Remote ATtestation ProcedureS (rats) Internet Drafts

	The Entity Attestation Token (EAT)
	draft-ietf-rats-eat-25.txt   Date: 15/01/2024   Authors: Laurence Lundblade, Giridhar Mandyam, Jeremy O'Donoghue, Carl Wallace   Working Group: Remote ATtestation ProcedureS (rats)	An Entity Attestation Token (EAT) provides an attested claims set that describes state and characteristics of an entity, a device like a smartphone, IoT device, network equipment or such. This claims set is used by a relying party, server or service to determine the type and degree of trust placed in the entity. An EAT is either a CBOR Web Token (CWT) or JSON Web Token (JWT) with attestation-oriented claims.
	A YANG Data Model for Challenge-Response-based Remote Attestation Procedures using TPMs
	draft-ietf-rats-yang-tpm-charra-22.txt   Date: 27/02/2024   Authors: Henk Birkholz, Michael Eckel, Shwetha Bhandari, Eric Voit, Bill Sulzen, Liang Xia, Tom Laffey, Guy Fedorkow   Working Group: Remote ATtestation ProcedureS (rats)	This document defines YANG Remote Procedure Calls (RPCs) and a few configuration nodes required to retrieve attestation evidence about integrity measurements from a device, following the operational context defined in TPM-based Network Device Remote Integrity Verification. Complementary measurement logs are also provided by the YANG RPCs, originating from one or more roots of trust for measurement (RTMs). The module defined requires at least one TPM 1.2 or TPM 2.0 as well as a corresponding TPM Software Stack (TSS), or equivalent hardware implementations that include the protected capabilities as provided by TPMs as well as a corresponding software stack, included in the device components of the composite device the YANG server is running on.
	TPM-based Network Device Remote Integrity Verification
	draft-ietf-rats-tpm-based-network-device-attest-14.txt   Date: 22/03/2022   Authors: Guy Fedorkow, Eric Voit, Jessica Fitzgerald-McKay   Working Group: Remote ATtestation ProcedureS (rats)	This document describes a workflow for remote attestation of the integrity of firmware and software installed on network devices that contain Trusted Platform Modules [TPM1.2], [TPM2.0], as defined by the Trusted Computing Group (TCG)), or equivalent hardware implementations that include the protected capabilities, as provided by TPMs.
	Reference Interaction Models for Remote Attestation Procedures
	draft-ietf-rats-reference-interaction-models-09.txt   Date: 04/03/2024   Authors: Henk Birkholz, Michael Eckel, Wei Pan, Eric Voit   Working Group: Remote ATtestation ProcedureS (rats)	This document describes interaction models for remote attestation procedures (RATS). Three conveying mechanisms -- Challenge/Response, Uni-Directional, and Streaming Remote Attestation -- are illustrated and defined. Analogously, a general overview about the information elements typically used by corresponding conveyance protocols are highlighted.
	A CBOR Tag for Unprotected CWT Claims Sets
	draft-ietf-rats-uccs-09.txt   Date: 04/03/2024   Authors: Henk Birkholz, Jeremy O'Donoghue, Nancy Cam-Winget, Carsten Bormann   Working Group: Remote ATtestation ProcedureS (rats)	When transported over secure channels, CBOR Web Token (CWT, RFC 8392) Claims Sets may not need the protection afforded by wrapping them into COSE, as is required for a true CWT. This specification defines a CBOR tag for such unprotected CWT Claims Sets (UCCS) and discusses conditions for its proper use.
	Direct Anonymous Attestation for the Remote Attestation Procedures Architecture
	draft-ietf-rats-daa-05.txt   Date: 04/03/2024   Authors: Henk Birkholz, Christopher Newton, Liqun Chen, Dave Thaler   Working Group: Remote ATtestation ProcedureS (rats)	This document maps the concept of Direct Anonymous Attestation (DAA) to the Remote Attestation Procedures (RATS) Architecture. The protocol entity DAA Issuer is introduced and its mapping with existing RATS roles in DAA protocol steps is specified.
