Tuesday, October 27, 2009

Re: [Ecrit] FW: [Geopriv] Winterbottom-ecrit-direct considered

Hi James,

It is not unauthenticated, the device must have access to an Internet feed, and that feed is always registered or authenticated in some fashion.

One of the key proposals of this draft is that the calling device, and please do not think phone, think computing device (which might be a game console) does register with the ESRP. This relatively short-term registration is the way in which call-back is attained. The registration can also be used by the ESRP to check that the caller is in fact in the calling domain of the PSAP or at a minimum where the point of presence in the access network is.

So in short answer to your question James, in the expanding Universe of NG Emergency Service solutions.

Cheers
James

> -----Original Message-----
> From: James M. Polk [mailto:jmpolk@cisco.com]
> Sent: Wednesday, 28 October 2009 4:49 AM
> To: Winterbottom, James
> Cc: ecrit@ietf.org
> Subject: Re: [Ecrit] FW: [Geopriv] Winterbottom-ecrit-direct considered
>
> James
>
> I'd like to focus on this point below.
>
> At what point did an ESRP become a SIP registrar (for unauthenticated
> UAs to register to when they don't register to any other registrar in
> any domain in the <what>... universe)?
>
> James
>
> At 08:02 AM 10/27/2009, Marc Linsner wrote:
> ><snip>
> >
> >[Don't take this as my endorsement of the draft, as I'm not sure I agree
> >with UAs registering with the ESRP.]
> >
> >-Marc-
> >
> >
> >On 10/26/09 8:59 PM, "Brian Rosen" <br@brianrosen.net> wrote:
> >
> > > First of all, I put it on the wrong email list, sorry about that.
> > >
> > > Then, we have carefully arranged it so that there is no identity
> > coming from
> > > the access network provider, and because the location is coming from
> that
> > > provider, we really don't want to. But even if we did, we would need
> a
> > > really good identifier, and there isn't one.
> > >
> > > The problem we have with -direct is anonymous callers, and if they
> have any
> > > option, they would also be location-less. Until and unless we get rid
> of
> > > anonymity, we can't encourage service provider-less calls. The draft
> does
> > > not make any provision to provide any kind of identity. Many networks
> > > (think free wifi for example) would make providing good identity
> difficult.
> > >
> > > The fact is that there is a SERVICE provider in nearly all of the
> > > communications systems. The SERVICE provider is in a position to
> assist
> > > the emergency calling system when it needs more information. That's
> what a
> > > good SERVICE provider does. Cutting them out is not a great idea.
> Most of
> > > the attempts to provide real time communications between people
> > have evolved
> > > to using service providers, even when there were alternatives. File
> > > transfer via something like Torrent is a counterexample (which isn't
> real
> > > time), but even there, you end up with service providers like The
> > Pirate Bay
> > > (R.I.P) to provide introduction services. I don't think we're going
> to see
> > > changes that eliminate service providers, and in this case, they
> provide
> > > value to the emergency calling systems. All of the emergency
> professionals
> > > I know have issues with service providers, but they would react with
> horror
> > > if you suggested cutting them out. Ask them, please.
> > >
> > > So, I claim you have a solution in search of a problem. We have
> solved the
> > > "calling network isn't the access network" problem already. Service
> > > providers ARE in the path now, in nearly every case (in fact a counter
> > > example escapes me, although there probably are some). There is
> > no movement
> > > I can detect which would change that any time soon; quite the
> opposite. We
> > > have a known killer problem without some kind of subscription to a
> service
> > > that provides a good identity, for which you provide no answers. We
> have
> > > experience with the killer problem: sim-less calling was supposed
> > to provide
> > > a way to make an emergency call in exactly the kinds of circumstances
> you
> > > are describing. Our real world experience is that you create a
> > huge problem
