In the ACE WG meeting at IETF #99 it was decided to use the Wiki to make a roadmap for the completion of the authorization-related work, in particular the dependencies between the ACE profiles.
Instructions for ACE profile authors: Please verify/fill in the details of the profile in the table. Further information can be detailed below. NOTE: This does not have to be a complete description of the profile, but an outline of what is contributed and how it relates to other profiles.
| Profile name | Use case | Role of Client | Role of RS | C-RS protocol | Com. sec. | Dependency | Implementations | Drafts |
|---|---|---|---|---|---|---|---|---|
| coap_dtls | Generic REST access | Any Client | Any RS | CoAP | DTLS | - | RISE, jimsch, SEI-ACE | [1] |
| coap_oscoap | Generic REST access | Any Client | Any RS | CoAP | OSCOAP | - | RISE, jimsch | [2] |
| publisher | Publish on topic | Publisher | Broker | CoAP | COSE | [1:1], [2:1] | - | [3] |
| subscriber | Subscribe to topic | Subscriber | Broker | CoAP | COSE | [1:2], [2:2] | - | [3:1] |
| mqtt_tls | MQTT access | publisher/subscriber | Broker | MQTT | TLS | Nominet | [4] | |
| coap_ipsec | Generic REST access | Any Client | Any RS | CoAP | IPsec | - | RISE | [5] |
| ... | ... | ... | ... | ... | ... | ... | ... | ... |
| Name | Use case | Role of Client | Role of RS | C-RS protocol | Com. sec. | Dependency | Implementations | Drafts |
|---|---|---|---|---|---|---|---|---|
| Joining OSCOAP multicast groups | Authorized access to OSCOAP multicast groups | Joining node | Group manager | CoAP | Same as in ACE profile used | [1:3],[2:3]] | Same as ACE profile | [6] |
| Security for Low-Latency Group Communication | Authorized access to CoAP multicast | Joining node | Group manager | CoAP | Specified in the document | ACE-OAuth, symmetric key group communication security | As part of OpenAIS EU funded project | [7] |
| ... | ... | ... | ... | ... | ... | ... | ... | ... |
Appendix C of the ACE Framework lists the requirements on profiles of this framework which is the basis for the comparison here.
https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-07#appendix-C
Additional items to compare: