1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285
|
<pre>Network Working Group Y. Nomura
Request for Comments: 4473 Fujitsu Labs
Category: Informational R. Walsh
J-P. Luoma
Nokia
J. Ott
Helsinki University of Technology
H. Schulzrinne
Columbia University
May 2006
<span class="h1">Requirements for Internet Media Guides (IMGs)</span>
Status of This Memo
This memo provides information for the Internet community. It does
not specify an Internet standard of any kind. Distribution of this
memo is unlimited.
Copyright Notice
Copyright (C) The Internet Society (2006).
Abstract
This memo specifies requirements for a framework and protocols for
accessing and updating Internet Media Guide (IMG) information for
media-on-demand and multicast applications. These requirements are
designed to guide choice and development of IMG protocols for
efficient and scalable delivery.
<span class="grey">Nomura, et al. Informational [Page 1]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-2" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
Table of Contents
<a href="#section-1">1</a>. Introduction ....................................................<a href="#page-3">3</a>
<a href="#section-1.1">1.1</a>. Background and Motivation ..................................<a href="#page-3">3</a>
<a href="#section-1.2">1.2</a>. Scope of This Document .....................................<a href="#page-4">4</a>
<a href="#section-2">2</a>. Terminology .....................................................<a href="#page-5">5</a>
<a href="#section-2.1">2.1</a>. New Terms ..................................................<a href="#page-5">5</a>
<a href="#section-3">3</a>. Problem Statement ...............................................<a href="#page-6">6</a>
<a href="#section-4">4</a>. Use Cases Requiring IMGs ........................................<a href="#page-7">7</a>
<a href="#section-4.1">4.1</a>. Connectivity-based Use Cases ...............................<a href="#page-7">7</a>
<a href="#section-4.1.1">4.1.1</a>. IP Datacast to a Wireless Receiver ..................<a href="#page-7">7</a>
<a href="#section-4.1.2">4.1.2</a>. Regular Fixed Dial-up Internet Connection ...........<a href="#page-8">8</a>
<a href="#section-4.1.3">4.1.3</a>. Broadband Always-on Fixed Internet Connection .......<a href="#page-9">9</a>
<a href="#section-4.2">4.2</a>. Content-orientated Use Cases ...............................<a href="#page-9">9</a>
<a href="#section-4.2.1">4.2.1</a>. TV and Radio Program Delivery .......................<a href="#page-9">9</a>
<a href="#section-4.2.2">4.2.2</a>. Media Coverage of a Live Event .....................<a href="#page-10">10</a>
<a href="#section-4.2.3">4.2.3</a>. Distance Learning ..................................<a href="#page-10">10</a>
<a href="#section-4.2.4">4.2.4</a>. Multiplayer Gaming .................................<a href="#page-10">10</a>
<a href="#section-4.2.5">4.2.5</a>. File Distribution ..................................<a href="#page-11">11</a>
<a href="#section-4.2.6">4.2.6</a>. Coming-release and Pre-released Content ............<a href="#page-11">11</a>
<a href="#section-5">5</a>. Requirements ...................................................<a href="#page-11">11</a>
<a href="#section-5.1">5.1</a>. General Requirements ......................................<a href="#page-11">11</a>
<a href="#section-5.1.1">5.1.1</a>. Independence of IMG Operations from IMG Metadata ...<a href="#page-11">11</a>
<a href="#section-5.1.2">5.1.2</a>. Multiple IMG Senders ...............................<a href="#page-12">12</a>
<a href="#section-5.1.3">5.1.3</a>. Modularity .........................................<a href="#page-12">12</a>
<a href="#section-5.2">5.2</a>. Delivery Properties .......................................<a href="#page-12">12</a>
<a href="#section-5.2.1">5.2.1</a>. Scalability ........................................<a href="#page-13">13</a>
<a href="#section-5.2.2">5.2.2</a>. Support for Intermittent Connectivity ..............<a href="#page-13">13</a>
<a href="#section-5.2.3">5.2.3</a>. Congestion Control .................................<a href="#page-13">13</a>
<a href="#section-5.2.4">5.2.4</a>. Sender- and Receiver-Driven Delivery ...............<a href="#page-13">13</a>
<a href="#section-5.3">5.3</a>. Customized IMGs ...........................................<a href="#page-14">14</a>
<a href="#section-5.4">5.4</a>. Reliability ...............................................<a href="#page-15">15</a>
<a href="#section-5.4.1">5.4.1</a>. Managing Consistency ...............................<a href="#page-15">15</a>
<a href="#section-5.4.2">5.4.2</a>. Reliable Message Exchange ..........................<a href="#page-16">16</a>
<a href="#section-5.5">5.5</a>. IMG Descriptions ..........................................<a href="#page-16">16</a>
<a href="#section-6">6</a>. Security Considerations ........................................<a href="#page-17">17</a>
<a href="#section-6.1">6.1</a>. IMG Authentication and Integrity ..........................<a href="#page-18">18</a>
<a href="#section-6.2">6.2</a>. Privacy ...................................................<a href="#page-19">19</a>
<a href="#section-6.3">6.3</a>. Access Control for IMGs ...................................<a href="#page-19">19</a>
<a href="#section-6.4">6.4</a>. Denial-of-Service (DOS) Attacks ...........................<a href="#page-20">20</a>
<a href="#section-6.5">6.5</a>. Replay Attacks ............................................<a href="#page-20">20</a>
<a href="#section-7">7</a>. Normative References ...........................................<a href="#page-21">21</a>
<a href="#section-8">8</a>. Informative References .........................................<a href="#page-21">21</a>
<a href="#section-9">9</a>. Acknowledgements ...............................................<a href="#page-22">22</a>
<span class="grey">Nomura, et al. Informational [Page 2]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-3" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
<span class="h2"><a class="selflink" id="section-1" href="#section-1">1</a>. Introduction</span>
<span class="h3"><a class="selflink" id="section-1.1" href="#section-1.1">1.1</a>. Background and Motivation</span>
For some ten years, multicast-based (multimedia) conferences
(including IETF working group sessions) as well as broadcasts of
lectures/seminars, concerts, and other events have been used in the
Internet, more precisely, on the MBONE. Schedules and descriptions
for such multimedia sessions as well as the transport addresses,
codecs, and their parameters have been described using the Session
Description Protocol (SDP) [<a href="#ref-2" title=""SDP: Session Description Protocol"">2</a>] as a rudimentary (but as of then
largely sufficient) means. Descriptions have been disseminated using
the Session Announcement Protocol (SAP) [<a href="#ref-3" title=""Session Announcement Protocol"">3</a>] and Session Directory
Tools such as SD [<a href="#ref-4">4</a>] or SDR [<a href="#ref-5">5</a>]; descriptions have also been put up
on web pages, sent by electronic mail, etc.
Recently, interest has grown to expand -- or better: to generalize --
the applicability of these kinds of session descriptions.
Descriptions are becoming more elaborate in terms of included
metadata, more generic regarding the types of media sessions, and
possibly also support other transports than just IP (e.g., legacy TV
channel addresses). This peers well with the DVB (Digital Video
Broadcasting) [<a href="#ref-6">6</a>] Organization's increased activities towards IP-
based communications over satellite, cable, and terrestrial radio
networks, also considering IP as the basis for TV broadcasts and
further services. The program/content descriptions are referred to
as Internet Media Guides (IMGs) and can be viewed as a generalization
of Electronic Program Guides (EPGs) and multimedia session
descriptions.
An Internet Media Guide (IMG) has a structured collection of
multimedia session descriptions expressed using SDP, SDPng [<a href="#ref-7" title=""Session description and capability negotiation"">7</a>], or
some similar session description format. This is used to describe a
set of multimedia services (e.g., television program schedules,
content delivery schedules) but may also refer to other networked
resources including web pages. IMGs provide the envelope for
metadata formats and session descriptions defined elsewhere with the
aim of facilitating structuring, versioning, referencing,
distributing, and maintaining (caching, updating) such information.
The IMG metadata may be delivered to a potentially large audience,
who uses it to join a subset of the sessions described, and who may
need to be notified of changes to this information. Hence, a
framework for distributing IMG metadata in various different ways is
needed to accommodate the needs of different audiences: For
traditional broadcast-style scenarios, multicast-based (push)
distribution of IMG metadata needs to be supported. Where no
multicast is available, unicast-based push is required, too.
<span class="grey">Nomura, et al. Informational [Page 3]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-4" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
Furthermore, IMG metadata may need to be retrieved interactively,
similar to web pages (e.g., after rebooting a system or when a user
is browsing after network connectivity has been re-established).
Finally, IMG metadata may be updated as time elapses because content
described in the guide may be changed: for example, the airtime of an
event such as a concert or sports event may change, possibly
affecting the airtime of subsequent media. This may be done by
polling the IMG sender as well as by asynchronous change
notifications.
Furthermore, any Internet host can be a sender of content and thus an
IMG sender. Some of the content sources and sinks may only be
connected to the Internet sporadically. Also, a single human user
may use many different devices to access metadata. Thus, we envision
that IMG metadata can be sent and received by, among others, cellular
phones, Personal Digital Assistants (PDAs), personal computers,
streaming video servers, set-top boxes, video cameras, and Digital
Video Recorders (DVRs), and that the data be carried across arbitrary
types of link layers, including bandwidth-constrained mobile
networks. However, generally we expect IMG senders to be well-
connected hosts.
Finally, with many potential senders and receivers, different types
of networks, and presumably numerous service providers, IMG metadata
may need to be combined, split, filtered, augmented, modified, etc.,
on their way from the sender(s) to the receiver(s) to provide the
ultimate user with a suitable selection of multimedia services
according to her preferences, subscriptions, location, and context
(e.g., devices, access networks).
<span class="h3"><a class="selflink" id="section-1.2" href="#section-1.2">1.2</a>. Scope of This Document</span>
This document defines requirements that Internet Media Guide
mechanisms must satisfy in order to deliver IMG metadata to a
potentially large audience. Since IMGs can describe many kinds of
multimedia content, IMG methods are generally applicable to several
scenarios.
In considering wide applicability, this document provides the problem
statement and discusses existing mechanisms in this area. Then
several use case scenarios for IMGs are explained including
descriptions of how IMG metadata and IMG delivery mechanisms
contribute to these scenarios. Following this, this document
provides general requirements that are independent of any transport
layer mechanism and application, such as delivery properties,
reliability, and IMG descriptions.
<span class="grey">Nomura, et al. Informational [Page 4]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-5" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
This document reflects investigating work on delivery mechanisms for
IMGs and generalizing work on session announcement and initiation
protocols, especially in the field of the MMUSIC working group (SAP,
SIP [<a href="#ref-8" title=""SIP: Session Initiation Protocol"">8</a>], SDP).
<span class="h2"><a class="selflink" id="section-2" href="#section-2">2</a>. Terminology</span>
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
document are to be interpreted as described in <a href="./rfc2119">RFC 2119</a> [<a href="#ref-1" title=""Key words for use in RFCs to Indicate Requirement Levels"">1</a>].
<span class="h3"><a class="selflink" id="section-2.1" href="#section-2.1">2.1</a>. New Terms</span>
Internet Media Guide (IMG): IMG is a generic term used to describe
the formation, delivery, and use of IMG metadata. The
definition of the IMG is intentionally left imprecise.
IMG Element: The smallest atomic element of metadata that can be
transmitted separately by IMG operations and referenced
individually from other IMG elements.
IMG Metadata: A set of metadata consisting of one or more IMG
elements. IMG metadata describes the features of multimedia
content used to enable selection of and access to media
sessions containing content. For example, metadata may consist
of the URI, title, airtime, bandwidth needed, file size, text
summary, genre, and access restrictions.
IMG Delivery: The process of exchanging IMG metadata in terms of both
large-scale and atomic data transfers.
IMG Sender: An IMG sender is a logical entity that sends IMG metadata
to one or more IMG receivers.
IMG Receiver: An IMG receiver is a logical entity that receives IMG
metadata from an IMG sender.
IMG Transceiver: An IMG transceiver combines an IMG receiver and
sender. It may modify received IMG metadata or merge IMG
metadata received from several different IMG senders.
IMG Operation: An atomic operation of an IMG transport protocol, used
between IMG sender(s) and IMG receiver(s) for the delivery of
IMG metadata and for the control of IMG sender(s)/receiver(s).
IMG Transport Protocol: A protocol that transports IMG metadata from
an IMG sender to IMG receiver(s).
