Re: [Rats] Attestation Timing Definitions

[Laurence Lundblade <[e-mail]>]

Then the net net is that this diagram needs fixing:

   ..----------.                     ..----------.  .---------------.
   | Attester |                     | Verifier |  | Relying Party |
   '----------'                     '----------'  '---------------'
      time(a)                             |               |
      time(b)                             |               |
        |                               time(c)           |
        |<-----nonce 1------------------time(d)           |
      time(e)                             |               |
        |------Evidence---------------->time(f)           |
        |                               time(g){@time(h)} |
        |<-----Attestation Result-------time(i)           |
        |                                 |             time(c’)
        |<-----nonce 2----------------------------------time(d’)
      time(e’)                            |               |
        |------Attestation Result---------------------->time(l)
        |                                 |             time(h)
 

Option 1) fix: change time(e’) to time(n) if what’s being signed at that time is NOT evidence

Option 2) fix: leave it as time(e’) and change the diagram so what is being signed IS evidence. This will involve adding a Verifier and such making it look a lot like the other diagram.


My main objective here is to understand what needs to go into EAT so it can represent Attestation Results well. I also care about the architecture document. The details of trusted path I leave in your hands. :-)

LL




> On Mar 12, 2020, at 11:49 AM, Eric Voit (evoit) <evoit=[e-mail]> wrote:
> 
> Hi Laurence,
>  
> From: Laurence Lundblade, March 12, 2020 1:05 PM
> 
> Hi Wei,
>  
> below...
> 
> 
> On Mar 11, 2020, at 7:24 PM, Panwei (William) <[e-mail] <mailto:[e-mail]>> wrote:
>  
>  
>  
> Regards & Thanks!
> 潘伟 Wei Pan
> 华为技术有限公司 Huawei Technologies Co., Ltd.
>  
> From: Laurence Lundblade [mailto:[e-mail] <mailto:[e-mail]>] 
> Sent: Thursday, March 12, 2020 1:33 AM
> To: Panwei (William) <[e-mail] <mailto:[e-mail]>>
> Cc: Eric Voit (evoit) <evoit=[e-mail] <mailto:evoit=[e-mail]>>; [e-mail] <mailto:[e-mail]>
> Subject: Re: [Rats] Attestation Timing Definitions
>  
>  
> 
> 
> 
> On Mar 10, 2020, at 8:20 PM, Panwei (William) <[e-mail] <mailto:[e-mail]>> wrote:
>  
> I think Ned’s email also has detailedly explained that the entity of Relying Party can also take on the role of Verifier, and in this case the Attester sends Evidence + previous Attestation Result to that entity, within that entity the Verifier role processes the Evidence and the Relying Party role consumes the two Attestation Results.
>  
> So, for a simple nonce-based Passport Model, the Attester just sends Attestation Result produced by the Verifier to the Relying Party, and the passport is simply the Attestation Result. 
>    ..----------.                     ..----------.  .---------------.
>    | Attester |                     | Verifier |  | Relying Party |
...