Re: [Ace] Offline operation of Resource Server

[Göran Selander <[e-mail]>]

Hannes,

I believe it is important that the solution allows an offline mode of
operation. Here are some other supporting use cases:

Although not listed in use case 1, the container monitoring use case, any
access requests to the goods at sea may need to work without connectivity
to an AS in the cloud. Containers may also be kept other areas e.g.
underground where cellular access is not available. One important point is
that even if connectivity to AS is technically possible at all times it
may not affordable for the particular business case.

We discussed previously one company considering designing physical access
control using an online system. There are another companies in the
physical access control business that profile themselves with offering
offline mode, for example Telcred. Their home page provides some more
details.

http://telcred.com/

One example of offline operations is for field technicians to physical
access radio base station sites:
If the base station is malfunctioning, there may be no cellular coverage
at the site, and the field technician need to access the site to repair
the base station (which then may become a catch 22).

There are also use cases where the AS functionality is hosted in a smart
phone or other end-user operated device (and the client is not in the same
device). In these cases we must also expect periods of time when the
device is not available or turned off.


In  draft-seitz-ace-problem-description section 4.5 we formulated the
offline requirement/assumption as:

     o RS may not be able to communicate with AS at the time of the
        request from C.



It would be interesting to know how people think about this (and other
statements in section 4).



Göran



On 14/07/14 13:35, "Hannes Tschofenig" <[e-mail]> wrote:

>Hi all,
>
>in one of my previous mail I said that the requirements rule out an
>EAP/AAA solution and this impression was based on reading the following
>requirement from http://tools.ietf.org/html/draft-seitz-ace-usecases-01
>
>"
>   o  U5.2 The meters must be able to perform fine-grained access
>      control on the metering data and on the configuration while being
>      offline.
>"
>
>I was wondering how strong the requirement for not having a real-time
>interaction between the resource server and the AS is.
>
>Ciao
>Hannes
>