<span class="grey">Nomura, et al. Informational [Page 5]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-6" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
IMG Transport Session: An association between an IMG sender and one
or more IMG receivers within the scope of an IMG transport
protocol. An IMG transport session involves a time-bound
series of IMG transport protocol interactions that provide
delivery of IMG metadata from the IMG sender to the IMG
receiver(s).
<span class="h2"><a class="selflink" id="section-3" href="#section-3">3</a>. Problem Statement</span>
As we enumerate the requirements for IMGs, it will become clear that
they are not fully addressed by the existing protocols. The
"Framework for the Usage of Internet Media Guides" [<a href="#ref-9" title=""Framework for the Usage of Internet Media Guides (IMG)"">9</a>] discusses
about these issues in more detail.
The MMUSIC working group has long been investigating content, media
and service information delivery mechanisms, and protocols, and has
itself produced the Session Announcement Protocol (SAP), the Session
Description Protocol (SDP), and the Session Initiation Protocol
(SIP). SDP is capable of describing multimedia sessions (i.e.,
content in a wider sense) by means of limited descriptive information
intended for human perception plus transport, scheduling information,
and codecs and addresses for setting up media sessions. SIP and SAP
are protocols to distribute these session descriptions.
However, we perceive a lack of a standard solution for scalable IMG
delivery mechanism in the number of receivers with consistency of IMG
metadata between an IMG sender and IMG receiver for both bi-
directional and unidirectional transport. With increased service
dynamics and complexity, there is an increased requirement for
updates to these content descriptions.
HTTP [<a href="#ref-10" title=""Hypertext Transfer Protocol -- HTTP/1.1"">10</a>] is a well-known information retrieval protocol using bi-
directional transport and is widely used to deliver web-based content
descriptions to many hosts. However, it has well-recognized
limitations of scalability in the number of HTTP clients since it
relies on the polling mechanism to keep information consistent
between the server and client.
SAP [<a href="#ref-3" title=""Session Announcement Protocol"">3</a>] is an announcement protocol that distributes session
descriptions via multicast. It does not support prioritization or
fine-grained metadata selection and update notifications, as it
places restrictions on metadata payload size and always sends the
whole metadata. It requires a wide-area multicast infrastructure for
it to be deployable beyond a local area network.
<span class="grey">Nomura, et al. Informational [Page 6]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-7" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
SIP [<a href="#ref-8" title=""SIP: Session Initiation Protocol"">8</a>] and SIP-specific event notifications [<a href="#ref-11" title=""Session Initiation Protocol (SIP)-Specific Event Notification"">11</a>] can be used to
notify subscribers of the update of IMG metadata for bi-directional
transport. However, it is necessary to define an event package for
IMGs.
We also perceive a lack of standard solution for flexible content
descriptions to support a multitude of application-specific metadata
and associated data models with a different amount of detail and
different target audiences.
SDP [<a href="#ref-2" title=""SDP: Session Description Protocol"">2</a>] has a text-encoded syntax to specify multimedia sessions for
announcements and invitations. It is primarily intended to describe
client capability requirements and enable client application
selection. Although SDP is extensible, it has limitations such as
structured extensibility and capability to reference properties of a
multimedia session from the description of another session.
These can mostly be overcome by the XML-based SDPng [<a href="#ref-7" title=""Session description and capability negotiation"">7</a>] -- which is
intended for both two-way negotiation and unidirectional delivery --
or similar content description mechanisms. Since SDPng addresses
multiparty multimedia conferences, it would be necessary to extend
the XML schema in order to describe general multimedia content.
<span class="h2"><a class="selflink" id="section-4" href="#section-4">4</a>. Use Cases Requiring IMGs</span>
<span class="h3"><a class="selflink" id="section-4.1" href="#section-4.1">4.1</a>. Connectivity-based Use Cases</span>
<span class="h4"><a class="selflink" id="section-4.1.1" href="#section-4.1.1">4.1.1</a>. IP Datacast to a Wireless Receiver</span>
IP Datacast is the delivery of IP-based services over broadcast
radio. Internet content delivery is therefore unidirectional in this
case. However, there can be significant benefits from being able to
provide rich media one-to-many services to such receivers.
There are two main classes of receiver in this use case: fixed
mains-powered and mobile battery-powered. Both of these are affected
by radio phenomena and so robust, or error-resilient, delivery is
important. Carouselled metadata transfer (cyclically repeated with a
fixed bandwidth) provides a base level of robustness for an IP
datacast-based announcement system, although the design of
carouselled transfer should enable battery-powered receivers to go
through periods of sleep to extend their operational time between
charges. Insertion of Forward Error Correction (FEC) data into
metadata announcements improves error resilience, and reordering
(interleaving) data blocks further increases tolerance to burst
errors.
<span class="grey">Nomura, et al. Informational [Page 7]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-8" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
To enable receivers to more accurately specify the metadata they are
interested in, the unidirectional delivery may be distributed between
several logical channels. This is so that a receiver needs only
access the channels of interest and thus can reduce the amount of
time, storage, and CPU resources needed for processing the IP data.
Also, hierarchical channels enable receivers to subscribe to a
(possibly well-known) root multicast channel/group and progressively
access only those additional channels based on metadata in parent
channels.
In some cases, the receiver may have multiple access interfaces
adding bi-directional communications capability. This enables a
multitude of options, but most important, it enables NACK-based
reliability and the individual retrieval of missed or not-multicast
sets of metadata.
Thus, essential IMG features in this case include the following:
robust unidirectional delivery (with optional levels of reliability
including "plug-in FEC" supported by a transport layer protocol),
which implies easily identifiable segmentation of delivery data to
make FEC, carousel, interleaving, and other schemes possible;
effective identification of metadata sets (probably uniquely) to
enable more efficient use of multicast and unicast retrieval over
multiple access systems regardless of the parts of metadata and
application-specific extensions in use; and prioritization of
metadata, which can (for instance) be achieved by spreading it
between channels and allocating/distributing bandwidth accordingly.
Furthermore, some cases require IMG metadata authentication and some
group security/encryption and supporting security message exchanges
(out of band from the IMG multicast sessions).
<span class="h4"><a class="selflink" id="section-4.1.2" href="#section-4.1.2">4.1.2</a>. Regular Fixed Dial-up Internet Connection</span>
Dial-up connections tend to be reasonably slow (<56 kbps in any
case), and thus large data transfers are less feasible, especially
during an active application session (such as a file transfer
described by IMG metadata). They can also be intermittent,
especially if a user is paying for the connected time, or connected
through a less reliable exchange. Thus, this favors locally stored
IMG metadata over web-based browsing, especially where parts of the
metadata change infrequently. There may be no service provider
preference over unicast and multicast transport for small and medium
numbers of users as the last-mile dial-up connection limits per-user
congestion, and a user may prefer the more reliable option (unicast
unless reliable multicast is provided).
<span class="grey">Nomura, et al. Informational [Page 8]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-9" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
<span class="h4"><a class="selflink" id="section-4.1.3" href="#section-4.1.3">4.1.3</a>. Broadband Always-on Fixed Internet Connection</span>
Typically, bandwidth is less of an issue to a broadband user and
unicast transport, such as using query-response methods, may be
typical for a PC user. If a system were only used in this context,
with content providers, ISPs, and users having no other requirements,
then web-based browsing may be equally suitable. However, broadband
users sharing a local area network, especially wireless, may benefit
more from local storage features than on-line browsing, especially if
they have intermittent Internet access.
Some services on broadband, such as live media broadcasting, benefit
from multicast transport for streaming media because of scalability.
In the cases where multicast transport is already available, it is
convenient for a sender and receiver to retrieve IMG metadata over
multicast transport. Thus, broadband users may be forced to retrieve
IMG metadata over multicast if backbone operators require this to
keep system-wide bandwidth usage feasible.
<span class="h3"><a class="selflink" id="section-4.2" href="#section-4.2">4.2</a>. Content-orientated Use Cases</span>
IMGs will be able to support a very wide range of use cases for
enabling content/media delivery. The following few sections just
touch the surface of what is possible and are intended to provide an
understanding of the scope and type of IMG usage. Many more examples
may be relevant, for instance, those detailed in [<a href="#ref-12" title=""IP Multicast Applications: Challenges and Solutions"">12</a>]. There are
several unique features of IMGs that set them apart from related
application areas such as Service Location Protocol (SLP) based
service location discovery, Lightweight Directory Access Protocol
(LDAP) based indexing services, and search engines such as Google.
Features unique to IMGs include the following:
o IMG metadata is generally time-related
o There are timeliness requirements in the delivery of IMG
metadata
o IMG metadata may be updated as time elapses or when an event
arises
<span class="h4"><a class="selflink" id="section-4.2.1" href="#section-4.2.1">4.2.1</a>. TV and Radio Program Delivery</span>
A sender of audio/video streaming content can use the IMG metadata to
describe the scheduling and other properties of audio/video sessions
and events within those sessions, such as individual TV and radio
programs and segments within those programs. IMG metadata describing
audio/video streaming content could be represented in a format
<span class="grey">Nomura, et al. Informational [Page 9]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-10" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
similar to that of a TV guide in newspapers, or an Electronic Program
Guide available on digital TV receivers.
TV and radio programs can be selected for reception either manually
by the end-user or automatically based on the content descriptions
and the preferences of the user. The received TV and radio content
can be either presented in real time or recorded for later
consumption. There may be changes in the scheduling of a TV or a
radio program, possibly affecting the transmission times of
subsequent programs. IMG metadata can be used to notify receivers of
such changes, enabling users to be prompted or recording times to be
adjusted.
<span class="h4"><a class="selflink" id="section-4.2.2" href="#section-4.2.2">4.2.2</a>. Media Coverage of a Live Event</span>
The media coverage of a live event such as a rock concert or a sports
event is a special case of regular TV/radio programming. There may
be unexpected changes in the scheduling of a live event, or the event
may be unscheduled to start with (such as breaking news). In
addition to audio/video streams, textual information relevant to the
event (e.g., statistics of the players during a football match) may
be sent to user terminals. Different transport modes or even
different access technologies can be used for the different media:
for example, a unidirectional datacast transport could be used for
the audio/video streams and an interactive cellular connection for
the textual data. IMG metadata should enable terminals to discover
the availability of different media used to cover a live event.
<span class="h4"><a class="selflink" id="section-4.2.3" href="#section-4.2.3">4.2.3</a>. Distance Learning</span>
IMG metadata could describe compound sessions or services enabling
several alternative interaction modes between the participants. For
example, the combination of one-to-many media streaming, unicast
messaging, and downloading of presentation material could be useful
for distance learning.
<span class="h4"><a class="selflink" id="section-4.2.4" href="#section-4.2.4">4.2.4</a>. Multiplayer Gaming</span>
Multiplayer games are an example of real-time multiparty
communication sessions that could be advertised using IMGs. A gaming
session could be advertised either by a dedicated server or by the
terminals of individual users. A user could use IMGs to learn of
active multiplayer gaming sessions, or advertise the user's interest
in establishing such a session.
<span class="grey">Nomura, et al. Informational [Page 10]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-11" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
<span class="h4"><a class="selflink" id="section-4.2.5" href="#section-4.2.5">4.2.5</a>. File Distribution</span>
IMGs support the communication of file delivery session properties,
enabling the scheduled delivery or synchronization of files between a
number of hosts. The received IMG metadata could be subsequently
used by any application (also outside the scope of IMGs), for
example, to download a file with a software update. IMG metadata can
provide a description to each file in a file delivery session,
assisting users or receiving software in selecting individual files
for reception.
For example, when a content provider wants to distribute a large
amount of data in file format to thousands of clients, the content
provider can use IMG metadata to schedule the delivery effectively.
Since IMG metadata can describe time-related data for each receiver,
the content provider can schedule delivery time for each receiver.
This can save network bandwidth and delivery capacity of senders. In
addition, IMG metadata can be used to consistency check, and thus
synchronize, a set of files between a sender host and receiver host,
when those files change as time elapses.
<span class="h4"><a class="selflink" id="section-4.2.6" href="#section-4.2.6">4.2.6</a>. Coming-release and Pre-released Content</span>
IMG metadata can be used to describe items of content before the
details of their final release are known. A user may be interested
in coming content (a new movie or software title where some aspects
of the content description are known in advance) and so subscribe to
an information service that notifies the user of changes to metadata
describing that content. Thus, as the coming release (or pre-
releases, e.g., as movie trailers or software demos) become
available, the IMG metadata changes and the user is notified of this
change. For example, the user could see an announcement of a movie
that will be released sometime in the next few months, and configure
the user's terminal to receive and record any trailers or promotional
material as they become available.
