<?xml version="1.0" encoding="UTF-8"?>
  <?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
  <!-- generated by https://github.com/cabo/kramdown-rfc version 1.6.24 (Ruby 3.0.2) -->


<!DOCTYPE rfc  [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">

]>

<?rfc strict="yes"?>
<?rfc compact="yes"?>

<rfc ipr="trust200902" docName="draft-toutain-lpwan-sid-allocation-02" category="std" consensus="true" tocInclude="true" sortRefs="true" symRefs="true">
  <front>
    <title abbrev="SCHC AC">SCHC Rule Access Control</title>

    <author initials="A." surname="Minaburo" fullname="Ana Minaburo">
      <organization>Acklio</organization>
      <address>
        <postal>
          <street>1137A avenue des Champs Blancs</street>
          <city>35510 Cesson-Sevigne Cedex</city>
          <country>France</country>
        </postal>
        <email>ana@ackl.io</email>
      </address>
    </author>
    <author initials="L." surname="Toutain" fullname="Laurent Toutain">
      <organization>Institut MINES TELECOM; IMT Atlantique</organization>
      <address>
        <postal>
          <street>2 rue de la Chataigneraie</street> <street>CS 17607</street>
          <city>35576 Cesson-Sevigne Cedex</city>
          <country>France</country>
        </postal>
        <email>Laurent.Toutain@imt-atlantique.fr</email>
      </address>
    </author>

    <date year="2023" month="February" day="23"/>

    
    <workgroup>lpwan Working Group</workgroup>
    

    <abstract>


<t>blabla</t>



    </abstract>



  </front>

  <middle>


<section anchor="introduction"><name>Introduction</name>

<t>RFC9363 defines a YANG Data Model for SCHC rules. <xref target="I-D.ietf-core-sid"/> specifies the process for SID allocation and management. This document discuss of the SID allocation for RFC9363.</t>

</section>
<section anchor="schc-yang-data-model"><name>SCHC YANG Data Model</name>

<t>The version @2023-01-18 of the SCHC YANG Data Model published in the RFC 9363 contains 136 SIDs (92 for identities, 2 for features and 42 for data). <xref target="I-D.ietf-core-sid"/> indicates that the SID range for the YANG Data Model specified in RFC is between 1000 and 59 000 and that the maximum request pool SHOULD NOT exceed 1000. The draft also gives some pre allocated values.</t>

<t>Since SIDs will be used either to represent unique identity contained
in the data model and also leaves (data) forming this data model, it could
be wise to distinguish between identifiers and data.</t>

<t>Data structures are delta encoded and included as a CBOR element, 
the size depends on the value. Deltas between -24 and +23 are encoded 
on a single byte. Deltas between -256 and +255 use 2 bytes and larger 
values corresponding to the RFC SID range will be encoded into 3 bytes. 
To optimize the CORECONF representation delta should be smaller as possible
for the more frequent leaves.</t>

<t>On the other hand identities are included in the CORECONF
representation and for the RFC SID range the size is constant and equal 
to 3 bytes.</t>

<section anchor="example"><name>Example</name>
<figure anchor="Fig-sid"><artwork><![CDATA[
CORECONF 

{5095: {1: [{4: 
        [{1: 5015, 
          5: 5018, 
          6: 5068, 
          7: 4, 
          8: 1, 
          9: 5083, 
          13: [{1: 0, 2: h'06'}]}, 
         {1: 5015, 
          5: 5018, 
          6: 2000003, 
          7: 8, 
          8: 1, 
          9: 5083, 
          13: [{1: 0, 2: h'00'}]}]
    }]}
}


RESTCONF

{"ietf-schc:schc": {"rule": [{"entry": 
             [{"comp-decomp-action": "ietf-schc:cda-not-sent",
               "direction-indicator": "ietf-schc:di-bidirectional",
               "field-id": "ietf-schc:fid-ipv6-version",
               "field-length": 4,
               "field-position": 1,
               "matching-operator": "ietf-schc:mo-equal",
               "target-value": [{"index": 0, "value": "Bg=="}]},
              {"comp-decomp-action": "ietf-schc:cda-not-sent",
               "direction-indicator": "ietf-schc:di-bidirectional",
               "field-id": "ietf-schc-oam:fid-icmpv6-type",
               "field-length": 8,
               "field-position": 1,
               "matching-operator": "ietf-schc:mo-equal",
               "target-value": [{"index": 0, "value": "gA=="}]} ]
         }]}
    }

