Re: [paws] Kathleen Moriarty's Discuss on draft-ietf-paws-protocol-14: (with DISCUSS)

[Vincent Chen <[e-mail]>]

Stephen, Kathleen,

A Spectrum Database is not a typical database; "full contents" is not well
defined.

In practice, available spectrum needs to be computed on each query, based
on the device's
location (and device type) and a host of other stored information about
location and spectrum usage
of "protected" entities, such as TV stations, wireless mics of theaters,
stadiums, etc.

The reason to use a Database is not that the data is sensitive in any way,
but that the Database has
been certified to be able to compute accurate answers, based on algorithms
and rules defined
by a regulator.

There's no other data that can be accessed...it's just the results of its
computations.

> Just to be clear - As I understand it now, the database may have
sensitive information, but the interface via PAWS only
> allows access to data that is not sensitive.  If you can query it, it is
public.  If you have database access or other extensions
> are written, then it could be possible to get access to sensitive data.

As mentioned elsewhere, I will add a statement to Section 8 to put some
limits on extensions.

-vince


On Thu, Aug 21, 2014 at 12:54 PM, Kathleen Moriarty <
[e-mail]> wrote:

>
>
>
> On Thu, Aug 21, 2014 at 3:51 PM, Kathleen Moriarty <
> [e-mail]> wrote:
>
>>
>>
>>
>> On Thu, Aug 21, 2014 at 3:49 PM, Stephen Farrell <
>> [e-mail]> wrote:
>>
>>>
>>> Hiya,
>>>
>>> On 21/08/14 20:44, Kathleen Moriarty wrote:
>>> > OK, this isn't my area of expertise, so I didn't read it the same way
>>> in
>>> > that information was limited to requests of public data.
>>> >
>>>
>>> Nothing really to do with IESG processing of this but I'm
>>> curious...
>>>
>>> Is the full DB information really considered public?
>>
>>
>> I'm glad it wasn't just me ;-)  Maybe stating that explicitly would be
>> good.
>>
>> My
>>> impression was rather that trying to extract the full DB
>>> of information via repeated queries would be frowned upon.
>>>
>> Just to be clear - As I understand it now, the database may have
> sensitive information, but the interface via PAWS only allows access to
> data that is not sensitive.  If you can query it, it is public.  If you
> have database access or other extensions are written, then it could be
> possible to get access to sensitive data.
>
>>
>>> S.
>>>
>>
>>
>>
>> --
>>
>> Best regards,
>> Kathleen
>>
>
>
>
> --
>
> Best regards,
> Kathleen
>



-- 
-vince