<?xml version="1.0" encoding="UTF-8"?>
  <?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
  <!-- generated by https://github.com/cabo/kramdown-rfc2629 version 1.3.14 -->

<!DOCTYPE rfc SYSTEM "rfc2629.dtd" [
]>

<?rfc symrefs="yes"?>
<?rfc sortrefs="yes"?>
<?rfc strict="yes"?>
<?rfc compact="yes"?>
<?rfc toc="yes"?>

<rfc ipr="trust200902" docName="draft-toutain-lpwan-sid-allocation-01" category="std">

  <front>
    <title abbrev="SCHC AC">SCHC Rule Access Control</title>

    <author initials="A." surname="Minaburo" fullname="Ana Minaburo">
      <organization>Acklio</organization>
      <address>
        <postal>
          <street>1137A avenue des Champs Blancs</street>
          <city>35510 Cesson-Sevigne Cedex</city>
          <country>France</country>
        </postal>
        <email>ana@ackl.io</email>
      </address>
    </author>
    <author initials="L." surname="Toutain" fullname="Laurent Toutain">
      <organization>Institut MINES TELECOM; IMT Atlantique</organization>
      <address>
        <postal>
          <street>2 rue de la Chataigneraie</street> <street>CS 17607</street>
          <city>35576 Cesson-Sevigne Cedex</city>
          <country>France</country>
        </postal>
        <email>Laurent.Toutain@imt-atlantique.fr</email>
      </address>
    </author>

    <date year="2023" month="February" day="20"/>

    
    <workgroup>lpwan Working Group</workgroup>
    

    <abstract>


<t>blabla</t>



    </abstract>


  </front>

  <middle>


<section anchor="introduction" title="Introduction">

<t>RFC9363 defines a YANG Data Model for SCHC rules. <xref target="I-D.ietf-core-sid"/> specifies the process for SID allocation and management. This document discuss of the SID allocation for RFC9363.</t>

</section>
<section anchor="schc-yang-data-model" title="SCHC YANG Data Model">

<t>The version @2023-01-18 of the SCHC YANG Data Model published in RFC 9363 contains 136 SIDs (92 for identities, 2 for features and 42 for data). <xref target="I-D.ietf-core-sid"/> indicates that the SID range for YANG Data Model specified in RFC is between 1000 and 59 000 and the maximum request pool SHOULD NOT exceed 1000. The draft also gives some pre allocated values.</t>

<t>Since SIDs will be used either to represent unique identity contained
in data model and also leafs (data) forming this data model, it could
be wise to distinguish between identifiers and data.</t>

<t>Data structures are delta encoded and included as a CBOR element, 
the size depends of the value. Deltas between -24 and +23 are coded 
on a single byte. Deltas between -256 and +255 uses 2 bytes and larger 
values corresponding to the RFC SID range will be coded into 3 bytes. 
To optimize the CORECONF representation delta should be smaller as possible
for the more frequent leafs.</t>

<t>On the other hand identities are included in the CORECONF
representation and for the RFC SID range the size is constant and equal 
to 3 bytes.</t>

<section anchor="example" title="Example">
<figure anchor="Fig-sid"><artwork><![CDATA[
CORECONF 

A1                            # map(1)
   19 13E7                    # unsigned(5095)
   A1                         # map(1)
      01                      # unsigned(1)
      81                      # array(1)
         A1                   # map(1)
            04                # unsigned(4)
            82                # array(2)
               A7             # map(7)
                  01          # unsigned(1)
                  19 1397     # unsigned(5015)
                  05          # unsigned(5)
                  19 139A     # unsigned(5018)
                  06          # unsigned(6)
                  19 13CC     # unsigned(5068)
                  07          # unsigned(7)
                  04          # unsigned(4)
                  08          # unsigned(8)
                  01          # unsigned(1)
                  09          # unsigned(9)
                  19 13DB     # unsigned(5083)
                  0D          # unsigned(13)
                  81          # array(1)
                     A2       # map(2)
                        01    # unsigned(1)
                        00    # unsigned(0)
                        02    # unsigned(2)
                        41    # bytes(1)
                           06 # "\u0006"
               A7             # map(7)
                  01          # unsigned(1)
                  19 1397     # unsigned(5015)
                  05          # unsigned(5)
                  19 139A     # unsigned(5018)
                  06          # unsigned(6)
                  1A 001E8483 # unsigned(2000003)
                  07          # unsigned(7)
                  08          # unsigned(8)
                  08          # unsigned(8)
                  01          # unsigned(1)
                  09          # unsigned(9)
                  19 13DB     # unsigned(5083)
                  0D          # unsigned(13)
                  81          # array(1)
                     A2       # map(2)
                        01    # unsigned(1)
                        00    # unsigned(0)
                        02    # unsigned(2)
                        41    # bytes(1)
                           00 # "\u0000"