> > > that diverts resources from helping people to chasing scammers and
> > > flea-market sellers.
> > >
> > > Nothing is perfect: you can get a AIM screen name without a very good
> > > identity for example. However, the notion that we're going to provide
> > > direct access without a service provider deliberately, especially
> without
> > > really good identity from the access network is, in my opinion not
> only a
> > > no, it's a heck no. I'll line up as many emergency service
> > professionals as
> > > you would like to tell you this is a harmful idea.
> > >
> > >
> > >
> > >
> > >
> > >
> > > On 10/26/09 7:56 PM, "Dawson, Martin" <Martin.Dawson@andrew.com>
> wrote:
> > >
> > >> I am glad this has come up. It's a debate that has to happen if we
> are to
> > >> move
> > >> beyond a long standing legacy misconception.
> > >>
> > >> In the circuit service world - whether it was POTS or mobile, the
> access
> > >> network had full responsibility for delivering the emergency call. In
> that
> > >> world, routing an emergency call meant getting a circuit
> > established to the
> > >> correct call center. In most parts of the world, this was done using
> the
> > >> regional part of the PSTN to switch the circuit to a call center
> > on the PSTN.
> > >> In some jurisdictions, such as the US, it was done directly from the
> local
> > >> exchange carrier to the call center. Either way, there was no third
> party
> > >> involved.
> > >>
> > >> Now we have the Internet. We still have public access network
> > providers. They
> > >> switch packets onto the Internet for their subscribers. They can
> similarly
> > >> ensure that packets reach the local emergency call centers.
> > >>
> > >> The fact is that there was no equivalent of a VSP in the traditional
> > >> environment. VoIP is a presence service, and it had no common
> > equivalent in
> > >> the PSTN world. It could have, but the narrowband state of
> > technology and the
> > >> common market use cases didn't support its development. By the time
> ISDN
> > >> arrived, the PSTN had already slipped into its palliative stage
> without
> > >> realizing it.
> > >>
> > >> It's an entrenched misconception that because the circuit
> > service provided by
> > >> exchange carriers was most commonly used for "voice" (but, it should
> be
> > >> noted,
> > >> also for fax, telex, tty, security system monitoring and, even,
> > IP data) that
> > >> VSPs are somehow equivalent to exchange carriers. They are not.
> > >>
> > >> Indeed, involving VSPs in emergency calls is the Internet equivalent
> of
> > >> involving long distance providers in POTS emergency calls. They
> > are neither
> > >> necessary nor particularly helpful; they can't be guaranteed to
> > be within the
> > >> emergency jurisdiction; depending on them actually diminishes
> > the efficacy of
> > >> emergency service access. It does not help the caller, the
> > emergency service,
> > >> nor the third party to insist on the third party's involvement.
> > >>
> > >> It can't be helped if you have over sold the benefits of VSP
> > involvement to
> > >> yourself and others Brian. It is time to have a reasoned debate. From
> my
> > >> perspective, the argument that there is no "subscription" involved is
> > >> patently
> > >> false. There has to be a subscription of some description in
> > order to get to
> > >> the Internet. Yes, there is free public Internet access (just as
> there are
> > >> free courtesy phones on the PSTN and free access to emergency
> > services from
> > >> pay phones. All these services are still connected to the public
> Internet
> > >> infrastructure and they all represent an "operator" with some level
> of
> > >> information about the caller.
> > >>
> > >> With the over-emphasis on VSPs, what is missing from the ECRIT
> > and i3 models
> > >> is the direct interface for querying the access network for
> > subscriber data
> > >> (should it prove necessary). These models need to take the long
> > view of how
> > >> emergency calling is done in the Internet age; they should not
> > be protracting
> > >> an unnecessary reliance on VSPs.
> > >>
> > >> I have deleted the premature and prejudicial text from the
> > subject heading.
> > >> And I'll leave this on ECRIT as the most appropriate WG.
