transfer it") the domain will not be transferred. The registrant can override the negative acknowledgment by sending a notarized letter directly to the Registry requesting the transfer.

All domain names in the registry database have a fiscal-time-to-live field provided by the SRS Client Server (SCS) during the domain name creation. This is based on the number of years the registrant requests the registration and pays for it. If the domain name is not renewed prior to the end of this fiscal-time-to-live period, a 6-week grace period will be granted, during which the domain name is operative and can be renewed. Past the grace period, the domain name will be deleted and placed in an inoperative "hold" condition for a random period of time exceeding 3 months, as per the Registry’s policies regarding deletion of domain names.

Technically, the grace period will be implemented using a server-side script that runs once a day on the Oracle server and checks for expired domain names. If expired, it checks if the domain name is within the 6-week grace period. If it isn’t, the domain name is deleted from the database, as described in Section D15.2.3.4.

Oracle Reports will be used to create customized technical, financial and operational reports based on information stored in the Oracle database. For financial reporting and invoicing, data will also be imported into the billing and collection system described in Section D15.2.6.

Technical reports will cover database activity and performance. Operational reports will cover metrics such as the number of new domain names registered via a user-defined registrar within a user-defined period. These reports will enable close monitoring of the Registry operations and keep a close watch on the database performance. They will detect unusual activity that could be caused by a malfunction or system hack. For example, if the number of new registrations suddenly increases, it could be indicative of a compromised SRS client at a registrar.

All updates and changes by registrars will be made to the associated records in the Oracle database. These changes will be reflected in the newly generated zone files. The zone files are not changed or edited by registrars.

Twice a day, at 3 pm and 3 am, the zones files will be generated. These times are fixed, but may be rescheduled to avoid peak hours once the Registry is operational and peak hours are determined.

All technical and physical security measures described in Section D15.2.9 will also protect the zone file generation. The zone file generation server is protected by multiple layers of security and has all unnecessary ports and services blocked. It has an IP address in the 192.168.0.0 network, which is not routable on the Internet.

SQL*Plus scripts will be used to generate the zone files from domain name records stored in the Oracle database. Encrypted SQL*Net will be used for secure data transport between the Oracle server and the zone file generation server. The script will read domain name records in the Oracle database and generate properly formatted zone files containing the domain names and their associated nameservers. It will exclude expired domain names and those in the process of being deleted. The new zone files will be compared to the old ones and differences will be noted. Each difference must have a corresponding entry in the history table (which has a record of each change made to the domain name records in the database). Conversely, all new records in the history table must be accounted for in the new zone files. This process audits all changes and ensures that the zone files were generated properly and completely without any tampering.

Since users will not edit the zone files directly, no interface is required.

User authentication will not be required, as registrars will not make changes to the zone files.

All activity associated with zone file generation will be logged locally and to a remote logging server at the corporate offices. These logs will be inspected after the zone files are generated to ensure that the process was error-free.

Data backup procedures described in Section D15.2.7 will be used to backup the zone files, which will be stored on tape and overwritten after 2 weeks.

The proposed Registry will start operations in two Exodus data centers, one in New York, NY and the other in Santa Clara, CA. The two facilities will split the 13 nameservers. Over time, Exodus data centers in other locations, starting with London and Tokyo, will be used to migrate secondary nameservers to other continents. The possibility of co-locating nameservers with reputable regional ISPs will also be explored.

At each location, there are two primary nameservers, one active and the other a hot spare. A Cisco LocalDirector monitors the active server and directs traffic to the hot spare if the active server stops functioning. These "phantom" primary nameservers are not published as one of the 13 nameservers for the TLD, and are therefore not used for resolving DNS requests. Their purpose is to make the zone files available to the secondary nameservers.

The zone file generation server will run SQL*Plus scripts that generate zone files from the database at predetermined times twice daily. Next, it will open a secure FTP session to each of the primary nameservers using SSH. This connection will be monitored by the Cisco Pix firewall, which will allow only SSH connections to the primary nameservers from the zone file generation server.

Once the zone files are completely downloaded to the active "phantom" primary, the old zone files on the server are archived and replaced with the new ones. The name daemon on the server is restarted and the 13 secondaries (which are published on the Internet as the sole 13 nameservers for the TLD) automatically fetch the new zone files and restart the name daemon.

The billing and collection system for the Registry is very simple, as it deals with a limited number of registrars that is unlikely to exceed 200. An integrated management system will be utilized for accounts receivable, invoicing, human resources, registrar support and customer relationship management. The chosen system is the GreatPlains/Siebel system. The system will access registration information on the Oracle database directly through the read-only instance. Invoices will be generated automatically and e-mailed to registrars at the end of each month. The invoice amount will be entered into the accounts receivable and the account managers will follow-up with the registrars for collection.

GreatPlains/Siebel will have its own separate database and data. This system will be housed not at the Exodus collocation facility, but at the corporate office. It has a web-enabled interface and an API for integrating other applications that may be utilized at a later date. This allows the users of the system to have a single view into the information of the Registry, and minimizes training.

GreatPlains/Siebel has token authentication and encrypted tunneling creating an authenticated and encrypted VPN within the organization. This is in addition to username/password authentication. The system will not be accessible over the public Internet, but only at the private intranet at the corporate office. It will be further secured by using a Cisco Pix 520 firewall. All internal machines with access to this system will have machine passwords to prohibit unauthorized access.

Data backup and escrow are indispensable components of technical operations. The data backup and restore service will be provided by Exodus Communications as part of its DataVault service. Data escrow service will be provided by Iron Mountain in conjunction with the DataVault service from Exodus.

Once a week, data will be completely backed up to tape. Six times a week, the data will be incrementally backed up. After each 2-week period, tapes will be overwritten.

The file system supporting the Oracle database will be configured using a RAID 0+1 architecture. EMC’s Timefinder utility will utilize this architecture to generate a spare live data volume, known as a Business Continuance Volume (BCV), which will act as the source for data backup. This alleviates the production data volume from these responsibilities. The entire process is handled by Veritas NetBackup for EMC, which backs up the Oracle database over a separate LAN connection to the central backup server at Exodus. NetBackup for EMC solves the problem of affecting system availability and performance during backup for Oracle sites using EMC Symmetrix disk arrays. It utilizes EMC's TimeFinder capabilities for managing Symmetrix devices resulting in nearly zero-impact backups.

The software and configuration on all Sun servers will be backed up using Veritas NetBackup. This will provide a backup of configured software for use in disaster recovery. The configuration of all networking equipment will be backed up over the asynchronous serial link.

As part of the Change Management process, every modification to any device in the form of a change to configuration files, software, or network equipment settings will be backed up to ensure that the most recent settings are available during disaster recovery. These backups will be used to update any warm spares on premises. Copies of the backup will be stored locally and off-site.

Exodus uses Veritas NetBackup and DLT tape storage technology. Backup storage is provided on a Sun 11000 storage array connected to the servers to be backed up by a dedicated overlay storage network. Exodus will provide a Cisco Catalyst switch connected to the backup network. The EMC Symmetrix storage will be connected directly to this switch through a 100 mbps Ethernet port and a patch cable.

The data formats for the Oracle database will be native database files. The software products in use will be stored in both source code, where available, as well as run modules. ASCII text will be the data format for configuration files and settings of network equipment.

Exodus will provide offsite tape storage in coordination with Arcus Data Security, an Iron Mountain Company.

Arcus Data Security is regarded as the leader in offsite data vaulting. For over 30 years, they have provided secure, offsite vaulting for disaster recovery and archival data.  More than 25,000 companies in over 50 locations have relied on Arcus to ensure they have the information they need to recover from a computing disaster.

As per Exodus’s DataVault service, the database in backup can be restored within 15 minutes. The retrieval process is automated using Veritas NetBackup software. In the event a hardware or media error causes database corruption, a third fully configured database stands in readiness to accept the responsibilities while the hardware or media is attended to.

There are two Whois subsystems of relevance: the Registry Whois and the registrar Whois. Since the proposed Registry will adhere to the Verisign "thin registry" model, the Registry Whois is comparatively simple and the only information made public is the domain name, registrar, URL of Whois server, URL of registrar website, published nameservers and last zone file update date.

The Whois servers are Sun Enterprise 450s with 450 MHz processor and 1 gigabyte of RAM. They run Whois software that has been tested and used by other registries and registrars. It will serve domain name Whois information from a text file. Once the number of domain names registered under the proposed TLD increases, traditional UNIX file systems are incapable of maintaining fast performance in storing and serving the Whois text files. Therefore, Veritas File System will be used once the number of domains approaches 1 million. Veritas File System provides scalable performance and capacity that would meet the projected increase in registrations.