]]></artwork></figure>

<t>The example in <xref target="Fig-sid"/> gives a CORECONF structure transposed the CBOR diagnostic notation and its equivalent in RESTCONF with JSON. For readability and compactness, this example is edited and do not encode a full rule as defined in RFC9363.</t>

<t>The default SID numbering produced by pyang is used, starting from 5000 for SCHC Data Model defined in RFC9363 and 2000000 for an experimental module for OAM.</t>

<t>We can see the delta encoding. The first SID 5095 represents "ietf-schc:schc". "/ietf-schc:schc/rule" which is coded with a +1 since SID 5096 has been assigned. "/ietf-schc:schc/rule/entry" is coded with a delta of 4. Then 
a list of Field Description follows. +1 represents the leaf "ietf-schc:schc/rule/entry/comp-decomp-action" and the
value assigned to that key contains the SID of "ietf-schc:cda-not-sent" identity.</t>

<t>Note that the second element contains a "field-id" belonging to the "ietf-schc-oam" module and the associate SID is 2000003.</t>

</section>
</section>
<section anchor="recommendation-for-sid-values"><name>Recommendation for SID values</name>

<t>The SCHC YANG Data Model defined in RFC 9363 will probably be augmented, to include for instance access control
data. To keep a compact representation, delta values must be kept as small as possible. The LPWAN working group should not use the automatic SID numbering and provide a more optimal allocation scheme for augmentation of the SCHC YANG Data Model.</t>

<t>A first recommendation is to avoid merging data and identity in order to limit the delta encoding. The distance between these two sections can be 255 SID to allow deltas on 2 bytes.</t>

<t>The second recommendation is to leave some unused SID around SCHC rules to allow augmentation.</t>

</section>
<section anchor="sid-for-data"><name>SID for data</name>

<t>We propose to use a range of 300 values for the YANG Data Model defined in RFC9263, which introduce room for future augmentation of the Data Model, such as <xref target="I-D.toutain-lpwan-access-control"/> or <xref target="I-D.ietf-lpwan-schc-compound-ack"/>. This will break the automatic allocation process done by pyang and based on the nature of the SID and the alphabetical order.</t>

<t>It is also worth noting that in the current SID allocation based on alphabetical order places rule-id-value and rule-id-length, rule-nature from the 33 to 35 position. CBOR encoding will be on two bytes for each of the values. Since these three values are present in all the rules, a smaller value will optimize the CORECONF representation.</t>

<t>The allocation algorithm is the following:</t>

<t><list style="symbols">
  <t>leaves between containers and list a maximal distance of 23 SIDS. Positive and negative deltas will be encoded on 1 byte.</t>
  <t>fill this gap with the more common values defined in the container or the list</t>
  <t>keep unused values for future augmentations.</t>
  <t>a guard of 255 after the last list will be kept unused before allocating identities. This range allow a delta encoded on 2 bytes.</t>
</list></t>

<t>The LPWAN group will receive an range of SID values (we suppose starting at 5000). The SIDs will be allocated following the previous algorithm.</t>

<t>Other RFCs modifying the SCHC YANG Data Model will include a YANG module. The lpwan WG will decide of the SID allocation and produce a SID file with the mapping.</t>

</section>
<section anchor="sid-allocation"><name>SID allocation</name>

<t>We propose the following allocation scheme for RFC9363:</t>

<figure><sourcecode type="~"><![CDATA[
5000    - 5022 : RESERVED FOR /ietf-schc:schc 

