[Ace] I-D Action: draft-ietf-ace-aif-01.txt

internet-drafts@ietf.org Thu, 11 February 2021 13:39 UTC

Return-Path: <internet-drafts@ietf.org>
X-Original-To: ace@ietf.org
Delivered-To: ace@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 752BB3A15EA; Thu, 11 Feb 2021 05:39:54 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: ace@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 7.25.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: ace@ietf.org
Message-ID: <161305079434.23870.1576422370485357749@ietfa.amsl.com>
Date: Thu, 11 Feb 2021 05:39:54 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/bELIBc3dr9VO55h5MrctKZtadCY>
Subject: [Ace] I-D Action: draft-ietf-ace-aif-01.txt
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Feb 2021 13:39:54 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF.

        Title           : An Authorization Information Format (AIF) for ACE
        Author          : Carsten Bormann
	Filename        : draft-ietf-ace-aif-01.txt
	Pages           : 13
	Date            : 2021-02-11

   Constrained Devices as they are used in the "Internet of Things" need
   security.  One important element of this security is that devices in
   the Internet of Things need to be able to decide which operations
   requested of them should be considered authorized, need to ascertain
   that the authorization to request the operation does apply to the
   actual requester, and need to ascertain that other devices they place
   requests on are the ones they intended.

   To transfer detailed authorization information from an authorization
   manager (such as an ACE-OAuth Authorization Server) to a device, a
   representation format is needed.  This document provides a suggestion
   for such a format, the Authorization Information Format (AIF).  AIF
   is defined both as a general structure that can be used for many
   different applications and as a specific refinement that describes
   REST resources and the permissions on them.

The IETF datatracker status page for this draft is:

There is also an HTML version available at:

A diff from the previous version is available at:

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at: