<?xml version='1.0' encoding='utf-8'?>
<!DOCTYPE rfc [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">
]>
<?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
<!-- generated by https://github.com/cabo/kramdown-rfc version 1.7.4 (Ruby 3.0.2) -->
<?rfc compact="yes"?>
<?rfc subcompact="no"?>
<?rfc rfcedstyle="yes"?>
<rfc xmlns:xi="http://www.w3.org/2001/XInclude" ipr="trust200902" docName="draft-mandyam-rats-proxlocclaim-01" category="info" tocDepth="4" tocInclude="true" sortRefs="true" symRefs="true" version="3">
  <!-- xml2rfc v2v3 conversion 3.19.1 -->
  <front>
    <title>The Proximate Location Claim</title>
    <seriesInfo name="Internet-Draft" value="draft-mandyam-rats-proxlocclaim-01"/>
    <author initials="G." surname="Mandyam" fullname="Giridhar Mandyam">
      <organization/>
      <address>
        <email>giridhar.mandyam@gmail.com</email>
      </address>
    </author>
    <date year="2024" month="January" day="17"/>
    <area>Internet</area>
    <workgroup>RATS Working Group</workgroup>
    <keyword>signing attestation cbor location</keyword>
    <abstract>
      <?line 36?>

<t>The Entity Attestation Token (EAT) is an extensible attestation version of a CBOR Web Token (CWT).
EAT defines a location claim, but does not define a proximate location claim.  This document proposes a claim
in which an attester can relay detected relative location of a target.</t>
    </abstract>
  </front>
  <middle>
    <?line 43?>

<section anchor="introduction">
      <name>Introduction</name>
      <t>The Entity Attestation Token i.e. EAT <xref target="EAT.Draft"/> provides a method for sending attesation-related
data in the form of a CBOR Web Token (CWT)  <xref target="RFC8392"/>.  Attested location is claim provided in the
EAT specification wherein an attester can provide location data in the form of a standard geodetic
coding system (WGS 84).</t>
      <t>Secure ranging involves the process of determining the relative location of a device (entity) with respect to
a receiver.  In this case, the receiver may actually attest to the location of the device in a similar manner to
how the Entity Attestation Token conveys location data.  However, there are majore differences between the EAT convveyance of location
and a secure ranging receiver:  (1) the EAT location is that of the entity to which the attester created the token, while the secure ranging
receiver is conveying the detected location of the entity, and (2) the receiver is providing the relative location of the entity.</t>
      <t>In this document, a new claim - the proximate location claim - is specified that will distinguish location determined via secure ranging
from location conveyed by as part of a entity's attestation evidence.  Although this claim could appear in a CWT for non-attestation scenarios,
it can be conveyed as part of a delegated attestation (i.e. the secure ranging receiver attests to the location on behalf of the target entity).  A sample
architecture is provided in <xref target="reader-attest"/>.  The secure ranging receiver in this case makes an angle-of-arrival (AoA) and distance determination based upon
a transmitted signal from a target device.  The receiver (assuming it can determine its own location) can project these measurements to a geodetic coordinate
system and attest to it.</t>
      <figure anchor="reader-attest">
        <name>Secure Ranging and Attestation</name>
        <artwork align="center"><![CDATA[
+-------------+
|             |
|    Target   |
|             |
+-------------+
       |
       |
       |
+-------------------------------+
|      |           Ranging Rcvr.|
|   +-----+                     |
|   | AoA/|                     |
|   |Dist.|                     |
|   +-----+                     |
|      |                        |
|   +-----+                     |
|   |Geod.|                     |
|   |Conv.|                     |
|   +-----+                     |
|      |                        |
|   +--------+                  |
|   |Attester|                  |
|   +--------+                  |
|        |                      |
+-------------------------------+
         |
    +--------+
    |Verifier|
    +--------+
]]></artwork>
      </figure>
    </section>
    <section anchor="proxloc">
      <name>The Proximate Location Claim (proxloc)</name>
      <t>The proximate location claim provides the location of a target entity based on what
a secure ranging receiver derives.  If the secure ranging receiver is capable
of determining its own location, then it can project the entity's location
to an appropriate geodetic coordinate system based on the relative location
of the entity.
It is partially derived derived from the EAT location claim <xref target="EAT.Draft"/>, but includes
the ueid claim to uniquely identify the entity.</t>
      <t>If the location cannot be derived as per the EAT specification, then the relative
angle-of-arrival, angle-of-elevation, and ranging distance may be sent (the angular 
measurements in radians and the distance in meters).</t>
      <sourcecode type="CDDL"><![CDATA[
proxloc-label => proxloc-type

