Subject: [Ecrit] RE: [Geopriv] Not-so-grand compromise on how to do endpointcentricLCPwithout giving away the store

From: "Winterbottom, James" <[email-masked]>
Date: Sat, 14 Apr 2007 19:00:37 -0500

It is also not clear to me exactly who would do the encryption in this
case?
Would it be the ISP?
Would it be the ASP?

If it is the ISP, who is potentially national, that would be about 6000
keys just for the USA.

I like this solution less than Brian/Barbara's and I think it is
probably more problematic.

Cheers
James

> -----Original Message-----
> From: Marc Berryman [mailto:[email-masked]]
> Sent: Friday, 13 April 2007 9:42 PM
> To: Alexander Mayrhofer; Rosen, Brian; [email-masked]
> Cc: [email-masked]
> Subject: RE: [Geopriv] Not-so-grand compromise on how to do
> endpointcentricLCPwithout giving away the store
> 
> Location-by-value with public encryption key
> You would also have to consider when the calls are re-routed to a
> different location and, oops, someone forgot to update or include the
> key.
> 
> Marc B
> 
> Marc B
> 
> 
> -----Original Message-----
> From: Alexander Mayrhofer [mailto:[email-masked]]
> Sent: Friday, April 13, 2007 6:34 AM
> To: Rosen, Brian; [email-masked]
> Cc: [email-masked]
> Subject: RE: [Geopriv] Not-so-grand compromise on how to do endpoint
> centricLCPwithout giving away the store
> 
> > So, I think Barbara Stark first described this, and it needs
> > some work,
> > but suppose that, as an option, an access network could supply:
> >
> > 1. A reference to location
> >
> > 2. The results of a LoST query on the location value (viz,
> > PSAP URI and
> > local dialstring)
> 
> Hi,
> 
> Without wanting to stir anything up (and, granted, without having
> followed the discussion very closely), a third option comes to my
mind:
> 
> Location-by-value, encrypted by the access network with a public key
> corresponding to the desired application of the location data?
> 
> eg. for emergency services:
> 
> - PSAPs supply a public key for location encryption within their
> coverage area (would need to be one key per area, though)
> - Access providers serving a certain area would encrypt location
> information with that key
> - Location information could be decrypted only by the PSAPs which the
> corresponding private key
> 
> (hence, would be useless for Joe's Pizza Delivery Services, or <insert
> favourite name here>'s location advertisement service)
> 
> I would definitely like to avoid any overengineering here, though -
that
> is just a very rough idea i would like to share. Especially for
> emergency services though, i am a little scared about information not
> readable in case of catastrophic situations (imagining the frustration
> of a PSAP agent looking at an encrypted location while handling the
> call...)
> 
> any comments appreciated (including flames  :).
> 
> Alex
> 
> _______________________________________________
> Geopriv mailing list
> [email-masked]
> https://www1.ietf.org/mailman/listinfo/geopriv
> 
> 
> 
> _______________________________________________
> Geopriv mailing list
> [email-masked]
> https://www1.ietf.org/mailman/listinfo/geopriv

------------------------------------------------------------------------------------------------
This message is for the designated recipient only and may
contain privileged, proprietary, or otherwise private information.  
If you have received it in error, please notify the sender
immediately and delete the original.  Any unauthorized use of
this email is prohibited.
------------------------------------------------------------------------------------------------
[mf2]

_______________________________________________
Ecrit mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ecrit