RE: [802.21] Security SG: Scope issues

["Han James-CJH048" <CJH048@MOTOROLA.COM>]

Title: RE: [802.21] Security SG: Scope issues

Please, see my points below.

James

-----Original Message-----
From: Yoshihiro Ohba [mailto:yohba@TARI.TOSHIBA.COM]
Sent: Wednesday, December 12, 2007 11:19 AM
To: STDS-802-21@LISTSERV.IEEE.ORG
Subject: Re: [802.21] Security SG: Scope issues

Hi James,

Thanks for the response.  Two clarifications:

- This is discussion, not a SG vote.

- In addition to "yes" or "no" answers, more explanation on the answers is very much appreciated.

Thank you,
Yoshihiro Ohba

On Wed, Dec 12, 2007 at 10:27:14AM -0500, Han James-CJH048 wrote:
> Yoshi,
>
> The following is my vote.
>
> BR,
>
> James Han
>
> -----Original Message-----
> From: Yoshihiro Ohba [mailto:yohba@TARI.TOSHIBA.COM]
> Sent: Wednesday, December 12, 2007 9:37 AM
> To: STDS-802-21@LISTSERV.IEEE.ORG
> Subject: [802.21] Security SG: Scope issues
>
> In November meeting, we had a straw poll related to scope issues on
> SSOH (Security Signaling Optimization during Handover) problem.  The
> result
> was:
>
>   Support EAP: Yes(20)/No(0)
>   Support Non-EAP: Yes(10)/ No(7)
>   Support inter-technology handover: Yes(21)/No(0)
>
> We need more detailed discussion to make a decision.  Please state
> your opinion (as detailed as possible) on the scope-related issues
> listed below by next Security SG teleconference on December 18, 2007.
> If those issues are resolved, we will be in a good position to come to
> an agreement on PAR/5C in January!
>
> Issue 1: Should we support non-EAP in addition to EAP? Yes. If .21 supports HO between 802 and cellular. Typical use case is HO between WiFi hotspots and cellular, such as CDMA/UMTS. The WG may start to address security HO within 802 with EAP. Then it should address non-EPA in the second step.

>
> Issue 2: Should we support handover to/from non-802 networks in
> addition to handover within 802 networks? Yes. Please, see my coments above.
>
>
> Issue 3: Should we support inter-administrative-domain handover? Yes. It could be administrated by a single operator, such as, a public WiFi hotspot to and from WiMAX/cellular. It could also be controlled by two different operators with an agreement on HO.

>
>
> The definition of "administrative domain" is given below:
>
> "
> Administrative Domain
>
>   A collection of End Systems, Intermediate Systems, and
>   subnetworks operated by a single organization or administrative
>   authority.  The components which make up the domain are assumed
>   to interoperate with a significant degree of mutual trust among
>   themselves, but interoperate with other Administrative Domains
>   in a mutually suspicious manner.
>
>   Administrative Domains can be organized into a loose hierarchy
>   that reflects the availability and authoritativeness of
>   authentication and authorization information.  This hierarchy does
>   not imply administrative containment, nor does it imply a strict
>   tree topology.
> "
>
> Best Regards,
> Yoshihiro Ohba