Re: [Rats] Data Attestation (was Re: 3 Use cases)

["Oliver, Ian (Nokia - FI/Espoo)" <[e-mail]>]

   Use case name:  Data Attestation and Provenance
   Who will use it:    End users (though in a hidden manner)
   Attesting Party:   ?
   Relying Party:    ?
   Attestation type:  Passport or Background Check.... yes
   Claims used:
   Description:

        When data is received from a device, it is not only signed by that device (cf: JWT) but also contains information about the state of the device,. For example, the data structure might be:

    {      data: {     DATA,  QUOTE },   hash(data),  signature(hash(data)  }

Ian


--

Dr. Ian Oliver

Cybersecurity Research

Distinguished Member of Technical Staff

Nokia Bell Labs

[phone]

________________________________
From: Michael Richardson
Sent: Monday, 07 October 2019 14:39
To: Oliver, Ian (Nokia - FI/Espoo)
Cc: [e-mail]
Subject: Data Attestation (was Re: [Rats] 3 Use cases)


Oliver, Ian (Nokia - FI/Espoo) <[e-mail]> wrote:
    > Data Attestation

    > A piece of data received from a trusted element may itself contain
    > information about the configuration of that device when that data was
    > received. This might be a single measurement or a combination of
    > measurements over time bounded by a session or transacition.

    > In this use case we continue the chain-of-trust up from the device
    > firmware/operating environment to the data. This enables that once a
    > data packet is received, it's integrity can be checked (cf: JWT) and
    > this information also be traced to the device that produced that
    > data. The data and device then can be attested together.

This use case seems similar to the the geographic cases, but also to the FIDO
use cases, where one needs to know the state of the device that took the
biometric reading in order to know if the biometric is useful.

Can I ask you to fill in my template:

   Use case name:
   Who will use it:
   Attesting Party:
   Relying Party:
   Attestation type:  Passport or Background Check
   Claims used:
   Description:

--
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        | network architect  [
]     [e-mail]  http://www.sandelman.ca/        |   ruby on rails    [