RESTCONF

{'ietf-schc:schc': {'rule': [{'entry': 
             [{'comp-decomp-action': 'ietf-schc:cda-not-sent',
               'direction-indicator': 'ietf-schc:di-bidirectional',
               'field-id': 'ietf-schc:fid-ipv6-version',
               'field-length': 4,
               'field-position': 1,
               'matching-operator': 'ietf-schc:mo-equal',
               'target-value': [{'index': 0, 'value': 'Bg=='}]},
              {'comp-decomp-action': 'ietf-schc:cda-not-sent',
               'direction-indicator': 'ietf-schc:di-bidirectional',
               'field-id': 'ietf-schc-oam:fid-icmpv6-type',
               'field-length': 8,
               'field-position': 1,
               'matching-operator': 'ietf-schc:mo-equal',
               'target-value': [{'index': 0,
               'value': 'gA=='}]} ]
         }]}
    }

]]></artwork></figure>

<t>The example <xref target="Fig-sid"/> gives the CORECONF structure as store in Python and its equivalent is ASCII with JSON.
The default SID numbering was used, starting from 5000 for SCHC Data Model defined in RFC9363 and 2000000 fr an experimental module for OAM.</t>

<t>We can see the delta encoding. The first SID 5095 represent “ietf-schc:schc”. “/ietf-schc:schc/rule” which is coded with a +1 since SID 5096 as been assigned. “/ietf-schc:schc/rule/entry” is coded with a delta of 4. Then 
a list of Field Description follows. +1 represents the leaf “ietf-schc:schc/rule/entry/comp-decomp-action” and the
value assigned to that keys contains the SID of “ietf-schc:cda-not-sent” identity.</t>

<t>Note that the second element contains a “field-id” belonging to the “ietf-schc-oam” module and the associate SID is 2000003.</t>

</section>
</section>
<section anchor="recommendation-for-sid-values" title="Recommendation for SID values">

<t>The SCHC YANG Data Model defined in RFC 9363 will be probably be augmented, to include for instance access control
data. To keep a compact representation, delta values must be kept as small. The LPWAN working group should not use the automatic SID numbering and provide a more optimal allocation scheme for augmentation of the SCHC YANG DM.</t>

<t>A first recommendation is to avoid to merge data and identity to limit the delta encoding. The distance between this two sections can be 255 SID to allow deltas on 2 bytes.</t>

<t>The second recommendation is to leave some unused SID around SCHC rules to allow augmentation.</t>

</section>
<section anchor="sid-for-data" title="SID for data">

<t>We propose to use a range of 100 values for the YANG DM defined in RFC9263. The next range could be used for instance by the access control Data Model which extend RFC9363.</t>

<t>It is also worth noting that in the current SID allocation based on alphabetical order places rule-id-value and rule-id-length, rule-nature from the 33 to 35 position. CBOR encoding will be on two bytes for each of the values. Since these three values are present in all the rules, a smaller value will optimize the CORECONF representation.</t>

</section>
<section anchor="sid-allocation" title="SID allocation">

<t>We propose the following allocation scheme for RFC9363:</t>

<figure><artwork type="~"><![CDATA[
5000    - 5022 : RESERVED FOR /ietf-schc:schc 

