The document discusses the OpenChain Project Japan work group. It provides an introduction from two representatives from Sony and Panasonic. It outlines the goals of the OpenChain project to create trusted software supply chains. It then describes the activities of the Japan work group which has over 160 members from over 60 companies. The work group focuses on collaboration, education, and sharing best practices around open source license compliance. It discusses challenges around scope, structure, and sharing information both locally in Japan and globally.

1. CONFIDENTIAL1 ▇▇▇ Copyright 2018, Sony Corporation
Introduction of
OpenChain Japan Work Group
Hiroyuki Fukuchi, Sony Corporation
Shinsuke Kato, Panasonic Corporation

2. 2 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
About me
Hiro Fukuchi
Senior Alliance Manager in Sony
A Member of the OpenChain Japan WG
Japanese translation volunteer

3. 3 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
About me
• I was a Software Engineer for Panasonic
Corporation, where I helped Panasonic R&D
improve Linux for use in Panasonic's products.
• I have been working with Linux and OSS
compliance in Panasonic for over 15 years.
• For OSS compliance
– I have presented seminars on OSS compliance in
Panasonic.
– I provide advice on OSS compliance.

4. CONFIDENTIAL4 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Agenda
OpenChain Project and Japan workgroup
Challenges
Scope
Structure
Sharing
Outcomes

5. CONFIDENTIAL5 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
OpenChain project / Japan workgroup
OpenChain
-Vision: trusted software supply chains
-Framework:
specification for OSS compliance program
curriculum
conformance
Japan workgroup (Japan WG)
Local activity in Japan since 2017
over 160 people
over 60 companies

6. CONFIDENTIAL6 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Why Local Community?
Supply chain consists of suppliers
Trust is created by people who meet each other
OSS compliance is not an area where competing
supplier supplier Integrator

7. CONFIDENTIAL7 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Challenges
Scope
Structure
Sharing

8. CONFIDENTIAL8 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Scope #1 Activity & Scope
Meetup Case Study Subgroup
Phase 1
Collaboration
Contribution
Subgroup
Phase 2
No Scope
OSPO
Education
Education
Pamphlet
FAQ
Subgroup
Phase 3
Contribution
Internal activity
Sharing Issue
Global Tooling WG
Chinese Translation
SPDX Lite

9. CONFIDENTIAL9 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Scope #2 Local and Mindset
Mindset BarrierGlobal
community
Isolated
Local
Isolated
Local
Country
Company
People
Mindset Barrier
Open Mindset
Open Source Activity

10. CONFIDENTIAL10 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Structure #1 Japan workgroup
General Manager
OpenChain project
Specification WG
Curriculum WG
Conformance WG
- Planning
- Promotion
- Education
- FAQ
- License Info.
- Pamphlet
- Tooling
Japan workgroup
Board
Steering
Committee
Outreach
Committee
Meetup
Subgroup
No Structure, Only Activities

11. CONFIDENTIAL11 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Structure #2 member
Subgroup members
20-30
Meeting attendees
50-60
ML subscribers
160

12. CONFIDENTIAL12 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Sharing #1 Local (Inside Japan)
・Meeting info.
・Sub group activity
・Case studies
・Japanese translation
Specification/Curriculum/onboarding
All member meeting
Wiki https://wiki.linuxfoundation.org/openchain/openchain-japanese-working-group
ML openchain-japan-wg@lists.linuxfoundation.org
Sub Group activity
・Planning ・Promotion
・Education ・FAQ
・Pamphlet to upper stream suppliers
・License info. exchange
・Tooling
GitHub https://github.com/OpenChain-Project/Onboarding-JWG
https://github.com/OpenChain-Project/Japan-WG-General
Slack openchain-japanwg.slack.com

13. CONFIDENTIAL13 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
ML subscription
14
22
34
75
90
97
108
129
134
142
155
159
166
8
13
18
37
40 42
48
59
61 63 66
68 70
018/2/6 2018/3/6 2018/4/6 2018/5/6 2018/6/6 2018/7/6 2018/8/6 2018/9/6 2018/10/6 2018/11/6 2018/12/6 2019/1/6 2019/2/6 2019/3/6 2019/4/6 2019/5/6 2019/6/6 2019/7/6 2019/8/6
Japan WG ML subscription
Person Entity

14. CONFIDENTIAL14 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Sharing #2 Global-Local
OpenChain
community
Japan WGHub
ML
Monthly tele-conf.
International meeting
Documents in EnglishSubgroup
members
SPDX
community
Tooling
WG

15. CONFIDENTIAL15 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Sharing #3 Local-Local (Asian communities)
Japan WGChina WG
Taiwan
Korea WG
Invited people to Japan WG
Visited Asian workshops

