1. privecsg-15-0005-00-ecsg 1 IEEE 802 EC Privacy Recommendation Study Group February 4 th, 2015, Conference Call Juan Carlos Zuniga, InterDigital Labs (EC SG Chair)

2. privecsg-15-0005-00-ecsg 2 Conference Call Details Wednesday, February 4 th, 2015, 10:00-11:00am EDT WebEX: –Meeting Number: 746 673 385 –Meeting Password: privecsg –To join this meeting (also from mobile devices): 1.Go to https://premconf.webex.com/premconf/j.php?MTID=m8a4786c5b454adf48f45b879102e172ehttps://premconf.webex.com/premconf/j.php?MTID=m8a4786c5b454adf48f45b879102e172e 2.2. If requested, enter your name and email address. 3. If a password is required, enter the meeting password: privecsg 4. Click "Join". 5. Follow the instructions that appear on your screen. –To view in other time zones or languages, please click the link: –https://premconf.webex.com/premconf/j.php?MTID=meac83add1b23800f65b22f624b011066https://premconf.webex.com/premconf/j.php?MTID=meac83add1b23800f65b22f624b011066 –Teleconference information –Show global numbers: https://www.myrcplus.com/cnums.asp?bwebid=8369444&ppc=542167&num=1&num2=1719-867-1571 https://www.myrcplus.com/cnums.asp?bwebid=8369444&ppc=542167&num=1&num2=1719-867-1571 –Attendee access code: 542167

3. privecsg-15-0005-00-ecsg 3 Participants, Patents, and Duty to Inform All participants in this meeting have certain obligations under the IEEE-SA Patent Policy. Participants [Note: Quoted text excerpted from IEEE-SA Standards Board Bylaws subclause 6.2]: –“Shall inform the IEEE (or cause the IEEE to be informed)” of the identity of each “holder of any potential Essential Patent Claims of which they are personally aware” if the claims are owned or controlled by the participant or the entity the participant is from, employed by, or otherwise represents “Personal awareness” means that the participant “is personally aware that the holder may have a potential Essential Patent Claim,” even if the participant is not personally aware of the specific patents or patent claims –“Should inform the IEEE (or cause the IEEE to be informed)” of the identity of “any other holders of such potential Essential Patent Claims” (that is, third parties that are not affiliated with the participant, with the participant’s employer, or with anyone else that the participant is from or otherwise represents) The above does not apply if the patent claim is already the subject of an Accepted Letter of Assurance that applies to the proposed standard(s) under consideration by this group Early identification of holders of potential Essential Patent Claims is strongly encouraged No duty to perform a patent search

4. privecsg-15-0005-00-ecsg 4 Patent Related Links All participants should be familiar with their obligations under the IEEE-SA Policies & Procedures for standards development. Patent Policy is stated in these sources: –IEEE-SA Standards Boards Bylaws http://standards.ieee.org/develop/policies/bylaws/sect6-7.html#6 http://standards.ieee.org/develop/policies/bylaws/sect6-7.html#6 –IEEE-SA Standards Board Operations Manual http://standards.ieee.org/develop/policies/opman/sect6.html#6.3 http://standards.ieee.org/develop/policies/opman/sect6.html#6.3 Material about the patent policy is available at –http://standards.ieee.org/about/sasb/patcom/materials.htmlhttp://standards.ieee.org/about/sasb/patcom/materials.html If you have questions, contact the IEEE-SA Standards Board Patent Committee Administrator at patcom@ieee.org or visit http://standards.ieee.org/about/sasb/patcom/index.htmlhttp://standards.ieee.org/about/sasb/patcom/index.html This slide set is available at https://development.standards.ieee.org/myproject/Public/mytools/mob/slideset.ppt https://development.standards.ieee.org/myproject/Public/mytools/mob/slideset.ppt

5. privecsg-15-0005-00-ecsg 5 Call for Potentially Essential Patents If anyone in this meeting is personally aware of the holder of any patent claims that are potentially essential to implementation of the proposed standard(s) under consideration by this group and that are not already the subject of an Accepted Letter of Assurance: –Either speak up now or –Provide the chair of this group with the identity of the holder(s) of any and all such claims as soon as possible or –Cause an LOA to be submitted

6. privecsg-15-0005-00-ecsg 6 Other Guidelines for IEEE WG Meetings All IEEE-SA standards meetings shall be conducted in compliance with all applicable laws, including antitrust and competition laws. Don’t discuss the interpretation, validity, or essentiality of patents/patent claims. Don’t discuss specific license rates, terms, or conditions. –Relative costs, including licensing costs of essential patent claims, of different technical approaches may be discussed in standards development meetings. Technical considerations remain primary focus Don’t discuss or engage in the fixing of product prices, allocation of customers, or division of sales markets. Don’t discuss the status or substance of ongoing or threatened litigation. Don’t be silent if inappropriate topics are discussed … do formally object. --------------------------------------------------------------- See IEEE-SA Standards Board Operations Manual, clause 5.3.10 and “Promoting Competition and Innovation: What You Need to Know about the IEEE Standards Association's Antitrust and Competition Policy” for more details.

