Subject: nasreq New Criteria Draft

From: "Beadles, Mark A." <[email-masked]>
Date: Wed, 6 Oct 1999 11:07:13 -0400

I have posted draft-ietf-nasreq-criteria-02.txt, attached.  This is the
latest version of the NAS Requirements document.  There are some significant
changes from the last version, so please read it carefully.

--------------------

Change log:

-Incorporated items from Glen Zorn's YAAP document.
-Incorporated items from Dave Mitton's RADIUS Practices document.
-Incorporated various comments from the WG.
-Organizational changes: 
 * more granularity in section numbering
 * separation of protocol requirements, attribute requirements, and security
requirements

--------------------

Here is a condensed outline of the AAA requirements from this document:

     8.  AAA Protocol Requirements
     8.1.  General protocol characteristics
     8.1.1.  Transport Requirements
     8.1.2.  Attribute-Value Protocol Model
     8.1.3.  Security Requirements
     8.2.  Authentication and User Security Requirements
     8.2.1.  Authentication protocol requirements
     8.2.2.  Authentication Attribute Requirements
     8.2.3.  Authentication Protocol Security Requirements
     8.3.  Authorization, Policy, and Resource management
     8.3.1.  Authorization Protocol Requirements
     8.3.2.  Authorization Attribute Requirements
     8.3.3.  Authorization Protocol Security Requirements
     8.4.  Accounting and Auditing Requirements
     8.4.1.  Accounting Protocol Requirements
     8.4.2.  Accounting attribute requirements
     8.4.3.  Accounting Protocol Security Requirements

And for the masochists among you, here is a complete outline of the
document:

     1.  Status of this Memo
     2.  Copyright Statement
     3.  Abstract
     4.  Requirements language
     5.  Introduction
     6.  Access Protocol Requirements
     7.  Network Protocol Requirements
     8.  AAA Protocol Requirements
     8.1.  General protocol characteristics
     8.1.1.  Transport requirements
     8.1.1.1.  Transport independence
     8.1.1.2.  Long-term exchange of small packets
     8.1.1.3.  Support for multiple AAA servers
     8.1.1.4.  Support for Multiple Administrative Domains
     8.1.2.  Attribute-Value Protocol Model
     8.1.2.1.  Attribute Data Types
     8.1.2.2.  Minimum Set of Attributes
     8.1.2.3.  Attribute Extensibility
     8.1.3.  Security Requirements
     8.1.3.1.  Mutual Authentication
     8.1.3.2.  Shared Secrets
     8.1.3.3.  Public Key Security
     8.1.3.4.  Encryption of Attributes
     8.2.  Authentication and User Security Requirements
     8.2.1.  Authentication protocol requirements
     8.2.1.1.  Bi-directional Authentication
     8.2.1.2.  Dynamic Authentication
     8.2.1.3.  Multi-phase Authentication
     8.2.1.4.  Extensible Authentication Types
     8.2.2.  Authentication Attribute Requirements
     8.2.2.1.  PPP Authentication protocols
     8.2.2.2.  User Identification
     8.2.2.3.  Authentication Credentials
     8.2.3.  Authentication Protocol Security Requirements
     8.2.3.1.  End-to-End Hiding of Credentials
     8.3.  Authorization, Policy, and Resource management
     8.3.1.  Authorization Protocol Requirements
     8.3.1.1.  Dynamic Authorization
     8.3.1.2.  Resource Management
     8.3.2.  Authorization Attribute Requirements
     8.3.2.1.  Authorization Attribute Requirements - Access Restrictions
     8.3.2.2.  Authorization Attribute Requirements - Authorization Profiles
     8.3.2.3.  Resource Management Requirements
     8.3.3.  Authorization Protocol Security Requirements
     8.3.3.1.  Security of Compulsory Tunnel Credentials
     8.4.  Accounting and Auditing Requirements
     8.4.1.  Accounting Protocol Requirements
     8.4.1.1.  Guaranteed Delivery
     8.4.1.2.  Real Time Accounting
     8.4.1.3.  Batch Accounting
     8.4.1.4.  Accounting Time Stamps
     8.4.1.5.  Accounting Events
     8.4.1.6.  On-demand Accounting
     8.4.2.  Accounting attribute requirements
     8.4.3.  Accounting Protocol Security Requirements
     8.4.3.1.  Integrity and Confidentiality
     8.4.3.2.  Non-repudiation
     9.  Device Management Protocols
     10.  Acknowledgments
     11.  Security considerations
     12.  IANA Considerations
     13.  References
     14.  Author's Address
     15.  Full Copyright Statement
     16.  Expiration Date

 <<draft-ietf-nasreq-criteria-02.txt>> 

+ Mark Anthony Beadles + Co-chair, IETF NASREQ WG   + 
+  [email-masked]   + http://nasreq.rutgers.edu/ +
+  Voice 614.723.1941  +       Fax 614.723.8407     +

---

From: [email-masked] (Patrice Calhoun)
Date: Wed, 6 Oct 1999 09:39:17 -0700

I'll be having a look today, but I would like to understand the intent of
the document. Is this supposed to be requirements for the AAA WG? If so,
is there any way that the AAA-specific requirements be split up into a separate
document?

PatC

---

From: [email-masked] (Patrice Calhoun)
Date: Wed, 6 Oct 1999 09:47:20 -0700

Ignore the previous comment. The document really only concentrates on AAA.

Sorry for the confusion. Should have looked at the doc before sending the
mail.

PatC