[saag] BOFs about IoT firmware update and TEE configuration

[Hannes Tschofenig <[e-mail]>]

Hi all,

we have proposed two security-relevant BOFs for the upcoming meeting.
They are listed on the BOF Wiki page at
https://trac.tools.ietf.org/bof/trac/wiki but I still wanted to briefly
introduce them to you

** “Firmware Update Description (FUD)”

Last year we had a workshop organized by the IAB on firmware updates for
IoT devices (see https://www.iab.org/activities/workshops/iotsu/) where
we talked about various challenges and gaps.

As a follow-up to the workshop we would like to initiate some
standardization activity in this area.

The mailing list can be found at
https://www.ietf.org/mailman/listinfo/fud


** “A Protocol for Dynamic Trusted Execution Environment Enablement (TEEP)”

This BOF is about an application layer security protocol that allows to
configure security credentials and software running on a Trusted
Execution Environment (TEE). Today, TEEs are, for example, found home
routers, set-top boxes, smart phones, tablets, wearables, etc.
Unfortunately, there have been mostly proprietary protocols used in this
environment.

With this BOF we are making an attempt to standardize such a protocol. A
strawman proposal of such a protocol has been published with
https://tools.ietf.org/html/draft-pei-opentrustprotocol-03.

The mailing list can be found at:
https://www.ietf.org/mailman/listinfo/teep




Ciao
Hannes