Abstract

Group communication for CoAP can be secured using Group Object Security for Constrained RESTful Environments (Group OSCORE). A Group Manager is responsible to handle the joining of new group members, as well as to manage and distribute the group key material. This document defines a RESTful admin interface at the Group Manager, that allows an Administrator entity to create and delete OSCORE groups, as well as to retrieve and update their configuration. The ACE framework for Authentication and Authorization is used to enforce authentication and authorization of the Administrator at the Group Manager. Protocol-specific transport profiles of ACE are used to achieve communication security, proof-of-possession and server authentication.

Authors

Marco Tiloca (marco.tiloca@ri.se)
Rikard Hoeglund (rikard.hoglund@ri.se)
Peter Van der Stok (consultancy@vanderstok.org)
Francesca Palombini (francesca.palombini@ericsson.com)
Klaus Hartke (klaus.hartke@ericsson.com)

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)