Each data center has two Whois servers for redundancy. They are load balanced by a Cisco LocalDirector. The Whois servers in Santa Clara are in a non-functional, dormant state, available to come online instantly if the entire New York data center fails.

As mentioned earlier, each data center has two 100 mbps connections to the Internet. The Whois servers will enjoy this connection speed.

Wildcard Whois searches will not be allowed. The registrar Whois will display the contact information for the domain registrant subject to the limitations outlines in the Whois policies (see sections E5.6 and E7). Given the non-commercial charter of the domain and taking into consideration privacy concerns, no wildcard searching of registrar databases will be allowed.

It is fairly standard now for Whois client software to conform to the de facto Verisign registry/registrar model and display both Registry and registrar output. By using this same model the Registry Whois service will be compatible with existing contemporary Whois client software.

Extensive technical and physical security provisions will be implemented to protect the system from system hacks, break-ins, data tampering, and other disruptions to operations.

The security and integrity of each Exodus Communications Data Center is maintained by video surveillance cameras, security breach alarms and 24-hour personnel. There are several cameras mounted inside and outside each facility (including within each Data Center). The video surveillance is monitored at the security guard station, at the Network Control Center and is also recorded on tape.

Exodus Communications Data Centers are equipped with "90-minute riot glass" at all locations. This glass is resistant to small-arms fire, as well as repeated blows with a sledgehammer. Exodus Data Centers utilize a key-card access system with mandatory pre-approved client lists and mandatory sign in/sign out procedures. Customers are issued key-cards upon each visit, after presenting photo identification. Customer names must be listed on a pre-approved client access list, which is submitted by each client prior to installation.

Inside the Data Center, each area is protected by key-card lock. Customers must pass through two sets of key-card access doors and possess a key to access individual customer space. The first door enables access to a holding area where personnel can be screened by Data Center Operations staff. In the event of a breach, NCC/Security personnel can disable the key-card entry system, denying access into the Data Center. NCC/Security staff monitors visitors at all times while in the Data Center. Exodus also uses motion-detection equipment to monitor areas after hours.

Security measures have been designed into the technical infrastructure for every device at every step. The security is designed to control access to appropriate systems. It is also designed to provide for authentication. In general, there is a front-end firewall allowing appropriate access for DNS and Whois lookups. It also allows appropriate traffic necessary for registrars’ operations. A second firewall separates the front end from the back end. This second firewall secures the traffic between the front and back end allowing only permitted connections to be established. Following is an analysis:

1. The first layer of security is the Cisco 7206 router. Light packet filtering will occur at this layer. The purpose is to prevent potentially dangerous traffic from entering into the Registry. Extensive packet filtering will be off-loaded to the first layer of Cisco Pix 520 firewalls.
2. The second layer of security is provided by a first set of Cisco PIX 520 firewalls, one in primary mode and the other in fail-over mode. These stateful firewalls maintain a state table entry for each TCP connection by the source and destination port and IP address. As part of its Managed Firewall Service, Exodus will monitor the firewall and its functionality 24 x 7 and scan log files to detect the signature of known hacker attacks. Specifically, only the following traffic will be allowed to enter the network:

• Incoming UDP connections to port 53 of the secondary nameservers.
• Incoming TCP connections to the primary nameserver from secondary nameservers in Santa Clara, and later throughout the world.
• Incoming TCP connections to port 43 of the Whois servers.
• Incoming TCP connections to the SRS servers that conform to the registry-registrar protocol (RRP) from specific hosts at the registrar running the SRS client software. All other hosts accessing the SRS servers will be blocked.

1. Telnet access to all servers and network equipment will be disabled. Unnecessary services running on the Sun servers will be stopped and all unnecessary ports closed. Additionally, tripwire will be installed on all servers to determine the integrity of files in the unlikely event of a system hack. Prior to going online, Tripwire will be run on all servers and a security audit will be performed to establish a baseline.
2. The SRS servers are placed behind a second set of Cisco PIX 520 firewalls. The firewalls will be configured to allow incoming traffic access only to the necessary port of the SRS servers and will proxy these TCP connections. They will allow outgoing traffic from the zone file generation server to the "phantom" primary nameservers and the Whois servers. The purpose of this traffic is to transfer the zone files and the Whois information using secure FTP via SSH, which uses SSL for encryption. As part of its Managed Firewall Service, Exodus will monitor the firewall and its functionality 24 x 7 and scan log files to detect the signature of known hacker attacks.
3. The back-end network consisting primarily of the SRS servers, the Oracle servers and the zone file generation server has a network address consisting of non-routable IP addresses (e.g. 192.168.0.0) and, therefore, cannot communicate with any device over the public Internet.
4. This is a switched environment. A switched environment is more secure than a purely routed environment. In the unlikely event of entry into the Registry by an unwarranted person, traffic only on that switched segment is accessible to the intruder.
5. SRS will utilize SSL for encryption of traffic between registrars and the SRS servers. SSL is the industry leading method of encryption.
6. SecurID from RSA will be utilized for strong authentication to authenticate registrars authorized to access the SRS servers. On the internal network, it will be used for all authentication related to maintenance. This system makes it impossible to log into any devices on the maintenance network without SecurID. It provides the strongest authentication available. Both soft keys and key fobs will be deployed at the user-end, depending on need. This authentication is augmented by username and password. With this technology, even if someone steals the password associated with a username, the system is still inaccessible.
7. As part of any good security policy, strict guidelines of access privileges will be maintained. Any change to infrastructure must abide by the Security policy. The Security policy will not only describe the levels of security for information, it will also contain a well-defined "run book" in the event of security compromise.
8. Escalation procedures are an essential part of security. Escalation procedures will be deployed for the various types of breaches or persistent attacks.
9. Separate intrusion detection service will be provided in the front-end and the back-end. Exodus will set up, run and manage Internet Security Systems (ISS) Real Secure intrusion detection software on a dedicated Sun server and respond to detected threats on a 24 x 7 basis. The intrusion detection service in the front-end will be configured to raise an alarm if any unauthorized traffic enters the network. This could happen if the first layer of the Pix 520 firewalls are compromised and stop filtering traffic as per the rules detailed above. The back-end network will have very specific TCP/IP traffic. Any outside traffic on the network will raise an alarm.
10. Tripwire logs and firewall alarm logs will be monitored daily. Firewall alarms will also be tied to an immediate notification system of security personnel via pager and e-mail. The system will also inform the 24 x 7 customer service personnel of escalated security problems. This provides for backup notification and a check and balance for security alarms. Full log monitoring will occur weekly using pattern checking security technology to determine if further preventative measures, investigation or action are necessary.
11. Every 6 months a security audit and review will be conducted by an independent outside agency. This will aid and assist the Registry in keeping current with its security practices.

From day one, the Registry database servers will be capable of handling up to 75 new registrations per second when operating at 50 percent capacity. This is based on the performance capabilities of the Oracle parallel server running on Sun Enterprise 6500 with 4 processors and using EMC Symmetrix for storage. By distributing the workload to 2 different database servers, the capability to handle new registrations is further enhanced. Since the Oracle database is the rate-limiting component of the setup, we can directly equate its performance (in terms of transactions per second) to the performance of the entire setup (in terms of new registrations per second). Even if the system operates at 10% capacity, the Registry is capable of registering 15 new domain names a second. This translates into 1.3 million new domain names a day, far exceeding even the most optimistic projections.

The read-only Oracle database is capable of handling up to 500 reads per second. This database will be used when a potential registrant checks for availability of a domain name using the registrar’s interface. Operating at 50 percent capacity, the system is capable of handling 21.6 million such requests a day.

Given the tiered architecture of the system, it is possible to allocate additional resources focused on specific areas of growth.

DNS & Whois Servers: In case a surge in the load for DNS lookups slows down the nameservers, a quick RAM upgrade should be sufficient. The architecture allows for the addition of more servers that could operate in a load-balanced environment. In this way, a DNS request to a specific IP address associated with a published secondary nameserver may be load-balanced across a large number of actual servers.

SRS Servers: The performance of the SRS servers is limited by the Oracle database. An unexpected increase in load should have no effect on these servers. Any possible performance degradation can be quickly remedied by a RAM upgrade.