	Attestation Results for Secure Interactions
	draft-ietf-rats-ar4si-06.txt   Date: 04/03/2024   Authors: Eric Voit, Henk Birkholz, Thomas Hardjono, Thomas Fossati, Vincent Scarlata   Working Group: Remote ATtestation ProcedureS (rats)	This document defines reusable Attestation Result information elements. When these elements are offered to Relying Parties as Evidence, different aspects of Attester trustworthiness can be evaluated. Additionally, where the Relying Party is interfacing with a heterogeneous mix of Attesting Environment and Verifier types, consistent policies can be applied to subsequent information exchange between each Attester and the Relying Party.
	EAT Media Types
	draft-ietf-rats-eat-media-type-07.txt   Date: 02/04/2024   Authors: Laurence Lundblade, Henk Birkholz, Thomas Fossati   Working Group: Remote ATtestation ProcedureS (rats)	Payloads used in Remote Attestation Procedures may require an associated media type for their conveyance, for example when used in RESTful APIs. This memo defines media types to be used for Entity Attestation Tokens (EAT).
	Concise Reference Integrity Manifest
	draft-ietf-rats-corim-04.txt   Date: 04/03/2024   Authors: Henk Birkholz, Thomas Fossati, Yogesh Deshpande, Ned Smith, Wei Pan   Working Group: Remote ATtestation ProcedureS (rats)	Remote Attestation Procedures (RATS) enable Relying Parties to assess the trustworthiness of a remote Attester and therefore to decide whether to engage in secure interactions with it. Evidence about trustworthiness can be rather complex and it is deemed unrealistic that every Relying Party is capable of the appraisal of Evidence. Therefore that burden is typically offloaded to a Verifier. In order to conduct Evidence appraisal, a Verifier requires not only fresh Evidence from an Attester, but also trusted Endorsements and Reference Values from Endorsers and Reference Value Providers, such as manufacturers, distributors, or device owners. This document specifies the information elements for representing Endorsements and Reference Values in CBOR format.
	Concise TA Stores (CoTS)
	draft-ietf-rats-concise-ta-stores-02.txt   Date: 05/12/2023   Authors: Carl Wallace, Russ Housley, Thomas Fossati, Yogesh Deshpande   Working Group: Remote ATtestation ProcedureS (rats)	Trust anchor (TA) stores may be used for several purposes in the Remote Attestation Procedures (RATS) architecture including verifying endorsements, reference values, digital letters of approval, attestations, or public key certificates. This document describes a Concise Reference Integrity Manifest (CoRIM) extension that may be used to convey optionally constrained trust anchor stores containing optionally constrained trust anchors in support of these purposes.
	RATS Endorsements
	draft-ietf-rats-endorsements-00.txt   Date: 01/12/2023   Authors: Dave Thaler, Henk Birkholz, Thomas Fossati   Working Group: Remote ATtestation ProcedureS (rats)	In the IETF Remote Attestation Procedures (RATS) architecture, a Verifier accepts Evidence and, using Appraisal Policy typically with additional input from Endorsements and Reference Values, generates Attestation Results in formats needed by a Relying Parties. This document explains the purpose and role of Endorsements and discusses some considerations in the choice of message format for Endorsements.
	RATS Conceptual Messages Wrapper (CMW)
	draft-ietf-rats-msg-wrap-04.txt   Date: 27/02/2024   Authors: Henk Birkholz, Ned Smith, Thomas Fossati, Hannes Tschofenig   Working Group: Remote ATtestation ProcedureS (rats)	This document defines the RATS conceptual message wrapper (CMW) format, a type of encapsulation format that can be used for any RATS messages, such as Evidence, Attestation Results, Endorsements, and Reference Values. Additionally, the document describes a collection type that enables the aggregation of one or more CMWs into a single message. This document also defines corresponding CBOR tag, JSON Web Tokens (JWT) and CBOR Web Tokens (CWT) claims, as well as an X.509 extension. These allow embedding the wrapped conceptual messages into CBOR-based protocols, web APIs, and PKIX protocols.

data-group-menu-data-url="/group/groupmenu.json"> Skip to main content