EAP WG

1
Trustworthy Location
draft-tschofenig-ecrit-trustworthy-location ECRIT
WG IETF 78 Thursday, July 29, 2010
2
Goals of the draft

• To articulate threats relating to location
  spoofing attacks (such as swatting) that are
  not covered in previous documents.
• To analyze location trust issues at a system
  level
• Includes location configuration, conveyance and
  validation
• To understand the practicality of proposed
  solutions
• Effectiveness of security features PIDF-LO
  signing, transmission layer security, access
  control, etc.
• Deployability of solutions at scale
• Implications for PSAP staffing, personnel
  training and operational procedures

3
A Few Observations

• Trustworthy Location and accountability need to
  be analyzed together
• Location may be trustworthy, but emergency
  services call may not be
• If accountability (and likelihood of being
  caught) can be increased, then threat of location
  spoofing can also be reduced
• System security not necessarily improved by
  additional security technology
• PIDF-LO signing ! trustworthy location
• SIP Identity ! accountability

4
Dependencies

• Recent work has important effects on system
  security properties
• Understanding system security implications could
  help shape the debate
• SIP conveyance changes
• Third party insertion expands attacks surface
• Multiple location support requires careful study
• Dereference protocol
• Access control privacy properties important to
  overall system security as well as deployability

5
Next steps

• Acceptance as a WG work item?
• Revision to reflect changes to SIP conveyance and
  Dereference protocols.
• Continued WG review and feedback.

6
Feedback?