Database: Most of the load on the database will be to determine the availability of a domain name under the TLD. A separate database server is dedicated for these read-only transactions. The number of requests to write to the database, in the form of a new registration, modification to an existing registration, or deletion of a registration, should be far lower than the capability stated in the previous section. If it isn’t, the capabilities of the database can be easily upgraded by adding more CPUs and RAM.

Back-up and escrow system: In the Oracle database, the size of a new record associated with a new registration is very small (less than 0.5 kilobytes). A surge in registrations will not significantly increase the size of the database to be backed-up and escrowed.

Support systems: A surge in registration load does not imply a surge in the number of registrars. Since the Registry will be supporting only registrars, there should not be any significant effect of increased registrations on the support systems at the Registry.

Maintenance: A more-than-projected demand for registration should not significantly increase maintenance requirements. Exodus, as part of its Technical Maintenance Staff service, will perform all regular maintenance and system administration functions. They will handle any increase in maintenance requirements.

Personnel: A greater-than-projected demand for registration will not overly expand the personnel needs necessary for ongoing support, maintenance or monitoring. The infrastructure established at day one will support significant expansion.

Define, analyze, and quantify quality of service.

The primary functions of the Registry infrastructure are:

1. To resolve DNS lookups of existing domain names in the shortest time possible.
2. To allow registrars to check the availability of a domain name by querying the Oracle database through the SRS server using RRP.
3. To allow registrars to add, change and delete registration records in the Oracle database through the SRS server using RRP.

The first function depends on the performance of the 13 nameservers serving the TLD as well as the quality of their Internet connectivity. BIND automatically balances the load to the nameservers so that requests are evenly distributed to all 13 nameservers. Performance tests indicate that DNS servers should resolve a domain name lookup within 2ms. This does not include latency on the public Internet between the client and the nameserver. In order to minimize this latency, the proposed Registry will start with facilities in New York and Santa Clara, and expand to Tokyo and London in the near future.

The second and third functions take place exclusively between the registrars and the Registry using RRP. The performance of these functions is not as time-sensitive and depends almost exclusively on the performance of the Oracle databases. This has been discussed and quantified in section D15.2.10

In terms of availability, the Registry will easily achieve 99.99999% availability of at least one nameserver to resolve DNS requests. In the highly unlikely event that one Exodus facility goes down, nameservers at the other facility will continue to serve requests. The availability of at least one SRS server and one Oracle database is limited by the availability of the EMC Symmetrix storage, which is reported as 99.953%. This will also be the availability of the SRS system.

Both technical and facility security add to the level of protection against system outage. Security has been discussed at 15.2.9. The security measures are world-class and state-of-the-art with provisions to maintain them at that level.

Under its Managed Monitoring service, Exodus continuously monitors the CPU utilization, file systems, swap space and memory utilization of servers running Solaris. Alarms can be defined to go off at critical levels of these stats and Exodus will follow a step-wise procedure to respond to the alarm. The service can also monitor crucial processes on the servers. For example, this service can be used to monitor the availability of the named process on all nameservers. As part of its SLA, Exodus will report all critical alarms within 15 minutes by telephone or pager.

At the protocol level, the availability of networked devices is monitored by pinging the devices every minute. If a device does not respond to a ping, it has a critical problem that needs urgent attention. Security breaches will be detected by the Intrusion Detection Service and Managed Firewall Service described in D15.2.9.

Availability and performance of services will be monitored by regularly generating a request to the relevant server and analyzing the response. For example, every minute a DNS request will be sent to each of the 13 nameservers. If the expected response is not received or no response is received at all from a nameserver, it is certain that the particular nameserver is malfunctioning and will be attended to immediately as per predetermined procedures. Similarly, the Whois service will also be monitored.

This is in addition to internal monitoring of security, system load, and equipment failure. Within the corporate offices of the Registry will be real-time monitoring capabilities of system load and security alarms. In the event of loads exceeding pre-defined levels or of equipment failure or of security alarms, immediate notification to relevant internal personnel as well as the 24 x 7 customer service personnel will ensue.

Firstly, the Registry will have nameservers at Exodus data centers in New York and Santa Clara. If an entire facility goes down for any reason, the other facility will continue to provide full service so that uninterrupted service of DNS and Whois requests will be maintained. In addition, if the New York facility goes down, the duplicate set of fully redundant back-end equipment that is waiting in a dormant state at the second location can be activated remotely within 15 minutes. In this way, if the New York facility fails, SRS can be restored within 15 minutes.

The configuration and software of equipment at the Santa Clara facility will be kept in sync with those at the New York facility using the change management process, which will keep track of all changes to any equipment or software at the New York facility. Additionally, 2 dedicated T1 circuits between the EMC Symmetrix storages at the two sites provide for real-time, synchronized replication of data to the second site using Symmetrix Remote Data Facility (SRDF). The 2 T1s provide redundancy of this connection (see Figure 2). At each facility, two Cisco 2610 routers connect to the corporate office of the Registry over separate T1s. This provides a redundant link to the corporate office for remote monitoring and data transfers.

Secondly, every component at each facility is fully redundant. The architecture provides for no single point of failure. There are two 7206 routers, two Cisco 3526 switches (at each layer), two Cisco Pix firewalls (at each layer), two SRS servers, three Oracle servers (one configured as hot standby), more than two secondary nameservers and two primary nameservers (see Figure 1).

Exodus provides 2 separate links to the Internet. They are from 2 independent service providers. In the event one link fails, data is automatically routed to the other one.

Exodus provides in-line UPS power with backup generators.

Exodus will be providing all the Sun servers in the technical infrastructure. They maintain a stock of spare servers and server components for quick replacement in the event of hardware failure. Hard drives loaded with the operating system and pre-configured software for all servers will be maintained to speed up the recovery process after a replacement of the server hardware.

The Registry operator will maintain spares of all Cisco equipment on-site. In the event of a failure, Exodus will replace the defective equipment immediately. As per service level agreements with Cisco and EMC, they will replace defective hardware within 2 hours.

Immediately after installation and initial configuration, a backup will be made of each platform and stored remotely. These will be used in the event of a catastrophe to restore the system to its initial configuration.

System monitoring will be done internally as well as by Exodus and is described in D.15.2.12.1 as well as in the Exodus proposal (see Appendix F).

For maintenance, Exodus makes available the following list of specialized engineers to perform a range of services (excerpts from the Exodus proposal; see Appendix F):

• Supports customer’s network-related troubleshooting and ticket escalations, and assists with problem resolution
• Participates in developing recommendations for network upgrades and enhancements
• Supports customer network configurations through site performance monitoring and network topology review upon request (additional charges may apply if 50 hour threshold is exceeded in a given month)
• Supports Exodus-approved networking products
• Facilitates customer’s routine system administration activities for troubleshooting and system maintenance
• Participates in developing recommendations for system performance, upgrades, operating system patches, and enhancements
• Supports Exodus-approved operating systems
• Provides up to 50 hours- per-month of on-site support with standard Platinum Support contract

• Checks the database’s critical parameters such as logs, threads, locks, database size and segment/table size to ensure that the critical threshold is not reached
• Confirms that the database is performing at optimal speeds
• Migrates data from one database to another, as required
• Creates and/or modifies additional databases as needed
• Prepares specified transaction/database record reports
• Provides assistance in database design, normalization schemes and indexing
• Tunes database for optimal performance
• Performs daily and /or weekly backup of the database and logs

• Ensures a 6-month review and audit of security policies and procedures.
• Establishes and monitors security policies, ensuring the appropriate notifications and established plans of action are followed for each incident.
• Responds to all security alarms that may arise.
• Maintains, monitors, and ensures the performance of security devices, Cisco Pix firewalls and RSA SecurID servers.
• Keeps current with newly developed attacks to ensure there is no threat from them.
• Maintains access control lists in keeping with established Change Management procedures.
• Establishes and enforce password procedures, such as password aging and password complexity guidelines, preventing easily guessed passwords.

Nameservers will be distributed between data centers at Exodus facilities in New York and Santa Clara. This list will be increased to Tokyo and London shortly afterwards.

The technical infrastructure has redundancy built into every system to eliminate any single point of failure. Therefore, it is nearly impossible that any single hardware failure would disable the Registry. In the highly unlikely event that an entire Exodus data center fails, there is another data center with nameservers to continue serving DNS requests.

In the event of total system outage of the Santa Clara facility, DNS requests will be served by the New York facility. If the outage appears to be long-term, spare equipment at Exodus will be configured and deployed as secondary nameservers to handle DNS queries.