5023    module ietf-schc
5024    data /ietf-schc:schc

5025    - 5046 : RESERVED FOR /ietf-schc:schc AND /ietf-schc:schc/rule

5047    data /ietf-schc:schc/rule
5048    data /ietf-schc:schc/rule/rule-id-length
5049    data /ietf-schc:schc/rule/rule-id-value
5050    data /ietf-schc:schc/rule/rule-nature

5051    - 5069 : RESERVED FOR /ietf-schc:schc/rule AND /ietf-schc:schc/rule/entry

5070    data /ietf-schc:schc/rule/entry
5071    data /ietf-schc:schc/rule/entry/comp-decomp-action
5072    data /ietf-schc:schc/rule/entry/comp-decomp-action-value
5073    data /ietf-schc:schc/rule/entry/comp-decomp-action-value/index
5074    data /ietf-schc:schc/rule/entry/comp-decomp-action-value/value
5075    data /ietf-schc:schc/rule/entry/direction-indicator
5076    data /ietf-schc:schc/rule/entry/field-id
5077    data /ietf-schc:schc/rule/entry/field-length
5078    data /ietf-schc:schc/rule/entry/field-position
5079    data /ietf-schc:schc/rule/entry/matching-operator
5080    data /ietf-schc:schc/rule/entry/matching-operator-value
5081    data /ietf-schc:schc/rule/entry/matching-operator-value/index
5082    data /ietf-schc:schc/rule/entry/matching-operator-value/value
5083    data /ietf-schc:schc/rule/entry/target-value
5084    data /ietf-schc:schc/rule/entry/target-value/index
5085    data /ietf-schc:schc/rule/entry/target-value/value

5086    - 5094 : RESERVED

5094    data /ietf-schc:schc/rule/ack-behavior
5095    data /ietf-schc:schc/rule/direction
5096    data /ietf-schc:schc/rule/dtag-size
5097    data /ietf-schc:schc/rule/fcn-size
5098    data /ietf-schc:schc/rule/fragmentation-mode
5099    data /ietf-schc:schc/rule/inactivity-timer
5100    data /ietf-schc:schc/rule/inactivity-timer/ticks-duration
5101    data /ietf-schc:schc/rule/inactivity-timer/ticks-numbers
5102    data /ietf-schc:schc/rule/l2-word-size
5103    data /ietf-schc:schc/rule/max-ack-requests
5104    data /ietf-schc:schc/rule/max-interleaved-frames
5105    data /ietf-schc:schc/rule/maximum-packet-size
5106    data /ietf-schc:schc/rule/rcs-algorithm
5107    data /ietf-schc:schc/rule/retransmission-timer
5108    data /ietf-schc:schc/rule/retransmission-timer/ticks-duration
5109    data /ietf-schc:schc/rule/retransmission-timer/ticks-numbers

5110    - 5115 : RESERVED FOR TIMER 

5116    data /ietf-schc:schc/rule/tile-in-all-1
5117    data /ietf-schc:schc/rule/tile-size
5118    data /ietf-schc:schc/rule/w-size
5119    data /ietf-schc:schc/rule/window-size

