Draft: draft-ietf-rats-architecture

Commentary: Signed - off - by :
Paragraph (version A):
In the case, the Relying Party is the Watch Dog timer in the TPM/
secure enclave itself, as described in TCGarch section 43.3.  The
Attestation Results are returned to the device, and provided to the
enclave.
Paragraph (version A):
If the watch dog does not receive regular, and fresh, Attestation
Results as to the systems' health, then it forces a reboot.
Paragraph (version B):
In the case, the Relying Party is the watchdog timer in the TPM/
secure enclave itself, as described in TCGarch section 43.3.  The
Attestation Results are returned to the device, and provided to the
enclave.
Paragraph (version B):
If the watchdog does not receive regular, and fresh, Attestation
Results as to the systems' health, then it forces a reboot.
Paragraph (version A):
The Verifier uses the Evidence, and any Endorsements from Endorsers,
by applying an Evidence Appraisal Policy to assess the
trustworthiness of the Attester, and generates Attestation Results
for use by Relying Parties.  The Evidence Appraisal Policy might be
obtained from an Endorser along with the Endorsements, or might be
obtained via some other mechanism such as being configured in the
Verifier by an administrator.
Paragraph (version A):
The Relying Party uses Attestation Results by applying its own
Appraisal Policy to make application-specific decisions such as
authorization decisions.  The Attestation Result Appraisal Policy
might, for example, be configured in the Relying Party by an
administrator.
Paragraph (version B):
The Verifier uses the Evidence, and any Endorsements from Endorsers,
by applying an Evidence Appraisal Policy to assess the
trustworthiness of the Attester, and generates Attestation Results
for use by Relying Parties.  The Appraisal Policy for Evidence might
be obtained from an Endorser along with the Endorsements, or might be
obtained via some other mechanism such as being configured in the
Verifier by an administrator.
Paragraph (version B):
The Relying Party uses Attestation Results by applying its own
Appraisal Policy to make application-specific decisions such as
authorization decisions.  The Appraisal Policy for Attestation
Results might, for example, be configured in the Relying Party by an
administrator.
Paragraph (version A):
dataflow shows a basic model for communication between an Attester, a
Verifier, and a Relying Party.  The Attester conveys its Evidence to
the Verifier for appraisal, and the Relying Party gets the
Attestation Results from the Verifier.  There are multiple other
possible models.  This section includes some reference models, but
this is not intended to be a restrictive list, and other variations
may exist.
Paragraph (version B):
dataflow shows a basic model for communication between an Attester, a
Verifier, and a Relying Party.  The Attester conveys its Evidence to
the Verifier for appraisal, and the Relying Party gets the
Attestation Result from the Verifier.  There are multiple other
possible models.  This section includes some reference models, but
this is not intended to be a restrictive list, and other variations
may exist.
Paragraph (version A):
There are three ways in which the process may fail.  First, the
Verifier may refuse to issue the Attestation Result due to some error
in processing, or some missing input to the Verifier.  The second way
in which the process may fail is when the resulting Result is
examined by the Relying Party, and based upon the Appraisal Policy,
the result does not pass the policy.  The third way is when the
Verifier is unreachable.
Paragraph (version B):
There are three ways in which the process may fail.  First, the
Verifier may refuse to issue the Attestation Result due to some error
in processing, or some missing input to the Verifier.  The second way
in which the process may fail is when the resulting Attestation
Result is examined by the Relying Party, and based upon the Appraisal
Policy, the result does not pass the policy.  The third way is when
the Verifier is unreachable.