5023    module ietf-schc
5024    data /ietf-schc:schc

5025    - 5046 : RESERVED FOR /ietf-schc:schc AND /ietf-schc:schc/rule

5047    data /ietf-schc:schc/rule
5048    data /ietf-schc:schc/rule/rule-id-length
5049    data /ietf-schc:schc/rule/rule-id-value
5050    data /ietf-schc:schc/rule/rule-nature

5051    - 5069 : RESERVED FOR /ietf-schc:schc/rule AND /ietf-schc:schc/rule/entry

5070    data /ietf-schc:schc/rule/entry
5071    data /ietf-schc:schc/rule/entry/comp-decomp-action
5072    data /ietf-schc:schc/rule/entry/comp-decomp-action-value
5073    data /ietf-schc:schc/rule/entry/comp-decomp-action-value/index
5074    data /ietf-schc:schc/rule/entry/comp-decomp-action-value/value
5075    data /ietf-schc:schc/rule/entry/direction-indicator
5076    data /ietf-schc:schc/rule/entry/field-id
5077    data /ietf-schc:schc/rule/entry/field-length
5078    data /ietf-schc:schc/rule/entry/field-position
5079    data /ietf-schc:schc/rule/entry/matching-operator
5080    data /ietf-schc:schc/rule/entry/matching-operator-value
5081    data /ietf-schc:schc/rule/entry/matching-operator-value/index
5082    data /ietf-schc:schc/rule/entry/matching-operator-value/value
5083    data /ietf-schc:schc/rule/entry/target-value
5084    data /ietf-schc:schc/rule/entry/target-value/index
5085    data /ietf-schc:schc/rule/entry/target-value/value

5086    - 5094 : RESERVED

5094    data /ietf-schc:schc/rule/ack-behavior
5095    data /ietf-schc:schc/rule/direction
5096    data /ietf-schc:schc/rule/dtag-size
5097    data /ietf-schc:schc/rule/fcn-size
5098    data /ietf-schc:schc/rule/fragmentation-mode
5099    data /ietf-schc:schc/rule/inactivity-timer
5100    data /ietf-schc:schc/rule/inactivity-timer/ticks-duration
5101    data /ietf-schc:schc/rule/inactivity-timer/ticks-numbers
5102    data /ietf-schc:schc/rule/l2-word-size
5103    data /ietf-schc:schc/rule/max-ack-requests
5104    data /ietf-schc:schc/rule/max-interleaved-frames
5105    data /ietf-schc:schc/rule/maximum-packet-size
5106    data /ietf-schc:schc/rule/rcs-algorithm
5107    data /ietf-schc:schc/rule/retransmission-timer
5108    data /ietf-schc:schc/rule/retransmission-timer/ticks-duration
5109    data /ietf-schc:schc/rule/retransmission-timer/ticks-numbers

5110    - 5115 : RESERVED FOR TIMER 

5116    data /ietf-schc:schc/rule/tile-in-all-1
5117    data /ietf-schc:schc/rule/tile-size
5118    data /ietf-schc:schc/rule/w-size
5119    data /ietf-schc:schc/rule/window-size

