AAA%20WG%20Meeting

1
AAA WG Meeting

• IETF 56
• San Francisco, CA
• March 19, 2003

2
Agenda

• Preliminaries (10 minutes)
• Bluesheets
• Minute Takers
• Agenda Bashing
• Document Status
• Diameter NASREQ, David Mitton (10 minutes)
• http//www.ietf.org/internet-drafts/draft-ietf-aaa
  -diameter-nasreq-11.txt
• Diameter Credit Control Application, John
  Loughney (10 minutes)
• http//www.ietf.org/internet-drafts/draft-hakala-d
  iameter-credit-control-06.txt
• Credit Control and Prepaid Applications, Avi Lior
  (10 minutes)
• http//www.ietf.org/internet-drafts/draft-lior-rad
  ius-prepaid-extensions-00.txt
• Diameter Multimedia Application, Miguel Garcia
  (10 minutes)
• http//www.ietf.org/internet-drafts/draft-belincho
  n-aaa-diameter-mm-app-00.txt
• Diameter Session Mobility, Dan Forsberg (10
  minutes)
• http//www.ietf.org/internet-drafts/draft-liu-aaa-
  diameter-session-mobility-00.txt

3
Agenda (contd)

• Diameter APIs, Yoshihiro Obha and David Frascone
  (10 minutes)
• http//www.ietf.org/internet-drafts/draft-ietf-aaa
  -diameter-api-03.txt
• http//www.ietf.org/internet-drafts/draft-ohba-aaa
  -diameter-cxxapi-00.txt
• Diameter Mobile IPv4, Tony Johansson (10 minutes)
  
• http//www.ietf.org/internet-drafts/draft-ietf-aaa
  -diameter-mobileip-13.txt
• Diameter CMS, Stephen Farrell (10 minutes)
• http//www.ietf.org/internet-drafts/draft-ietf-aaa
  -diameter-cms-sec-04.txt
• Issues in AAA Key Distribution (20 minutes), Russ
  Housley
• http//www.ietf.org/internet-drafts/draft-walker-a
  aa-key-distribution-00.txt
• AAA WG roadmap (AAA WG Chairs Randy Bush)

4
Document Status

• Charter http//www.ietf.org/html.charters/aaa-cha
  rter.html
• In RFC Editor Queue
• Diameter Base-17
• Transport-12
• IESG Review completed
• Diameter MIPv4-13
• Passed AAA WG Last Call
• NASREQ-11
• Work in progress
• Diameter EAP Due June 2003
• Diameter CMS Due December 2003
• New WG work items
• Diameter Key wrap
• Diameter Credit Control
• Diameter Multimedia

5
Some Sobering Facts

• No AAA protocol document specifying key
  distribution has ever been approved as an IETF
  Proposed Standard
• RFC 2548 is Informational (and vendor-specific)
• Diameter MIPv4 is blocked on security
• No progress on Diameter EAP or CMS
• What does AAA WG need to do in order to make
  progress?
• What aspects of the problem have we missed?
• What criteria do we need to meet?

6
Where Do We Go From Here?

• Need a fresh start on Diameter Mobile IPv4
• WG Address IESG concerns on clarity of system
  description
• IESG Provide more detailed feedback on how draft
  needs to be changed to conform the principles
• Need a key framework document
• Describe the protocols and how they interact
  system (EAP, AAA, TSK derivation)
• Analyze the security properties of the system
• Enumerate the security requirements
• Address key naming and binding issues (including
  examples)
• EAP WG draft-aboba-pppext-key-problem-06.txt
• Split out Diameter Key Wrap into a separate
  document
• Create a design team to focus on this.
• Take a fresh look at Diameter CMS
• Can we remove deployment barriers?
• Can we decrease the complexity of the
  specification?
• Any implementation plans?