<span class="h2"><a class="selflink" id="section-5" href="#section-5">5</a>. Requirements</span>
<span class="h3"><a class="selflink" id="section-5.1" href="#section-5.1">5.1</a>. General Requirements</span>
<span class="h4"><a class="selflink" id="section-5.1.1" href="#section-5.1.1">5.1.1</a>. Independence of IMG Operations from IMG Metadata</span>
REQ GEN-1: Carrying different kinds of IMG metadata format and
different IMG metadata formats in the IMG message body MUST be
allowed.
<span class="grey">Nomura, et al. Informational [Page 11]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-12" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
REQ GEN-2: Delivery mechanisms SHOULD support many different
applications' specific metadata formats to keep the system
interoperable with existing applications.
This provides flexibility in selecting/designing an IMG transport
protocol suited to various scenarios.
<span class="h4"><a class="selflink" id="section-5.1.2" href="#section-5.1.2">5.1.2</a>. Multiple IMG Senders</span>
REQ GEN-3: IMG receivers MUST be allowed to communicate with any
number of IMG senders simultaneously.
This might lead to receiving redundant IMG metadata describing the
same items; however, it enables the IMG receiver access to more IMG
metadata than may be available from a single IMG sender. This also
provides flexibility for the IMG transport protocols and does not
preclude a mechanism to solve inconsistency among IMG metadata due to
multiple IMG senders. This document assumes that a typical IMG
environment will involve many more IMG receivers than IMG senders and
that IMG senders are continually connected for the duration of
interest (rather than intermittently connected).
<span class="h4"><a class="selflink" id="section-5.1.3" href="#section-5.1.3">5.1.3</a>. Modularity</span>
REQ GEN-4: The IMG delivery mechanisms MUST allow the combination of
several IMG operations.
This is for the purpose of extending functionality (e.g., several or
one protocol(s) to provide all the needed operations). Applications
can select an appropriate operation set to fulfill their purpose.
<span class="h3"><a class="selflink" id="section-5.2" href="#section-5.2">5.2</a>. Delivery Properties</span>
This section describes general performance requirements based on the
assumption that the range of IMG usage shall be important. However,
note that requirements for delivery properties may vary based on the
usage scenario, and thus some limited-use implementations place less
importance on some requirements.
For example, it is clear that a multicast transport may provide more
scalable delivery than a unicast transport; however, scalability
requirements do not preclude the unicast transport mechanisms. In
this sense, scalability is always important for the protocols
irrespective of transport mechanisms.
<span class="grey">Nomura, et al. Informational [Page 12]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-13" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
<span class="h4"><a class="selflink" id="section-5.2.1" href="#section-5.2.1">5.2.1</a>. Scalability</span>
REQ DEL-1: The IMG system MUST be scalable to large numbers of
messages, so as to allow design and use of delivery mechanisms that
will not fail in delivering up-to-date information under huge numbers
of transactions and massive quantities of IMG metadata.
REQ DEL-2: IMGs SHOULD provide a method to prevent an IMG sender from
sending unnecessary IMG metadata that have been stored or deleted in
IMG receivers.
REQ DEL-3: The protocol MUST be scalable to very large audience sizes
requiring IMG delivery.
<span class="h4"><a class="selflink" id="section-5.2.2" href="#section-5.2.2">5.2.2</a>. Support for Intermittent Connectivity</span>
REQ DEL-4: The system MUST enable IMG receivers with intermittent
access to network resources (connectivity) to receive and adequately
maintain sufficient IMG metadata.
This allows intermittent access to save power where there is no need
to keep communications links powered up while they are sitting idle.
For instance, in this situation, periodic bursts of notifies or a
fast cycling update carousel allow hosts to wake up for short periods
of time and still be kept up-to-date. This can be beneficial for IMG
receivers with sporadic connections to the fixed Internet, but is
critical in the battery-powered wireless Internet.
The implication of intermittent connectivity is that immediate
distribution of changes becomes infeasible and so managing data
consistency should be focused on the timely delivery of data.
<span class="h4"><a class="selflink" id="section-5.2.3" href="#section-5.2.3">5.2.3</a>. Congestion Control</span>
REQ DEL-5: Internet-friendly congestion control MUST be provided for
use on the public Internet.
REQ DEL-6: An IMG entity SHOULD invalidate the IMG metadata item when
an IMG metadata item has lifetime information and its lifetime is
over. This will lessen the need for notifications of updates from
the IMG sender to the IMG receiver to invalidate the item and may
help in reducing load.
<span class="h4"><a class="selflink" id="section-5.2.4" href="#section-5.2.4">5.2.4</a>. Sender- and Receiver-Driven Delivery</span>
REQ DEL-7: The system MUST be flexible in choosing sender-driven,
receiver-driven, or both delivery schemes.
<span class="grey">Nomura, et al. Informational [Page 13]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-14" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
Sender-driven delivery achieves high scalability without interaction
between the IMG sender and receiver.
In contrast, receiver-driven delivery provides on-demand delivery for
IMG receivers. Since an IMG sender's complete IMG metadata may be a
very large amount of data, the IMG receiver needs to be able to
access the guide when convenient (e.g., when sufficient network
bandwidth is available to the IMG receiver).
<span class="h3"><a class="selflink" id="section-5.3" href="#section-5.3">5.3</a>. Customized IMGs</span>
REQ CUS-1: The system MUST allow delivery of customized IMG metadata.
The IMG receiver may require a subset of all the IMG metadata
available according to their preferences (type of content, media
description, appropriate age group, etc.) and configuration.
The IMG receiver might send its preferences in the IMG operations
that can specify user-specific IMG metadata to be delivered. These
preferences could consist of filtering rules. When receiving these
messages, the IMG sender might respond with appropriate messages
carrying a subset of IMG metadata that matches the IMG receiver's
preferences.
This mechanism can reduce the amount of IMG metadata delivered from
the IMG sender to IMG receiver, and consequently it can save the
resource consumption on the IMG entities and networks. It is
typically useful in unicast cases and also beneficial in multicast
cases where an IMG sender distributes the same IMG metadata to
interested IMG receivers at the same time.
