< draft-ietf-ace-oauth-authz-40.txt		draft-ietf-ace-oauth-authz-41.txt >
	ACE Working Group L. Seitz		ACE Working Group L. Seitz
	Internet-Draft Combitech		Internet-Draft Combitech
	Intended status: Standards Track G. Selander		Intended status: Standards Track G. Selander
	Expires: October 28, 2021 Ericsson		Expires: November 6, 2021 Ericsson
	E. Wahlstroem		E. Wahlstroem
	S. Erdtman		S. Erdtman
	Spotify AB		Spotify AB
	H. Tschofenig		H. Tschofenig
	Arm Ltd.		Arm Ltd.
	April 26, 2021		May 5, 2021
	Authentication and Authorization for Constrained Environments (ACE)		Authentication and Authorization for Constrained Environments (ACE)
	using the OAuth 2.0 Framework (ACE-OAuth)		using the OAuth 2.0 Framework (ACE-OAuth)
	draft-ietf-ace-oauth-authz-40		draft-ietf-ace-oauth-authz-41
	Abstract		Abstract
	This specification defines a framework for authentication and		This specification defines a framework for authentication and
	authorization in Internet of Things (IoT) environments called ACE-		authorization in Internet of Things (IoT) environments called ACE-
	OAuth. The framework is based on a set of building blocks including		OAuth. The framework is based on a set of building blocks including
	OAuth 2.0 and the Constrained Application Protocol (CoAP), thus		OAuth 2.0 and the Constrained Application Protocol (CoAP), thus
	transforming a well-known and widely used authorization solution into		transforming a well-known and widely used authorization solution into
	a form suitable for IoT devices. Existing specifications are used		a form suitable for IoT devices. Existing specifications are used
	where possible, but extensions are added and profiles are defined to		where possible, but extensions are added and profiles are defined to
	skipping to change at page 1, line 45 ¶		skipping to change at page 1, line 45 ¶
	Internet-Drafts are working documents of the Internet Engineering		Internet-Drafts are working documents of the Internet Engineering
	Task Force (IETF). Note that other groups may also distribute		Task Force (IETF). Note that other groups may also distribute
	working documents as Internet-Drafts. The list of current Internet-		working documents as Internet-Drafts. The list of current Internet-
	Drafts is at https://datatracker.ietf.org/drafts/current/.		Drafts is at https://datatracker.ietf.org/drafts/current/.
	Internet-Drafts are draft documents valid for a maximum of six months		Internet-Drafts are draft documents valid for a maximum of six months
	and may be updated, replaced, or obsoleted by other documents at any		and may be updated, replaced, or obsoleted by other documents at any
	time. It is inappropriate to use Internet-Drafts as reference		time. It is inappropriate to use Internet-Drafts as reference
	material or to cite them other than as "work in progress."		material or to cite them other than as "work in progress."
	This Internet-Draft will expire on October 28, 2021.		This Internet-Draft will expire on November 6, 2021.
	Copyright Notice		Copyright Notice
	Copyright (c) 2021 IETF Trust and the persons identified as the		Copyright (c) 2021 IETF Trust and the persons identified as the
	document authors. All rights reserved.		document authors. All rights reserved.
	This document is subject to BCP 78 and the IETF Trust's Legal		This document is subject to BCP 78 and the IETF Trust's Legal
	Provisions Relating to IETF Documents		Provisions Relating to IETF Documents
	(https://trustee.ietf.org/license-info) in effect on the date of		(https://trustee.ietf.org/license-info) in effect on the date of
	publication of this document. Please review these documents		publication of this document. Please review these documents
	skipping to change at page 59, line 50 ¶		skipping to change at page 59, line 50 ¶
	Seitz was also received further funding for this work by Vinnova in		Seitz was also received further funding for this work by Vinnova in
	the context of the CelticNext project Critisec.		the context of the CelticNext project Critisec.
	10. References		10. References
	10.1. Normative References		10.1. Normative References
	[I-D.ietf-ace-oauth-params]		[I-D.ietf-ace-oauth-params]
	Seitz, L., "Additional OAuth Parameters for Authorization		Seitz, L., "Additional OAuth Parameters for Authorization
	in Constrained Environments (ACE)", draft-ietf-ace-oauth-		in Constrained Environments (ACE)", draft-ietf-ace-oauth-
	params-13 (work in progress), April 2020.		params-14 (work in progress), March 2021.
	[IANA.CborWebTokenClaims]		[IANA.CborWebTokenClaims]
	IANA, "CBOR Web Token (CWT) Claims",		IANA, "CBOR Web Token (CWT) Claims",
	<https://www.iana.org/assignments/cwt/cwt.xhtml#claims-		<https://www.iana.org/assignments/cwt/cwt.xhtml#claims-
	registry>.		registry>.
