%% You should probably cite draft-ietf-core-object-security instead of this I-D.
@techreport{selander-ace-object-security-03,
    number =    {draft-selander-ace-object-security-03},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-selander-ace-object-security/03/},
    author =    {Göran Selander and John Preuß Mattsson and Francesca Palombini and Ludwig Seitz},
    title =     {{Object Security of CoAP (OSCOAP)}},
    pagetotal = 42,
    year =      2015,
    month =     oct,
    day =       19,
    abstract =  {This memo defines Object Security of CoAP (OSCOAP), a method for protection of request and response message exchanges of the Constrained Application Protocol (CoAP) using data object security. OSCOAP provides end-to-end encryption, integrity and replay protection to CoAP payload, options and header fields, and a secure binding between CoAP request and response messages. The use of OSCOAP is signaled with the Object-Security option, also defined in this memo.},
}