- DG-IDoT - mailman.kantarainitiative.org

Use case submission
by Scott Shorter 24 Mar '15

24 Mar '15

Hello IRM WG, As promised on the last call, here are some use cases that I had sent to the Kantara Idenity of Things discussion group last year, dusted off and repackaged as IRM use cases. Sorry I can't attend the call today, but hopefully the contribution is helpful. Catch you next time. - Scott -- ============================================================== *Scott Shorter, Principal Security Engineer* Electrosoft *–* Fueling Customer Success Through Outstanding Value and Trust! *Woman-Owned, Minority-Owned Small Business | ISO 9001 | CMMI Level 2 * 1893 Metro Center Drive; Ste 228; Reston, VA 20190 (703) 437-9451 x21 (office); (240) 994-7793 (cell) sshorter(a)electrosoft-inc.com (Email); http://www.electrosoft-inc.com (Web) ==============================================================

1 0

NIST publication of timing issues that might have impact on IOT
by Ross Foard 20 Mar '15

20 Mar '15

Intro from the document. Our fast-approaching future of driverless cars and “smart” electrical grids will depend on billions of linked devices making decisions and communicating with split-second precision to prevent highway collisions and power outages. But a new report <http://www.nist.gov/manuscript-publication-search.cfm?pub_id=917942>* released by the National Institute of Standards and Technology (NIST) warns that this future could be stalled by our lack of effective methods to marry computers and networks with timing systems. http://www.nist.gov/pml/div688/timing-031915.cfm We have addressed some of these issues in the past in industrial controls systems (with real time OS) and (telecom infrastructure) with PTP (precision time protocol). -- Ross Foard (703) 728-1543 (cell) rfoard(a)gmail.com <https://mail.google.com/mail/?view=cm&fs=1&tf=1&to=rfoard@gmail.com>

2 1

NISTIR 7823
by Scott Shorter 20 Mar '15

20 Mar '15

Hi all, As discussed on the call, here's the news I mentioned about NIST IR 7823: This month, the National Institute of Standards and Technology (NIST) published the final form of a document that Scott Shorter from Electrosoft coauthored with NIST scientist Michaela Iorga <http://www.nist.gov/itl/csd/iorga-michaela.cfm>. NIST Interagency Report (NISTIR) 7823, entitled “Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework.” NISTIR 7823 provides test methods for determining compliance with the voluntary industry standards on firmware upgradeability published by the National Electrical Manufacturers Association (NEMA). The NEMA standard provides functional and security requirements for smart meters, upgrade management systems to upgrade firmware in a secure manner. NEMA SG-AMI 1-2009 <http://www.nema.org/Standards/Pages/Requirements-for-Smart-Meter-Upgradeabi…> was published 2009-09-25 to “[define] requirements for smart meter firmware upgradeability in the context of an advanced metering infrastructure system for industry stakeholders such as regulators, utilities and vendors.” It is currently distributed as part of NEMA's Smart Meter Standards Package <http://www.nema.org/Standards/Pages/Smart-Meter-Package.aspx> which is billed as requirements and guidance on electricity meteric within the United States. The test framework we developed is a very comprehensive test method for a fairly weakly specified standard, and in light of updated NIST guidance on protection of BIOS it is overdue for an update. Scott Shorter will be blogging this month on the topic of firmware upgradeability as a security feature, the ways that security feature can be abused, and recommended security considerations for when the firmware upgradeability standard is revisited, whether as an update by NEMA or if adopted as an ANSI C.12 standard. - Scott -- ============================================================== *Scott Shorter, Principal Security Engineer* Electrosoft *–* Fueling Customer Success Through Outstanding Value and Trust! *Woman-Owned, Minority-Owned Small Business | ISO 9001 | CMMI Level 2 * 1893 Metro Center Drive; Ste 228; Reston, VA 20190 (703) 437-9451 x21 (office); (240) 994-7793 (cell) sshorter(a)electrosoft-inc.com (Email); http://www.electrosoft-inc.com (Web) ==============================================================