5120    - 5299 : RESERVED FOR 2 BYTES DELTAS

5300    identity ack-behavior-after-all-0
5301    identity ack-behavior-after-all-1
5302    identity ack-behavior-base-type
5303    identity ack-behavior-by-layer2
5304    identity all-1-data-base-type
5305    identity all-1-data-no
5306    identity all-1-data-sender-choice
5307    identity all-1-data-yes
5308    identity cda-appiid
5309    identity cda-base-type
5310    identity cda-compute
5311    identity cda-deviid
5312    identity cda-lsb
5313    identity cda-mapping-sent
5314    identity cda-not-sent
5315    identity cda-value-sent
5316    identity di-base-type
5317    identity di-bidirectional
5318    identity di-down
5319    identity di-up
5320    identity fid-base-type
5321    identity fid-coap-base-type
5322    identity fid-coap-code
5323    identity fid-coap-code-class
5324    identity fid-coap-code-detail
5325    identity fid-coap-mid
5326    identity fid-coap-option
5327    identity fid-coap-option-accept
5328    identity fid-coap-option-block1
5329    identity fid-coap-option-block2
5330    identity fid-coap-option-content-format
5331    identity fid-coap-option-etag
5332    identity fid-coap-option-if-match
5333    identity fid-coap-option-if-none-match
5334    identity fid-coap-option-location-path
5335    identity fid-coap-option-location-query
5336    identity fid-coap-option-max-age
5337    identity fid-coap-option-no-response
5338    identity fid-coap-option-observe
5339    identity fid-coap-option-oscore-flags
5340    identity fid-coap-option-oscore-kid
5341    identity fid-coap-option-oscore-kidctx
5342    identity fid-coap-option-oscore-piv
5343    identity fid-coap-option-proxy-scheme
5344    identity fid-coap-option-proxy-uri
5345    identity fid-coap-option-size1
5346    identity fid-coap-option-size2
5347    identity fid-coap-option-uri-host
5348    identity fid-coap-option-uri-path
5349    identity fid-coap-option-uri-port
5350    identity fid-coap-option-uri-query
5351    identity fid-coap-tkl
5352    identity fid-coap-token
5353    identity fid-coap-type
5354    identity fid-coap-version
5355    identity fid-ipv6-appiid
5356    identity fid-ipv6-appprefix
5357    identity fid-ipv6-base-type
5358    identity fid-ipv6-deviid
5359    identity fid-ipv6-devprefix
5360    identity fid-ipv6-flowlabel
5361    identity fid-ipv6-hoplimit
5362    identity fid-ipv6-nextheader
5363    identity fid-ipv6-payload-length
5364    identity fid-ipv6-trafficclass
5365    identity fid-ipv6-trafficclass-ds
5366    identity fid-ipv6-trafficclass-ecn
5367    identity fid-ipv6-version
5368    identity fid-oscore-base-type
5369    identity fid-udp-app-port
5370    identity fid-udp-base-type
5371    identity fid-udp-checksum
5372    identity fid-udp-dev-port
5373    identity fid-udp-length
5374    identity fl-base-type
5375    identity fl-token-length
5376    identity fl-variable
5377    identity fragmentation-mode-ack-always
5378    identity fragmentation-mode-ack-on-error
5379    identity fragmentation-mode-base-type
5380    identity fragmentation-mode-no-ack
5381    identity mo-base-type
5382    identity mo-equal
5383    identity mo-ignore
5384    identity mo-match-mapping
5385    identity mo-msb
5386    identity nature-base-type
5387    identity nature-compression
5388    identity nature-fragmentation
5389    identity nature-no-compression
5390    identity rcs-algorithm-base-type
5391    identity rcs-crc32
5392    feature compression
5393    feature fragmentation

5394    - 5500 : RESERVED FOR IDENTITY
]]></sourcecode></figure>

<t>For instance <xref target="I-D.toutain-lpwan-access-control"/> augments the model with "ac-modify-set-of-rules" at the top level, "ac-modify-compression-rule" for each compression rule, "ac-modify-field" in each Field Description of a compression rule and finally "ac-modify-timers" in fragmentation rules. Delta representation will be on 1 byte.</t>

<t>The following SIDs could be assigned:</t>

<t><list style="symbols">
  <t>5022: ac-modify-set-of-rules</t>
  <t>5051: ac-modify-compression-rule</t>
  <t>5069: ac-modify-field</t>
  <t>5068: ac-modify-timers</t>
</list></t>

<t><xref target="I-D.ietf-lpwan-schc-compound-ack"/> augments the model for fragmentation, with 3 identity and two leaves. 
identities can get a SID 5394 to 5396 and the two SIDs for the leaves can be 5120 and 5122. There delta representations will be coded on 2 bytes.</t>