5120    - 5299 : RESERVED FOR 2 BYTES DELTAS

5300    identity ack-behavior-after-all-0
5301    identity ack-behavior-after-all-1
5302    identity ack-behavior-base-type
5303    identity ack-behavior-by-layer2
5304    identity all-1-data-base-type
5305    identity all-1-data-no
5306    identity all-1-data-sender-choice
5307    identity all-1-data-yes
5308    identity cda-appiid
5309    identity cda-base-type
5310    identity cda-compute
5311    identity cda-deviid
5312    identity cda-lsb
5313    identity cda-mapping-sent
5314    identity cda-not-sent
5315    identity cda-value-sent
5316    identity di-base-type
5317    identity di-bidirectional
5318    identity di-down
5319    identity di-up
5320    identity fid-base-type
5321    identity fid-coap-base-type
5322    identity fid-coap-code
5323    identity fid-coap-code-class
5324    identity fid-coap-code-detail
5325    identity fid-coap-mid
5326    identity fid-coap-option
5327    identity fid-coap-option-accept
5328    identity fid-coap-option-block1
5329    identity fid-coap-option-block2
5330    identity fid-coap-option-content-format
5331    identity fid-coap-option-etag
5332    identity fid-coap-option-if-match
5333    identity fid-coap-option-if-none-match
5334    identity fid-coap-option-location-path
5335    identity fid-coap-option-location-query
5336    identity fid-coap-option-max-age
5337    identity fid-coap-option-no-response
5338    identity fid-coap-option-observe
5339    identity fid-coap-option-oscore-flags
5340    identity fid-coap-option-oscore-kid
5341    identity fid-coap-option-oscore-kidctx
5342    identity fid-coap-option-oscore-piv
5343    identity fid-coap-option-proxy-scheme
5344    identity fid-coap-option-proxy-uri
5345    identity fid-coap-option-size1
5346    identity fid-coap-option-size2
5347    identity fid-coap-option-uri-host
5348    identity fid-coap-option-uri-path
5349    identity fid-coap-option-uri-port
5350    identity fid-coap-option-uri-query
5351    identity fid-coap-tkl
5352    identity fid-coap-token
5353    identity fid-coap-type
5354    identity fid-coap-version
5355    identity fid-ipv6-appiid
5356    identity fid-ipv6-appprefix
5357    identity fid-ipv6-base-type
5358    identity fid-ipv6-deviid
5359    identity fid-ipv6-devprefix
5360    identity fid-ipv6-flowlabel
5361    identity fid-ipv6-hoplimit
5362    identity fid-ipv6-nextheader
5363    identity fid-ipv6-payload-length
5364    identity fid-ipv6-trafficclass
5365    identity fid-ipv6-trafficclass-ds
5366    identity fid-ipv6-trafficclass-ecn
5367    identity fid-ipv6-version
5368    identity fid-oscore-base-type
5369    identity fid-udp-app-port
5370    identity fid-udp-base-type
5371    identity fid-udp-checksum
5372    identity fid-udp-dev-port
5373    identity fid-udp-length
5374    identity fl-base-type
5375    identity fl-token-length
5376    identity fl-variable
5377    identity fragmentation-mode-ack-always
5378    identity fragmentation-mode-ack-on-error
5379    identity fragmentation-mode-base-type
5380    identity fragmentation-mode-no-ack
5381    identity mo-base-type
5382    identity mo-equal
5383    identity mo-ignore
5384    identity mo-match-mapping
5385    identity mo-msb
5386    identity nature-base-type
5387    identity nature-compression
5388    identity nature-fragmentation
5389    identity nature-no-compression
5390    identity rcs-algorithm-base-type
5391    identity rcs-crc32
5392    feature compression
5393    feature fragmentation

5394    - 5500 : RESERVED FOR IDENTITY
]]></artwork></figure>

<t>For instance <xref target="I-D.toutain-lpwan-access-control"/> augments the model with “ac-modify-set-of-rules” at the top level, “ac-modify-compression-rule” for each compression rule, “ac-modify-field” in each Field Description of a compression rule and finally “ac-modify-timers” in fragmentation rules. Delta representation will be on 1 byte.</t>

<t>The following SIDs could be assigned:</t>

<t><list style="symbols">
  <t>5022: ac-modify-set-of-rules</t>
  <t>5051: ac-modify-compression-rule</t>
  <t>5069: ac-modify-field</t>
  <t>5068: ac-modify-timers</t>
</list></t>

<t><xref target="I-D.ietf-lpwan-schc-compound-ack"/> augments the model for fragmentation, with 3 identity and two leaves. 
identities can get a SID 5394 to 5396 and the two SIDs for the leaves can be 5120 and 5122. There delta representations will be coded on 2 bytes.</t>

