The objective of this course is: The objective of this course is

IETF (SIMPLE WG): Privacy policy requirements (Geopriv, RFC 3693)

• IETF (SIMPLE WG): Privacy policy requirements (Geopriv, RFC 3693)

• Authentication/Authorization of watchers
• Selective information: ability to specify what parts of presence information are given to watchers
• Differential information: ability to distribute different presence information to different watchers
• Authorization policy for anonymous subscriptions (cf. anonymity in RFC 3323)
• National policy overrides user’s policy

• Authorization Policy = set of rules: (conditions, actions, transformations) (action + transformation = permission)

• The Authorization Policy is a (very) sensitive information => needs protection!

• Issue: enable a presence server to filter and distribute presence information while hiding its actual value (Singh at al., 2006)