[Fiware-security] User Story

[Woods, Chris]

Including Pier (WPL WP7), Hans (WPA WP7).

Agreed. The scenario presented is simplistic. But the enabling infrastructure is required for other scenarios.
CDI Needs a remote management service for devices. This is a method for other GE's to contact a client.
In addition to "remote wipe & lock". It also provides:

·         Application developers with the ability to execute code remotely on a CDI device

·         Management of individual application settings and configuration

·         Remote application management - A rogue application is installed on a device and needs to be uninstalled (a mitigation step).

·         Statistics - how many devices have application X installed?

The following is our working FMC diagram for CDI. Note the Non-CDI GE which communications via a Rest interface to the CDI's remote management component, which in turn communications with a CDI device.
This 3 way communication needs to be secured, to ensure that the client device can trust the management service and the management service can trust the device, and the user has given permission for the none CDI GE to communicate directly with the device.

[cid:image002.png at 01CCE640.78C3B910]

Thanks,
Chris

From: Seidl, Robert (NSN - DE/Munich) [mailto:robert.seidl at nsn.com]
Sent: Friday, February 03, 2012 7:51 AM
To: ext BISSON Pascal; Wolfgang.Steigerwald at telekom.de; Woods, Chris
Cc: fiware-security at lists.fi-ware.eu
Subject: AW: [Fiware-security] User Story

Hi all,
such service is already offered for the IPhones and as well some other brands.
So not a very new stuff.
Let's discuss this in our telco today.

PS: Wolfgang, please look at my emails which I sent to you and received so far no answers :(

Greetings
Robert

Von: fiware-security-bounces at lists.fi-ware.eu<mailto:fiware-security-bounces at lists.fi-ware.eu> [mailto:fiware-security-bounces at lists.fi-ware.eu]<mailto:[mailto:fiware-security-bounces at lists.fi-ware.eu]> Im Auftrag von ext BISSON Pascal
Gesendet: Donnerstag, 2. Februar 2012 20:04
An: Wolfgang.Steigerwald at telekom.de<mailto:Wolfgang.Steigerwald at telekom.de>; chris.woods at intel.com<mailto:chris.woods at intel.com>
Cc: fiware-security at lists.fi-ware.eu<mailto:fiware-security at lists.fi-ware.eu>
Betreff: Re: [Fiware-security] User Story

Hi Wolfgang,

Sounds good let's now consider reporting this user story on the backlog at the right place.

Best Regards,
Pascal

De : Wolfgang.Steigerwald at telekom.de<mailto:Wolfgang.Steigerwald at telekom.de> [mailto:Wolfgang.Steigerwald at telekom.de]
Envoyé : jeudi 2 février 2012 18:21
À : BISSON Pascal; chris.woods at intel.com<mailto:chris.woods at intel.com>
Cc : fiware-security at lists.fi-ware.eu<mailto:fiware-security at lists.fi-ware.eu>
Objet : User Story

Hello Pascal,
hello Chris,

here is the user story we talked about in   Madrid.

User Story: Managing Service
To help users to manage the software on their mobile devices or help to find their lost devices a service provider (SP) offers the "Managing Service" (MS). To use the service an user must register himself and the device to the service.
When the user want's later use the service the SP redirect the user to the users Identity Provider (IdP) where the he has to authenticate himself.
If the device gets lost the MS can activate the GPS module to locate the device or ask the Telco-Operator where the device is located. Therefore the MS authenticates to the device or the operator and delivers the service.
Mit freundlichen Grüßen / Viele Grüße / Best Regards

Wolfgang
Deutsche Telekom AG
T-Labs (Research & Innovation)
Dipl.-Inform. Wolfgang Steigerwald
Winterfeldtstr. 21, 10781 Berlin
+4930835354287 (Tel.)
+4930835358408 (Fax)
E-Mail: wolfgang.steigerwald at telekom.de<mailto:wolfgang.steigerwald at telekom.de>
www.telekom.com

Erleben, was verbindet.

Deutsche Telekom AG
Aufsichtsrat: Prof. Dr. Ulrich Lehner (Vorsitzender)
Vorstand: René Obermann (Vorsitzender),
Dr. Manfred Balz, Reinhard Clemens, Niek Jan van Damme,
Timotheus Höttges, Claudia Nemat, Thomas Sattelberger
Handelsregister: Amtsgericht Bonn HRB 6794
Sitz der Gesellschaft: Bonn
WEEE-Reg.-Nr. DE50478376

Große Veränderungen fangen klein an - Ressourcen schonen und nicht jede E-Mail drucken.
-------------------------------------------------------------
Intel Ireland Limited (Branch)
Collinstown Industrial Park, Leixlip, County Kildare, Ireland
Registered Number: E902934

This e-mail and any attachments may contain confidential material for
the sole use of the intended recipient(s). Any review or distribution
by others is strictly prohibited. If you are not the intended
recipient, please contact the sender and delete all copies.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20120208/47546c56/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.emz
Type: application/octet-stream
Size: 26253 bytes
Desc: image001.emz
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20120208/47546c56/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 28774 bytes
Desc: image002.png
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20120208/47546c56/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: oledata.mso
Type: application/octet-stream
Size: 110230 bytes
Desc: oledata.mso
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20120208/47546c56/attachment-0001.obj>