OCF Cloud Services Under the Created Account 3
Total Page:16
File Type:pdf, Size:1020Kb
OCF 2.2.2 Specification Introduction and Overview February 2021 Disclaimer Notice This Specification Overview document is for informational purposes only. It has not been adopted in full or in part by the Open Connectivity Foundation, and should not be relied upon for any purpose other than for review of the information contained herein. This document is subject to change, and the Open Connectivity Foundation and its members reserve the right without notice to you to change any or all portions hereof, delete portions hereof, make additions hereto, discard this document in its entirety or otherwise modify this document at any time. You should not and may not rely upon the contents of this document in any way, including but not limited to for the development of any products or services. In order to be considered a certified product, among other requirements, a product or service must be compliant with Final Specification of the Open Connectivity Foundation. To the extent this document references all or portions of a Draft or Final Specification of the Open Connectivity Foundation, or information related thereto, such references are made solely for informational purposes. This document is not a Draft or Final Specification of the Open Connectivity Foundation. Neither this document nor any of its contents is subject to or related to any licensing grants or commitments contained in the Open Connectivity Foundation Intellectual Property Rights (IPR) Policy or elsewhere. This document may contain or make reference to logos, brands, names, or other works of Open Connectivity Foundation, its members, or other third parties. The OCF logo is a trademark of Open Connectivity Foundation, Inc. in the United States or other countries. Other brands, names, or works contained herein may be claimed as the property of others. Any copying or other form of reproduction and/or distribution of this document or these works is strictly prohibited. February 9, 2021 OPEN CONNECTIVITY FOUNDATION 2 OCF Specification Fundamentals Core Framework OCF 2.2.2 Release February 2021 Core Framework Fundamentals Building Blocks • Enable the development of vertical profiles (e.g. Smart Home, Smart Commercial) while maintaining fundamental interoperability via an Architecture that is scalable from resource constrained devices to resource rich devices Security is fundamental to the OCF ecosystem and applies to all elements February 2021 OPEN CONNECTIVITY FOUNDATION 4 Core Framework Fundamentals Realized in the Protocol Stack Common Resource Model defined using Open API 2.0 Concise representation on the wire Application (binary encoded JSON) Resource Model Constrained device support via use of CoAP as the transport layer Encoding (CBOR) CoAP Secure connection DTLS TLS UDP TCP Connectionless or Connection Oriented IPv6 IPv6 as the harmonization layer L2 Connectivity Agnostic of underlying physical layer technology OCF Stack (Wi-Fi, Ethernet, Thread) FEBRUARY 2021 OPEN CONNECTIVITY FOUNDATION 5 Security Fundamentals of OCF Secure device lifecycle Secure operation …is our end goal How do we get there? Our objectives: (D)TLS sessions used for non-discovery connections Confidentiality Authentication done as part of handshake Randomized identity bound to credential: Integrity • for PSK, identity is bound via 1-to-1 mapping Availability • for certificate, identity is in the Subject Name The risks we face: Fine grained access control done for CRUDN • Message interception/forgery operations on per-resource basis. Permission is • Spoofing/privilege escalation denied by default Wildcards and roles supported for scalability • Denial of service • Device hijack * (D)TLS = (Datagram) Transport Layer Security * PSK = Pairwise Secret Key * CRUDN = Create, Retrieve, Update, Delete, Notify FEBRUARY 2021 OPEN CONNECTIVITY FOUNDATION 7 Secure device lifecycle Secure provisioning …is configuration of Security Virtual Onboarding tool has full ownership and control over Resources by an authorized client, device during the ownership transfer procedure, which usually by the onboarding tool ends with installation of an Owner Credential SVRs contain sensitive data AMS/CMS have implicit control over their and require atomic updates, dedicated resources, and are responsible so all OCF devices maintain OBT for post-onboarding provisioning internal state machine CMS AMS Device Provisioning Status (pstat) is updated by the OBT services to trigger Onboarding tool (OBT) includes the state machine transitions: – DOTS for Device Ownership Transfer – CMS for Credential Management Unowned Owned – AMS for Access Rights Management DOTS – Mediator (optional) for Easy Setup or RFOTM RFPRO Device-to-Cloud provisioning SRESET Main SVRs RESET RFNOP cred