</section>


  </middle>

  <back>


    <references title='Normative References'>





<reference anchor='RFC8824'>
<front>
<title>Static Context Header Compression (SCHC) for the Constrained Application Protocol (CoAP)</title>
<author fullname='A. Minaburo' initials='A.' surname='Minaburo'><organization/></author>
<author fullname='L. Toutain' initials='L.' surname='Toutain'><organization/></author>
<author fullname='R. Andreasen' initials='R.' surname='Andreasen'><organization/></author>
<date month='June' year='2021'/>
<abstract><t>This document defines how to compress Constrained Application Protocol (CoAP) headers using the Static Context Header Compression and fragmentation (SCHC) framework. SCHC defines a header compression mechanism adapted for Constrained Devices. SCHC uses a static description of the header to reduce the header's redundancy and size. While RFC 8724 describes the SCHC compression and fragmentation framework, and its application for IPv6/UDP headers, this document applies SCHC to CoAP headers. The CoAP header structure differs from IPv6 and UDP, since CoAP uses a flexible header with a variable number of options, themselves of variable length. The CoAP message format is asymmetric: the request messages have a header format different from the format in the response messages. This specification gives guidance on applying SCHC to flexible headers and how to leverage the asymmetry for more efficient compression Rules.</t></abstract>
</front>
<seriesInfo name='RFC' value='8824'/>
<seriesInfo name='DOI' value='10.17487/RFC8824'/>
</reference>



<reference anchor='RFC8341'>
<front>
<title>Network Configuration Access Control Model</title>
<author fullname='A. Bierman' initials='A.' surname='Bierman'><organization/></author>
<author fullname='M. Bjorklund' initials='M.' surname='Bjorklund'><organization/></author>
<date month='March' year='2018'/>
<abstract><t>The standardization of network configuration interfaces for use with the Network Configuration Protocol (NETCONF) or the RESTCONF protocol requires a structured and secure operating environment that promotes human usability and multi-vendor interoperability.  There is a need for standard mechanisms to restrict NETCONF or RESTCONF protocol access for particular users to a preconfigured subset of all available NETCONF or RESTCONF protocol operations and content.  This document defines such an access control model.</t><t>This document obsoletes RFC 6536.</t></abstract>
</front>
<seriesInfo name='STD' value='91'/>
<seriesInfo name='RFC' value='8341'/>
<seriesInfo name='DOI' value='10.17487/RFC8341'/>
</reference>


<reference anchor='I-D.ietf-lpwan-schc-yang-data-model'>
   <front>
      <title>Data Model for Static Context Header Compression (SCHC)</title>
      <author fullname='Ana Minaburo' initials='A.' surname='Minaburo'>
         <organization>Acklio</organization>
      </author>
      <author fullname='Laurent Toutain' initials='L.' surname='Toutain'>
         <organization>Institut MINES TELECOM; IMT Atlantique</organization>
      </author>
      <date day='9' month='October' year='2022'/>
      <abstract>
	 <t>   This document describes a YANG data model for the SCHC (Static
   Context Header Compression) compression and fragmentation rules.

   This document formalizes the description of the rules for better
   interoperability between SCHC instances either to exchange a set of
   rules or to modify some rules parameters.

	 </t>
      </abstract>
   </front>
   <seriesInfo name='Internet-Draft' value='draft-ietf-lpwan-schc-yang-data-model-21'/>
   
</reference>


<reference anchor='I-D.ietf-core-sid'>
   <front>
      <title>YANG Schema Item iDentifier (YANG SID)</title>
      <author fullname='Michel Veillette' initials='M.' surname='Veillette'>
         <organization>Trilliant Networks Inc.</organization>
      </author>
      <author fullname='Alexander Pelov' initials='A.' surname='Pelov'>
         <organization>Acklio</organization>
      </author>
      <author fullname='Ivaylo Petrov' initials='I.' surname='Petrov'>
         <organization>Google Switzerland GmbH</organization>
      </author>
      <author fullname='Carsten Bormann' initials='C.' surname='Bormann'>
         <organization>Universität Bremen TZI</organization>
      </author>
      <author fullname='Michael Richardson' initials='M.' surname='Richardson'>
         <organization>Sandelman Software Works</organization>
      </author>
      <date day='26' month='July' year='2022'/>
      <abstract>
	 <t>   YANG Schema Item iDentifiers (YANG SID) are globally unique 63-bit
   unsigned integers used to identify YANG items, as a more compact
   method to identify YANG items that can be used for efficiency and in
   constrained environments (RFC 7228).  This document defines the
   semantics, the registration, and assignment processes of YANG SIDs
   for IETF managed YANG modules.  To enable the implementation of these
   processes, this document also defines a file format used to persist
   and publish assigned YANG SIDs.


