@techreport{selander-core-access-control-02, number = {draft-selander-core-access-control-02}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-selander-core-access-control/02/}, author = {Göran Selander and Mohit Sethi and Ludwig Seitz}, title = {{Access Control Framework for Constrained Environments}}, pagetotal = 24, year = 2014, month = feb, day = 14, abstract = {The Constrained Application Protocol (CoAP) is a light-weight web transfer protocol designed to be used in constrained environments. Transport layer security for CoAP has been addressed with a DTLS binding for CoAP. This document describes a generic and dynamic access control framework suitable for constrained devices e.g. using CoAP and DTLS. The framework builds on well known paradigms for access control, externalizing authorization decision making to unconstrained nodes while performing authorization decision enforcement and verification of local conditions in constrained devices.}, }