</section>


  </middle>

  <back>

    <references title='Normative References'>





<reference  anchor="RFC8824" target='https://www.rfc-editor.org/info/rfc8824'>
<front>
<title>Static Context Header Compression (SCHC) for the Constrained Application Protocol (CoAP)</title>
<author initials='A.' surname='Minaburo' fullname='A. Minaburo'><organization /></author>
<author initials='L.' surname='Toutain' fullname='L. Toutain'><organization /></author>
<author initials='R.' surname='Andreasen' fullname='R. Andreasen'><organization /></author>
<date year='2021' month='June' />
<abstract><t>This document defines how to compress Constrained Application Protocol (CoAP) headers using the Static Context Header Compression and fragmentation (SCHC) framework. SCHC defines a header compression mechanism adapted for Constrained Devices. SCHC uses a static description of the header to reduce the header's redundancy and size. While RFC 8724 describes the SCHC compression and fragmentation framework, and its application for IPv6/UDP headers, this document applies SCHC to CoAP headers. The CoAP header structure differs from IPv6 and UDP, since CoAP uses a flexible header with a variable number of options, themselves of variable length. The CoAP message format is asymmetric: the request messages have a header format different from the format in the response messages. This specification gives guidance on applying SCHC to flexible headers and how to leverage the asymmetry for more efficient compression Rules.</t></abstract>
</front>
<seriesInfo name='RFC' value='8824'/>
<seriesInfo name='DOI' value='10.17487/RFC8824'/>
</reference>



<reference  anchor="RFC8341" target='https://www.rfc-editor.org/info/rfc8341'>
<front>
<title>Network Configuration Access Control Model</title>
<author initials='A.' surname='Bierman' fullname='A. Bierman'><organization /></author>
<author initials='M.' surname='Bjorklund' fullname='M. Bjorklund'><organization /></author>
<date year='2018' month='March' />
<abstract><t>The standardization of network configuration interfaces for use with the Network Configuration Protocol (NETCONF) or the RESTCONF protocol requires a structured and secure operating environment that promotes human usability and multi-vendor interoperability.  There is a need for standard mechanisms to restrict NETCONF or RESTCONF protocol access for particular users to a preconfigured subset of all available NETCONF or RESTCONF protocol operations and content.  This document defines such an access control model.</t><t>This document obsoletes RFC 6536.</t></abstract>
</front>
<seriesInfo name='STD' value='91'/>
<seriesInfo name='RFC' value='8341'/>
<seriesInfo name='DOI' value='10.17487/RFC8341'/>
</reference>

<reference anchor="I-D.ietf-lpwan-schc-yang-data-model" target="https://www.ietf.org/archive/id/draft-ietf-lpwan-schc-yang-data-model-21.txt">
  <front>
    <title>Data Model for Static Context Header Compression (SCHC)</title>
    <author fullname="Ana Minaburo" initials="A." surname="Minaburo">
      <organization>Acklio</organization>
    </author>
    <author fullname="Laurent Toutain" initials="L." surname="Toutain">
      <organization>Institut MINES TELECOM; IMT Atlantique</organization>
    </author>
    <date day="9" month="October" year="2022"/>
    <abstract>
      <t>This document describes a YANG data model for the SCHC (Static Context Header Compression) compression and fragmentation rules. This document formalizes the description of the rules for better interoperability between SCHC instances either to exchange a set of rules or to modify some rules parameters.</t>
    </abstract>
  </front>
  <seriesInfo name="Internet-Draft" value="draft-ietf-lpwan-schc-yang-data-model-21"/>
</reference>

<reference anchor="I-D.ietf-core-sid" target="https://www.ietf.org/archive/id/draft-ietf-core-sid-19.txt">
  <front>
    <title>YANG Schema Item iDentifier (YANG SID)</title>
    <author fullname="Michel Veillette" initials="M." surname="Veillette">
      <organization>Trilliant Networks Inc.</organization>
    </author>
    <author fullname="Alexander Pelov" initials="A." surname="Pelov">
      <organization>Acklio</organization>
    </author>
    <author fullname="Ivaylo Petrov" initials="I." surname="Petrov">
      <organization>Google Switzerland GmbH</organization>
    </author>
    <author fullname="Carsten Bormann" initials="C." surname="Bormann">
      <organization>Universität Bremen TZI</organization>
    </author>
    <author fullname="Michael Richardson" initials="M." surname="Richardson">
      <organization>Sandelman Software Works</organization>
    </author>
    <date day="26" month="July" year="2022"/>
    <abstract>
      <t>YANG Schema Item iDentifiers (YANG SID) are globally unique 63-bit unsigned integers used to identify YANG items, as a more compact method to identify YANG items that can be used for efficiency and in constrained environments (RFC 7228). This document defines the semantics, the registration, and assignment processes of YANG SIDs for IETF managed YANG modules. To enable the implementation of these processes, this document also defines a file format used to persist and publish assigned YANG SIDs. // The present version (-19) adds in draft text about objectives, // parties, and roles. This attempts to record discussions at side // meetings before, at, and after IETF 113.</t>
    </abstract>
  </front>
  <seriesInfo name="Internet-Draft" value="draft-ietf-core-sid-19"/>
</reference>

