privecsg-14-0007-01-ecsg

1

IEEE 802 EC Privacy Recommendation Study Group

Update to 802 WGs @ Sept Interim meetings

2014-09-08Juan Carlos Zuniga, InterDigital Labs

(EC SG Chair)

privecsg-14-0007-01-ecsg

2

Agenda

• EC SG Background– Tutorial Summary– Group’s background and scope– Call for proposals– Progress – conf call, attendees, list, etc– Trial history, details and plans– Timeline– Resources– Q&A

privecsg-14-0007-01-ecsg

3

IEEE 802 Internet Privacy Tutorial• IEEE 802 Plenary Meeting

– San Diego, July 14th 2014• Title:

– Pervasive Surveillance of the Internet – Designing Privacy into Internet Protocols

• Speakers– Ted Hardie (IETF IAB)– Alissa Cooper (Cisco Systems)– Lily Chen (NIST)– Piers O’Hanlon (Oxford Internet Institute)– Juan Carlos Zuniga (InterDigital Labs)

privecsg-14-0007-01-ecsg

4

IEEE 802 Internet Privacy Tutorial - Summary

• The Tutorial provided an update on the recent concerns about Internet privacy, the actions that IETF is taking, and the guidelines that are being followed when developing new specifications (e.g. RFC 6973)

• Highlighted Privacy concerns applicable specifically to Link Layer technologies, and provided suggestions on how IEEE 802 can help addressing them

• The idea of developing an IEEE 802 recommended practices document, similar to the one produced by IETF (RFC 6973 - Privacy Considerations for Internet Protocols) was suggested and supported by several IEEE 802 members from different WGs

privecsg-14-0007-01-ecsg

5

IEEE 802 EC Privacy SG – Background • Creation of an Executive Committee Study Group on

Privacy Recommendations (2014-07-18)– Juan Carlos Zuniga appointed as Chair of SG

• Chartered to run until November 2014 with an expectation of renewal through March 2015– Next IEEE 802 Plenary meeting in November 2014 –

San Antonio, TX

• Advancing work with teleconferences and email discussions

privecsg-14-0007-01-ecsg

6

IEEE 802 EC Privacy SG – Scope

The IEEE 802 Executive Committee (EC) Privacy Recommendation SG will study privacy issues related to IEEE 802 technologies and consider the need for a recommended practice applicable to IEEE 802 protocols. If such a need is identified, the SG will determine whether the IEEE 802 criteria for standards development (CSD) support the initiation of a project and, if so, it will prepare a PAR for consideration by the IEEE 802 Executive Committee.

privecsg-14-0007-01-ecsg

7

Call for Contributions

• Current topics being considered by SG include:

(1) Privacy Issues at Link Layer(2) Threat Model for Privacy at Link Layer(3) Proposals regarding functionalities in IEEE 802 protocols

to improve Privacy(4) Proposals regarding measuring levels of Privacy on

Internet protocols(5) Implications of MAC address changes(6) Other…

privecsg-14-0007-01-ecsg

88

Trial on IETF and IEEE meetings

• Suggestion to perform an opt-in trial on IETF and IEEE meetings networks to assess performance and implications of user’s MAC address randomization

– Similar to “ietf-v6ONLY” SSID

– Should assess implications on collisions, DHCP/ND states, router/bridge tables, etc.

– Details to be worked out…

privecsg-14-0007-01-ecsg

9

Technical Presentations

• Bluetooth LE/Smart/v4 Privacy• Piers O’Hanlon, Oxford Internet Institute,

University of Oxford– Static random addresses

• Initialised at power on– Private random addresses

• Non-Resolvable• Resolvable using a shared secret key

privecsg-14-0007-01-ecsg

10

Next Steps

• Priv Rec EC SG presentation to 802.1/802.3 WGs Interim meeting in Ottawa, Canada – Sept 8 and 9

• Priv Rec EC SG presentation to IEEE 802 Wireless WGs (802.11, 802.15, etc.) meeting in Athens, Greece – week of September 15

• Continue call for proposals to discuss technical topics

• Discuss the need and scope of a recommended practices document applicable to IEEE 802 protocols

privecsg-14-0007-01-ecsg

11

Upcoming EC SG meetings

• 1 October 2014 (10:00 AM ET), Teleconference• 22 October 2014 (10:00 AM ET), Teleconference• November 2-7, 2014, IEEE 802 Plenary meeting in

San Antonio, TX, USA• (other teleconferences TBD - if SG is renewed)• (March 8-13, 2015, IEEE 802 Plenary meeting in

Berlin, Germany - if SG is renewed)

privecsg-14-0007-01-ecsg

12

Resources

• EC SG Web Page– http://www.ieee802.org/PrivRecsg/

• Mailing list (reflector)– stds-802-privacy@listserv.ieee.org

• Mentor (document repository)– https://mentor.ieee.org/privecsg/documents

• RFC 6973 - Privacy Considerations for Internet Protocols– http://tools.ietf.org/html/rfc6973