For multicast and unicast cases where the IMG sender does not provide
customized IMG metadata, the IMG receiver could receive all IMG
metadata transmitted on the channels that the IMG receiver has
joined. However, it may select and filter the IMG metadata to get
customized IMG metadata by its preferences, and thus drop unwanted
metadata immediately upon reception.
Customizing metadata might be achieved by changing the IMG
descriptions sent and IMG receivers and/or changing the delivery
properties (channels used).
Note that customization and scalability are only somewhat exclusive.
Systems providing an IMG receiver to an IMG sender request-based
customization will be generally less scalable to massive IMG receiver
populations than those without this return signaling technique.
Thus, customization, as with any feature that affects scalability,
should be carefully designed for the intended application, and it may
<span class="grey">Nomura, et al. Informational [Page 14]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-15" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
not be possible that a one-size-fits-all solution for customization
would meet the scalability requirements for all applications and
deployment cases.
<span class="h3"><a class="selflink" id="section-5.4" href="#section-5.4">5.4</a>. Reliability</span>
<span class="h4"><a class="selflink" id="section-5.4.1" href="#section-5.4.1">5.4.1</a>. Managing Consistency</span>
IMG metadata tends to change as time elapses; as new content is
added, the old IMG metadata stored in the IMG receiver becomes
unavailable, and the parameters of the existing IMG metadata are
changed.
REQ REL-1: The system MUST manage IMG metadata consistency.
Either the IMG sender can simply make updates available
(unsynchronized), or the IMG sender and receiver can interact to keep
their copies of the IMG metadata synchronized.
In the unsynchronized model, the IMG sender does not know whether a
particular IMG receiver has an up-to-date copy of the IMG metadata.
In the synchronized model, updating a cached copy of the IMG metadata
is necessary to control consistency when the IMG sender or receiver
could not communicate for a while. In this case, the IMG sender or
receiver may need to confirm its consistency by IMG operations.
REQ REL-2: Since IMG metadata can change at any time, IMG receivers
SHOULD be notified of such changes.
Fulfilling this requirement needs to be compatible with the
scalability requirements for the number of IMG receivers and the
consistency of metadata.
Depending on the size of the IMG metadata, the interested party may
want to defer retrieving the actual information. The change
notification should be addressed to a logical user (or user group),
rather than a host, since users may change devices.
Note that depending on the deployment environment and application
specifics, the level of acceptable inconsistency varies. Thus, this
document does not define inconsistency as specific time and state
differences between IMG metadata stored in an IMG sender and IMG
metadata stored in an IMG receiver.
In general, the consistency of metadata for content and media is more
important immediately prior to and during the media's session(s).
Hosts that forward (or otherwise resend) metadata may not tolerate
<span class="grey">Nomura, et al. Informational [Page 15]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-16" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
inconsistencies because delivering out-of-date data is both
misleading and bandwidth inefficient.
<span class="h4"><a class="selflink" id="section-5.4.2" href="#section-5.4.2">5.4.2</a>. Reliable Message Exchange</span>
REQ REL-4: An IMG transport protocol MUST support reliable message
exchange.
The extent to which this could result in 100% error-free delivery to
100% of IMG receivers is a statistical characteristic of the
protocols used. Usage of reliable IMG delivery mechanisms is
expected to depend on the extent to which underlying networks provide
reliability and, conversely, introduce errors. Note that some
deployments of IMG transport protocols may not aim to provide perfect
reception to all IMG receivers in all possible cases.
<span class="h3"><a class="selflink" id="section-5.5" href="#section-5.5">5.5</a>. IMG Descriptions</span>
REQ DES-1: IMG metadata MUST be interoperable over any IMG transport
protocol, such that an application receiving the same metadata over
any one (or more) of several network connections and/or IMG transport
protocols will interpret the metadata in exactly the same way. (This
also relates to the 'Independence of IMG Operations from IMG
Metadata' requirements.)
REQ DES-2: IMG delivery MUST enable the carriage of any format of
application-specific metadata.
Thus, the system will support the description of many kinds of
multimedia content, without the need for a single homogeneous
metadata syntax for all uses (which would be infeasible anyway).
This is essential for environments using IMG systems to support many
kinds of multimedia content and to achieve wide applicability.
REQ DES-3: Whereas specific applications relying on IMGs will need to
select one or more specific application-specific metadata formats
(standard, syntax, etc.), the IMG system MUST be independent of this
(it may be aware, but it will operate in the same way for all).
Thus, a metadata transfer envelope format that is uniform across all
different application-specific IMG metadata formats is needed. The
envelope would reference (point to) or carry (as payload) some
application-specific metadata, and the envelope would support the
maintenance of the application-specific metadata, which may also
serve the metadata relationships determined by the data model(s)
used. The envelope would not need to be aware of the data model(s)
in use.
<span class="grey">Nomura, et al. Informational [Page 16]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-17" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
REQ DES-4: IMG metadata MUST be structured to enable fragmentation
for efficient delivery.
This is intended to ensure that an IMG sender with more than a
trivial knowledge of metadata is able to deliver only part of its
(and the global) complete IMG metadata knowledge. (For instance, a
trivial quantity of knowledge could be a single SDP description.) In
general, the resolution of this fragmentation will be very much
dependent on the optimal delivery of a deployment, although some
metadata syntaxes will inherently affect the sensible lower limit for
a single element/fragment.
REQ DES-5: A metadata transfer envelope MUST be defined to include
essential parameters.
Examples of essential parameters are those that allow the metadata in
question to be uniquely identified and updated by new versions of the
same metadata.
REQ DES-6: It SHALL be possible to deduce the metadata format via the
metadata transfer envelope.
REQ DES-7: IMG senders SHALL use a metadata transfer envelope for
each IMG metadata transfer.
Thus, it will even be possible to describe relationships between
syntactically dissimilar application-specific formats within the same
body of IMG metadata knowledge. (For instance, a data model could be
instantiated using both SDP and SDPng.)
REQ DES-8: IMG metadata SHOULD support the description of differences
between an updated version and an old version of IMG metadata when
the IMG delivery mechanism carries updated IMG metadata and those
differences are considerably little (e.g., by providing a 'delta' of
the two versions; this also relates the delivery property
requirements for congestion control in <a href="#section-5.2.3">Section 5.2.3</a>).
