[Rats] Data Attestation (was Re: 3 Use cases)

[Michael Richardson <[e-mail]>]

Oliver, Ian (Nokia - FI/Espoo) <[e-mail]> wrote:
    > Data Attestation

    > A piece of data received from a trusted element may itself contain
    > information about the configuration of that device when that data was
    > received. This might be a single measurement or a combination of
    > measurements over time bounded by a session or transacition.

    > In this use case we continue the chain-of-trust up from the device
    > firmware/operating environment to the data. This enables that once a
    > data packet is received, it's integrity can be checked (cf: JWT) and
    > this information also be traced to the device that produced that
    > data. The data and device then can be attested together.

This use case seems similar to the the geographic cases, but also to the FIDO
use cases, where one needs to know the state of the device that took the
biometric reading in order to know if the biometric is useful.

Can I ask you to fill in my template:

   Use case name:  
   Who will use it:  
   Attesting Party:  
   Relying Party:  
   Attestation type:  Passport or Background Check
   Claims used:  
   Description:

-- 
]               Never tell me the odds!                 | ipv6 mesh networks [ 
]   Michael Richardson, Sandelman Software Works        | network architect  [ 
]     [e-mail]  http://www.sandelman.ca/        |   ruby on rails    [