[Atlas] New Version Notification for draft-bhattacharyya-dice-less-on-coap-01 (Re: Plans for the IETF Meeting )

[Abhijan Bhattacharyya <[e-mail]>]

Hi Hannes and list,
A new version of our previous work has been submitted. It primarily overhauls the abstract and the introduction to align with thee proposed charter and tries to describe some uses cases that might require this work. The last part was completely missing in the previous version. The working group has not been modified though dice is no longer active. It will be changed once we see this moving forward.   

Co-ordinates of the draft can be found in the submission confirmation below:

A new version of I-D, draft-bhattacharyya-dice-less-on-coap-01.txt
has been successfully submitted by Abhijan Bhattacharyya and posted to the
IETF repository.

Name:		draft-bhattacharyya-dice-less-on-coap
Revision:	01
Title:		Lightweight Establishment of Secure Session (LESS) on CoAP
Document date:	2018-03-03
Group:		Individual Submission
Pages:		19
URL:            https://www.ietf.org/internet-drafts/draft-bhattacharyya-dice-less-on-coap-01.txt
Status:         https://datatracker.ietf.org/doc/draft-bhattacharyya-dice-less-on-coap/
Htmlized:       https://tools.ietf.org/html/draft-bhattacharyya-dice-less-on-coap-01
Htmlized:       https://datatracker.ietf.org/doc/html/draft-bhattacharyya-dice-less-on-coap-01
Diff:           https://www.ietf.org/rfcdiff?url2=draft-bhattacharyya-dice-less-on-coap-01

Abstract:
   Secure yet lightweight protocol for communication over the Internet
   for constrained node networks (CNN) is a pertinent problem.
   Constrained Application Layer Protocol (CoAP) mandates the use of
   Datagram Transport Layer Security (DTLS) for a secure transaction
   over CoAP. But DTLS is not a candidate technology for CNNs by
   design. The DTLS handshake overhead to establish the credentials for
   a session between two end-points in a CNN may not be resource
   efficient. There are ongoing efforts to secure one-time exchanges by
   ensuring object security at the application layer. But a composite
   standardized mechanism for resource-efficient end-to-end security
   credential establishment is much needed to cater both one-time
   exchanges as well as exchanges over a session. DTLS is essentially a
   combination of two operations: (1) the session protocol to establish
   the credentials (and this is the resource heavy part), (2) the
   record protocol to protect the information (this is the
   cryptographic part). This draft proposes to distribute the security
   responsibilities such that the session establishment happens in the
   application layer, leveraging the lightweight semantics of CoAP, and
   the record layer encryption happens by reusing the existing DTLS
   record-layer protocol. This way the proposed mechanism enables a
   resource-efficient session establishment mechanism besides reusing
   the existing DTLS encryption. Assuming a Pre-Shared Key (PSK)
   environment, this draft proposes an embedding of handshake for
   resource efficient end-to-end session establishment into CoAP. The
   session establishment procedure produces the necessary and
   sufficient inputs for seamless operation of the DTLS record-layer to
   secure the channel. Also, this mechanism ensures a direct security
   association between the end-applications for systems using
   middleboxes like proxies and/or gateways which may not be always
   trusted. The proposed approach provides a mechanism to securely
   traverse through such middleboxes through an end-to-end trusted
   channel.

                                                                                  


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


With Best Regards
 Abhijan Bhattacharyya
 Associate Consultant
 Scientist, TCS Research
 Tata Consultancy Services
 Building 1B,Ecospace
 Plot -  IIF/12 ,New Town, Rajarhat,
 Kolkata - 700160,West Bengal
 India
 Ph:- 033 66884691
 Cell:- [phone]
 Mailto: [e-mail]
 Website: http://www.tcs.com
 ____________________________________________
 Experience certainty.	IT Services
 			Business Solutions
 			Consulting
 ____________________________________________
 

-----"Atlas" <[e-mail]> wrote: -----
To: "[e-mail]" <[e-mail]>
From: Hannes Tschofenig 
Sent by: "Atlas" 
Date: 02/24/2018 02:01PM
Subject: [Atlas] Plans for the IETF Meeting

Hi all,

we had an off-list discussion with our security ADs and the plan for the upcoming IETF meeting is the following: First, we will have a side meeting (which is being scheduled by our ADs). Second, if we come up with some conclusions during that side meeting there will be a presentation at SECDISPATCH.

Since SECDISPATCH is on Tuesday the side meeting will most likely take place on Monday.

Note that the Internet Draft submission cut-off is on the Monday March 5th. Make sure that submit your renewed write-up by that time so that we can have a fruitful discussion during the IETF week.

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

_______________________________________________
Atlas mailing list
[e-mail]
https://www.ietf.org/mailman/listinfo/atlas
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain 
confidential or privileged information. If you are 
not the intended recipient, any dissemination, use, 
review, distribution, printing or copying of the 
information contained in this e-mail message 
and/or attachments to it are strictly prohibited. If 
you have received this communication in error, 
please notify us by reply e-mail or telephone and 
immediately and permanently delete the message 
and any attachments. Thank you