Thursday, September 17, 2009

Re: [Geopriv] LCP & Arch....

I guess we are only discussing terminology here (and most people outside the GEOPRIV working group very likely have no interest in any of these discussions nor the outcome).
 
So, some time ago we defined the term LCP in a quite loose way when we worked on the L7 LCP topic.
The goal was to have some "label" for referring to protocols (DHCP,HELD,LLDP-MED,..) that provide the Device with its own location information.
 
Marc, what should we do to have a single term for these protocols that is still meaningful and does not cause heartburn in the DHCP vs. HELD camp? 
 
Ciao
Hannes
 
PS: I noticed that it might be useful to re-read the draft http://www.ietf.org/id/draft-ietf-geopriv-l7-lcp-ps-10.txt regarding the terms 'Device' vs. 'Target'...


From: geopriv-bounces@ietf.org [mailto:geopriv-bounces@ietf.org] On Behalf Of ext Marc Linsner
Sent: 16 September, 2009 23:52
To: GEOPRIV
Subject: [Geopriv] LCP & Arch....

To add more to my rant about LCP on the interim meeting call yesterday.....

LCP is an aberration of the GeoPriv architecture.  Early on, the GeoPriv work group agreed to allow LCP based on the fact the underlying communication protocol would ensure the LCI provided belonged to the recipient.  Hence, no work required at the LS/LIS to verify that the requester is the target.  It was never agreed that LCP was a ‘function’ that GeoPriv would provide, but LCP is simply an aberration that shares the baggage associated with the GeoPriv Privacy architecture with a communication protocol that can provide the guarantees as described.

Hence, we have created 2 LCP solutions, DHCP and (baseline) HELD.   Both these mechanisms protect the privacy of the location data as they guarantee that the target is the recipient.  Any mechanism where the communication protocol cannot provide this guarantee MUST be considered ‘not an LCP’ and follow the whole GeoPriv privacy/security architecture (policy set by rulemaker, enforced by LS/LIS, etc.).  

My hope is to dispel the myth that LCP is a ‘right’ that target has to gain access to it’s own location data and GeoPriv must deliver on this ‘right’ at all costs.  The overall privacy/security architecture must still be followed when a target is discovering it’s own location (trust relationships, identity verification, rule-based policy, etc.).

-Marc-