- DG-IDoT - mailman.kantarainitiative.org

ADEPT paper
by j stollman 17 Apr '15

17 Apr '15

All, Attached is the ADEPT paper I mentioned on today's call. I also include another long paper which points out several issues with blockchain technology. For much of the paper, the author creates straw man and then picks them apart. But he also raises some real points that are informative. Jeff --------------------------------- Jeff Stollman stollman.j(a)gmail.com 1 202.683.8699 Truth never triumphs — its opponents just die out. Science advances one funeral at a time. Max Planck

2 1

IDoT conf call
by Ingo.Friese＠telekom.de 17 Apr '15

17 Apr '15

Dear all, I’d like to invite you to our biweekly IDoT call. Date and Time Date: Friday Time: 07:00 PT | 10:00 ET | 16:00 CEST * Dial-in Details Skype: +99051000000481 US Dial-In: +1-805-309-2350 Alternate Toll +1 (714) 551-9842 International Numbers: http://kantarainitiative.org/confluence/x/KYC_/ Conference ID: 613-2898 The following commands may be used participants during the conference call:+ *0 Plays menu of Keypad Commands *3 Promote to Host (if non-host) *5 Raise your hand *6 Mute yourself (toggle on/off) *# Private roll call of participants \ Mute music-on-hold (toggle on/off) TurboPhone (beta): https://www.turbobridge.com/join.html Works with Internet Explorer on Windows only SIP Access (using IP phone or soft phone) sip:bridge@turbobridge.com SIP URL details: https://www.turbobridge.com/help/Index.html?context=180

1 0

IDoT DG TeleCOn
by Ingo.Friese＠telekom.de 17 Apr '15

17 Apr '15

Dear All, I hope you are all doing well. I’d like to remind you that our next IDoT-call is coming up today. I’m looking forward to talking to you! PS: It looks that there is a temporary time difference btw. European and American Summer time. We start 8pm PT. Best regards, Ingo Date and Time * Friday, March 20th, at 8am PT (time chart)<http://www.timeanddate.com/worldclock/fixedtime.html?msg=IDoT+Conf+Call&iso…> * Voice: Skype: +99051000000481 or US +1-805-309-2350<tel:%2B1-805-309-2350> / Alternate Toll +1 (714) 551-9842<tel:%2B1%20%28714%29%20551-9842> (international dial-in lines<http://kantarainitiative.org/confluence/x/KYC_/>), room code 613-2898# * (Turbobridge call options<https://www.turbobridge.com/join.html>) Agenda Smart discovery document, SXSW report AOB Kind regards Ingo Friese Deutsche Telekom AG T-Labs (Research & Innovation) Dipl.-Ing. Ingo Friese Winterfeldtstr. 21, 10781 Berlin +4930835358148<tel:%2B4930835358148> (Phone) +49391580216849<tel:%2B49391580216849> (Fax) E-Mail: ingo.friese(a)telekom.de<mailto:ingo.friese@telekom.de> www.telekom.com<http://www.telekom.com/> Life is for sharing. DEUTSCHE TELEKOM AG Supervisory Board: Prof. Dr. Ulrich Lehner (Chairman) Board of Management: René Obermann (Chairman), Reinhard Clemens, Niek Jan van Damme, Timotheus Höttges, Dr. Thomas Kremer, Claudia Nemat, Prof. Dr. Marion Schick Commercial register: Amtsgericht Bonn HRB 6794 Registered office: Bonn Big changes start small – conserve resources by not printing every e-mail. _______________________________________________ DG-IDoT mailing list DG-IDoT(a)kantarainitiative.org<mailto:DG-IDoT@kantarainitiative.org> http://kantarainitiative.org/mailman/listinfo/dg-idot

