[Teep] Fw: New Version Notification for draft-ietf-teep-usecase-for-cc-in-network-12.txt

["[e-mail]" <[e-mail]>]

Hi all，
According to the comments, we have made an update for latest version. The main changes are as follows:
1、In the Section 1 , added an additional introduction on IDSA's support for confidential computing and CC.
The International Data Spaces Association's goal is the establishment of trustworthiness in data sharing, and IDSA supports the use of confidential computing to protect data when dealing with data sharing . In detail, data sharing accommodate a wide range of scenarios. From a simple file transfer between two storage providers, to API access for streaming or eventing, to quite complex implementations with secure execution environments through confidential compute enclaves, environment attestations, signed code, custom encryption algorithms, and more.

2、Added appendix B, the specific examples of 5.3 use case.
On-premises Remote Attestation Verification: Internet Service Providers (ISPs) verify the integrity of high-capacity routing platforms using Remote Attestation (RATS) and the raw evidence may contain sensitive metadata, such as granular firmware versions, patch levels, and operational configurations, which poses a risk of information leakage and violates data sovereignty requirements. So the ISP can deploy an on-premises Verifier within a TEE on a Confidential Computing (CC) server. In this scenario, the vendor-provided Verifier logic and Reference Values are provisioned as the Trusted Application (TA). The network devices (Attesters) send Evidence directly to this local TEE. By executing the Verifier within a TEE, the ISP ensures that the vendor's intellectual property (the verification logic) remains protected, while the ISP's sensitive device Evidence never leaves their controlled infrastructure. 
Privacy-Preserving When Using Machine Learning (ML) models: Network operators collect large-scale telemetry to detect advanced security threats and use specialized Machine Learning (ML) models for analysis. In this case, the operator can leverage an external CC-enabled cloud for analysis. The third-party security vendor provides the analysis model as a TA. The operator provides the telemetry as encrypted Input Data. The decryption keys are only released to the TEE after the operator performs remote attestation of the analytics environment. This ensures that the third-party provider cannot access the raw telemetry, and the operator cannot reverse-engineer the vendor's proprietary ML model.
Privacy-Preserving Path Computation and Intent-Based Networking: In Software-Defined Networking (SDN), a Network User may require specific Path Computation (PCE) based on sensitive business intents, but the Network Provider need to keep their detailed network topology and link utilization metrics confidential. Then the Path Computation Element (PCE) can host within a TEE. The Network User's sensitive routing constraints and the Network Provider's topology data are treated as private inputs to the TA (the Path Computation algorithm). The TEE ensures that the User cannot see the Provider's full topology, and the Provider cannot see the User's specific intent or underlying traffic descriptors.
3、We think the draft is ready for the WGLC and hope this document can provide deployment guidance for scenarios to use confidential computing in network.



[e-mail]
 
From: internet-drafts
Date: 2025-12-30 14:42
To: Chunchi Liu; Li Su; Meiling Chen; Penglin Yang; Peter Liu
Subject: New Version Notification for draft-ietf-teep-usecase-for-cc-in-network-12.txt
A new version of Internet-Draft
draft-ietf-teep-usecase-for-cc-in-network-12.txt has been successfully
submitted by Meiling Chen and posted to the
IETF repository.
 
Name:     draft-ietf-teep-usecase-for-cc-in-network
Revision: 12
Title:    TEEP Usecase for Confidential Computing in Network
Date:     2025-12-30
Group:    teep
Pages:    14
URL:      https://www.ietf.org/archive/id/draft-ietf-teep-usecase-for-cc-in-network-12.txt
Status:   https://datatracker.ietf.org/doc/draft-ietf-teep-usecase-for-cc-in-network/
HTMLized: https://datatracker.ietf.org/doc/html/draft-ietf-teep-usecase-for-cc-in-network
Diff:     https://author-tools.ietf.org/iddiff?url2=draft-ietf-teep-usecase-for-cc-in-network-12
 
Abstract:
 
   Confidential computing is the protection of data in use by performing
   computation in a hardware-based Trusted Execution Environment.
   Confidential computing could provide integrity and confidentiality
   for users who want to run applications and process data in that
   environment.  When confidential computing is used in scenarios which
   need network to provision user data and applications, TEEP
   architecture and protocol could be used.  This usecase illustrates
   the steps of how to deploy applications, containers, VMs and data in
   different confidential computing hardware in network.  This document
   is a use case and extension of TEEP architecture and could provide
   guidance for cloud computing, MEC (Multi-access Computing) and other
   scenarios to use confidential computing in network.
 
 
 
The IETF Secretariat