Re: [Iot-onboarding] EduRoam for IoT

sandoche Balakrichenan <sandoche.balakrichenan@afnic.fr> Tue, 10 December 2019 15:37 UTC

Return-Path: <sandoche.balakrichenan@afnic.fr>
X-Original-To: iot-onboarding@ietfa.amsl.com
Delivered-To: iot-onboarding@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05FC712081C for <iot-onboarding@ietfa.amsl.com>; Tue, 10 Dec 2019 07:37:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.899
X-Spam-Level:
X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9KE7zT0YuuA5 for <iot-onboarding@ietfa.amsl.com>; Tue, 10 Dec 2019 07:37:40 -0800 (PST)
Received: from mx4.nic.fr (mx4.nic.fr [IPv6:2001:67c:2218:2::4:12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C693120125 for <iot-onboarding@ietf.org>; Tue, 10 Dec 2019 07:37:39 -0800 (PST)
Received: from mx4.nic.fr (localhost [127.0.0.1]) by mx4.nic.fr (Postfix) with SMTP id 9DB202806DE; Tue, 10 Dec 2019 16:37:36 +0100 (CET)
Received: by mx4.nic.fr (Postfix, from userid 500) id 955F7280716; Tue, 10 Dec 2019 16:37:36 +0100 (CET)
Received: from relay01.prive.nic.fr (unknown [10.1.50.11]) by mx4.nic.fr (Postfix) with ESMTP id 8CE492806DE; Tue, 10 Dec 2019 16:37:36 +0100 (CET)
Received: from zimbra.afnic.fr (hebe.prod-int.prive.th3.nic.fr [10.1.81.80]) by relay01.prive.nic.fr (Postfix) with ESMTP id 88AAA663E720; Tue, 10 Dec 2019 16:37:36 +0100 (CET)
Received: from localhost (localhost [127.0.0.1]) by zimbra.afnic.fr (Postfix) with ESMTP id 7C6822D7C06F; Tue, 10 Dec 2019 16:37:36 +0100 (CET)
Received: from zimbra.afnic.fr ([127.0.0.1]) by localhost (zimbra.afnic.fr [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id f5ffCbWRUOnn; Tue, 10 Dec 2019 16:37:35 +0100 (CET)
Received: from localhost (localhost [127.0.0.1]) by zimbra.afnic.fr (Postfix) with ESMTP id B3DFE2D7C06E; Tue, 10 Dec 2019 16:37:35 +0100 (CET)
X-Virus-Scanned: amavisd-new at zimbra.afnic.fr
Received: from zimbra.afnic.fr ([127.0.0.1]) by localhost (zimbra.afnic.fr [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id kgoTrs2c0UVC; Tue, 10 Dec 2019 16:37:35 +0100 (CET)
Received: from Sandoches-MacBook-Pro.local (unknown [10.0.95.11]) by zimbra.afnic.fr (Postfix) with ESMTPA id 72EF92D7C06C; Tue, 10 Dec 2019 16:37:35 +0100 (CET)
To: Mohit Sethi M <mohit.m.sethi@ericsson.com>, Michael Richardson <mcr+ietf@sandelman.ca>, "iot-onboarding@ietf.org" <iot-onboarding@ietf.org>, "Eduardo.ingles@um.es" <eduardo.ingles@um.es>
Cc: Guillaume Schreiner <schreiner@unistra.fr>
References: <80fc1573-62f9-26a6-5b55-6ff33c0b1a94@afnic.fr> <62187F87-EC6B-4A34-ACDC-9E5BA5001A0E@cisco.com> <21488.1575913510@localhost> <c4f6ea01-4d52-7cd8-4cdf-b6f5714d1f95@afnic.fr> <1c6d0ee9-475f-84d7-cfc4-38c194b30d28@ericsson.com>
From: sandoche Balakrichenan <sandoche.balakrichenan@afnic.fr>
Message-ID: <bc853987-a04b-3866-97c6-46dfce69cfe2@afnic.fr>
Date: Tue, 10 Dec 2019 16:37:34 +0100
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <1c6d0ee9-475f-84d7-cfc4-38c194b30d28@ericsson.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable
X-Bogosity: No, tests=bogofilter, spamicity=0.436132, version=1.2.2
X-PMX-Version: 6.0.0.2142326, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2019.11.5.63017
Archived-At: <https://mailarchive.ietf.org/arch/msg/iot-onboarding/uTzZlqjVN26eJAnENbDy7Hvraks>
Subject: Re: [Iot-onboarding] EduRoam for IoT
X-BeenThere: iot-onboarding@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussion of IoT onboarding mechanisms <iot-onboarding.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/iot-onboarding>, <mailto:iot-onboarding-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/iot-onboarding/>
List-Post: <mailto:iot-onboarding@ietf.org>
List-Help: <mailto:iot-onboarding-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/iot-onboarding>, <mailto:iot-onboarding-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Dec 2019 15:37:47 -0000

Hi Mohit,

Thanks for your inputs. I did come across your draft on EAP-NOOB during 
the literature search on this topic.

Myselves and Guillaume has been busy in collecting inputs regarding 
roaming for IoT from different quarters. We will compile it and come up 
with a basic use-case document to the group.

We were thinking of LoRaWAN, since it seems to be the most resource 
constrained network in the IoT domain. If we are successful in that, 
then it should mostly work with all other IoT networks.

Our objective is to have a generic solution, and not just oriented for 
LoRaWAN.

Sandoche.

On 10/12/2019 14:31, Mohit Sethi M wrote:
> Hi Sandoche,
>
> I was involved in the development of EAP-NOOB during the early days.
> Back then, we had received a request from Rhys Smith and Josh Howlett
> (from JISC who are involved with eduroam in the UK) for adding roaming
> support.
>
> EAP-NOOB does support roaming. Please look at:
> https://tools.ietf.org/html/draft-aura-eap-noob-07#appendix-D for more
> information. If you have some requirements that are not met, please feel
> free to suggest them to the EMU working group
> (https://datatracker.ietf.org/wg/emu/about/).
>
> I don't know the specific limitations of LoRaWAN. Our colleague, Eduardo
> (in CC), from the University of Murcia has worked on a light-weight
> implementation of EAP-NOOB in Contiki. I am sure he can provide you some
> pointers.
>
> --Mohit
>
> On 12/9/19 11:40 PM, sandoche Balakrichenan wrote:
>> On 09/12/2019 18:45, Michael Richardson wrote:
>>> Eliot Lear <lear@cisco.com> wrote:
>>>       > I think what you are aiming for is a LoRa-enabled router that
>>> can do a
>>>       > radius transaction that has the appropriate federated wrapper,
>>> such as
>>>       > PEAP/EAP-TLS.  Will the LoRa device know its home network?
>>>
>>> At bytes/day?
>> ==> Absolutely.
>>
>> Alternatives could be :
>> https://datatracker.ietf.org/doc/draft-aura-eap-noob/?include_text=1
>>
>> and evolving standards from the LAKE WG
>> (https://datatracker.ietf.org/wg/lake/about/) using a PKI
>>
>>> I don't think that it is network onboarding, but application
>>> onboarding that
>>> is desired.
>>>
>> ==> Application onboarding is for the LoRaWAN scenario.
>>
>> Don't we have the need for network onboarding for other IoT networks?
>>
>> The objective is to come with a generic solution, if possible.
>>
>> Sandoche.
>>