pstat doxm acl2 FEBRUARY 2021 OPEN CONNECTIVITY FOUNDATION 8 OCF Specification Overview Technical Principles OCF 2.2.2 Release February 2021 Technical Principles for an Internet of Things Ecosystem Scope of IoT Vertical Profiles Smart Home Industrial Healthcare … Controller Group ID & Protocol management Addressing Bridge/GW Baseline Common Device Resource CRUDN Security Functionality Model management Discovery Messaging Streaming Controller App Cloud Interface Connectivity Wi-Fi BT/BLE Thread … Cloud Servers Cloud Servers service #1 service #2 domain domain Things Controller Controller Local Control Remote Control Server to Server February 2021 Copyright © 2021 Open Connectivity Foundation, Inc. All Rights Reserved. 11 Approaches to definition of various Things • By defining resources of things and • By defining functions/operations its properties of things BinarySwitch SetSwitch - true(on), false(off) - Power(bool) Resources Dimming - properties SetDimmingLevel Functions - dimmingSetting (int) - Input & Output Parameters - step (int) - dimmingSetting(int) - range [0-100] Brightness SetBrightness - brightness (int) - brightness (int) e.g., Light bulb - (no Verbs) + Objects - (Verbs + Objects) *Fixed set of verbs (CRUDN) from transport layer will be used - RPC model - Resource model in RESTful Architecture (e.g., W3C, CSEP, etc.) February 2021 Copyright © 2021 Open Connectivity Foundation, Inc. All Rights Reserved. 12 Support of Constrained Things Class 2 Devices as Defined by RFC 7228 • Less overhead/ Less Traffic • Minimize CPU Load, Memory impacts, Traffic and Bandwidth - Compact header - Binary protocol - Compressed encoding of payload • Low Complexity - Simple Resource Model > Short URI (Late Binding w/ resource type defined) > Broad and Shallow Hierarchy February 2021 Copyright © 2021 Open Connectivity Foundation, Inc. All Rights Reserved. 13 Support of Multiple Verticals • Legacy vertical services usually designed as silos Home Health Domain No common way to communicate among them Insulin level low! Need Help! … Health Home Industrial Health Home Industrial … Discovery Common Platform Addressing Messaging Health Home Industrial Security … • A common platform provides a foundation Smart Home Domain for vertical services to collaborate and interwork by providing common services and data models February 2021 Copyright © 2021 Open Connectivity Foundation, Inc. All Rights Reserved. 14 Conformance & Certification • Conformance test - Each device proves conformance to specifications Conformance Certificate Issue Test CERTIFIED & Logo Licensing Device under Test • Certification Scope Optional Optional Tested Optional Open Open Mandatory Optional Spec Source Source (in spec, cert & committed Spec Features Features Features in Open Source Project) Features Open Source Specification February 2021 Copyright © 2021 Open Connectivity Foundation, Inc. All Rights Reserved. 15 Introduction to the Open Connectivity Foundation Introduction to OCF – Optimized for IoT RESTful Architecture Common Certification Platform Program CoAP for Best In Class Constrained Security Devices February 2021 Copyright © 2021 Open Connectivity Foundation, Inc. All Rights Reserved. 17 OCF Areas of Technology Development • Core Architecture • Fundamental resource framework • Discovery • CRUDN • Transport Binds • Security • Resource Models (vertical agnostic) • Device Profiles • Smart Home • Health • Ecosystem Bridging • Cloud Services February 2021 Copyright © 2021 Open Connectivity Foundation, Inc. All Rights Reserved. 18 OCF Key Concepts (1/2) • Dedicated and optimized protocols for IoT (e.g. CoAP) • Specific considerations for constrained devices • Fully compliant towards RESTful architecture • Built-in discovery and subscription mechanisms • Standards and Open Source to allow flexibility creating solutions • Able to address all types of devices, form-factors, companies and markets with the widest possibility of options • Open Source is just one implementation to solve a problem February 2021 Copyright © 2021 Open Connectivity Foundation, Inc. All Rights Reserved. 19 OCF Key Concepts (2/2) • Certification testing for interoperability • Formal conformance testing for device validation to specifications • Plugfest testing for product interoperability • Certification and Logo program • Products with the OCF Logo ensure OCF specifications are met • Logo reflects being part of an ecosystem of interoperable products February 2021 Copyright © 2021 Open Connectivity Foundation, Inc. All Rights Reserved. 20 Licensing • For OCF Core Technology • OCF Intellectual Property Rights (IPR) Policy : RAND-Z • IoTivity and plgd-dev Open Source : Apache 2.0 • For Domain Work Groups • Defined on a per WG basis • The Licensing and IPR policy must be clear and readily understandable and ensures that these