   // The present version (-19) adds in draft text about objectives,
   // parties, and roles.  This attempts to record discussions at side
   // meetings before, at, and after IETF 113.

	 </t>
      </abstract>
   </front>
   <seriesInfo name='Internet-Draft' value='draft-ietf-core-sid-19'/>
   
</reference>


<reference anchor='I-D.toutain-lpwan-access-control'>
   <front>
      <title>SCHC Rule Access Control</title>
      <author fullname='Ana Minaburo' initials='A.' surname='Minaburo'>
         <organization>Acklio</organization>
      </author>
      <author fullname='Laurent Toutain' initials='L.' surname='Toutain'>
         <organization>Institut MINES TELECOM; IMT Atlantique</organization>
      </author>
      <author fullname='Ivan Martinez' initials='I.' surname='Martinez'>
         <organization>Institut MINES TELECOM; IMT Atlantique</organization>
      </author>
      <date day='20' month='February' year='2023'/>
      <abstract>
	 <t>   The framework for SCHC defines an abstract view of the rules,
   formalized with through a YANG Data Model.  In its original
   description rules are static and share by 2 entities.  The use of
   YANG authorizes rules to be uploaded or modified in a SCHC instance
   and leads to some possible attacks, if the changes are not
   controlled.  This document summarizes some possible attacks and
   define augmentation to the existing Data Mode, to restrict the
   changes in the rule.

	 </t>
      </abstract>
   </front>
   <seriesInfo name='Internet-Draft' value='draft-toutain-lpwan-access-control-01'/>
   
</reference>


<reference anchor='I-D.ietf-lpwan-schc-compound-ack'>
   <front>
      <title>SCHC Compound ACK</title>
      <author fullname='Juan-Carlos Zúñiga' initials='J. C.' surname='Zúñiga'>
         <organization>Cisco</organization>
      </author>
      <author fullname='Carles Gomez' initials='C.' surname='Gomez'>
         <organization>Universitat Politecnica de Catalunya</organization>
      </author>
      <author fullname='Sergio Aguilar' initials='S.' surname='Aguilar'>
         <organization>Universitat Politecnica de Catalunya</organization>
      </author>
      <author fullname='Laurent Toutain' initials='L.' surname='Toutain'>
         <organization>IMT-Atlantique</organization>
      </author>
      <author fullname='Sandra Cespedes' initials='S.' surname='Cespedes'>
         <organization>Concordia University</organization>
      </author>
      <author fullname='Diego S. Wistuba La Torre' initials='D. S. W. L.' surname='Torre'>
         <organization>NIC Labs, Universidad de Chile</organization>
      </author>
      <date day='21' month='February' year='2023'/>
      <abstract>
	 <t>   The present document updates the SCHC (Static Context Header
   Compression and fragmentation) protocol RFC8724.  It defines a SCHC
   Compound ACK message format and procedure, which are intended to
   reduce the number of response transmissions (i.e., SCHC ACKs) in the
   ACK-on-Error mode, by accumulating bitmaps of several windows in a
   single SCHC message (i.e., the SCHC Compound ACK).

   Both message format and procedure are generic, so they can be used,
   for instance, by any of the four Low Power Wide Area Networks
   (LPWANs) technologies defined in RFC8376, being Sigfox, LoRaWAN, NB-
   IoT and IEEE 802.15.4w.

	 </t>
      </abstract>
   </front>
   <seriesInfo name='Internet-Draft' value='draft-ietf-lpwan-schc-compound-ack-12'/>
   
</reference>




    </references>



<section anchor="security-considerations"><name>Security Considerations</name>

<t>TBD</t>

</section>
<section anchor="iana-considerations"><name>IANA Considerations</name>

<t>TBD</t>

</section>


  </back>

<!-- ##markdown-source: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-->

</rfc>