proxloc-type = {
    target-ueid => ueid, ; derived from EAT claim ueid
    ? target-location => location ; derived from EAT claim location if WGS-84 coordinate projection possible
    ? aoa => float ; angle-of-arrival optionally sent
    ? distance => float ; ranging distance optionally sent
    ? aoe => float ; angle-of-elevation optionally sent
}
]]></sourcecode>
      <t>Note that this claim may be extended in the future for other coordinate systems.</t>
    </section>
    <section anchor="iana-considerations">
      <name>IANA Considerations</name>
      <t>This document requests registration of the following claim in the "CBOR Web Token (CWT) Claims Registry" (http://www.iana.org/assignments/cwt).</t>
      <t> </t>
      <ul spacing="normal">
        <li>
          <t>Claim Name: proxloc</t>
        </li>
        <li>
          <t>Claim Description: The Proximate Location Claim</t>
        </li>
        <li>
          <t>JWT Claim Name: "proxloc"</t>
        </li>
        <li>
          <t>CWT Claim Key: TBD</t>
        </li>
        <li>
          <t>Claim Value Type(s): map</t>
        </li>
        <li>
          <t>Change Controller: IESG</t>
        </li>
        <li>
          <t>Specification Document(s): <strong>this document</strong></t>
        </li>
      </ul>
    </section>
  </middle>
  <back>
    <references anchor="sec-normative-references">
      <name>Normative References</name>
      <reference anchor="RFC8392">
        <front>
          <title>CBOR Web Token (CWT)</title>
          <author fullname="M. Jones" initials="M." surname="Jones"/>
          <author fullname="E. Wahlstroem" initials="E." surname="Wahlstroem"/>
          <author fullname="S. Erdtman" initials="S." surname="Erdtman"/>
          <author fullname="H. Tschofenig" initials="H." surname="Tschofenig"/>
          <date month="May" year="2018"/>
          <abstract>
            <t>CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary Object Representation (CBOR), and CBOR Object Signing and Encryption (COSE) is used for added application-layer security protection. A claim is a piece of information asserted about a subject and is represented as a name/value pair consisting of a claim name and a claim value. CWT is derived from JSON Web Token (JWT) but uses CBOR rather than JSON.</t>
          </abstract>
        </front>
        <seriesInfo name="RFC" value="8392"/>
        <seriesInfo name="DOI" value="10.17487/RFC8392"/>
      </reference>
      <reference anchor="EAT.Draft">
        <front>
          <title>The Entity Attestation Token (EAT)</title>
          <author fullname="Laurence Lundblade" initials="L." surname="Lundblade">
            <organization>Security Theory LLC</organization>
          </author>
          <author fullname="Giridhar Mandyam" initials="G." surname="Mandyam">
         </author>
          <author fullname="Jeremy O'Donoghue" initials="J." surname="O'Donoghue">
            <organization>Qualcomm Technologies Inc.</organization>
          </author>
          <author fullname="Carl Wallace" initials="C." surname="Wallace">
            <organization>Red Hound Software, Inc.</organization>
          </author>
          <date day="15" month="January" year="2024"/>
          <abstract>
            <t>   An Entity Attestation Token (EAT) provides an attested claims set
   that describes state and characteristics of an entity, a device like
   a smartphone, IoT device, network equipment or such.  This claims set
   is used by a relying party, server or service to determine the type
   and degree of trust placed in the entity.

   An EAT is either a CBOR Web Token (CWT) or JSON Web Token (JWT) with
   attestation-oriented claims.

            </t>
          </abstract>
        </front>
        <seriesInfo name="Internet-Draft" value="draft-ietf-rats-eat-25"/>
      </reference>
    </references>
  </back>
  <!-- ##markdown-source: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-->

</rfc>
