Subject: [Secdispatch] OMA SpecWorks - E2E Security

From: Hannes Tschofenig <[email-masked]>
Date: Wed, 6 Mar 2019 12:42:02 +0000

Hi all,

I thought it would be useful to clarify the presentation Goeran made yesterday about the e2e security features in LwM2M. I didn't want to use the valuable meeting time for such purpose.

Goeran referred to a whitepaper and showed a picture that illustrated an end-to-end security use case in an NB IoT scenarios using various proxies/gateways.

The mentioned whitepaper has not been approved in OMA SpecWorks and has not been published yet.

More importantly though the LwM2M specifications do not contain any proxy/gateway support. The work was planned but due to lack of interest did not process. Additionally, the LwM2M architecture does not describe how end-to-end communication happens, i.e. the communication is only described between the a LwM2M-enabled IoT device and the device management server. The interaction with an application server is outside the scope of LwM2M.

Members in OMA have offered end-to-end security solutions on top of LwM2M. If you care to hear what we did, drop me an email.

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.