1 0

Re: [DG-IDoT] [WG-IRM] Laws of Relationships
by Ian Glazer 09 Mar '15

09 Mar '15

And here I was going to propose "The Immutable and Universal True Commandments of Identity Relationship Management" :-) Totally agree with this thread. I like the idea of "principles" as a way of talking about this work. For those of you who have seen my talks on the subject have observed, I've really struggled with language that feels right. Talk to everyone tomorrow, i On Mon, Mar 9, 2015 at 6:12 AM, Robin Wilton <wilton(a)isoc.org> wrote: > As someone who attacked Kim’s Laws for the hubris of the label, I share > the concern. > > An alternative might be “Principles”… > > R > > Robin Wilton > Technical Outreach Director - Identity and Privacy > Internet Society > > email: wilton(a)isoc.org > Phone: +44 705 005 2931 > Twitter: @futureidentity > > On 8 Mar 2015, at 16:21, Salvatore D'Agostino <sal(a)idmachines.com> wrote: > > Yes, don’t disagree but I don’t think that is where the title is coming > from. I think the whole point was to play off of Kim’s “Laws” and say > there are new ones in play. There is a certain ring to laws and benefits > in terms of capturing audience. It probably gets more attention than > Design Requirements for Relationship Management. This is an initial work > and of even more interest to me is the mutability of the requirements as a > topic in play as opposed to the title of the document as a whole. One of > the things we may find is that the permutations of relationships mean that > even laws/requirements may need a bit of if, then. Among our next steps is > taking the document apart, ideally law by law but overall is fine too as we > look to reconstitute the “laws”. > > We can put this in play on Tuesday, will get an agenda out and look > forward to getting together then. Don’t forget to follow @irmwg and join > the linkedin group and contribute to the conversation there as well. > > Good balance of the weekend to all, > > Sal > > *From:* Susan Morrow [mailto:susan.morrow@avocosecure.com > <susan.morrow(a)avocosecure.com>] > *Sent:* Sunday, March 08, 2015 1:56 AM > *To:* j stollman > *Cc:* Salvatore D'Agostino; dg-idot(a)kantarainitiative.org > *Subject:* Re: [DG-IDoT] Laws of Relationships > > I agree with you Jeff and brought up the same issue about being immutable. > It also precludes the acceptance of fuzziness in relationships too. > I suppose the use of the word 'law' in technology has a different meaning > than the use of it in sciences like physics and chemistry. > > Susan > > > On 8 Mar 2015, at 05:35, j stollman <stollman.j(a)gmail.com> wrote: > > Ever since Kim Cameron's Laws of Identity, the industry seems to gravitate > towards the use of the term "Laws". But I think what this document really > is is a specification of design requirements for a new system(s) capable of > meeting the objectives stated in the introduction. > > I have no particular agita over these design requirements. But I feel > that framing them properly as design requirements, rather than laws, offers > flexibility to design alternative systems that may select only a subset or > explicitly violate one or more laws. At this early stage I prefer this > flexibility to the immutable sound of "Laws." > > Jeff > > On Fri, Mar 6, 2015 at 8:57 PM, Salvatore D'Agostino <sal(a)idmachines.com> > wrote: > Here is the link I mentioned, we also have a twitter handle for the group > of @irmwg and use the same for a hashtag #irmwg. > > > https://kantarainitiative.org/wp-content/uploads/2015/03/Kantara-Initiative… > > Other Kantara reports are here: > https://kantarainitiative.org/reports-recommendations/ > > Enjoy the weekend. > > Sal > > Salvatore D'Agostino > IDmachines LLC > 1264 Beacon Street, #5 > Brookline, MA 02446 > USA > http://www.idmachines.com > http://idmachines.blogspot.com > @idmachines > +1 617.201.4809 ph > +1 617.812.6495 fax > > > > _______________________________________________ > DG-IDoT mailing list > DG-IDoT(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/dg-idot > > > > -- > Jeff Stollman > stollman.j(a)gmail.com > 1 202.683.8699 > > Truth never triumphs — its opponents just die out. > Science advances one funeral at a time. > Max Planck > > _______________________________________________ > DG-IDoT mailing list > DG-IDoT(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/dg-idot > > _______________________________________________ > WG-IRM mailing list > WG-IRM(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/wg-irm > > > > _______________________________________________ > WG-IRM mailing list > WG-IRM(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/wg-irm > > -- Ian Glazer Senior Director, Identity +1 202 255 3166 @iglazer <https://twitter.com/iglazer>

1 0

Re: [DG-IDoT] [WG-IRM] Laws of Relationships
by Susan Morrow Avoco Secure 09 Mar '15

