Re: [5gangip] Network tokens draft

subscribed late and can't reply inline to follow-up comments. Short response to Ca By's point on whether the network trusts the UE.

"A fundamental principle of mobile qos is that you do not trust the UE, as
it can be compromised to make all traffic high priority. Only the network
can reliably and securely allocate resources based on policy."
The basic architecture for network tokens is agnostic on the trust relationships between UE, app provider, network and server. It provides mechanisms to encrypt/sign a token, and metadata to prevent replay and spoofing attacks so that operators can adjust it to the appropriate trust model. It borrows a lot from the ideas implemented in JWT, CWT and OAUTH2.

Yiannis

=====================
Yiannis Yiakoumis
Co-Founder & CEO
https://selfienetworks.com | +1-650-644-7857

On Thu, Jul 09, 2020 at 10:00 AM, Tom Herbert < tom@herbertland.com > wrote:

> 
> 
> 
> This is a draft on "Network Tokens" which is of relevance to facilitate
> fine grained QoS in 5G networks.
> 
> 
> 
> https:/ / tools. ietf. org/ html/ draft-yiakoumis-network-tokens-01 (
> https://tools.ietf.org/html/draft-yiakoumis-network-tokens-01 )
> 
> 
> 
> There is also a mailing list in
> https:/ / www. ietf. org/ mailman/ listinfo/ network-tokens (
> https://www.ietf.org/mailman/listinfo/network-tokens )
> 
> 
> 
> We are planning to present in tsvwg and app aware networking and possibly
> have a side meeting on this topic in IETF108.
> 
> 
> 
> Thanks,
> Tom
> 
> 
>