The Remote Attestation NFV Use Cases
draft-rein-remote-attestation-nfv-use-cases-01

• Status
• IESG evaluation record
• IESG writeups
• Email expansions
• History

• Versions
• 00
• 01

Network Working Group                                            A. Rein
Internet-Draft                                                    L. Xia
Intended status: Informational                                    Huawei
Expires: March 8, 2019                                September 04, 2018

                  The Remote Attestation NFV Use Cases
             draft-rein-remote-attestation-nfv-use-cases-01

Abstract

   This document proposes the use cases on an architectural level in
   terms of Remote Attestation for virtualized environments, especially
   in the context of Network Function Virtualization (NFV).

Status of This Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at https://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on March 8, 2019.

Copyright Notice

   Copyright (c) 2018 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (https://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.

Rein & Xia                Expires March 8, 2019                 [Page 1]
Internet-Draft      Remote Attestation NFV Use Cases      September 2018

Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   2
     1.1.  Stakeholders  . . . . . . . . . . . . . . . . . . . . . .   2
     1.2.  Major Issue . . . . . . . . . . . . . . . . . . . . . . .   3
   2.  Terminology . . . . . . . . . . . . . . . . . . . . . . . . .   4
     2.1.  Key Words . . . . . . . . . . . . . . . . . . . . . . . .   4
     2.2.  Definition of Terms . . . . . . . . . . . . . . . . . . .   4
   3.  Remote Attestation Use Cases  . . . . . . . . . . . . . . . .   4
     3.1.  Decentralized Model Use Case  . . . . . . . . . . . . . .   5
     3.2.  Centralized Model (in a Single Trust Domain) Use Case . .   8
   4.  IANA Considerations . . . . . . . . . . . . . . . . . . . . .  10
   5.  Security Considerations . . . . . . . . . . . . . . . . . . .  10
   6.  Acknowledgements  . . . . . . . . . . . . . . . . . . . . . .  10
   7.  Normative References  . . . . . . . . . . . . . . . . . . . .  11
   Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . .  11

1.  Introduction

1.1.  Stakeholders

   Stakeholders play a major role in NFV and there is a strict
   hierarchical separation between the stakeholders in terms of
   responsibility, accessibility and visibility within the the NFV
   architecture.  Although these issues are also relevant for other
   virtualized environments, for example in private or hybrid clouds,
   they are most apparent in NFV, especially in multi vendor
   deployments.

   The stakeholders in NFV are:

   o  Cloud Service Provider (CSP): The CSP provides the platform, i.e.
      the hardware and core services, acting as the Virtual Machine
      Manager (VMM) or hypervisor for the provisioning of Virtual
      Machines (VM).  With regard to this document, the CSP is not
      responsible for the provisioning itself.  The CSP only provides
      the platform w.r.t. to CSP NFV Infrastructure (CSP:NFVI) role.
      The actual provisioning of specific VMs is carried out by the CSP
      Management and Orchestration (CSP:MANO) role, whereas both roles
      may be represented by the same or different organizations.  This
      contribution, however, is not concerned with the internal
      operations and procedures of the CSP:MANO and therefore does
      address CSP:MANO neither as a role nor as a functional component.

   o  Cloud Service Customer (CSC): The CSC is the actual user of the
      VMM and requests the provisioning of specific VMs that eventually
      provide some service.  The CSC is also in full control in terms of

Rein & Xia                Expires March 8, 2019                 [Page 2]
Internet-Draft      Remote Attestation NFV Use Cases      September 2018

      which specific VM is actually launched and thus not constrained in
      this regard.