09 Mar '15

Perfect word From: Robin Wilton [mailto:wilton@isoc.org] Sent: 09 March 2015 10:12 To: Salvatore D'Agostino Cc: Susan Morrow; j stollman; wg-irm(a)kantarainitiative.org; dg-idot(a)kantarainitiative.org Subject: Re: [WG-IRM] [DG-IDoT] Laws of Relationships As someone who attacked Kim's Laws for the hubris of the label, I share the concern. An alternative might be "Principles". R Robin Wilton Technical Outreach Director - Identity and Privacy Internet Society email: wilton(a)isoc.org Phone: +44 705 005 2931 Twitter: @futureidentity On 8 Mar 2015, at 16:21, Salvatore D'Agostino <sal(a)idmachines.com> wrote: Yes, don't disagree but I don't think that is where the title is coming from. I think the whole point was to play off of Kim's "Laws" and say there are new ones in play. There is a certain ring to laws and benefits in terms of capturing audience. It probably gets more attention than Design Requirements for Relationship Management. This is an initial work and of even more interest to me is the mutability of the requirements as a topic in play as opposed to the title of the document as a whole. One of the things we may find is that the permutations of relationships mean that even laws/requirements may need a bit of if, then. Among our next steps is taking the document apart, ideally law by law but overall is fine too as we look to reconstitute the "laws". We can put this in play on Tuesday, will get an agenda out and look forward to getting together then. Don't forget to follow @irmwg and join the linkedin group and contribute to the conversation there as well. Good balance of the weekend to all, Sal From: Susan Morrow [ <mailto:susan.morrow@avocosecure.com> mailto:susan.morrow@avocosecure.com] Sent: Sunday, March 08, 2015 1:56 AM To: j stollman Cc: Salvatore D'Agostino; <mailto:dg-idot@kantarainitiative.org> dg-idot(a)kantarainitiative.org Subject: Re: [DG-IDoT] Laws of Relationships I agree with you Jeff and brought up the same issue about being immutable. It also precludes the acceptance of fuzziness in relationships too. I suppose the use of the word 'law' in technology has a different meaning than the use of it in sciences like physics and chemistry. Susan On 8 Mar 2015, at 05:35, j stollman < <mailto:stollman.j@gmail.com> stollman.j(a)gmail.com> wrote: Ever since Kim Cameron's Laws of Identity, the industry seems to gravitate towards the use of the term "Laws". But I think what this document really is is a specification of design requirements for a new system(s) capable of meeting the objectives stated in the introduction. I have no particular agita over these design requirements. But I feel that framing them properly as design requirements, rather than laws, offers flexibility to design alternative systems that may select only a subset or explicitly violate one or more laws. At this early stage I prefer this flexibility to the immutable sound of "Laws." Jeff On Fri, Mar 6, 2015 at 8:57 PM, Salvatore D'Agostino < <mailto:sal@idmachines.com> sal(a)idmachines.com> wrote: Here is the link I mentioned, we also have a twitter handle for the group of @irmwg and use the same for a hashtag #irmwg. <https://kantarainitiative.org/wp-content/uploads/2015/03/Kantara-Initiative -IRM-Laws-of-Relationship-Final-Report-v1.0.pdf> https://kantarainitiative.org/wp-content/uploads/2015/03/Kantara-Initiative- IRM-Laws-of-Relationship-Final-Report-v1.0.pdf Other Kantara reports are here: <https://kantarainitiative.org/reports-recommendations/> https://kantarainitiative.org/reports-recommendations/ Enjoy the weekend. Sal Salvatore D'Agostino IDmachines LLC 1264 Beacon Street, #5 Brookline, MA 02446 USA <http://www.idmachines.com/> http://www.idmachines.com <http://idmachines.blogspot.com/> http://idmachines.blogspot.com @idmachines <tel:%2B1%20617.201.4809> +1 617.201.4809 ph <tel:%2B1%20617.812.6495> +1 617.812.6495 fax _______________________________________________ DG-IDoT mailing list <mailto:DG-IDoT@kantarainitiative.org> DG-IDoT(a)kantarainitiative.org <http://kantarainitiative.org/mailman/listinfo/dg-idot> http://kantarainitiative.org/mailman/listinfo/dg-idot -- Jeff Stollman <mailto:stollman.j@gmail.com> stollman.j(a)gmail.com 1 202.683.8699 Truth never triumphs - its opponents just die out. Science advances one funeral at a time. Max Planck _______________________________________________ DG-IDoT mailing list <mailto:DG-IDoT@kantarainitiative.org> DG-IDoT(a)kantarainitiative.org <http://kantarainitiative.org/mailman/listinfo/dg-idot> http://kantarainitiative.org/mailman/listinfo/dg-idot _______________________________________________ WG-IRM mailing list <mailto:WG-IRM@kantarainitiative.org> WG-IRM(a)kantarainitiative.org <http://kantarainitiative.org/mailman/listinfo/wg-irm> http://kantarainitiative.org/mailman/listinfo/wg-irm

