Skip to content

Commit ee8f3a1

Browse files
Merge pull request #26 from ietf-rats-wg/pre-05
update ref to RATS arch + remove spurious tab
2 parents ec10ddc + 0abedae commit ee8f3a1

File tree

1 file changed

+9
-9
lines changed

1 file changed

+9
-9
lines changed

draft-ietf-rats-ar4si.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ author:
4646
normative:
4747
RFC2119:
4848
RFC8174:
49-
I-D.ietf-rats-architecture: rats-arch
49+
RFC9334: rats-arch
5050

5151
OMTP-ATE:
5252
target: https://www.gsma.com/newsroom/wp-content/uploads/2012/03/omtpadvancedtrustedenvironmentomtptr1v11.pdf
@@ -224,7 +224,7 @@ For any of these more nuanced appraisals, additional Identity Evidence or other
224224

225225
### Attester and Attesting Environment
226226

227-
Per {{I-D.ietf-rats-architecture}} Figure 2, an Attester and a corresponding Attesting Environment might not share common code or even hardware boundaries.
227+
Per {{-rats-arch}} Figure 2, an Attester and a corresponding Attesting Environment might not share common code or even hardware boundaries.
228228
Consequently, an Attester implementation needs to ensure that any Evidence which originates from outside the Attesting Environment MUST have been collected and delivered securely before any Attesting Environment signing may occur.
229229
After the Verifier performs its appraisal, it will include sufficient information in the Attestation Results to enable a Relying Party to have confidence that the Attester's trustworthiness is represented via Trustworthiness Claims signed by the appropriate Attesting Environment.
230230

@@ -271,7 +271,7 @@ Additionally, the Relying Party must have confidence that the Trustworthiness Cl
271271

272272
There are two categorizations of Verifier identities defined in this document:
273273

274-
* verifier build: a unique instance of a software build running as a Verifier.
274+
* verifier build: a unique instance of a software build running as a Verifier.
275275
* verifier developer: the organizational unit responsible for a particular 'verifier build'.
276276

277277
Within each category, communicating the identity can be accomplished via a variety of objects and encodings.
@@ -640,7 +640,7 @@ This section describes two alternatives.
640640

641641
### Verifier Retrieval
642642

643-
It is possible to for a Relying Party to follow the Background-Check Model defined in Section 5.2 of {{I-D.ietf-rats-architecture}}.
643+
It is possible to for a Relying Party to follow the Background-Check Model defined in Section 5.2 of {{-rats-arch}}.
644644
In this case, a Relying Party will receive Attestation Results containing the Trustworthiness Vector directly from a Verifier.
645645
These Attestation Results can then be used by the Relying Party in determining the appropriate treatment for interactions with the Attester.
646646

@@ -690,11 +690,11 @@ The AR Augmented Evidence is then sent to the Relying Party.
690690
The Relying Party then can appraise these semantically bound sets of signed Evidence by applying an Appraisal Policy for Attestation Results as described below.
691691
This policy will consider both the AR as well as additional information about the Attester within the AR Augmented Evidence the when determining what action to take.
692692

693-
This alternative combines the {{I-D.ietf-rats-architecture}} Sections 5.1 Passport Model and Section 5.2 Background-Check Model.
693+
This alternative combines the {{-rats-arch}} Sections 5.1 Passport Model and Section 5.2 Background-Check Model.
694694
{{interactions}} describes this flow of information.
695-
The flows within this combined model are mapped to {{I-D.ietf-rats-architecture}} in the following way.
696-
"Verifier A" below corresponds to the "Verifier" Figure 5 within {{I-D.ietf-rats-architecture}}.
697-
And "Relying Party/Verifier B" below corresponds to the union of the "Relying Party" and "Verifier" boxes within Figure 6 of {{I-D.ietf-rats-architecture}}.
695+
The flows within this combined model are mapped to {{-rats-arch}} in the following way.
696+
"Verifier A" below corresponds to the "Verifier" Figure 5 within {{-rats-arch}}.
697+
And "Relying Party/Verifier B" below corresponds to the union of the "Relying Party" and "Verifier" boxes within Figure 6 of {{-rats-arch}}.
698698
This union is possible because Verifier B can be implemented as a simple, self-contained process.
699699
The resulting combined process can appraise the AR-augmented Evidence to determine whether an Attester qualifies for secure interactions with the Relying Party.
700700
The specific steps of this process are defined later in this section.
@@ -726,7 +726,7 @@ time(EG')(4)------AR-augmented Evidence----------------->|
726726
~~~
727727
{: #interactions title="Below Zero Trust"}
728728

729-
The interaction model depicted above includes specific time related events from Appendix A of {{I-D.ietf-rats-architecture}}.
729+
The interaction model depicted above includes specific time related events from Appendix A of {{-rats-arch}}.
730730
With the identification of these time related events, time duration/interval tracking becomes possible.
731731
Such duration/interval tracking can become important if the Relying Party cares if too much time has elapsed between the Verifier PoF and Relying Party PoF.
732732
If too much time has elapsed, perhaps the Attestation Results themselves are no longer trustworthy.

0 commit comments

Comments
 (0)