Re: [Iotops] [Rats] 802.1AR device identity

[Michael Richardson <[e-mail]>]

Guy Fedorkow <[e-mail]> wrote:
    > I agree with Michael.  The IDevID in my point of view is as permanent
    > as the serial number on the box or the VIN on your car.  I think DevID
    > could have privacy implications in some applications, so within TCG
    > there have been proposals to download the IDevID at the customer's
    > discretion, but in that case, it would have to be linked to TPM's EK
    > (another immutable key), so there's still only one possible IDevID ever
    > for a box.  As noted, LDevIDs can be made and destroyed at will.

Perhaps you said it more precisely than I.
The private key must be immutable and heavily protected (TPM or secure
enclave, etc.).

In draft-selander-ace-ake-authz-02 we describe a mechanism where the contents
of the IDevID are in fact downloaded by correspondants (Registrar) from the
manufacturer, rather than being transmitted over a challenged network.

I guess this would allow the manufacturer to resign in some ways, and maybe
even present different certificates depending upon who is asking.  But, the
serial-number identity that the device has and the connection to the private
key is immutable.

BTW: in the above document we encrypt (with ECIES) the identity to the
manufacturer.  Eliot's concern about which network should a pledge try first,
given many choices, remains.

--
Michael Richardson <[e-mail]>   . o O ( IPv6 IøT consulting )
           Sandelman Software Works Inc, Ottawa and Worldwide