If the entire New York facility fails, dormant back-end equipment at Santa Clara will be activated within 15 minutes to handle SRS and Whois. If the failure is long-term, the zone file generation server and the phantom primary nameservers will also be activated to handle zone file generation and distribution.

If one of the two database servers fails, the hot spare database server will handle the load and keep the system operational.

The Registry will use a combination of Bind 8 and Bind 9 on secondary nameservers. This is to protect against possible bugs in one version. The SRS server software will be developed in-house, but will be extremely simple. Any bug in the software will be detected and fixed during beta testing. Any bug that may surface during production stage will be minor and fixed immediately. All other software used in the system is time-tested and rock-solid.

Please see D15.2.12.2

Recovery from failures will be predicated on the type of failure. Total location failure has been addressed above.

We will proceed through the architecture highlighting recovery processes for each component.

In the event of failure of a border router, Exodus will instantly detect this and automatically re-route all traffic to the functional router. In addition, Exodus will replace the defective router with a warm spare, maintained on-site by the Registry. Exodus will handle failure of any other Cisco equipment in a similar manner.

Exodus maintains a stock of spare Sun servers and server components for quick replacement in the event of hardware failure. If a server fails, Exodus will replace it within 15 minutes of detecting the failure. Hard drives loaded with the operating system and pre-configured software for all servers will be maintained on-site to speed up the recovery process after a replacement of the server hardware.

Any type of failure, especially of software, will warrant a security audit to ensure no unauthorized access is occurring. The audit will also determine if the failure was related to a security breach.

Each layer of Cisco firewalls, switches and load balancers are duplicated throughout the architecture. In the event that a single piece of equipment fails or an entire set of equipment fails, the second set will continue functioning and maintain all services. At that time, Exodus, EMC or Cisco will respond within SLAs to remedy the situation. For Exodus this is 15 minutes and for Cisco and EMC it is 2 hours.

We will use Exodus for most of the recovery tasks.

As mentioned in section D15.2.12.6, hard drives loaded with the operating system and pre-configured software for all servers will be maintained to speed up the recovery process after hard drive failure or server replacement.

As detailed in section D15.2.12.6, Exodus maintains a stock of Sun servers that are available for immediately replacing a defective server. Cisco and EMC hardware can be replaced within 2 hours, as per SLA with them.

Exodus maintains expensive backup power systems.

In the worst-case scenario, the entire New York facility could stop functioning. Within 15 minutes of detecting this, the Santa Clara facility could be brought on-line to serve registrars and Whois requests. The secondary nameservers at the Santa Clara facility will be operational at all times to serve DNS requests. In this way, DNS requests will continue to be served even if one of the two data centers completely stops functioning.

In the event of a device failure or site failure there is a prescribed set of scripts that are run to ensure all functions are operational.

These scripts will test the various services (DNS, Whois and SRS) to verify operation. These tests run upon the interim configuration and are re-run when the solution has been implemented. It is run during the interim period to ensure services are maintained. They are run again upon problem resolution to verify that operations have resumed as prior to problem. A full set of satisfactory results will be used to compare test results.

Additionally, the Registry will maintain a separate small-scale but fully functioning test registrar setup. In the event of failure, this test facility will verify service delivery.

If the actual procedure is to be tested, the failure is simulated by purposely shutting down a device or service. This can be done by powering down the device or disconnecting a network connection. Once the failure is created, the monitoring services should detect it. The prescribed procedure to remedy the failure is then followed. Finally, after the procedure has been completed, the monitoring service should not detect the failure and the system should be restored. By following this method, every procedure will be tested and updated to make sure it works in the event of an actual failure.

There will be three document trails of system outages and problems. One is through the Exodus Support Services. A second reporting trail is maintained by the relevant internal technology group: security, database, or network infrastructure. Customer Service provides the third set of documentation. This provides for a valuable cross-reference compilation.

The records should contain the equipment/software, type of difficulty, how/who reported and time/date of incident. The follow-up will contain detailed specifics of the incident, steps to resolution (along a prescribed resolution path or other), persons involved in resolution. All logs surrounding the time of incident will be appended to the incident record.

After any significant incident and periodically otherwise, a root cause analysis should be performed to determine if any aspect of the system warrants change. This could be software, architectural, security or a networking change.

Since the Registry is dealing only with registrars, little technical support will need to be provided. Nonetheless, a comprehensive support system will be implemented.

Comprehensive support will be available to registrars. The scope of the support will be: (i) installation of the SRS client, (ii) problems accessing and using the SRS server, and (iii) problems using the Registry.

Internet users will be indirectly supported by the Registry through their respective registrars. Support requests will be diverted to registrars. It is assumed that any technical problem in the Registry that could affect Internet users (e.g. unavailability of nameservers) will be detected before it is necessary for Internet users to report it.

Registrants will be supported by their respective registrars. The Registry will not be responsible for supporting them. However, the Registry expects to receive support calls and e-mails from registrants. Support e-mails from registrants will be re-directed to the respective registrar based on Whois information. This process will be automated. Any e-mail that does not contain the domain name will be responded with a standard reply instructing the registrant to approach the registrar for support.

A comprehensive and scalable help desk solution by Siebel will be implemented to provide web-based and e-mail support. It will also be used to manage and track support requests received over the telephone. Siebel is an industry leader in customer support services providing world-class services to a wide client base.

Each call to the help desk will automatically open a trouble ticket in the system visible to the help desk attendant for data entry. The established play book for each type of call is within the system, guiding the help desk attendant to the appropriate action. Exception rules will be established to handle those calls that fall outside the established procedures. Weekly the calls will be reviewed and categorized.

Siebel provides superior reporting capabilities. The review of each week’s calls will provide information valuable to several areas within the Registry. This information will shape the material used for training registrars. It will guide the software architects in their development with respect to services and usability. It will permit the business relationship personnel to more accurately set expectations from new registrars.

At lease one support engineer will be available at all times to support registrars.

Web-based support will be provided using the Siebel help desk software. Registrars can log into the system over the web and open a new trouble ticket. Or, they can search the knowledge base for possible solutions.

Support over telephone will be handled though an interactive voice response (IVR) system. All incoming support requests will be entered into the help desk system. On-site support to registrars will be provided on request in special cases.

This is described in section D15.2.14.1.

Support to registrars will be available 24 x 7.

Initially, support to registrars will be provided in English only. Based on demand, we will implement support in other languages. The help desk solution from Siebel supports 7 other European languages and Japanese.

A significant portion of the technical infrastructure, installation hosting, monitoring, administration and maintenance will be subcontracted to Exodus Communications as per their proposal attached in Appendix F. The scope of the work is:

1. To co-locate the Registry infrastructure at Exodus data centers in New York and Santa Clara.
2. To provide Internet connectivity to the infrastructure.
3. To lease Sun equipment used in the infrastructure.
4. To install and configure all equipment.
5. To install and configure the Oracle database software.
6. To monitor the infrastructure for common problems, including security attacks, and follow prescribed procedures to counteract problems.
7. To backup all data and provide data escrow services.
8. To replace defective hardware in the event of hardware failure.
9. To monitor services and follow prescribed procedures in the event of a failure.
10. To maintain all equipment and the Oracle database.
11. To make available the services of a System Administrator, Network Administrator and Oracle Database Administrator at each facility.

By signing this Registry Operator's Proposal, the undersigned certifies (a) that he or she has authority to do so on behalf of the registry operator and, on his or her own behalf and on behalf of the registry operator, (b) that all information contained in this proposal, and all documents attached to this proposal, is true and accurate to the best of his/her/its knowledge and information. The undersigned and the registry operator understand that any material misstatement or misrepresentation will reflect negatively on any application of which this proposal is a part and may cause cancellation of any delegation of a top-level domain based on such an application.

• A. Sarnoff Technology Venture Companies
• B. Fortune Magazine Cover and Business Week Article on Sarnoff and SRI International
• C. Resumes of Key Sarnoff and AtomicTangerine Managers
• D. Letter of Reference in Support of TLD Application
• E. Letters of Interest from Cap Gemini Ernst & Young US, LLC, Ernst & Young LLP and Ruder Finn
• F. Subcontractor Proposal from Exodus Communications

AgileVision – Developing a broad line of products for the emerging digital television (DTV) broadcast industry.

Delsys Pharmaceutical Corporation – Uses electrostatic dry powder handling technology to improve the quality, safety, and speed of pharmaceutical tablet manufacturing and other forms of drug delivery.