	[IANA.CoreParameters]		[IANA.CoreParameters]
	IANA, "Constrained RESTful Environments (CoRE)		IANA, "Constrained RESTful Environments (CoRE)
	Parameters", <https://www.iana.org/assignments/core-		Parameters", <https://www.iana.org/assignments/core-
	parameters/core-parameters.xhtml>.		parameters/core-parameters.xhtml>.
	skipping to change at page 62, line 37 ¶		skipping to change at page 62, line 37 ¶
	[I-D.erdtman-ace-rpcc]		[I-D.erdtman-ace-rpcc]
	Seitz, L. and S. Erdtman, "Raw-Public-Key and Pre-Shared-		Seitz, L. and S. Erdtman, "Raw-Public-Key and Pre-Shared-
	Key as OAuth client credentials", draft-erdtman-ace-		Key as OAuth client credentials", draft-erdtman-ace-
	rpcc-02 (work in progress), October 2017.		rpcc-02 (work in progress), October 2017.
	[I-D.ietf-ace-dtls-authorize]		[I-D.ietf-ace-dtls-authorize]
	Gerdes, S., Bergmann, O., Bormann, C., Selander, G., and		Gerdes, S., Bergmann, O., Bormann, C., Selander, G., and
	L. Seitz, "Datagram Transport Layer Security (DTLS)		L. Seitz, "Datagram Transport Layer Security (DTLS)
	Profile for Authentication and Authorization for		Profile for Authentication and Authorization for
	Constrained Environments (ACE)", draft-ietf-ace-dtls-		Constrained Environments (ACE)", draft-ietf-ace-dtls-
	authorize-15 (work in progress), January 2021.		authorize-16 (work in progress), March 2021.
	[I-D.ietf-ace-oscore-profile]		[I-D.ietf-ace-oscore-profile]
	Palombini, F., Seitz, L., Selander, G., and M. Gunnarsson,		Palombini, F., Seitz, L., Selander, G., and M. Gunnarsson,
	"OSCORE Profile of the Authentication and Authorization		"OSCORE Profile of the Authentication and Authorization
	for Constrained Environments Framework", draft-ietf-ace-		for Constrained Environments Framework", draft-ietf-ace-
	oscore-profile-15 (work in progress), January 2021.		oscore-profile-18 (work in progress), April 2021.
	[I-D.ietf-quic-transport]		[I-D.ietf-quic-transport]
	Iyengar, J. and M. Thomson, "QUIC: A UDP-Based Multiplexed		Iyengar, J. and M. Thomson, "QUIC: A UDP-Based Multiplexed
	and Secure Transport", draft-ietf-quic-transport-34 (work		and Secure Transport", draft-ietf-quic-transport-34 (work
	in progress), January 2021.		in progress), January 2021.
	[I-D.ietf-tls-dtls13]		[I-D.ietf-tls-dtls13]
	Rescorla, E., Tschofenig, H., and N. Modadugu, "The		Rescorla, E., Tschofenig, H., and N. Modadugu, "The
	Datagram Transport Layer Security (DTLS) Protocol Version		Datagram Transport Layer Security (DTLS) Protocol Version
	1.3", draft-ietf-tls-dtls13-40 (work in progress), January		1.3", draft-ietf-tls-dtls13-43 (work in progress), April
	2021.		2021.
	[Margi10impact]		[Margi10impact]
	Margi, C., de Oliveira, B., de Sousa, G., Simplicio Jr,		Margi, C., de Oliveira, B., de Sousa, G., Simplicio Jr,
	M., Barreto, P., Carvalho, T., Naeslund, M., and R. Gold,		M., Barreto, P., Carvalho, T., Naeslund, M., and R. Gold,
	"Impact of Operating Systems on Wireless Sensor Networks		"Impact of Operating Systems on Wireless Sensor Networks
	(Security) Applications and Testbeds", Proceedings of		(Security) Applications and Testbeds", Proceedings of
	the 19th International Conference on Computer		the 19th International Conference on Computer
	Communications and Networks (ICCCN), August 2010.		Communications and Networks (ICCCN), August 2010.
	skipping to change at page 82, line 10 ¶		skipping to change at page 82, line 10 ¶
	Figure 26: Resource request and response protected by OSCORE		Figure 26: Resource request and response protected by OSCORE
	Authors' Addresses		Authors' Addresses
	Ludwig Seitz		Ludwig Seitz
	Combitech		Combitech
	Djaeknegatan 31		Djaeknegatan 31
	Malmoe 211 35		Malmoe 211 35
	Sweden		Sweden
	Email: ludwig.seitz@combitech.se		Email: ludwig.seitz@combitech.com
	Goeran Selander		Goeran Selander
	Ericsson		Ericsson
	Faroegatan 6		Faroegatan 6
	Kista 164 80		Kista 164 80
	Sweden		Sweden
	Email: goran.selander@ericsson.com		Email: goran.selander@ericsson.com
	Erik Wahlstroem		Erik Wahlstroem
End of changes. 9 change blocks.
	9 lines changed or deleted		9 lines changed or added
This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/