privecsg-14-0021-01-ecsg

1

IEEE 802 EC Privacy Recommendation SG

802 Plenary MeetingNovember 3-7, 2014

Juan Carlos Zuniga, InterDigital Labs(EC SG Chair)

privecsg-14-0021-01-ecsg

2

Participants, Patents, and Duty to Inform

All participants in this meeting have certain obligations under the IEEE-SA Patent Policy. • Participants [Note: Quoted text excerpted from IEEE-SA Standards Board Bylaws

subclause 6.2]:– “Shall inform the IEEE (or cause the IEEE to be informed)” of the identity of each “holder of

any potential Essential Patent Claims of which they are personally aware” if the claims are owned or controlled by the participant or the entity the participant is from, employed by, or otherwise represents• “Personal awareness” means that the participant “is personally aware that the holder may have a

potential Essential Patent Claim,” even if the participant is not personally aware of the specific patents or patent claims

– “Should inform the IEEE (or cause the IEEE to be informed)” of the identity of “any other holders of such potential Essential Patent Claims” (that is, third parties that are not affiliated with the participant, with the participant’s employer, or with anyone else that the participant is from or otherwise represents)

• The above does not apply if the patent claim is already the subject of an Accepted Letter of Assurance that applies to the proposed standard(s) under consideration by this group

• Early identification of holders of potential Essential Patent Claims is strongly encouraged

• No duty to perform a patent search

privecsg-14-0021-01-ecsg

3

Patent Related Links

All participants should be familiar with their obligations under the IEEE-SA Policies & Procedures for standards development.• Patent Policy is stated in these sources:

– IEEE-SA Standards Boards Bylawshttp://standards.ieee.org/develop/policies/bylaws/sect6-7.html#6

– IEEE-SA Standards Board Operations Manualhttp://standards.ieee.org/develop/policies/opman/sect6.html#6.3

• Material about the patent policy is available at – http://standards.ieee.org/about/sasb/patcom/materials.html

• If you have questions, contact the IEEE-SA Standards Board Patent Committee Administrator at patcom@ieee.org or visit http://standards.ieee.org/about/sasb/patcom/index.html

• This slide set is available at https://development.standards.ieee.org/myproject/Public/mytools/mob/slideset.ppt

privecsg-14-0021-01-ecsg

4

Call for Potentially Essential Patents

• If anyone in this meeting is personally aware of the holder of any patent claims that are potentially essential to implementation of the proposed standard(s) under consideration by this group and that are not already the subject of an Accepted Letter of Assurance: – Either speak up now or– Provide the chair of this group with the identity of the holder(s) of any and all such claims as soon as possible or– Cause an LOA to be submitted

privecsg-14-0021-01-ecsg

5

Other Guidelines for IEEE WG MeetingsAll IEEE-SA standards meetings shall be conducted in compliance with all applicable laws, including antitrust and competition laws. • Don’t discuss the interpretation, validity, or essentiality of patents/patent claims. • Don’t discuss specific license rates, terms, or conditions.

– Relative costs, including licensing costs of essential patent claims, of different technical approaches may be discussed in standards development meetings. • Technical considerations remain primary focus

• Don’t discuss or engage in the fixing of product prices, allocation of customers, or division of sales markets.

• Don’t discuss the status or substance of ongoing or threatened litigation.• Don’t be silent if inappropriate topics are discussed … do formally object.

---------------------------------------------------------------

See IEEE-SA Standards Board Operations Manual, clause 5.3.10 and “Promoting Competition and Innovation: What You Need to Know about the IEEE Standards Association's Antitrust and Competition Policy” for more details.

privecsg-14-0021-01-ecsg

6

Resources – URLs

• L ink to IEEE Disc losure of Affiliation – http://standards.ieee.org /faqs/affiliationFAQ.html

• L inks to IEEE Antitrust Guidelines– http://standards.ieee.org /resources/antitrust- guidelines.pdf

• L ink to IEEE Code of Ethics– http://www.ieee.org /web/membership/ethics/code_ethics.html

• L ink to IEEE Patent Policy– http://standards.ieee.org /board/pat/pat-slideset.ppt

privecsg-14-0021-01-ecsg

7

November 2014 F2F Meeting

• Venue– Grand Hyatt San Antonio,

600 East Market Street, San Antonio, TX USA

• Sessions - Lone Star B meeting room, 2nd level– Tuesday, Nov 4th, 19:30 – 21:30– Thursday, Nov 6th, 19:30 – 21:30

privecsg-14-0021-01-ecsg

8

Agenda

• Welcome• Chair's slides

– IEEE Slides– Call meeting to order

• Group’s updates– 802c PAR update / comments to be submitted– EC Closing Report

• Technical Presentations– Separation of Access and Core Partitioning in the Local Space– Privacy Threat Model– IETF MAC Address Randomization Trial Status & Wiki Page

• Next Steps

privecsg-14-0021-01-ecsg

9

Business#1• Call Meeting to Order

– Meeting called to order by chair at 19:35• Call for secretary / Minutes taker

– Karen Randall / Joseph Levy• Roll Call

Name Affiliation Name Affiliation

Juan Carlos Zuniga (Chair)