<span class="h2"><a class="selflink" id="section-6" href="#section-6">6</a>. Security Considerations</span>
Internet Media Guides are used to convey information about multimedia
resources from one or more IMG senders across one or more
intermediaries to one or more IMG receivers. IMG metadata may be
pushed to the IMG receivers or interactively retrieved by them. IMGs
provide metadata as well as scheduling and rendezvous information
about multimedia resources, and so on, and requests for IMG metadata
may contain information about the requesting users.
<span class="grey">Nomura, et al. Informational [Page 17]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-18" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
The information contained in IMG metadata as well as the operations
related to IMGs should be secured to avoid forged information,
misdirected users, and spoofed IMG senders, for example, and to
protect user privacy.
The remainder of this section addresses the security requirements for
IMGs.
<span class="h3"><a class="selflink" id="section-6.1" href="#section-6.1">6.1</a>. IMG Authentication and Integrity</span>
IMG metadata and its parts need to be protected against unauthorized
alteration/addition/deletion on the way. Their originator needs to
be authenticated.
REQ AUT-1: It MUST be possible to authenticate the originator of a
set of IMG metadata.
REQ AUT-2: It MUST be possible to authenticate the originator of a
subpart of IMG metadata (e.g., a delta or a subset of the
information).
REQ AUT-3: It MUST be possible to validate the integrity of IMG
metadata.
REQ AUT-4: It MUST be possible to validate the integrity of a subpart
of IMG metadata (e.g., a delta or a subset of the information).
REQ AUT-5: It MUST be possible to separate or combine individually
authenticated pieces of IMG metadata (e.g., in an IMG transceiver)
without invalidating the authentication.
REQ AUT-6: It MUST be possible to validate the integrity of an
individually authenticated piece of IMG metadata even after this
piece has been separated from other pieces of IMG metadata and
combined with other pieces to form new IMG metadata.
REQ AUT-7: It MUST be possible to authenticate the originator of an
IMG operation.
REQ AUT-8: It MUST be possible to validate the integrity of any
contents of an IMG operation (e.g., the subscription or inquiry
information).
<span class="grey">Nomura, et al. Informational [Page 18]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-19" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
<span class="h3"><a class="selflink" id="section-6.2" href="#section-6.2">6.2</a>. Privacy</span>
Customized IMG metadata and IMG metadata delivered by notification to
individual users may reveal information about the habits and
preferences of a user and may thus deserve confidentiality
protection, even though the information itself is public.
REQ PRI-1: It MUST be possible to keep user requests to subscribe to
or retrieve certain (parts of) IMG metadata confidential.
REQ PRI-2: It MUST be possible to keep IMG metadata, pieces of IMG
metadata, or pointers to IMG metadata delivered to individual users
or groups of users confidential.
REQ PRI-3: It SHOULD be possible to ensure this confidentiality end-
to-end, that is, to prevent intermediaries (such as IMG transceivers)
from accessing the contained information.
<span class="h3"><a class="selflink" id="section-6.3" href="#section-6.3">6.3</a>. Access Control for IMGs</span>
Some IMG metadata may be freely available, while access to other IMG
metadata may be restricted to closed user groups (e.g., paying
subscribers). Also, different parts of IMG metadata may be protected
at different levels: for example, metadata describing a media session
may be freely accessible, while rendezvous information to actually
access the media session may require authorization.
REQ ACC-1: It MUST be possible to authorize user access to IMG
metadata.
REQ ACC-2: It MUST be possible to authorize access of users to pieces
of IMG metadata (delta information, subparts, pointers).
REQ ACC-3: It MUST be possible to require different authorization for
different parts of the same IMG metadata.
REQ ACC-4: It MUST be possible to access selected IMG metadata
anonymously.
REQ ACC-5: It MUST be possible for an IMG receiver to choose not to
receive (parts of) IMG metadata in order to avoid being identified by
the IMG sender.
REQ ACC-6: It SHOULD be possible for an IMG transceiver to select
suitable authorization methods that are compatible between both IMG
senders and IMG receivers it interacts with.
<span class="grey">Nomura, et al. Informational [Page 19]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-20" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
REQ ACC-7: It MAY be possible for IMG senders to require certain
authorization that cannot be modified by intermediaries.
<span class="h3"><a class="selflink" id="section-6.4" href="#section-6.4">6.4</a>. Denial-of-Service (DOS) Attacks</span>
Retrieving or distributing IMG metadata may require state in the IMG
senders, transceivers, and/or receivers for the respective IMG
transport sessions. Attackers may create large numbers of sessions
with any of the above IMG entities to disrupt regular operation.
REQ DOS-1: IMG operations SHOULD be authenticated.
REQ DOS-2: It SHOULD be possible to avoid DoS attacks that build up
session state in IMG entities to exhaust their resources.
REQ DOS-3: It SHOULD be possible to avoid DoS attacks that exhaust
resources of IMG entities by flooding them with IMG metadata.
As an example, two potential solutions that may be considered are
running an IMG entity in stateless mode or identification and
discarding of malicious packets by an IMG entity.
<span class="h3"><a class="selflink" id="section-6.5" href="#section-6.5">6.5</a>. Replay Attacks</span>
IMG metadata disseminated by an IMG sender or an IMG transceiver may
be updated, be deleted, or lose validity over time for some other
reasons. Replaying outdated IMG metadata needs to be prevented.
Furthermore, replay attacks may also apply to IMG operations (rather
than just their payload). Replaying operations also needs to be
prevented.
REQ REP-1: IMG metadata MUST be protected against partial or full
replacement of newer ("current") versions by older ones.
In a system with multiple senders, it may not be feasible to prevent
some senders from delivering older versions of metadata than others -
as a result of imperfect sender-sender data consistency. Thus,
replay attacks and delivery of inconsistent data require that an IMG
receiver verifies that the IMG metadata is valid and reliable by
using some security mechanism(s) (e.g., authorization,
authentication, or integrity).
REQ REP-2: Mechanisms MUST be provided to mitigate replay attacks on
the IMG operations.
