Re: [dispatch] Updated PERC Charter proposal

["Ram Mohan R (rmohanr)" <[e-mail]>]

Hi Magnus,

-----Original Message-----
From: Magnus Westerlund <[e-mail]>
Date: Wednesday, 3 June 2015 6:28 pm
To: "Hutton, Andrew" <[e-mail]>, Cisco Employee
<[e-mail]>
Cc: "[e-mail]" <[e-mail]>
Subject: Re: [dispatch] Updated PERC Charter proposal

>Hutton, Andrew skrev den 2015-06-03 10:42:
>> I agree there is some value in exploring the recording use case it is
>> one of the first questions everybody asks when discussing PERC.
>
> From my perspective there are two ways of doing recording of media
>content in PERC.
>
>1. Invite the recorder as a full fledged authenticated session
>participant that use the normal way of getting the keys to the media as
>any other endpoint.
>
>2. The recorder only stores the encrypted media content, thus being a
>semi-trusted entity to that are allowed to get a copy or be integrated
>into the central forwarders. At the time one wants to access the
>recorded content one will have to request the relevant keys from the
>key-management function, that will also have to have stored the relevant
>group keys for the session to enable decryption.

This is some thing similar to what I was visualising as well. The recorder
and KMS needs interactions to get access to recordings.

>
>I would claim that the second one is the securer, and enables better
>tracking of who access recordings of a secured conference.
>
>>
>> Hope we are allowed to consider this.
>
>The charter talks about informing and coordinating with SIPREC. This to
>have an exchange about the possibilities. However, it is not a work item
>of the PERC WG to specify a solution for recording. I would expect any
>technical work on solving PERC recording would need to be chartered in
>the most relevant WG.

I am not too worried about where it is done as long as we are doing it.
Perhaps SIPREC may be a place given that it was already doing recording
for existing models.


>I think the ones interested in recording should be
>active in the WG work to ensure that the developed solution do support
>recording. 

Agree.

Regards,
Ram
>If there are contention between the goals, then we will need
>to have a serious discussion. But, remember that we have clear goals of
>ensuring end to end security, thus compromises to the security model to
>fit recording will be unlikely to be accepted.
>
>Cheers
>
>Magnus Westerlund
>
>----------------------------------------------------------------------
>Services, Media and Network features, Ericsson Research EAB/TXM
>----------------------------------------------------------------------
>Ericsson AB                 | Phone  [phone]
>Färögatan 6                 | Mobile [phone]
>SE-164 80 Stockholm, Sweden | mailto: [e-mail]
>----------------------------------------------------------------------
>