Re: [Rats] Entity vs. role

["Eric Voit (evoit)" <[e-mail]>]

Yes, the four boxes on top enclose RATS architecture roles required for the ar4si "Below Zero Trust" use case.

 

Eric

 

From: Laurence Lundblade, March 24, 2022 9:06 AM



Isn’t everything in this diagram a role?  If not, shouldn’t it be? 

 

     .----------------.
     | Attester       |
     | .-------------.|
     | | Attesting   ||             .----------.    .---------------.
     | | Environment ||             | Verifier |    | Relying Party |
     | '-------------'|             |     A    |    |  / Verifier B |
     '----------------'             '----------'    '---------------'
           time(VG)                       |                 |
             |<------Verifier PoF-------time(NS)            |
             |                            |                 |
    time(EG)(1)------Evidence------------>|                 |
             |                          time(RG)            |
             |<------Attestation Results-(2)                |
             ~                            ~                 ~
           time(VG')?                     |                 |
             ~                            ~                 ~
             |<------Relying Party PoF-----------------(3)time(NS')
             |                            |                 |
   time(EG')(4)------AR-augmented Evidence----------------->|
             |                            |   time(RG',RA')(5)
                                                           (6)
                                                            ~
                                                         time(RX')

 

LL

 

 

 





On Mar 24, 2022, at 12:35 PM, Smith, Ned <[e-mail] <mailto:[e-mail]> > wrote:

 

Technically, the RATS Architecture is informational. Hence, no normative “requirements” but that doesn’t mean a I-D based on the architecture should assume conceptual messages can be routed to some other role or that some other role can produce a different conceptual message. 

 

The main point of this thread is to highlight the difference between role and entity. And to try to avoid conflating them. But they are intimately related nevertheless. The examples I provided help illustrate how they relate but without conflation.

-Ned

 

From: Laurence Lundblade <[e-mail] <mailto:[e-mail]> >
Date: Thursday, March 24, 2022 at 11:45 AM
To: "Eric Voit (evoit)" <[e-mail] <mailto:[e-mail]> >
Cc: Thomas Fossati <[e-mail] <mailto:[e-mail]> >, "[e-mail] <mailto:[e-mail]> " <[e-mail] <mailto:[e-mail]> >, "Smith, Ned" <[e-mail] <mailto:[e-mail]> >
Subject: Re: [Rats] Entity vs. role

 

It seems to me now that we need to sort out some of these use cases a little better as Henk suggested in the room in Vienna.






On Mar 23, 2022, at 1:54 PM, Eric Voit (evoit) <[e-mail] <mailto:[e-mail]> > wrote:

 

From: Laurence Lundblade, March 23, 2022 4:03 AM

...

 

Ironic in a way — I want to forward/passthrough Evidence in Results, you are forwarding/passingthrough Results in Evidence :-)

 

<eric> It is not me that puts Results in Evidence.  It is the definitions in the architecture document which requires it *must* be specified this way.

 

5.1 describing the passport model does not imply or require (or preclude) two verifiers. 

 

Section 5.1 does not require that AR be embedded in a new AE message when sent from the device to the RP. It puts no requirements on that transmission. I don’t think it even Requires the Results be relayed by something that has security properties.

 

None of the examples in section 16 work this way. 

 

I think the design is a fine and good, but I don’t see it in my read of the architecture document. (I searched for occurrences of “passport”). Apologies in advance if I’ve missed something in the architecture document.

 

LL