[Ace] I-D Action: draft-ietf-ace-aif-02.txt

internet-drafts@ietf.org Wed, 17 February 2021 19:46 UTC

Return-Path: <internet-drafts@ietf.org>
X-Original-To: ace@ietf.org
Delivered-To: ace@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EDBA3A1CE8; Wed, 17 Feb 2021 11:46:11 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: ace@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 7.25.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: ace@ietf.org
Message-ID: <161359117147.11270.9926480326809114293@ietfa.amsl.com>
Date: Wed, 17 Feb 2021 11:46:11 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/BBk1HLgvZVwahqNk7t1VpxnRaaY>
Subject: [Ace] I-D Action: draft-ietf-ace-aif-02.txt
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Feb 2021 19:46:12 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF.

        Title           : An Authorization Information Format (AIF) for ACE
        Author          : Carsten Bormann
	Filename        : draft-ietf-ace-aif-02.txt
	Pages           : 14
	Date            : 2021-02-17

   Constrained Devices as they are used in the "Internet of Things" need
   security.  One important element of this security is that devices in
   the Internet of Things need to be able to decide which operations
   requested of them should be considered authorized, need to ascertain
   that the authorization to request the operation does apply to the
   actual requester, and need to ascertain that other devices they place
   requests on are the ones they intended.

   To transfer detailed authorization information from an authorization
   manager (such as an ACE-OAuth Authorization Server) to a device, a
   compact representation format is needed.  This document provides a
   suggestion for such a format, the Authorization Information Format
   (AIF).  AIF is defined both as a general structure that can be used
   for many different applications and as a specific refinement that
   describes REST resources (potentially dynamically created) and the
   permissions on them.

The IETF datatracker status page for this draft is:

There is also an HTML version available at:

A diff from the previous version is available at:

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at: