You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -224,7 +224,7 @@ For any of these more nuanced appraisals, additional Identity Evidence or other
224
224
225
225
### Attester and Attesting Environment
226
226
227
-
Per {{I-D.ietf-rats-architecture}} Figure 2, an Attester and a corresponding Attesting Environment might not share common code or even hardware boundaries.
227
+
Per {{-rats-arch}} Figure 2, an Attester and a corresponding Attesting Environment might not share common code or even hardware boundaries.
228
228
Consequently, an Attester implementation needs to ensure that any Evidence which originates from outside the Attesting Environment MUST have been collected and delivered securely before any Attesting Environment signing may occur.
229
229
After the Verifier performs its appraisal, it will include sufficient information in the Attestation Results to enable a Relying Party to have confidence that the Attester's trustworthiness is represented via Trustworthiness Claims signed by the appropriate Attesting Environment.
230
230
@@ -271,7 +271,7 @@ Additionally, the Relying Party must have confidence that the Trustworthiness Cl
271
271
272
272
There are two categorizations of Verifier identities defined in this document:
273
273
274
-
* verifier build: a unique instance of a software build running as a Verifier.
274
+
* verifier build: a unique instance of a software build running as a Verifier.
275
275
* verifier developer: the organizational unit responsible for a particular 'verifier build'.
276
276
277
277
Within each category, communicating the identity can be accomplished via a variety of objects and encodings.
@@ -640,7 +640,7 @@ This section describes two alternatives.
640
640
641
641
### Verifier Retrieval
642
642
643
-
It is possible to for a Relying Party to follow the Background-Check Model defined in Section 5.2 of {{I-D.ietf-rats-architecture}}.
643
+
It is possible to for a Relying Party to follow the Background-Check Model defined in Section 5.2 of {{-rats-arch}}.
644
644
In this case, a Relying Party will receive Attestation Results containing the Trustworthiness Vector directly from a Verifier.
645
645
These Attestation Results can then be used by the Relying Party in determining the appropriate treatment for interactions with the Attester.
646
646
@@ -690,11 +690,11 @@ The AR Augmented Evidence is then sent to the Relying Party.
690
690
The Relying Party then can appraise these semantically bound sets of signed Evidence by applying an Appraisal Policy for Attestation Results as described below.
691
691
This policy will consider both the AR as well as additional information about the Attester within the AR Augmented Evidence the when determining what action to take.
692
692
693
-
This alternative combines the {{I-D.ietf-rats-architecture}} Sections 5.1 Passport Model and Section 5.2 Background-Check Model.
693
+
This alternative combines the {{-rats-arch}} Sections 5.1 Passport Model and Section 5.2 Background-Check Model.
694
694
{{interactions}} describes this flow of information.
695
-
The flows within this combined model are mapped to {{I-D.ietf-rats-architecture}} in the following way.
696
-
"Verifier A"below corresponds to the "Verifier" Figure 5 within {{I-D.ietf-rats-architecture}}.
697
-
And "Relying Party/Verifier B" below corresponds to the union of the "Relying Party" and "Verifier" boxes within Figure 6 of {{I-D.ietf-rats-architecture}}.
695
+
The flows within this combined model are mapped to {{-rats-arch}} in the following way.
696
+
"Verifier A"below corresponds to the "Verifier" Figure 5 within {{-rats-arch}}.
697
+
And "Relying Party/Verifier B" below corresponds to the union of the "Relying Party" and "Verifier" boxes within Figure 6 of {{-rats-arch}}.
698
698
This union is possible because Verifier B can be implemented as a simple, self-contained process.
699
699
The resulting combined process can appraise the AR-augmented Evidence to determine whether an Attester qualifies for secure interactions with the Relying Party.
700
700
The specific steps of this process are defined later in this section.
The interaction model depicted above includes specific time related events from Appendix A of {{I-D.ietf-rats-architecture}}.
729
+
The interaction model depicted above includes specific time related events from Appendix A of {{-rats-arch}}.
730
730
With the identification of these time related events, time duration/interval tracking becomes possible.
731
731
Such duration/interval tracking can become important if the Relying Party cares if too much time has elapsed between the Verifier PoF and Relying Party PoF.
732
732
If too much time has elapsed, perhaps the Attestation Results themselves are no longer trustworthy.
0 commit comments