<span class="grey">Nomura, et al. Informational [Page 20]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-21" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
The level of threat from replay attacks varies very much depending on
system scale and how well defined or open it is. Thus, mitigating
replay attacks may lead to different solutions for different systems,
independent of the basic delivery method and metadata definitions. A
system with multiple senders presents a more challenging scenario for
handling replay attacks. As an example, bundling metadata with a
security mechanism is one potential solution.
<span class="h2"><a class="selflink" id="section-7" href="#section-7">7</a>. Normative References</span>
[<a id="ref-1">1</a>] Bradner, S., "Key words for use in RFCs to Indicate Requirement
Levels", <a href="https://www.rfc-editor.org/bcp/bcp14">BCP 14</a>, <a href="./rfc2119">RFC 2119</a>, March 1997.
<span class="h2"><a class="selflink" id="section-8" href="#section-8">8</a>. Informative References</span>
[<a id="ref-2">2</a>] Handley, M. and V. Jacobson, "SDP: Session Description
Protocol", <a href="./rfc2327">RFC 2327</a>, April 1998.
[<a id="ref-3">3</a>] Handley, M., Perkins, C., and E. Whelan, "Session Announcement
Protocol", <a href="./rfc2974">RFC 2974</a>, October 2000.
[<a id="ref-4">4</a>] Session Directory, <a href="ftp://ftp.ee.lbl.gov/conferencing/sd/">ftp://ftp.ee.lbl.gov/conferencing/sd/</a>
[<a id="ref-5">5</a>] Session Directory Tool, <a href="http://www-mice.cs.ucl.ac.uk/multimedia/software/sdr/">http://www-</a>
<a href="http://www-mice.cs.ucl.ac.uk/multimedia/software/sdr/">mice.cs.ucl.ac.uk/multimedia/software/sdr/</a>
[<a id="ref-6">6</a>] Digital Video Broadcasting Project, <a href="http://www.dvb.org/">http://www.dvb.org/</a>
[<a id="ref-7">7</a>] Kutscher, D., Ott, J., and C. Bormann, "Session description and
capability negotiation", Work in Progress, February 2005.
[<a id="ref-8">8</a>] Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, A.,
Peterson, J., Sparks, R., Handley, M., and E. Schooler, "SIP:
Session Initiation Protocol", <a href="./rfc3261">RFC 3261</a>, June 2002.
[<a id="ref-9">9</a>] Nomura, Y., Walsh, R., Luoma, J-P., Asaeda, H., and H.
Schulzrinne, "Framework for the Usage of Internet Media Guides
(IMG)", <a href="./rfc4435">RFC 4435</a>, April 2006.
[<a id="ref-10">10</a>] Fielding, R., Gettys, J., Mogul, J., Frystyk, H., Masinter, L.,
Leach, P., and T. Berners-Lee, "Hypertext Transfer Protocol --
HTTP/1.1", <a href="./rfc2616">RFC 2616</a>, June 1999.
[<a id="ref-11">11</a>] Roach, A.B., "Session Initiation Protocol (SIP)-Specific Event
Notification", <a href="./rfc3265">RFC 3265</a>, June 2002.
[<a id="ref-12">12</a>] Quinn, B. and K. Almeroth, "IP Multicast Applications:
Challenges and Solutions", <a href="./rfc3170">RFC 3170</a>, September 2001.
<span class="grey">Nomura, et al. Informational [Page 21]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-22" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
<span class="h2"><a class="selflink" id="section-9" href="#section-9">9</a>. Acknowledgements</span>
The authors would like to thank Hitoshi Asaeda, Gonzalo Camarillo,
Jean-Pierre Evain, Dirk Kutscher, Petri Koskelainen, Colin Perkins,
Toni Paila, and Magnus Westerlund for their excellent comments and
ideas on this work.
Authors' Addresses
Yuji Nomura
Fujitsu Laboratories Ltd.
4-1-1 Kamikodanaka, Nakahara-ku, Kawasaki 211-8588
Japan
EMail: nom@flab.fujitsu.co.jp
Rod Walsh
Nokia Research Center
P.O. Box 100, FIN-33721 Tampere
Finland
EMail: rod.walsh@nokia.com
Juha-Pekka Luoma
Nokia Research Center
P.O. Box 100, FIN-33721 Tampere
Finland
EMail: juha-pekka.luoma@nokia.com
Joerg Ott
Helsinki University of Technology
Networking Laboratory
PO Box 3000
FIN-02015 TKK
Finland
EMail: jo@netlab.tkk.fi
Henning Schulzrinne
Dept. of Computer Science
Columbia University
1214 Amsterdam Avenue
New York, NY 10027
USA
EMail: schulzrinne@cs.columbia.edu
<span class="grey">Nomura, et al. Informational [Page 22]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-23" ></span>
<span class="grey"><a href="./rfc4473">RFC 4473</a> Requirements for Internet Media Guides (IMGs) May 2006</span>
Full Copyright Statement
Copyright (C) The Internet Society (2006).
This document is subject to the rights, licenses and restrictions
contained in <a href="https://www.rfc-editor.org/bcp/bcp78">BCP 78</a>, and except as set forth therein, the authors
retain all their rights.
This document and the information contained herein are provided on an
"AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS
OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET
ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE
INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED
WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Intellectual Property
The IETF takes no position regarding the validity or scope of any
Intellectual Property Rights or other rights that might be claimed to
pertain to the implementation or use of the technology described in
this document or the extent to which any license under such rights
might or might not be available; nor does it represent that it has
made any independent effort to identify any such rights. Information
on the procedures with respect to rights in RFC documents can be
found in <a href="https://www.rfc-editor.org/bcp/bcp78">BCP 78</a> and <a href="https://www.rfc-editor.org/bcp/bcp79">BCP 79</a>.
Copies of IPR disclosures made to the IETF Secretariat and any
assurances of licenses to be made available, or the result of an
attempt made to obtain a general license or permission for the use of
such proprietary rights by implementers or users of this
specification can be obtained from the IETF on-line IPR repository at
<a href="http://www.ietf.org/ipr">http://www.ietf.org/ipr</a>.
The IETF invites any interested party to bring to its attention any
copyrights, patents or patent applications, or other proprietary
rights that may cover technology that may be required to implement
this standard. Please address the information to the IETF at
ietf-ipr@ietf.org.
Acknowledgement
Funding for the RFC Editor function is provided by the IETF
Administrative Support Activity (IASA).
Nomura, et al. Informational [Page 23]
</pre>
|