> > >>
> > >> Cheers,
> > >> Martin
> > >>
> > >> -----Original Message-----
> > >> From: ecrit-bounces@ietf.org [mailto:ecrit-bounces@ietf.org] On
> Behalf Of
> > >> Hannes Tschofenig
> > >> Sent: Tuesday, 27 October 2009 8:23 AM
> > >> To: ecrit@ietf.org
> > >> Subject: [Ecrit] FW: [Geopriv] Winterbottom-ecrit-direct
> > considered harmful,
> > >> at least given our current experiences
> > >>
> > >> FYI: feedback from Brian regarding a recent ECRIT contribution.
> > >>
> > >>> -----Original Message-----
> > >>> From: geopriv-bounces@ietf.org
> > >>> [mailto:geopriv-bounces@ietf.org] On Behalf Of Rosen, Brian
> > >>> Sent: 26 October, 2009 23:10
> > >>> To: geopriv@ietf.org
> > >>> Subject: [Geopriv] Winterbottom-ecrit-direct considered
> > >>> harmful, at least given our current experiences
> > >>>
> > >>> The notion behind -direct is to not use a service provider to
> > >>> place an emergency call. Instead, the device registers with
> > >>> an Emergency Services Routing Proxy immediately before the
> > >>> call and the call is routed directly from the device to the ESRP.
> > >>>
> > >>> At least at the moment, this is an exceedingly bad idea.
> > >>>
> > >>> Emergency calling authorities like service providers, a lot.
> > >>> They like them because they can hold them accountable, and the
> > >>> service providers don't like theft of service, which is
> > >>> something the emergency call guys have an analog to.
> > >>>
> > >>> The facts are that where unaccountable access to emergency
> > >>> calling is allowed, huge numbers of false calls occur, with no
> > >>> way to stop them, and no way to tell the good ones from the
> > >>> bad ones. This has been seen multiple times where so called
> > >>> "simless" or "unauthenticated" calls are allowed.
> > >>>
> > >>> -direct precisely duplicates simless calling. The only
> > >>> "registration" is an emergency registration, only emergency
> > >>> calls are allowed, any device can make an emergency call if
> > >>> all it has is a (radio) connection to any network.
> > >>> We can predict, with a very high degree of certainty, that the
> > >>> feature will be horribly abused: for example to test that a
> > >>> phone without a service plan works.
> > >>>
> > >>> There have been studies which show tens of thousands of bad
> > >>> calls with zero good ones. Nearly every authority I know
> > >>> where the regulator has insisted on simless calling wants it
> > >>> repealed. There is one counter example I know where the fact
> > >>> that they got a couple, literally, of good calls among the
> > >>> tens of thousands of bad calls was considered enough reason to
> > >>> put up with the problem.
> > >>>
> > >>> Service providers give us information that may be useful: a
> > >>> subscriber name and address for example, which is not
> > >>> spoofable by the caller. They have ways to trace callers,
> > >>> especially bad callers. They don't want their systems abused
> > >>> any more than the emergency calling authorities do.
> > >>>
> > >>> This is a bad idea. A very bad idea. Please stop it.
> > >>>
> > >>> Someday, we may have better ways to prevent abuse. Until we
> > >>> do, service providers are a good thing on an emergency call.
> > >>> We don't want them cut out.
> > >>>
> > >>> Brian
> > >>>
> > >>> _______________________________________________
> > >>> Geopriv mailing list
> > >>> Geopriv@ietf.org
> > >>> https://www.ietf.org/mailman/listinfo/geopriv
> > >>>
> > >>
> > >> _______________________________________________
> > >> Ecrit mailing list
> > >> Ecrit@ietf.org
> > >> https://www.ietf.org/mailman/listinfo/ecrit
> > >>
> > >> _______________________________________________
> > >> Ecrit mailing list
> > >> Ecrit@ietf.org
> > >> https://www.ietf.org/mailman/listinfo/ecrit
> > >
> > >
> > > _______________________________________________
> > > Ecrit mailing list
> > > Ecrit@ietf.org
> > > https://www.ietf.org/mailman/listinfo/ecrit
> >
> >
> >_______________________________________________
> >Ecrit mailing list
> >Ecrit@ietf.org
> >https://www.ietf.org/mailman/listinfo/ecrit
>

_______________________________________________
Ecrit mailing list
Ecrit@ietf.org
https://www.ietf.org/mailman/listinfo/ecrit