DIVA – Provides cable TV operators with a complete two-way interactive video-on-demand solution so they can offer their customers instant access to over a thousand movies or other special programming.

E-Vue, Inc. – An MPEG-4 multimedia technology service company that is developing streaming multimedia products for the Internet.

Hitek – Provides manufacturing, engineering, and management support to Sarnoff.

LifeClips, Inc. – Creating products and services that will revolutionize the way people make and view home videos.

Locus Discovery, Inc – Uses proprietary algorithms for drug discovery.

NxtWave Communications – Produces all-digital modulator and demodulator ICs for cable, satellite, broadcast and xDSL systems.

Orchid Biosciences – A leader in the development and commercialization of technologies, products and services designed to measure and use information related to genetic diversity.

PowerZyme – Developing a new proprietary battery technology.

Princeton Lightwave – Designs and manufactures high-performance optical components for advanced network applications.

Pyramid Vision Technologies (PVT) – The world’s highest performance computer vision systems for video production stabilization.

RIVIT – Specializes in radio frequency-based identification (RFID) products & services.

Sarcon Microsystems, Inc. – This company is developing uncooled microcantilever infrared and chemical sensing assemblies for laboratory instruments, industrial monitoring, and commercial security applications.

SARIF, Inc. – Manufactures advanced polysilicon active matrix LCDs for use in projection displays and head-mounted systems.

Secure Products – Develops anti-counterfeiting and anti-diversion systems through unique marking and recognition technology and is the only company with a phosphor-tag security system in US currency.

Sensar, Inc. – Introduced an iris recognition biometric system for financial services applications.

Songbird Hearing Inc. – Developing the world’s first disposable hearing aid.

VideoBrush™ Corporation – VideoBrush and its technology (PC-based software that creates high-resolution or panoramic images from video and digital photographic input) were recently acquired by PictureWorks Technology, Inc.

Wavexpress – Provides technology and services to digital TV broadcasters for the secure ad-supported or pay-for-use distribution of digital information.

Dr. James E. Carnes is President and CEO of the Sarnoff Corporation, a subsidiary of SRI International. Sarnoff conducts industry- and government-supported electronics, information and biomedical research and development in areas such as digital HDTV, solid state lasers, integrated circuits, flat panel displays, computer vision, drug discovery tools and drug delivery systems.

Dr. Carnes, who has had 31 years combined service with Sarnoff and its RCA predecessor, became Sarnoff's President in 1990. A recognized authority in the field of charge-coupled devices, he has played a major role in the development of High Definition Television (HDTV) in the U.S. since 1987. He joined RCA Laboratories in 1969 as a Member of the Technical Staff and worked in the area of MOS device structures, particularly CCD technology and applications.

In 1977 he transferred to RCA's Consumer Electronics Division in Indianapolis, where he held a variety of management positions in integrated circuit design and development and TV advanced development. In 1982 he was appointed Division Vice President, Engineering, at the Consumer Electronics Division. He returned to Princeton in 1987 as Vice President, Consumer Electronics and Information Sciences Research when Sarnoff became a subsidiary of SRI International, which is headquartered in Menlo Park, California.

Dr. Carnes has been issued nine U.S. patents and is the author of more than 100 papers and presentations. In 1981 he was a recipient of the David Sarnoff Award for Outstanding Technical Achievement "for the development and implementation of a CCD comb filter integrated circuit in color television receivers."

He received a B.S. degree in Engineering Science from The Pennsylvania State University in 1961. In 1970, he earned a Ph.D. degree in Electrical Engineering from Princeton University. Dr. Carnes is a Fellow of the IEEE and a member of the National Academy of Engineering. He sits on the Board of Directors of the following companies (* indicates a Sarnoff spin-off company):

Norman D. Winarsky is Corporate Vice President of Sarnoff Corporation, responsible for Internet and Multimedia Technologies. Business units within Sarnoff reporting to Dr. Winarsky include the National Information Display Laboratory (NIDL), Vision Technologies, and Computational Science. He is a founder of the National Information Display Laboratory - a center of excellence for the government in information processing and display technologies. He is a recipient of Sarnoff's highest honor, the David Sarnoff Award for Outstanding Technical Achievement.

Dr. Winarsky received the BS, MS, and Ph.D. degrees in Mathematics from the University of Chicago in 1969, 1970, and 1974, respectively, graduating Summa Cum Laude and Phi Beta Kappa. Dr. Winarsky has written over 50 papers and given hundreds of invited talks, lectures, and presentations throughout the world. His primary responsibility is to advance and execute the Sarnoff Internet Strategy.

In the last four years he was also founder of five of Sarnoff’s sixteen spinoffs. These include: SENSAR, Sarnoff’s first spin-off, serving the e-commerce community with iris recognition systems; VideoBrush, providing consumer software that stitches video into still images in real-time (now acquired by PictureWorks); Pyramid Vision Technologies, providing the US government with real-time systems for mosaicking and enhancing video; GreatHomeVideo.com, creating a web community of home video users and WaveXpress, providing television broadcasters the capability to use their digital channels for datacasting. He served as President and CEO of Sensar, Pyramid Vision Technologies, and VideoBrush during their incubation phases. Dr. Winarsky is Chairman of the Board of Pyramid Vision Technologies, and Member of the Boards of GreatHomeVideo.com and WaveXpress.

Glenn Reitmeier is Vice President of Internet Technology Strategy and Development at Sarnoff Corporation. His current responsibility is to leverage Sarnoff’s broad technology base to drive new developments in digital media, networking and consumer products and services that will help create the next wave of Internet and digital convergence growth.

His career has pioneered the development of digital television, digital media and digital convergence. He has created and led world-leading developments in Digital Cinema, object coding and wavelet image compression in MPEG-4, MPEG-2 compressed bitstream processing and integrated circuits for digital television receivers. His efforts have contributed to the formation of six new startup companies and resulted in three technical Emmy awards.

Mr. Reitmeier was one of the leading contributors to establishing the ATSC Digital Television standard that was approved by the FCC in 1996. In the Digital HDTV Grand Alliance, he performed in both technical and strategic capacities, and was the leader of Grand Alliance computer interoperability efforts. During the competitive phase of the HDTV process, he led Sarnoff’s team in the development of the Advanced Digital HDTV system, which pioneered the use of layered system architecture, packetized data transport and MPEG compression and multiple formats. These key technical approaches later became the basis for both the Grand Alliance HDTV system and the Hughes/DirecTV Digital Satellite System (DSS). They are also the key innovations that enable data broadcasting and allow digital television to become a powerful new medium.

In addition, he was responsible for creating and leading other Sarnoff programs which combine digital video and computing technologies to create new capabilities for both advanced computer systems and new consumer electronics. He created and led a Sarnoff-Sun-Texas Instruments team in a DARPA funded project to develop a High-Resolution Video Workstation - a real-time video-processing multimedia workstation. He led projects related to improving the performance of consumer television receivers, including signal processing and user interface aspects that have impacted product design. He also led projects related to developing new technologies for consumer information services, including computer and network architectures, Digital Signal Processing modems and natural language software.

Earlier in his career, Mr. Reitmeier was a contributor to the establishment of the world’s first digital television standards (the ITU 601 sampling standard and the D1 tape standard) that are now in widespread use in the broadcast industry. He holds over 40 patents in digital television technology. He received the B.E.E. degree summa cum laude in 1977. He subsequently attended the University of Pennsylvania, and received the M.S.E. degree in Systems Engineering in 1979.

Shailendra K. Suman is Executive Director of Sarnoff Corporation and General Partner of nVention. He is responsible for the business and strategy development, market analysis and strategic alliances for nVention and its ventures.

Mr. Suman received his BS in Mechanical Engineering from B.I.T. Sindri, India, an MS in Control Systems from University of Alabama, and an MBA in Finance and Strategy from University of Minnesota in 1986, 1989, and 1995 respectively. He completed all the coursework towards a Ph.D. in Mechanical Engineering at Columbia University, NY in 1989.

Prior to joining Sarnoff, Mr. Suman was Managing Director for PSEG Distributed Generation business unit, where he started and led the business unit in the emerging energy technology market, formed several overseas joint ventures, and developed a sales and marketing strategy to launch e-commerce in the energy industry.

Before coming to PSEG, Mr. Suman held several management positions at Northern States Power Company in Minneapolis. He led the development of the corporate technology strategy plan and was appointed Chairman of the NSP’s Technology Advisory Board. He also managed the development of three new businesses from concept to launch over three years.

