14 March 2002 doc IEEE 802 15

14 March 2002 doc. : IEEE 802. 15 -02/152 r 2 Project: IEEE P 802. 15 Working Group for Wireless Personal Area Networks (WPANs) Submission Title: Security Suite Compromise Date Submitted: 14 March, 2002 Source: Gregg Rasor Company: Motorola Address: 1500 Gateway Blvd. , Boynton Beach, Florida 33426 Voice: 561 -739 -2952, FAX: 561 -739 -3715, E-Mail: gregg. rasor@motorola. com Re: P 802. 15. 3 Security Suite Selection Abstract: A compromise solution is shown that implements flexible, scalable security in the 802. 15. 3 WPAN. Purpose: Detail a flexible, scalable security solution for the 802. 15. 3 WPAN. Notice: This document has been prepared to assist the IEEE P 802. 15. It is offered as a basis for discussion and is not binding on the contributing individual(s) or organization(s). The material in this document is subject to change in form and content after further study. The contributor(s) reserve(s) the right to add, amend or withdraw material contained herein. Release: The contributor acknowledges and accepts that this contribution becomes the property of IEEE and may be made publicly available by P 802. 15. Submission Slide 1 Gregg Rasor, Motorola

14 March 2002 doc. : IEEE 802. 15 -02/152 r 2 Security Suite Compromise Gregg Rasor, Distinguished Member of the Technical Staff Motorola Labs Submission Slide 2 Gregg Rasor, Motorola

14 March 2002 doc. : IEEE 802. 15 -02/152 r 2 Scalable, Open Security Model Submission Slide 3 Gregg Rasor, Motorola

14 March 2002 doc. : IEEE 802. 15 -02/152 r 2 Commitments for Completion • • • Letters of commitment by Walt Davis and Scott Vanstone that the completed draft will be delivered to the Technical Editor by April 5, 2002 at 5 PM PST. Define the elliptic curves necessary for implementation according to FIPS 197. Must have a completely specified ECC version of 02/131 r 0. Submission Slide 4 Gregg Rasor, Motorola

14 March 2002 doc. : IEEE 802. 15 -02/152 r 2 Certificate Applicability • • • In order to insure interoperability and scalability, the MAC (MLME message and frame formats) shall support the use of certificates. Devices shall not be required to use certificates, and the type of certificate used shall be selectable by the security suite. For efficiency, when the mandatory security option is selected and certificates are used, implicit certificates are preferred, but not required. This implementation allows selection of either a manual, challenge and response authentication mode, or an automatic, certificate based authentication mode. Submission Slide 5 Gregg Rasor, Motorola