7. privecsg-15-0005-00-ecsg 7 Resources – URLs Link to IEEE Disclosure of Affiliation –http://standards.ieee.org/faqs/affiliationFAQ.htmlhttp://standards.ieee.org/faqs/affiliationFAQ.html Links to IEEE Antitrust Guidelines –http://standards.ieee.org/resources/antitrust- guidelines.pdfhttp://standards.ieee.org/resources/antitrust- guidelines.pdf Link to IEEE Code of Ethics –http://www.ieee.org/web/membership/ethics/code_ ethics.htmlhttp://www.ieee.org/web/membership/ethics/code_ ethics.html Link to IEEE Patent Policy –http://standards.ieee.org/board/pat/pat-slideset.ppthttp://standards.ieee.org/board/pat/pat-slideset.ppt

8. privecsg-15-0005-00-ecsg 8 Agenda Welcome Chair's slides –IEEE Slides –Call meeting to order Group’s updates –Privacy EC SG PAR/CSD –IETF MAC address randomization trial – next steps Technical Topics 1.Threat Model for Privacy at Link Layer 2.Privacy Issues at Link Layer 3.Proposals regarding functionalities in IEEE 802 protocols to improve Privacy 4.Proposals regarding measuring levels of Privacy on Internet protocols 5.Implications of MAC address changes 6.Other Next Steps

9. privecsg-15-0005-00-ecsg 9 Business#1 Call Meeting to Order –Meeting called to order by chair at Minutes taker – Roll Call NameAffiliationNameAffiliation Juan Carlos Zuniga (Chair) InterDigitalPiers O’HanlonOxford Internet Institute Mathieu CuncheINRIAWalter PienciakIEEE-SA Antonio de la OlivaUC3MKaren RandallRandall-Consulting Dan HarkinsAruba NetworksMax RiegelNSN Paul LambertMarvellDan RomascanuAvaya Soo Bum LeeQualcommRene StruikStruik Security Consultancy Robert MoskowitzVerizonBrian WeisCisco

10. privecsg-15-0005-00-ecsg 10 Business#2 Agenda bashing – Approval of minutes – Reports –Group’s updates Privacy EC SG PAR/CSD IETF MAC address randomization trial – next steps

11. privecsg-15-0005-00-ecsg 11 IEEE 802 Privacy Rec PAR/CSD Privacy Recommendation PAR/CSD proposal presented and discussed during Atlanta’s interim meeting –https://mentor.ieee.org/privecsg/dcn/15/privecsg-15-0004-01-0000-privacy- recommendation-par-csd-proposal.pptxhttps://mentor.ieee.org/privecsg/dcn/15/privecsg-15-0004-01-0000-privacy- recommendation-par-csd-proposal.pptx Currently planning to pre-circulate PAR as an 802.1 WG project proposal Deadline for consideration at March plenary is this Friday, March 6, 2015

12. privecsg-15-0005-00-ecsg 12 MAC Randomization Experiment Preliminary results from trial at IETF 91 meeting presented in Atlanta –Carlos J. Bernardos (University Carlos III of Madrid) Planning to repeat the trial at both upcoming IEEE 802 and IETF meetings –IEEE 802 Plenary, Berlin, Germany, 8-13 March –IETF 92 meeting, Dallas, TX, USA, 23-27 March

13. privecsg-15-0005-00-ecsg 13 Trial setup WLAN address randomization scripts developed and provided for 3 different OSes: –Microsoft Windows (tested on Windows 7) –Apple Mac OS X (tested on Version 10.10, alias Yosemite) –GNU Linux (tested on Debian testing/unstable, Ubuntu 13.10, and Fedora 20) Probes on DHCP and wireless network infrastructure https://www.ietf.org/registration/MeetingWiki/wiki/91privacy

14. privecsg-15-0005-00-ecsg 14 Participants’ statistics Participation increased significantly throughout the week –Around 3x at the end of the week (Mon-Thu) OS distribution:

15. privecsg-15-0005-00-ecsg 15 DHCP logs 685 Local MACs seen during the week –631 Local MACs were seen on the trial’s WLAN network –125 Local MACs were also seen on regular IETF WLAN networks Estimating between 50 and 100 people participated in the trial –Results based on the number of non-Local MAC seen on the trial’s WLAN and other metrics (e.g., # different IP addresses allocated and DHCP hostnames provided) –Method for better keeping track the number of participants should be provided in the future (e.g., use of IEEE 802.1X access setup)

16. privecsg-15-0005-00-ecsg 16 Experiment's next steps Preparing a “wish list” with IETF NOC and SG members –Logged information: working on potential additional logs that would help getting more precise information –Increased frequency poll of logs at the routers (netdisco) –Decrease DHCP lease time for Local MACs –Access setup: use IEEE 802.1X to easily track participation –Make a more detailed study of collision effects under different scenarios Need to increase participation –Preparing address randomization tools for more platforms/OSes, including mobile ones (e.g. Android)

17. privecsg-15-0005-00-ecsg 17 Business#3 Technical presentations –TBD

18. privecsg-15-0005-00-ecsg 18 Business#4 Next steps –Submit PAR for pre-circulation at IEEE 802 March plenary –Continue call for proposals to discuss technical topics (1)Threat Model for Privacy at Link Layer (2)Privacy Issues at Link Layer (3)Proposals regarding functionalities in IEEE 802 protocols to improve Privacy (4)Proposals regarding measuring levels of Privacy on Internet protocols (5)Implications of MAC address changes (6)Other…

19. privecsg-15-0005-00-ecsg 19 Business#4 Upcoming meetings –25 February 2015, (10:00 AM ET), Teleconference –March 8-13, 2015, IEEE 802 Plenary meeting in Berlin, Germany –(TBD more meetings and teleconferences if SG is renewed) Meeting adjourned at