Mr. Suman is a member of the Conference Board’s International Council of Innovation & Technology Management and the Institute of Electronics and Electrical Engineers.

Anne VanLent,. President, Ventures and Licensing, Sarnoff Corporation

Anne M. VanLent currently serves as Vice President, Ventures and Licensing at the Sarnoff Corporation, Princeton, New Jersey. Her responsibilities include identifying technologies that can serve as the foundation of new commercial businesses, and helping to assemble the technical, managerial, and financial resources to create those businesses. She also manages and oversees all of the patent and licensing activities of Sarnoff. Sarnoff Corporation specializes in developing world-leading technologies, then moving them rapidly into the marketplace.

Ms. VanLent has extensive experience in founding and building technology-based companies. In addition, she is experienced with emerging growth companies and has a broad background in science, finance, and business development.

Before joining the Sarnoff Corporation in July of 1997, Ms. VanLent was the founder and President of AMV Associates, which provided senior level finance, business development, and operations consulting services to emerging growth life science companies. Prior to that experience she helped found Trophix Pharmaceuticals Inc., a venture-backed neuroscience company, now a part of Allelix Pharmaceuticals, Inc. She also spent eight years as Senior Vice President and CFO of The Liposome Company, Inc. of Princeton, New Jersey.

Her undergraduate degree in physics, conferred with honors and great distinction, was received from Mount Holyoke College. She conducted graduate studies at the Universite de Strasbourg, Strasbourg, France.

Anne currently serves as a director of Penwest Pharmaceuticals Co. (NASDAQ:PPCO), and i-STAT Corporation. (NASDAQ: STAT), Orchid BioSciences, Inc. (NASDAQ: ORCH), and several private emerging growth technology companies.

Nova Spivack is Founder, President and CEO of Lucid Ventures Inc. and Co-Founder and CEO of Lucid Associates, LLC. He founded Lucid Ventures to develop, fund and incubate proprietary concepts for new Internet ventures. Lucid Associates LLC is a strategic venture development firm that provides high-level business planning, M&A strategic planning, product and technology innovation, industry connections, and venture capital assistance to selected Internet ventures. Mr Spivack has been an Internet venture strategy advisor to Sarnoff Corporation for the past year and a prime mover in their decision to create nVention.

Mr Spivack was a Co-Founder, Executive Vice President , and Director of EarthWeb Inc., an industry-leading Internet venture, since 1994. He co-led the company from startup through an historic IPO (the first business-to-business IPO and one of the all-time best first day gainers) and a secondary public offering. He served as executive vice-president for product development and strategy and was responsible for all research and development, products and services strategy, and business development and marketing for a variety of Internet content services, software products and consulting services. He represented EarthWeb to worldwide press and at key industry events. He gave frequent presentations and keynotes at conferences including Internet World, W3C, Java One, PC Forum, Software Development, International Software Partnering Conference, Seybold Publishing, Practicing Law Institute, WebDeveloper, and many others.

In 1997, Mr Spivack was the Founder of the Java Developer’s Alliance, New York, NY, and he has served as a Board Member and Executive Director since. He conceived of and built the official worldwide organization of Java Users Groups ("JUGs"), which currently includes more than 100 JUGs around the world.

Mr. Spivack was the principle strategic planner responsible for product development, marketing strategy and content planning for sites including: www.gamelan.com, www.developer.com, www.developerdirect.com, www.itknowledge.com, www.chatplanet.com, www.datamation.com, www.htmlgoodies.com, www.intranetjournal.com, www.jars.com, www.javagoodies.com, and www.javascripts.com. He LAO consulted on the development of sites such as www.metmuseum.org, www.bmgmusicclub.com, www.nyse.com, www.reuters.com, and many others.

He authored The Official Gamelan Java Directory book and is co-author/contributor to other books including Intranets Unleashed, PLI First Annual Symposium on Internet Law, and Traveler’s Tales Nepal. He is the principal author of EarthWeb Inc’s S1 IPO Prospectus.

Mr. Spivack is currently developing several new proprietary patents in the areas of GPS technology, Internet television, Wireless consumer electronics, Internet radio, artificial intelligence and augmented reality. He is the principle inventor of multiple fundamental patents related to simulcasting Internet content with television broadcasts for use in entertainment, education, sports, news and information services. These patents were sold to ACTV, Inc., the leading public company in the interactive television industry (IATV on NASDAQ), and are now the foundation of their business.

He has had numerous speaking engagements and panel chairmanships at Internet World, JavaOne, Practicing Law Institute, WebDeveloper, Online Publishing for Magazines, Venture Market East, Seybold, and many others. Topics have included Internet Marketing and Strategy, Frontiers of Java Technology, Frontiers of Web Content, XML Technology, Internet Site Development, Legal Implications of Internet Technologies, Online Publishing Strategies, Online Commerce Strategies, and others.

He has been profiled and/or quoted in Business Week, CNN, CNBC, CBS Evening News, CNN-FN, The New York Times, Washington Post, WIRED Magazine, Chronicle of Philanthropy, Communications Week, Interactive Week, Internet World, Reuters, Newsweek, Red Herring, Silicon Alley Reporter, Interactive Age, Web Week, Java Developer’s Journal, and others.

Mr Spivack is among the top-rated featured "Internet Business Experts" on Expert-central.com, part of the About.com network.

Mr Spivack is a graduate of Oberlin College and International Space University.

William J. Burke is Vice President for Intellectual Property and Licensing for the Sarnoff Corporation.

Dr. Burke joined RCA Laboratories in 1967 as a Member of the Technical Staff. He transferred to RCA Patent Operations in 1978 and was named a Managing Patent Attorney in 1983. In 1987 when the David Sarnoff Research Center was transferred to SRI International by General Electric, he was named Director of Law and Patent Operations as well as Assistant Secretary for the new company. In 1995 he was named Acting General Counsel. In 1997 Dr. Burke was named Vice President, Intellectual Property and Licensing.

His undergraduate degree in Physics is from Boston College and his PhD degree is from Tufts University. Dr. Burke was a National Science Foundation Postdoctoral Fellow at University of Illinois, Urbana. He received his JD from New York Law School.

Dr. Burke is a member of the American Bar Association, American and New Jersey Intellectual Property Law Associations, the American Corporate Counsel Association, and the Institute of Electrical and Electronics Engineers.

Dr. Burke has participated in the formation of eighteen Sarnoff Technology Ventures and has served as an officer of many of these Ventures. Dr. Burke was also a participant in the Grand Alliance digital HDTV standard setting process in 1996.

Dr. Burke has nine U.S. issued patents and over thirty technical publications.

Dr. Burke has been admitted to the New York Bar, New Jersey Bar, Court of Appeals of the Federal Circuit and Court of Federal Claims and is registered to practice before the U.S. Patent and Trademark Office.

Rafael Alonso obtained a Ph.D. in Computer Science from U.C. Berkeley in 1986 where he held an IBM Fellowship. He was a faculty member at Princeton University from 1984 to 1992 where he graduated three doctoral students, obtained several government and industrial grants, and developed two new courses. In 1991 he co-founded the Matsushita Information Technology Laboratory to develop leading edge information and video systems for Panasonic. Dr. Alonso obtained two U.S. patents for his work, and his research team contributed software to a number of products, as well as developed a non-linear editing system prototype shown at the National Association of Broadcasters (NAB) Conference. Dr. Alonso is presently Head of Computing Systems Research at Sarnoff Corporation where he oversees research projects in a number of areas including Web-based collaboration tools, online learning, video databases, and development of MPEG encoding algorithms. He is also currently coordinating two product development efforts. Dr. Alonso's current research interests include organizational memory, multimedia database systems, video servers, mobile information systems, and heterogeneous database systems. Dr. Alonso has published over 40 refereed papers, been a member of more than 20 Program Committees, and is currently on the editorial board of several technical journals

Dr. James R. Bergen, Head, Information Technologies Initiatives, Sarnoff Corporation

Jonathan leads the AtomicTangerine executive team and serves as a board member. He has a proven record of visionary leadership gained through years spent in senior-level positions with companies including Luna, IBIS Consulting, GE Capital and Trans Ocean. As chief executive officer of IBIS Consulting, Mr. Fornaci more than doubled revenue and employees in less than 12 months and successfully orchestrated a US $300 million merger with Proxicom. As chief operating officer of Luna, he brought to market the first e-relationship software for Fortune 1000 and Digital 1000 companies.