16. CONFIDENTIAL16 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Many thanks to SZ Lin-san

17. CONFIDENTIAL17 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Scope #1 Activity & Scope
Meetup Case Study Subgroup
Phase 1
Collaboration
Contribution
Subgroup
Phase 2
No Scope
OSPO
Education
Education
Pamphlet
FAQ
Subgroup
Phase 3
Contribution
Internal activity
Sharing Issue
Global Tooling WG
Chinese Translation
SPDX Lite

18. CONFIDENTIAL18 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Meetup
Venue: Tokyo
2017/Dec: Sony
Venue: Nagoya
2018/Jun: Toyota
Venue: Tokyo
2018/Feb: Hitachi
Venue: Tokyo
2018/Dec: Tuv Sud Japan
Venue: Osaka
2018/Nov: Panasonic
Venue: Kawasaki
2018/Aug: Fujitsu
Venue: Kawasaki
2018/Oct: Toshiba
Venue: Kobe
2018/Nov: DensoTen
Venue: Tokyo
2019/Feb: Mitsubishi Electric
Venue: Kobe
2019/Apr: DensoTen
Venue: Tokyo
2018/Jun: Sony
Venue: Tokyo
2019/July: Fujitsu
Venue: Tokyo
2019/Sep: Olympus

19. CONFIDENTIAL19 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Scenes of meetup

20. CONFIDENTIAL20 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Attendees of meetup

21. CONFIDENTIAL21 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Scope #1 Activity & Scope
Meetup Case Study Subgroup
Phase 1
Collaboration
Contribution
Subgroup
Phase 2
No Scope
OSPO
Education
Education
Pamphlet
FAQ
Subgroup
Phase 3
Contribution
Internal activity
Global Tooling WG
Chinese Translation
SPDX Lite
Sharing Issue

22. OSS Compliance –-Organization-- 22
Company Sony
Presenter Satoru Ueda Date April 17th, 2018
Organization Dedicated organization / Virtual or community type / by each employee / Alone
(comment:
Number of
person in
charge
Over 100 / 99-21 / 10-20 / few / one / zero
(comment:
Points of
activities
Internal community for OSS license.
Legal, IP department, Public Relation and QA are involved in the activity. Almost all business units
participate in community. Abroad development sites are covered by community.
Some business units have sub-community inside their units.
Issues Skill up of each member: Analogy of medical care model(skillful home doctors and university
hospital)
Supply chain issues.
Free
writing
Please refer to the next page
Translated by Fukuchi@Sony
Community type activity

23. OSS Compliance –-Organization-- 23
Company Panasonic
Presenter Shinsuke Kato Date April 17th, 2018
Organization Dedicated organization / Virtual or community type / by each employee / Alone
(comment: No dedicated organization. Cross-function virtual group handles OSS license. Member is
formally assigned by Business Unit.
Number of
person in
charge
Over 100 / 99-21 / 10-20 / few / one / zero
(comment: Now the group concentrates on OSS license, and is starting to handle the technological
aspect of OSS.
Points of
activities
Legal and IP department are involved in the activity. Not only OSS but also software are treated.
The group gives advices and final decision is made by Business Unit. The group collects best
practices inside Panasonic and share them.
Issues How to involve abroad subsidiary companies. Organizational changes give impacts on OSS activity, it
may cause difficulty to maintain activity if a key person cannot continue to participate.
Budget.
Free
writing
Panasonic
Company A
・ Engineer (AAA)
・ Legal (BBB)
・ IP (CCC)
Company B
・ Engineer (DDD)
・ Legal (EEE)
・ IP (FFF)
HQ(office)
・ Engineer (XXX)
・ Legal (YYY)
・ IP (ZZZ)
Company C
・ Engineer(OOO)
・ Legal (PPP)
・ IP (QQQ)
・・・・・
Translated by Fukuchi@Sony
Virtual type activity

24. OSS Compliance - Education / Awareness
Company Panasonic Corporation Wiki OK / NG
Presenter Shinsuke Kato Date 2018/05/24
Item • OSS Compliance Seminar (2 hour. Held per 2 year. In the each division. For 400 persons in
the year.
• The seminar is held in each section. The attendees are 20 – 150. The target is not only
the engineers but also legal/IP members.
• OSS e-test (only 20 questions and all are easy. For over 1,000 persons.
• Release the news paper of the OSS compliance in the company (irreculaly)
Issue • Creating a unified operation system throughout the entire company including the global
supply chain
Sample • (as a whole and general theory) Do not abide by the OSS compliance terms is “copyright
infringement”. Do Panasonic do the business in such situation?
• When developing the software, of course, you know the all software you use. The software
management for the OSS compliance is not for the only OSS, it’s one of the management for
the all software.
• When developing and releasing the device or service, we should apply for the various
conditions/terms. The OSS compliance terms is one of them. Maybe, it’s easier than the
other serious terms.
24