<reference anchor="I-D.toutain-lpwan-access-control" target="https://datatracker.ietf.org/api/v1/doc/document/draft-toutain-lpwan-access-control/">
  <front>
    <title>SCHC Rule Access Control</title>
    <author fullname="Ana Minaburo"/>
    <author fullname="Laurent Toutain"/>
    <author fullname="Ivan Martinez"/>
    <date day="20" month="February" year="2023"/>
    <abstract>
      <t>The framework for SCHC defines an abstract view of the rules,
   formalized with through a YANG Data Model.  In its original
   description rules are static and share by 2 entities.  The use of
   YANG authorizes rules to be uploaded or modified in a SCHC instance
   and leads to some possible attacks, if the changes are not
   controlled.  This document summarizes some possible attacks and
   define augmentation to the existing Data Mode, to restrict the
   changes in the rule.</t>
    </abstract>
  </front>
  <seriesInfo name="Internet-Draft" value="draft-toutain-lpwan-access-control-01"/>
</reference>

<reference anchor="I-D.ietf-lpwan-schc-compound-ack" target="https://datatracker.ietf.org/doc/html/draft-ietf-lpwan-schc-compound-ack-11">
  <front>
    <title>SCHC Compound ACK</title>
    <author fullname="Juan-Carlos Zúñiga" initials="J. C." surname="Zúñiga">
      <organization>Cisco</organization>
    </author>
    <author fullname="Carles Gomez" initials="C." surname="Gomez">
      <organization>Universitat Politecnica de Catalunya</organization>
    </author>
    <author fullname="Sergio Aguilar" initials="S." surname="Aguilar">
      <organization>Universitat Politecnica de Catalunya</organization>
    </author>
    <author fullname="Laurent Toutain" initials="L." surname="Toutain">
      <organization>IMT-Atlantique</organization>
    </author>
    <author fullname="Sandra Cespedes" initials="S." surname="Cespedes">
      <organization>Concordia University</organization>
    </author>
    <author fullname="Diego S. Wistuba La Torre" initials="D. S. W. L." surname="Torre">
      <organization>NIC Labs, Universidad de Chile</organization>
    </author>
    <date day="18" month="February" year="2023"/>
    <abstract>
      <t>The present document describes an update to the SCHC (Static Context Header Compression and fragmentation) protocol RFC8724. It defines a SCHC Compound ACK message format and procedure, which are intended to reduce the number of response transmissions (i.e., SCHC ACKs) in the ACK-on-Error mode, by accumulating bitmaps of several windows in a single SCHC message (i.e., the SCHC Compound ACK). Both message format and procedure are generic, so they can be used, for instance, by any of the four Low Power Wide Area Networks (LPWANs) technologies defined in RFC8376, being Sigfox, LoRaWAN, NB- IoT and IEEE 802.15.4w.</t>
    </abstract>
  </front>
  <seriesInfo name="Internet-Draft" value="draft-ietf-lpwan-schc-compound-ack-11"/>
</reference>




    </references>



<section anchor="security-considerations" title="Security Considerations">

<t>TBD</t>

</section>
<section anchor="iana-considerations" title="IANA Considerations">

<t>TBD</t>

</section>


  </back>

<!-- ##markdown-source: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-->

</rfc>