Mr. Fornaci previously served as chief information and technology officer of a GE Capital services company and as part of the GE Capital corporate staff. During his two years with GE Capital, he directed the company's worldwide systems operations, including development of the company's extranet, Intranet, enterprise applications and WAN. He also facilitated a worldwide reengineering effort for the accounting, operations and sales/marketing departments, and oversaw a major company merger. Mr. Fornaci began his career with four years at Andersen Consulting.

A sought-after speaker, Mr. Fornaci has presented at the IT Metrics Summit (sponsored by the World Research Group), International HR (sponsored by the National Foreign Trade Council), Software 500 Executive Forum, Morgan Stanley Dean Witter Investment Conference, 16th Annual Software Forum, IDG Global Summit Forum, Corporate Intranet, HR Internet '97, Zonerthon Internet Conference, SIMS, Intranet '98 and Global Supply Chain Forum.

He has had articles published in CIO Magazine, Computerworld, Visigenic Profile, TechMall, Software Magazine, The Journal of Commerce, Websheet, Client Server Magazine, Network Computing and Infoworld.

Mr. Fornaci holds a bachelor's degree in physics from the University of California, Berkeley. He also worked as a market maker and holds a number of government security licenses (Series 3, 7 and 63).

Yadunath Zambre is chief technology officer of AtomicTangerine. He specializes in speech recognition and computer networking technologies and is currently working with the Nuance speech recognition system. He periodically teaches graduate classes on digital multimedia technology at Stanford University, where his students have done projects ranging from Java-based Internet shopping applications to voice control for networked virtual environments. Dr. Zambre has also been an invited speaker on Internet technology and its applications at international scientific conferences and at artists’ guild workshops in Hollywood.

Dr. Zambre has applied and integrated new and old technologies in a wide variety of settings. He has experience programming Sun, VAX, Xerox, IBM, and PC systems with C/C++, Java, Fortran, and assembler.

Major accomplishments have included:

• Automating the configuration management of a U.S. Air Force department’s global monitoring system. After analyzing and identifying weaknesses in the client’s normal work processes, Dr. Zambre developed and deployed a knowledge base, an automated reasoning system, and a graphical user interface that interoperated with the client’s legacy software. The project reduced configuration requirements from 14 senior engineer person-weeks per month to 24 technician person-hours per month.
• Managing algorithm and software development for a multimillion-dollar, multiyear government project. The team applied techniques from statistics, time series analysis, and rule-based probabilistic reasoning systems to develop image processing, image understanding, and feature recognition software for a new sensor technology. The software significantly reduced the client’s operating costs because 99% of all images are not of interest to the client.
• Developing and writing virtual presence software for SRI-operated National Aeronautics and Space Administration (NASA) atmospheric research facilities in the Arctic. The software, along with the Internet connectivity SRI established at the beginning of the project, allows remotes users to control instruments at and view data from the facility. The user base of these facilities has increased since the introduction of this software.

Before joining AtomicTangerine and, previously, SRI International, Dr. Zambre cofounded a company that wrote software for diagnosing and analyzing errors in particle accelerators. The software was sold to international and U.S. laboratories and, on average, has reduced accelerator downtime by a factor of five. In many cases, the resulting cost reduction per incident exceeds US $200,000.

Dr. Zambre holds a B.S. (cum laude) and M.S. (awarded simultaneously with the B.S.) in engineering from Yale University, and a Ph.D. in applied physics from Stanford University.

Sterling F. Stoudenmire IV, Vice President, Digital Enterprises, AtomicTangerine

Sterling Stoudenmire is the vice president of AtomicTangerine’s Digital Enterprises practice, headquartered in Menlo Park, California. He has more than 11 years of experience in strategy and information technology consulting, and has worked with numerous dot-com clients in the formation, capitalization and emergent stages. Sterling offers clients a unique combination of business acumen across a variety of industries as well as expertise in emerging technologies. He frequently serves as overall architect for new business opportunities.

Mr. Stoudenmire’s representative experience includes:

• Serving as principal architect for Latin America’s first e-procurement marketplace. Sterling was the lead strategy consultant and overall architect for business/technology infrastructure.
• Integrating disparate functional/technical architectures of country music’s premier entertainment company to deploy and manage more than 20 B2C web sites as outlets for content, products and services.
• Developing an overall strategy for the first agribusiness digital marketplace, with innovative business models employing demand aggregation and market making.
• Serving as chief technology officer for the Virtual Learning Network (VLN), with responsibilities as overall business/strategy architect as well as principal technologist for the first ASP in web-based training. He is still a member of the VLN Advisory Board.
• Acting as the principal architect of RADFrameTM, the Rapid Application Development Framework for systems analysis, design and development. He had overall responsibility for the development and conduct of Arthur Andersen (AA) Business Consulting’s technical education curriculum, and was directly responsible for the design and delivery of technical training to more than one third of all AA consultants.
• Serving as a founding member of AA’s Advanced Technology Group, an applied research practice with specific focus on the application of emerging technologies to business innovation.

Before joining AtomicTangerine, Mr. Stoudenmire served as director, e-business strategy, for Arthur Andersen. He is a frequent public speaker on e-business, information rules, and "innovation through information technology" for organizational change and competitive advantage. Past audiences include the World Economic Forum, AA’s E-Business Video Series, and the Florida Institute of Certified Public Accountants.

Mr. Stoudenmire holds a B.S. in finance from Florida State University.

Dr. Norm Nielsen, Technology Director, AtomicTangerine

Norm Nielsen is a technology director in AtomicTangerine’s Menlo Park office and leader of its Emerging Technologies Center of Excellence. He has worked extensively with major corporations on four continents to assess and deploy cutting-edge information technology to achieve strategic business objectives and improve profitability. Dr. Nielsen specializes in computer systems design and architecture evaluation, information security and risk assessments, intrusion detection systems, information technology assessment and strategy, speech recognition system design and development.

Dr. Nielsen has led numerous projects that assisted companies in using information technology to strategic advantage. Representative experience includes:

• Leading the team that has provided (and continues to provide) an annual technical audit for a major global travel CRS to ensure that its operations and systems from an information security perspective are in compliance with the relevant European Commission rules and regulations governing CRS operation. Among other things, this audit addresses the role of the TPF operating system in safeguarding passenger information and carrier flight inventory data.
• Developing the intrusion detection requirements for a large regional bank and applying a customized nonlinear proposal scoring methodology, enabling the bank to defend its vendor selection process in a highly charged political atmosphere and acquire intrusion detection capabilities best suited to its needs.
• Leading the development team that created an intrusion detection system utilizing Bayesian belief network technology to integrate information across network platforms, enabling a software company to develop the staff capabilities and software product to enter a new business area.
• Assessing the information security characteristics of an electric utility’s backbone network, taking into consideration the security of the individual systems (from power generation to power distribution to customer billing) connected to that network as well as the network interconnections, enabling the utility to reduce its risk profile significantly without significant changes to its security budget

Before joining AtomicTangerine and, previously, SRI International, Dr. Nielsen served as a faculty member at Stanford University. He is listed in Who’s Who in America and Who’s Who in Science and Engineering and is a member of Phi Beta Kappa and other national honor societies. In addition to serving as treasurer of AAAI, he is a member of AAAS, the ACM, the Computer Society of the IEEE, and INFORMS. Dr. Nielsen has authored more than 75 articles and papers on information technology topics, and has written two books relating to the practical application of artificial intelligence technology.

Dr. Nielsen holds a B.A. in mathematics (summa cum laude) from Pomona College, an MBA in management science and a Ph.D. in operations and systems analysis from Stanford University.

Sanjay Deo is director of technology for the Digital Enterprises market unit in AtomicTangerine’s Menlo Park, California, office. He has more than 10 years of experience in software development—custom as well as product—and has provided management consulting services to startups, spin-offs, and brick-and-mortar clients in the information services, telecommunications, entertainment, health care and high-tech industry sectors.

Mr. Deo’s specific expertise lies in building B2B digital marketplaces and Internet security. He is also experienced in IT strategy, technology assessment, systems design and integration, and process innovation.

