Re: [ipwave] Roman Danyliw's Discuss on draft-ietf-ipwave-ipv6-over-80211ocb-49: (with DISCUSS and COMMENT)

[Alexandre Petrescu <[e-mail]>]

Le 21/07/2019 à 22:34, Roman Danyliw a écrit :
> Hi Nabil!
> 
> Thanks for the -50 update.  See below for the details.  The quick 
> summary is that discuss items #1-3 are addressed in -50.  I haven’t seen 
> an response on discuss #4.


Roman Danyliw wrote recently:
 > ** What specific ETSI protocols are being recommended from
 > [ETSI-sec-archi]?

I do not know for sure myself.  One would ask Jérôme Härri.

I looked myself at the public document referred (ETSI TS 102 940 V1.2.1
(2016-11)).  I could find a recommendation to generate MAC address:
"shall be derived from the identifier provided by the Security Entity in
the ID change notification".  (the "ID Change Notification" seems to be
an application layer message).

 From my side, I do not agree with this method to generate more
obfuscated MAC addresses.

I have some ideas how to generate more obfuscated MAC addresses, but
certainly not in the ETSI way.

 > ** What is meant by the drivers’ identity in this case?

There is activity at Gemalto now Thales about e-Driver's License.
Supposedly that is an electronic format of a driver's license that is
more accessible.  I think that driver's license in some countries have
no electronic equivalent at this time.

The trials of electronic Driver's License happened mostly in America,
and were probably totally absent in Europe.

That is all I know.

 > What is the pseudonym scheme is being used to protect it or what
 > requirements are being set for it?

I do not know myself.

 > ** What are the specific challenges of concern around
 > pseudo-anonymization approaches to which an allusion is made?
 >
 > ** Who is the trusted third parted needed?

There is no trusted third party in the automotive networks.  There are a
few efforts to build national Certificate Authorities, European
automotive PKIs, and similar.  Most are backed by trials.  But there is
no universally agreed CA (like is e.g. Verisign in the Internet world).
  They are all expensive to access, and some times even impossible.

What is needed is that the automotive networks use the CAs from Internet.

What is needed is that the automotive networks use the CAs from Internet.

Alex