1 0

Re: [DG-IDoT] [WG-IRM] Laws of Relationships
by Salvatore D'Agostino 09 Mar '15

09 Mar '15

Noted. Thanks Robin. From: Robin Wilton [mailto:wilton@isoc.org] Sent: Monday, March 09, 2015 6:12 AM To: Salvatore D'Agostino Cc: Susan Morrow; j stollman; wg-irm(a)kantarainitiative.org; dg-idot(a)kantarainitiative.org Subject: Re: [WG-IRM] [DG-IDoT] Laws of Relationships As someone who attacked Kim's Laws for the hubris of the label, I share the concern. An alternative might be "Principles". R Robin Wilton Technical Outreach Director - Identity and Privacy Internet Society email: wilton(a)isoc.org Phone: +44 705 005 2931 Twitter: @futureidentity On 8 Mar 2015, at 16:21, Salvatore D'Agostino <sal(a)idmachines.com> wrote: Yes, don't disagree but I don't think that is where the title is coming from. I think the whole point was to play off of Kim's "Laws" and say there are new ones in play. There is a certain ring to laws and benefits in terms of capturing audience. It probably gets more attention than Design Requirements for Relationship Management. This is an initial work and of even more interest to me is the mutability of the requirements as a topic in play as opposed to the title of the document as a whole. One of the things we may find is that the permutations of relationships mean that even laws/requirements may need a bit of if, then. Among our next steps is taking the document apart, ideally law by law but overall is fine too as we look to reconstitute the "laws". We can put this in play on Tuesday, will get an agenda out and look forward to getting together then. Don't forget to follow @irmwg and join the linkedin group and contribute to the conversation there as well. Good balance of the weekend to all, Sal From: Susan Morrow [ <mailto:susan.morrow@avocosecure.com> mailto:susan.morrow@avocosecure.com] Sent: Sunday, March 08, 2015 1:56 AM To: j stollman Cc: Salvatore D'Agostino; <mailto:dg-idot@kantarainitiative.org> dg-idot(a)kantarainitiative.org Subject: Re: [DG-IDoT] Laws of Relationships I agree with you Jeff and brought up the same issue about being immutable. It also precludes the acceptance of fuzziness in relationships too. I suppose the use of the word 'law' in technology has a different meaning than the use of it in sciences like physics and chemistry. Susan On 8 Mar 2015, at 05:35, j stollman < <mailto:stollman.j@gmail.com> stollman.j(a)gmail.com> wrote: Ever since Kim Cameron's Laws of Identity, the industry seems to gravitate towards the use of the term "Laws". But I think what this document really is is a specification of design requirements for a new system(s) capable of meeting the objectives stated in the introduction. I have no particular agita over these design requirements. But I feel that framing them properly as design requirements, rather than laws, offers flexibility to design alternative systems that may select only a subset or explicitly violate one or more laws. At this early stage I prefer this flexibility to the immutable sound of "Laws." Jeff On Fri, Mar 6, 2015 at 8:57 PM, Salvatore D'Agostino < <mailto:sal@idmachines.com> sal(a)idmachines.com> wrote: Here is the link I mentioned, we also have a twitter handle for the group of @irmwg and use the same for a hashtag #irmwg. <https://kantarainitiative.org/wp-content/uploads/2015/03/Kantara-Initiative -IRM-Laws-of-Relationship-Final-Report-v1.0.pdf> https://kantarainitiative.org/wp-content/uploads/2015/03/Kantara-Initiative- IRM-Laws-of-Relationship-Final-Report-v1.0.pdf Other Kantara reports are here: <https://kantarainitiative.org/reports-recommendations/> https://kantarainitiative.org/reports-recommendations/ Enjoy the weekend. Sal Salvatore D'Agostino IDmachines LLC 1264 Beacon Street, #5 Brookline, MA 02446 USA <http://www.idmachines.com/> http://www.idmachines.com <http://idmachines.blogspot.com/> http://idmachines.blogspot.com @idmachines <tel:%2B1%20617.201.4809> +1 617.201.4809 ph <tel:%2B1%20617.812.6495> +1 617.812.6495 fax _______________________________________________ DG-IDoT mailing list <mailto:DG-IDoT@kantarainitiative.org> DG-IDoT(a)kantarainitiative.org <http://kantarainitiative.org/mailman/listinfo/dg-idot> http://kantarainitiative.org/mailman/listinfo/dg-idot -- Jeff Stollman <mailto:stollman.j@gmail.com> stollman.j(a)gmail.com 1 202.683.8699 Truth never triumphs - its opponents just die out. Science advances one funeral at a time. Max Planck _______________________________________________ DG-IDoT mailing list <mailto:DG-IDoT@kantarainitiative.org> DG-IDoT(a)kantarainitiative.org <http://kantarainitiative.org/mailman/listinfo/dg-idot> http://kantarainitiative.org/mailman/listinfo/dg-idot _______________________________________________ WG-IRM mailing list <mailto:WG-IRM@kantarainitiative.org> WG-IRM(a)kantarainitiative.org <http://kantarainitiative.org/mailman/listinfo/wg-irm> http://kantarainitiative.org/mailman/listinfo/wg-irm