Representative experience includes:

• Directing a project involving the first MRO Latin American digital marketplace. This project consisted of assistance in business strategy, creation of internal business processes and procedures, integration of buyers and sellers, selection and implementation of platform and infrastructure, selection and implementation of a customer relationship management system, and overall internationalization, customization and integration of the digital marketplace engine. The team consisted of more than 20 consultants, including 6 managers; the digital marketplace engine was Ariba’s Marketplace.
• Serving as technical architect for a premier medical digital marketplace in Latin America. Mr. Deo provided assistance in selecting the platform and architecture for Ariba’s Dynamic Trading Engine and Marketplace.
• Undertaking strategic consulting and infrastructure planning for one of the premier agricultural digital marketplaces.
• Selecting software for the order entry system for one of the largest U.S. retailers. Sanjay assisted the client in identifying the software and hardware required to handle 60,000 orders per hour, scaling up to 240,000 orders per hour in the next 5 years with Solaris as the platform, Siebel as the front end and Oracle 8 as the back-end database.
• Conducting requirements analysis and high-level design of infrastructure and security architecture for a custom software application being developed for very large REITs. Sanjay also prepared a list of plausible components needed for scalable and extensible infrastructure and knock criteria for vendor selection.
• Serving as security architect for all products at CyberGuard Corporation, with responsibility for product and resource planning, security features enhancements, and third-party relations and partnerships and make-versus-buy decisions.
• Managing a project for a security subsystem in the CyberGuard 3.0 firewall product. Mr. Deo led a team of four engineers in the design, development, implementation, testing and documentation of the security enhancements needed to comply with National Computer Security Center’s B2 requirements. CyberGuard 3.0 is based on Secure UnixWare 2.1. Sanjay was also responsible for defining the multilevel firewall security model for use in all future releases of the UnixWare firewall.
• Managing a custom release of PowerSX 2.6 for a customer. Mr. Deo led a team of three engineers in the design, development and testing of the product. He was also responsible for on-site implementation and user training.
• Managing a CyberGuard 2.0 firewall product. Mr. Deo led a group of 10 engineers in the design, development, testing and documentation phases. This project involved coordination with marketing and sales (product definition and launch), publications (online help and manual), system test group (five testers) and senior management (scheduling and resource allocation). Sanjay designed and developed the first prototype for the TELNET, FTP and HTTP proxies.
• Porting Harris's B1 level LAN/SX product to Harris's B2 evaluatable PowerSX. Mr. Deo was responsible for B2 level conformance test execution, as well as for the management of all project-related hardware and software.

Before joining AtomicTangerine, Mr. Deo was director of the Advanced Technology Group in Arthur Andersen’s Business Consulting practice. In previous work, he was with CyberGuard Corporation, where he focused on design and implementation of high-assurance operating systems, and architected three firewalls for three operating systems.

Mr. Deo holds a B.E. in computer engineering from the University of Bombay and an M.S. in computer science from Texas A&M, College Station, Texas.

Don Holden is a business leader who specializes in information security. He has more than 20 years of experience in information systems, security, encryption, business continuity and disaster recovery planning.

Mr. Holden has written numerous white papers and given presentations on information security management and technology issues such as intrusion detection, firewalls, biometric authentication and digital watermarking. He is currently the chairman of the IEEE Computer Society working group on recommended best practices for Internet security. He is also participating in the development of security standards for the financial industry.

Mr. Holden’s major achievements have included the following:

• Served as co-chair of the OURS (Open Users Recommended Solutions) Information Protection Working Group that published papers on requirements for authentication and Internet access.
• Participated in writing security standards for the Financial Industry (ASC X9) for message authentication, public key encryption algorithms, digital signatures and biometric authentication.
• Contributed to the development of the Institute of Internal Auditors’ "Advanced Technology Supplement" to the Security, Auditability, and Control reports.
• Presented papers on distributed security architectures and intrusion detection systems to the IFIP (International Federation of Information Processing) security conferences.

Before joining AtomicTangerine, Mr. Holden was a senior consultant for SRI Consulting, where he was a project leader for an Internet startup assignment to plan a revolutionary secure electronic commerce portal-based business. Mr. Holden previously served as program manager for Compaq’s Security Program Office, where he led the Compaq Security Forum that coordinated the decentralized security engineering, marketing and consulting initiatives across Compaq, Digital, Tandem and Atalla divisions. He represented Compaq in the BioAPI Consortium and the International Information Integrity Institute (I-4). Don also was the director of operations research at a major Boston bank, where he developed business models and implemented an internal decision support system. He has also had assignments as an auditor with the U.S. Air Force Audit Agency and as a disaster preparedness officer with Federal Emergency Management Agency.

Mr. Holden holds an M.B.A. from Wharton and a B.S. in business and accounting from Georgetown University. He is a Certified Information System Security Professional and a member of the IEEE Computer Society, the Computer Security Institute, and the Information Systems Security Association.

Stephen Whitlock is a technology leader in AtomicTangerine’s Seattle/Tacoma office. He specializes in the cryptography, Unix and network security. Stephen is an internationally recognized expert in the field of information security. His background includes the development of tools for testing system security as well as publications and presentations on cryptography, Unix and network security. For many years, he functioned as an internal corporate consultant on cryptographic and security issues.

Representative experience includes:

• Developing an encryption strategy for large, multi-platform enterprise environments, which was presented to the U.S. Office of Science and Technology Policy, the National Security Council and the FBI. The results directly affected the Clinton Administration’s U.S. Encryption Policy.
• Contributing to the National Research Council’s study of the effect of cryptography on reducing risks to industry. This study was published in 1996 under the title "Cryptography’s Role in Securing the Information Society" by the National Academic Press.
• Developing an information security technology forecast for use in a large manufacturing company. A variation of this forecast was also delivered to a U.S. intelligence agency.
• Providing architectural guidance for a corporate Public Key Infrastructure, including prototyping and testing of certificate servers, directory servers and certificate-based authorization applications.
• Analyzing the strength of the cryptographic protection of targeting data for a class of nuclear weapon systems.
• Serving as a corporate representative for studying computer network defense for the U.S. Space Command.
• Developing a graphical tool for analyzing severe burns as a company-sponsored community service project. This tool is now in use by a major Northwest burn center.

Before joining AtomicTangerine, Mr. Whitlock was an advanced computing technologist in the mathematics and computing technology division of Boeing’s Phantom Works.

He has been an active participant in the security activities of the Electronic Messaging Association, Internet Engineering Task Force, Key Recovery Alliance, Object Management Group and the Open Group. He is currently the chair of the Open Group’s Security and Electronic Commerce Program Group and as such has been involved in the development of several standards, including the Architecture for a Public Key Infrastructure, Common Data Security Architecture and Advanced Authorization API.

Mr. Whitlockholds a B.S. in electronic engineering technology from the Weber State University and an M.S. in software engineering from Seattle University

Laura Bilodeau specializes in market strategy, business modeling, and financial analysis for entrepreneurial ventures as well as Fortune 500 companies. In particular, she focuses on the use of quantitative techniques and market assessment to validate the business plans for new e-commerce ventures.

Ms. Bilodeau’s accomplishments include the following:

• Leading a market forecasting and financial analysis effort for a major high-tech manufacturer seeking to invest in broadband telecom technology. Projected future consumer usage of broadband Internet access for e-commerce, video-on-demand, and IP telephony applications, then forecasted consumer adoption by psychographic segment to determine overall profitability among different populations.
• Leading a market-sizing project for a major long-distance carrier interested in cutting-edge wireless applications. Managed a team of analysts to evaluate various business-to-consumer e-commerce applications and the end-user devices required to support them. Coached the team in building models to forecast the expected revenue potential of such services over the next 5-10 years.

• Validating the business plan and financial projections for an online financial services venture. Gauged the validity of the vision and business model, and researched proxies in adjacent industries to value the venture. Assisted the founders in successfully obtaining angel funding; currently working with them to develop the strategy for the Web site functionality.
• Leading a market forecasting and capacity analysis for a major broadband telecom start-up. Built a quantitative model to project maximum potential revenues based on market capture; then analyzed the build-out processes for infrastructure and customer support to determine realistic revenue and identify key chokepoints.

• Analyzing a major long-distance carrier’s strategy for launching local phone services. Led team in building a model to compare the cost effectiveness of three potential strategies against the Baby Bells, based on analysis of the different supporting technologies (e.g., wireless local loop). The assessment also prevented a 40% overestimation of hiring requirements.

Before joining AtomicTangerine, Ms. Bilodeau was a consultant in the telecommunications practice at A.T. Kearney. Previously she worked at D.E. Shaw & Company, a proprietary trading firm in New York, where she was responsible for conducting financial analysis and due diligence for potential new ventures.

Ms. Bilodeau holds a B.A. in astrophysics from Princeton University and an MBA from the Wharton School of Business.