Report from the Internet of Things (IoT) Software Update Workshop (IoTSU) Workshop 2016
draft-farrell-iotsu-workshop-00

• Status
• IESG evaluation record
• IESG writeups
• Email expansions
• History

• Versions
• 00
• 01

Network Working Group                                      H. Tschofenig
Internet-Draft                                               ARM Limited
Intended status: Informational                                S. Farrell
Expires: April 10, 2017                           Trinity College Dublin
                                                         October 7, 2016

   Report from the Internet of Things (IoT) Software Update Workshop
                         (IoTSU) Workshop 2016
                  draft-farrell-iotsu-workshop-00.txt

Abstract

   This document provides a summary of the 'Workshop on Internet of
   Things (IoT) Software Update (IOTSU)' which took place at Trinity
   College Dublin, Ireland on the 13th and 14th of June, 2016.  The main
   goal of the workshop was to foster a discussion on requirements,
   challenges and solutions for bringing software and firmware updates
   to IoT devices.  This report summarizes the discussions and lists
   recommendations to the standards community.

Status of This Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at http://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on April 10, 2017.

Copyright Notice

   Copyright (c) 2016 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect

Tschofenig & Farrell     Expires April 10, 2017                 [Page 1]
Internet-Draft                IoTSU Report                  October 2016

   to this document.  Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.

Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   2
   2.  Terminology . . . . . . . . . . . . . . . . . . . . . . . . .   4
   3.  Requirements  . . . . . . . . . . . . . . . . . . . . . . . .   5
   4.  Authorizing a Software / Firmware Update  . . . . . . . . . .  12
   5.  End-of-Support  . . . . . . . . . . . . . . . . . . . . . . .  12
   6.  Incentives  . . . . . . . . . . . . . . . . . . . . . . . . .  14
   7.  Measurements and Analysis . . . . . . . . . . . . . . . . . .  14
   8.  Firmware Distribution in Mesh Networks  . . . . . . . . . . .  15
   9.  Compromised Devices . . . . . . . . . . . . . . . . . . . . .  16
   10. Miscellaneous Points  . . . . . . . . . . . . . . . . . . . .  16
   11. Tentative Conclusions and Next Steps  . . . . . . . . . . . .  18
   12. Security Considerations . . . . . . . . . . . . . . . . . . .  18
   13. IANA Considerations . . . . . . . . . . . . . . . . . . . . .  19
   14. Acknowledgements  . . . . . . . . . . . . . . . . . . . . . .  19
   15. Appendix A: Program Committee . . . . . . . . . . . . . . . .  19
   16. Appendix B: Accepted Position Papers  . . . . . . . . . . . .  19
   17. Appendix C: List of Participants  . . . . . . . . . . . . . .  21
   18. Informative References  . . . . . . . . . . . . . . . . . . .  22
   Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . .  25

1.  Introduction

   This document provides a summary of the 'Workshop on Internet of
   Things (IoT) Software Update (IOTSU)' [IoTSU], which took place at
   Trinity College Dublin, Ireland on the 13th and 14th of June, 2016.
   The main goal of the workshop was to foster a discussion on
   requirements, challenges and solutions for bringing software and
   firmware updates to IoT devices.

   The views and positions in this report are those of the workshop
   participants and do not necessarily reflect those of their employers/
   sponsors, the authors of this memo nor the Internet Architecture
   Board (IAB), under whose auspices the workshop was held.

   The IAB holds occasional workshops designed to consider long-term
   issues and strategies for the Internet, and to suggest future
   directions for the Internet architecture.  The topics investigated
   often require coordinated efforts of different organizations and
   industry bodies to improve an identified problem.  One of the goals
   of such workshops is to assist with communication between relevant