2 3

Personal Discovery Service
by Ingo.Friese＠telekom.de 16 Apr '15

16 Apr '15

Hi, I had a look at the discussion about personal discovery service within UMA. In fact we have a similar challenge in IDoT discussion group. We are about to describe a "smart" discovery service that can find objects by using relationships and context. The problem is: if someone asks the right questions he can gain a lot of personalor critical information. So we need a kind of authorization mechanism that controls "who is entitled to see/find which devices". Ingo From: wg-uma-bounces(a)kantarainitiative.org [mailto:wg-uma-bounces@kantarainitiative.org] On Behalf Of Justin Richer Sent: Donnerstag, 16. April 2015 05:42 To: George Fletcher Cc: wg-uma(a)kantarainitiative.org UMA Subject: Re: [WG-UMA] Personal Discovery Service I like that response for webfinger, but I think it's going to be something that UMA in general is going to have to deal with. UMA makes a lot of assumptions about how the API is set up, including that the initial call with no access token always returns an error. I think we can do better than that. Another bullet for UMA 2.0. :) (I'm trying to compile a list.) - Justin On Apr 14, 2015, at 9:34 AM, George Fletcher <george.fletcher(a)teamaol.com<mailto:george.fletcher@teamaol.com>> wrote: Great though Justin. You're right that its difficult to return public data and a pointer to how to get more data. However, in the unauthenticated webfinger case, you could return a link relation to the user's AS as this is pretty much public anyway and possibly a property that indicates that the discovery service is UMA protected. Thanks, George On 4/14/15 10:01 AM, Justin Richer wrote: I almost really like this. The one thing that I'd want out of a flow like this is public discovery information returned from the unauthenticated webfinger call in addition to the pointer to the AS. That way if a client is able to act on the public information it doesn't need to go through the authorization steps, but if it needs more access then it can step up. This is a common enough API pattern and it's something that I think UMA doesn't do very well at, currently. - Justin On Apr 13, 2015, at 1:18 PM, George Fletcher <george.fletcher(a)teamaol.com<mailto:george.fletcher@teamaol.com>> wrote: So I have a sequence diagram for combining webfinger and UMA. I'll embed and attach the image to this email and I can share the web sequence diagram text if anyone is interested. I'd really appreciate it if someone could validate this flow and make sure I didn't miss anything obvious. It doesn't cover every possible case of UMA but it should cover the default/normal flow. That said, there are still lots of things to consider such as should there be a relation based taxonomy within a vertical to make discovering different kinds of endpoints easier? How to represent a discoverable endpoint as a resource set? If the UMA AS and Discovery endpoint are the same server, should there be a way for the discovery flow to return an RPT to simplify things for callers? <webfinger+uma.png> Thanks, George -- Chief Architect AIM: gffletch Identity Services Engineering Work: george.fletcher(a)teamaol.com<mailto:george.fletcher@teamaol.com> AOL Inc. Home: gffletch(a)aol.com<mailto:gffletch@aol.com> Mobile: +1-703-462-3494 Blog: http://practicalid.blogspot.com<http://practicalid.blogspot.com/> Office: +1-703-265-2544 Twitter: http://twitter.com/gffletch <webfinger+uma.png>_______________________________________________ WG-UMA mailing list WG-UMA(a)kantarainitiative.org<mailto:WG-UMA@kantarainitiative.org> http://kantarainitiative.org/mailman/listinfo/wg-uma -- Chief Architect AIM: gffletch Identity Services Engineering Work: george.fletcher(a)teamaol.com<mailto:george.fletcher@teamaol.com> AOL Inc. Home: gffletch(a)aol.com<mailto:gffletch@aol.com> Mobile: +1-703-462-3494 Blog: http://practicalid.blogspot.com<http://practicalid.blogspot.com/> Office: +1-703-265-2544 Twitter: http://twitter.com/gffletch

1 0

interesting example off how law impacts iot
by Salvatore D'Agostino 27 Mar '15

27 Mar '15

So think of the implications of this. You have a drone flying down the road, gopro on your head while biking or a camera pointed at your front yard, cop pulls over speeder issues ticket in your camera's field of fiew, you just broke the law. (and maybe a year in jail), yikes. http://www.govtech.com/public-safety/Rules-for-Viewing-Police-Videos-in-Texa s-Depend-on-Who-is-Holding-the-Camera.html Salvatore D'Agostino IDmachines LLC 1264 Beacon Street, #5 Brookline, MA 02446 USA http://www.idmachines.com <http://www.idmachines.com/> http://idmachines.blogspot.com <http://idmachines.blogspot.com/> @idmachines +1 617.201.4809 ph +1 617.812.6495 fax

1 0

blog on iot
by Salvatore D'Agostino 26 Mar '15

26 Mar '15

http://www.computer.org/web/sensing-iot/content?g=53926943 <http://www.computer.org/web/sensing-iot/content?g=53926943&type=article&url Title=defining-the-internet-of-things&lf1=1241255974b275116052083b39045350> &type=article&urlTitle=defining-the-internet-of-things&lf1=1241255974b275116 052083b39045350 nice pic about wearables. Salvatore D'Agostino IDmachines LLC 1264 Beacon Street, #5 Brookline, MA 02446 USA http://www.idmachines.com <http://www.idmachines.com/> http://idmachines.blogspot.com <http://idmachines.blogspot.com/> @idmachines +1 617.201.4809 ph +1 617.812.6495 fax

1 0

Cloud Security Alliance Guidance IoT
by Salvatore D'Agostino 26 Mar '15

26 Mar '15

https://interact.cloudsecurityalliance.org/index.php/iot/Iot_Early_Guidance Maybe we could comment as a DG? Open to individuals in any case.T Salvatore D'Agostino IDmachines LLC 1264 Beacon Street, #5 Brookline, MA 02446 USA http://www.idmachines.com <http://www.idmachines.com/> http://idmachines.blogspot.com <http://idmachines.blogspot.com/> @idmachines +1 617.201.4809 ph +1 617.812.6495 fax

2 1

Fwd: story of interest
by j stollman 25 Mar '15

25 Mar '15

All, Perhaps there is an identity solution applicable to IoT already in development. This approach uses blockchain and is funded by some major VCs. http://www.coindesk.com/onename-raises-seed-funding-fuel-decentralized-iden… -- Jeff Stollman stollman.j(a)gmail.com 1 202.683.8699 Truth never triumphs — its opponents just die out. Science advances one funeral at a time. Max Planck

4 4

ISSA Journal - IDoT: Security & Privacy Challenges
by Simon Moffatt 25 Mar '15

25 Mar '15

Hi group This is a basic paper I had published in this months Information Systems Security Association Journal that focused on the privacy and security issues of the internet of things, with obviously a heavy lean on the identity of things. Comments welcome :-) Regards Simon -- ForgeRock <http://www.forgerock.com> *Simon Moffatt* Mob: +44 7903 347 240 Skype: simon.moffatt @simonmoffatt

4 4

news and interesting material
by Ingo.Friese＠telekom.de 24 Mar '15

24 Mar '15

Dear All, I put news and interesting material discussed during our last call to our web site. https://kantarainitiative.org/confluence/display/IDoT/Repository+for+backgr… Best Ingo

1 0