InterDigital Piers O’Hanlon Oxford Internet Institute

Mathieu Cunche INRIA Walter Pienciak IEEE-SA

Antonio de la Oliva UC3M Karen Randall Randall-Consulting

Dan Harkins Aruba Networks Max Riegel NSN

Paul Lambert Marvell Dan Romascanu Avaya

Soo Bum Lee Qualcomm Rene Struik Struik Security Consultancy

Robert Moskowitz Verizon Brian Weis Cisco

privecsg-14-0021-01-ecsg

10

Business#2

• Agenda bashing–

• Approval of minutes– Oct 1 https://

mentor.ieee.org/privecsg/dcn/14/privecsg-14-0016-00-ecsg-minutes-of-ec-privacy-recommendation-sg-teleconference-october-1st-2014.docx

– Oct 22 https://mentor.ieee.org/privecsg/dcn/14/privecsg-14-0018-00-ecsg-minutes-of-ec-privacy-recommendation-sg-teleconference-october-22nd-2014.docx

• Reports– Group’s updates

• 802c PAR update / comments to be submitted• EC Closing Report

privecsg-14-0021-01-ecsg

11

IEEE 802c PAR• Amendment to IEEE Standard 802-2014• Local address space usage recommendations and rules

• PAR: http://www.ieee802.org/1/files/public/docs2014/new-addresses-thaler-local-address-par-v01.pdf

• CSD: http://www.ieee802.org/1/files/public/docs2014/new-addresses-thaler-local-address-csd-v01.pdf

– Comments from Privacy EC SG to 802.1 about 802c PAR compiled and submitted: https://mentor.ieee.org/privecsg/dcn/14/privecsg-14-0022-01-ecsg-comments-to-802c-par-csd.pptx

privecsg-14-0021-01-ecsg

12

IEEE 802 EC Closing Report• Report from IEEE EC Privacy Recommendation SG to

802 Executive Committee – Should the EC Privacy SG work on a PAR/CSD for

submission 30 days before the March 2015 meeting?

– Schedule to submit PAR/CSD 30 days before Plenary meeting (e.g. by 4 February 2015)

privecsg-14-0021-01-ecsg

13

Business#3.1

• Technical presentations– Roger Marks (EthAirNet Associates)

• Separation of Access and Core Partitioning in the Local Space

• https://mentor.ieee.org/privecsg/dcn/14/privecsg-14-0019-00-0000-separation-of-access-and-core-partitioning-in-the-local-space.pdf

privecsg-14-0021-01-ecsg

14

Business#3.2

• Technical presentations– Juan Carlos Zuniga (InterDigital Labs)

• MAC Randomization Trial @ IETF 91• Nov 9-14, Honolulu, HI, USA• https://

www.ietf.org/registration/MeetingWiki/wiki/91privacy

privecsg-14-0021-01-ecsg

1515

Trial at IETF meeting

• Trial setup @ IETF 91 Venue– Different SSID (e.g. ietf_PrivRandMAC?)– Separate VLAN, DHCP, Switching and AAA infrastructure– Will use only 2.4 GHz infrastructure (b/g/n)– Different credentials will be needed to join this network

• Wiki page and instructions for participants– Private email requested to announce participation– IETF91 wiki page with instructions about how to use specific

MAC address randomization tools and setup DHCP client name/ID per user– to debug and find out potential issues

– If possible, user should keep track of MAC addresses being used – could help in case of collision or other issues

privecsg-14-0021-01-ecsg

1616

Implications of MAC address changes

• Statistics to be collected– Network

• # associations in this SSID• DHCP logs (MAC, DHCP client ID, time/date)• DHCP pool size in time• Switch table size in time• AAA logs

– Client• DHCP client name/ID• MAC address usage log

– Others?

privecsg-14-0021-01-ecsg

17

Business#3.3

• Technical presentations– Juan Carlos Zuniga (InterDigital Labs)– Alissa Cooper (Cisco Systems)

• 802 Privacy Threat Model• https://

mentor.ieee.org/privecsg/dcn/14/privecsg-14-0014-00-0000-802-privacy-threat-model.pptx

privecsg-14-0021-01-ecsg

18

Business#4• Proposed next steps

– Request extension of the Privacy Recommendation EC SG until the end of the March ‘15 meeting

– Develop a PAR/CSD on recommended privacy practices for IEEE 802 protocols

– Continue call for proposals to discuss technical topics(1) Threat Model for Privacy at Link Layer (2) Privacy Issues at Link Layer(3) Proposals regarding functionalities in IEEE 802 protocols to

improve Privacy(4) Proposals regarding measuring levels of Privacy on Internet

protocols(5) Implications of MAC address changes(6) Other…

privecsg-14-0021-01-ecsg

19

Business#4• Upcoming meetings (if SG is renewed)

– 10 December 2014, (10:00 AM ET) Teleconference– January?

• 7 January 2015, (10:00 AM ET) Teleconference• 8 January 2015, (10:00 AM ET) Teleconference• 12-15 January 2015, IEEE Interim meeting in Atlanta

– 4 February 2015, (10:00 AM ET) Teleconference• Potential PAR/CSD submission

– 25 February 2015, (10:00 AM ET) Teleconference– 8-13 March, 2015, IEEE 802 Plenary meeting in Berlin,

Germany• AOB• Meeting adjourned at