Subject: [saag] ACE meeting summary for IETF 90

From: Likepeng <[email-masked]>
Date: Thu, 24 Jul 2014 11:38:21 +0000

ACE (Authentication and Authorization for Constrained Environments)

Chairs: Kepeng Li, Hannes Tschofenig

Time: Wednesday morning, 9:00 ~ 11:30

Physical attendees: ~70

1. ACE Introduction (Chairs, 10 mins):

This was the first WG F2F meeting. Kepeng introduced briefly about ACE work. Hannes gave some brief summaries about Stockholm informal meeting.

2. Design Directions

2.1: Problem Description (Ludwig Seitz, 30 mins)

Most of the discussions were about different models: Pull model, Push model, Agent model, Push & Confirm model.

Different models can apply to different use cases.

We need to analyze the use cases to see which model(s) to choose.

2.2: Use Cases & Design Patterns (Ludwig Seitz, 30 mins)

There was discussion that there may be multiple authorization servers, and we need to consider the case to change authorization servers.

There was discussion that client joining network process should be out of scope.

Hannes mentioned we have already called for adoption for use case draft. Three volunteers were identified to review the draft and provide feedback in the mailing list.

2.3: Design Considerations (Corinna Schmitt, 30 mins)

It was discussed that we should not be scared about asymmetric key, and also we don't force on asymmetric key.

It was also discussed that we should not narrow down to either one of the two mechanisms (symmetric key vs. asymmetric key), different environments require different mechanisms.

We need to get more data to make decision about symmetric key and/or asymmetric key.

2.4: Cross-domain Support (Carsten Bormann, 30 mins)

It was discussed that we should consider legacy devices, and consider proxy support.

3. Summary and Next Steps (Chairs, 10 mins)

Hannes mentioned about possible interim meeting(s): conference calls or F2F meeting.

Hannes also mentioned that it will be good to use implementation experience to collect data to help our designs.

Kind Regards
Kepeng