1 0

Laws of Relationships
by Salvatore D'Agostino 08 Mar '15

08 Mar '15

Here is the link I mentioned, we also have a twitter handle for the group of @irmwg and use the same for a hashtag #irmwg. https://kantarainitiative.org/wp-content/uploads/2015/03/Kantara-Initiative- IRM-Laws-of-Relationship-Final-Report-v1.0.pdf Other Kantara reports are here: https://kantarainitiative.org/reports-recommendations/ Enjoy the weekend. Sal Salvatore D'Agostino IDmachines LLC 1264 Beacon Street, #5 Brookline, MA 02446 USA http://www.idmachines.com <http://www.idmachines.com/> http://idmachines.blogspot.com <http://idmachines.blogspot.com/> @idmachines +1 617.201.4809 ph +1 617.812.6495 fax

3 3

IDoT DG TeleCon
by Ingo.Friese＠telekom.de 06 Mar '15

06 Mar '15

Dear All, I hope you are all doing well. I'd like to remind you that our next IDoT-call is coming up today. I'm looking forward to talking to you! Best regards, Ingo Date and Time * Friday, March 6th, at 7am PT (time chart)<http://www.timeanddate.com/worldclock/fixedtime.html?msg=IDoT+Conf+Call&iso…> * Voice: Skype: +99051000000481 or US +1-805-309-2350 / Alternate Toll +1 (714) 551-9842 (international dial-in lines<http://kantarainitiative.org/confluence/x/KYC_/>), room code 613-2898# * (Turbobridge call options<https://www.turbobridge.com/join.html>) Kind regards Ingo Friese Deutsche Telekom AG T-Labs (Research & Innovation) Dipl.-Ing. Ingo Friese Winterfeldtstr. 21, 10781 Berlin +4930835358148 (Phone) +49391580216849 (Fax) E-Mail: ingo.friese(a)telekom.de<mailto:ingo.friese@telekom.de> www.telekom.com<http://www.telekom.com/> Life is for sharing. DEUTSCHE TELEKOM AG Supervisory Board: Prof. Dr. Ulrich Lehner (Chairman) Board of Management: René Obermann (Chairman), Reinhard Clemens, Niek Jan van Damme, Timotheus Höttges, Dr. Thomas Kremer, Claudia Nemat, Prof. Dr. Marion Schick Commercial register: Amtsgericht Bonn HRB 6794 Registered office: Bonn Big changes start small - conserve resources by not printing every e-mail.

1 0

ieee iot study
by Salvatore D'Agostino 24 Feb '15

24 Feb '15

http://standards.ieee.org/innovate/iot/study.html b/r Sal

2 1

TeleCon 2015-02-20 minutes of the blockchain special
by Ingo.Friese＠telekom.de 23 Feb '15

23 Feb '15

Dear IDoT discussion group, Last Friday we had an excellent discussion about blockchains in IoT. Many thanks to Matteo Signorini and Ivan Klimek (both Excalibur). Keith was as friendly as to take minutes....or more precisely word-for-word minutes. This gives all interested parties the chance to read what was discussed in more detail. Thank you again Keith!!! http://kantarainitiative.org/confluence/pages/viewpage.action?pageId=725818… Our next regular Telco is coming up in 2 weeks time. Best Ingo Deutsche Telekom AG T-Labs (Research & Innovation) Dipl.-Ing. Ingo Friese Winterfeldtstr. 21, 10781 Berlin +4930835358148 (Phone) +49391580216849 (Fax) E-Mail: ingo.friese(a)telekom.de www.telekom.com<http://www.telekom.com/> Life is for sharing. DEUTSCHE TELEKOM AG Supervisory Board: Prof. Dr. Ulrich Lehner (Chairman) Board of Management: Timotheus Höttges (Chairman), Reinhard Clemens, Niek Jan van Damme, Thomas Dannenfeldt, Dr. Thomas Kremer, Claudia Nemat Commercial register: Amtsgericht Bonn HRB 6794 Registered office: Bonn Big changes start small - conserve resources by not printing every e-mail.

1 0