13:05:57 RRSAgent has joined #wot-di 13:05:57 logging to http://www.w3.org/2015/08/27-wot-di-irc 13:06:06 Present+ Yingying_Chen 13:06:10 cabo has joined #wot-di 13:06:19 meeting: Discovery and Provisioning Task Force 13:06:26 scribenick: dsr 13:06:32 chair: Arne 13:07:48 present: Dave, Arne, Carsten, Frank, Louay, Yingying, Michael, ?? 13:08:51 agenda: https://lists.w3.org/Archives/Public/public-wot-ig/2015Aug/0072.html 13:09:00 rrsagent, set logs public 13:09:16 Arne summarises the agenda for today’s call 13:10:23 Task force wiki page: https://www.w3.org/WoT/IG/wiki/Discovery_TF 13:11:22 with more details in https://www.w3.org/WoT/IG/wiki/Discovery_Categories_and_Tech_Landscape 13:13:48 Arne requests feedback on the discovery landscape. 13:14:14 Louay: for directories, UPnP+ also offers some cloud based features. 13:15:15 Also see https://github.com/w3c/wot/blob/master/TF-DI/Interactions.md 13:16:40 Dave: we should add search based upon social networks and rich descriptions of the environment, e.g. buildings 13:17:28 This is essentially about semantic based discovery 13:18:03 Arne: yes, this isn’t present in the wiki as yet 13:18:46 Dave: there have been quite a few research papers on this … 13:19:36 It is related to directories, but we should consider this as an abstraction rather than focus directly on the API 13:19:51 Arne: any other mechanisms? [no] 13:20:07 Topic: Identification of Discovery Work Items 13:20:56 What is the plan for work on discovery? Arne asks for ideas. 13:21:35 Arne describes Soumya’s thoughts on this 13:21:44 regrets: Soumya 13:23:52 Dave: this task force was set up to cover discovery and provisioning, are we going to cover provisiioning in this task force or do we need a new task? 13:25:22 Michael: provisioning is a broad term, what do you mean? 13:27:01 Dave: the initial setting up of IoT devices and services, binding to network and security attributes, and later the process of applying security and other updates. 13:27:58 Arne: how does this relate to discovery as a work item? 13:28:43 Dave: we can cover discovery as one strand of work and provisioning as another, with use cases helping us to clarify how they are interconnected 13:29:12 Arne: let’s focus on the discovery work items right now 13:29:56 Louay: in designing a discovery API we need to pay careful attention to security and privacy 13:31:18 He summarises existing W3C work on network discovery and presentation API 13:31:57 Louay volunteers to give an overview of the presentation API in a future TF-DI call 13:33:00 Arne: we could have that in out next call 13:33:34 s/out/our/ 13:34:00 Topic: Joint work with Security and Privacy Task Force 13:34:05 Oliver joins the call 13:34:09 present+ Oliver 13:35:11 Louay_ has joined #wot-di 13:35:30 Presentation API: http://www.w3.org/TR/presentation-api/ 13:35:34 Oliver has joined #wot-di 13:37:50 https://www.w3.org/WoT/IG/wiki/Security,_Privacy_and_Resilience 13:38:32 We want to identify security and privacy requirements for the use cases across the WoT IG task forces. 13:39:46 We have a table we want to fill out on the page at https://www.w3.org/WoT/IG/wiki/Security%26Privacy_Requirements 13:40:27 https://www.w3.org/WoT/IG/wiki/Things_Discovery_Authorization 13:42:48 I’ve done some work analysing requirements emerging from that wiki page. 13:44:27 My finding was that so far you’ve mostly focused on securing the communication. There is some reference to authentication and access control, but not how to realise that. 13:44:41 michael has joined #wot-di 13:45:44 mickos01 has joined #wot-di 13:47:01 Oliver talks about OAuth and client registration 13:47:56 Authorisation for discovery is significant concern, but there isn’t a lot of prior art 13:49:41 Dave: this is less of an issue in home networks, but definitely becomes a big issue for cloud based discovery. 13:49:59 Oliver: authorisation as a basis for privacy 13:50:35 Carsten: there is definitely a problem to be addressed. 13:51:16 For the home, the security is given by the wifi password — an egg shell— this isn’t a good basis for strong security 13:51:58 … in the sense of once you’ve cracked the egg shell you have full access to discovery withing the home network 13:52:16 s/withing/within/ 13:53:12 Oliver invites people to provide input and encourages us to draw up some more detailed use cases that highlight security and privacy 13:55:42 We can then study these and prepare for the Sapporo face to face 13:56:11 Arne: this sounds really good, thanks for the work you’ve already done. 13:57:02 We should use the wiki to describe the security and privacy aspects for each of the discovery technologies 13:57:53 Arne ask for volunteers to help with this study? 13:58:15 Oliver: Soumya has previously indicated his interest in this 13:59:33 In the next call Oliver would like to discuss confidentiality and other requirements. 13:59:39 Arne: that sounds good 13:59:50 rrsagent, set logs public 13:59:59 Arne: any other business? 14:00:10 [no] 14:00:40 Next call in 2 weeks time 14:00:54 rrsagent, make minutes 14:00:54 I have made the request to generate http://www.w3.org/2015/08/27-wot-di-minutes.html dsr 14:01:18 scribe: Dave 14:01:25 rrsagent, make minutes 14:01:25 I have made the request to generate http://www.w3.org/2015/08/27-wot-di-minutes.html dsr 14:03:58 mickos01 has left #wot-di 14:21:49 cabo has joined #wot-di 14:25:30 cabo has joined #wot-di