EAP-Authorization IETF 56 (draft-grayson-eap-authorisation-01.txt)

1
EAP-AuthorizationIETF 56(draft-grayson-eap-autho
risation-01.txt)

• Joe Salowey
• (jsalowey_at_cisco.com)
• Mark Grayson
• (mgrayson_at_cisco.com)

2
Motivation

• Request authorization for services and session
  attributes
• Peer indicates what is desired, server authorizes
• Server indicates service and attributes, peer
  authorizes

3
EAP Authorization

• Uses EAP-TLV chained after authentication
• Single TLV type encapsulates different
  authorization attributes
• Authorization data may be sensitive -requires
  encryption and integrity protection
  (PEAP,EAP-TTLS, Protected-TLV)
• Current Draft describes tunnel authorization,
  other applications possible

4
Open Issues

• Additional use cases
• Single TLV approach?
• Attribute format
• Standardization of attribute format types