25. OSS Compliance - Education / Awareness 25
Company Sony Wiki OK / NG
Presenter Hiroyuki Fukuchi Date 2018/6/5
Item • OSS training (9hours, 4times/year)
+ customized course for each development site (Japan and abroad)
• OSS community training
• Freshman training
• E-learning (including non-engineer)
Issue • Fostering next-gen. leaders
• Education to non-engineers, suppliers, subcontracting companies
• Open sourcing
Sample • Trainer lectures on OSS with belief and enthusiasm
• “Our company encourages employees to use OSS actively”
• “Many engineers want to build a good world through developing OSS”
• It is important to understand the background of each OSS license, and intention of developers
• It is important to understand the time of distributing OSS
• There are quizzes of use cases where non engineers are involved in OSS distribution. These
quizzes make non engineers aware of their responsibility
• Episodes related with a community experienced by the trainer give good impression to trainees
• By categorizing with few patterns, Sony’s examples of Open Sourcing are explained.
• Maintainers undertake trainers, who explain real activities in a community

26. CONFIDENTIAL26 ▇▇▇ Copyright 2018, Sony Corporation
Lightning talk (sharing case study)
Short presentation (3 minutes within 1 page) by attendees
“No document, only aural presentation” is acceptable
Condition of anonymity is acceptable
Wiki https://wiki.linuxfoundation.org/openchain/openchain-japanese-working-group
Documents are disclosed in Wiki

27. CONFIDENTIAL27 ▇▇▇ Copyright 2018, Sony Corporation
Tips for the lightning talk
Leadership and good atmosphere
We do NOT judge “Good” and “Bad”.
In order to collect important points, format is pre-defined.
We disclose the documents on Wiki.
We share each practice as a reference.
Practices give you good hints.
Leadership and good atmosphere

28. CONFIDENTIAL28 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Scope #1 Activity & Scope
Meetup Case Study Subgroup
Phase 1
Collaboration
Contribution
Subgroup
Phase 2
No Scope
OSPO
Education
Education
Pamphlet
FAQ
Subgroup
Phase 3
Contribution
Internal activity
Global Tooling WG
Chinese Translation
SPDX Lite
Sharing Issue

29. CONFIDENTIAL29 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Pamphlet to suppliers (General Public Guide)

30. CC0-1.0
FAQ (Misunderstanding of OSS Licenses)
Shared at GitHub:
English:
https://github.com/OpenChain-Project/Onboarding-
JWG/blob/master/Education_Material/FAQ/Misunderstandings_of_OSS_licenses_CC0.pptx
Japanese:
https://github.com/OpenChain-Project/Onboarding-
JWG/blob/master/Education_Material/FAQ/OSS%E3%83%A9%E3%82%A4%E3%82%BB%E3%83%B3%E3%82%B9%E9%96%A2%E9%80%A3%
E3%81%A7%E3%82%88%E3%81%8F%E3%81%82%E3%82%8B%E8%AA%A4%E8%A7%A3_CC0.pptx

31. CONFIDENTIAL31 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Scope #1 Activity & Scope
Meetup Case Study Subgroup
Phase 1
Collaboration
Contribution
Subgroup
Phase 2
No Scope
OSPO
Education
Education
Pamphlet
FAQ
Subgroup
Phase 3
Contribution
Internal activity
Global Tooling WG
Chinese Translation
SPDX Lite
Sharing Issue

32. CONFIDENTIAL32 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Proposal of SPDX Lite
Unskilled
Supplier
Community
Supplier Integrator
Unskilled
Supplier
User
SPDX OpenChain world
SPDX
REUSE initiative =
Copyright/License Notice
+ SPDX
SPDX Lite
Supplier
SPDX SPDX Lite
OpenChain Compliant
Use SPDX
OpenChain Non-Compliant
Use SPDX
OpenChain Non-Compliant
Cannot use SPDX
Under consideration
ex. Package Info.
SPDX Lite

33. CONFIDENTIAL33 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Lessons learned
People want to collaborate
Place where OpenChain provides Neutrality and Confidence
Powered by collaboration

34. 34 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Resources
• OpenChain project:
• Website: https://www.openchainproject.org/
• Wiki: https://wiki.linuxfoundation.org/openchain/start
• GitHub: https://github.com/OpenChain-Project
• ML: openchain@lists.linuxfoundation.org
• Translations: https://www.openchainproject.org/translations
• OpenChain Japan WG:
• Wiki: https://wiki.linuxfoundation.org/openchain/openchain-japanese-working-group
• ML: openchain-japan-wg@lists.linuxfoundation.org
• GitHub: https://github.com/OpenChain-Project/Onboarding-JWG
• https://github.com/OpenChain-Project/Japan-WG-General
• Slack: openchain-japanwg.slack.com
• SPDX:
• Website: https://spdx.org/
• SPDX Lite proposal: https://github.com/spdx/spdx-spec/pull/141
• SPDX 2.1 Unofficial Japanese translation
• GitHub: https://github.com/hfukuchi/SPDX_specification/tree/master/chapters

35. CONFIDENTIAL35 ▇▇▇ The OpenChain project Japan workgroup / Sony Corporation / CC0-1.0
Thank you!