D7.4 – Standardization Activities Report – Version 1

The work described in this document has been conducted within the project RAINBOW. This project has received funding from the European Union’s Horizon 2020 (H2020) research and innovation programme under the Grant Agreement no 871403. This document does not represent the opinion of the European Union, and the European Union is not responsible for any use that might be made of such content.

ProjectTitle AN OPEN, TRUSTED FOG COMPUTING PLATFORMFACILITATING THE DEPLOYMENT, ORCHESTRATION ANDMANAGEMENTOFSCALABLE,HETEROGENEOUSANDSECUREIOTSERVICESANDCROSS-CLOUDAPPS

ProjectAcronym RAINBOW

Grant AgreementNo 871403

Instrument ResearchandInnovationaction

Call/Topic H2020-ICT-2019-2020/CloudComputing

StartDateofProject 01/01/2020

DurationofProject 36months

D7.4 – Standardization Activities Report – Version 1 WorkPackage WP7–Dissemination,ExploitationandCommunication

LeadAuthor(Org) ThomasPusztai(TUW)

ContributingAuthor(s)(Org)

FrankScherber(IFAT),VasileiosPsomiadis(AUTH),DemetrisTrihinas(UCY),SchahramDustdar(TUW)

DueDate 30.06.2021ActualDateofSubmission 05.07.2021

Version 1.0DisseminationLevelX PU:Public(*on-lineplatform) PP:Restrictedtootherprogrammeparticipants(includingtheCommission) RE:Restrictedtoagroupspecifiedbytheconsortium(includingtheCommission) CO:Confidential,onlyformembersoftheconsortium(includingtheCommission)

ProjectNo871403(RAINBOW)

D7.4–StandardizationActivitiesReport–Version1 Date:05.07.2021 DisseminationLevel:PU

Page 1 of 19

Copyright © Rainbow Consortium Partners 2021

Versioningandcontributionhistory

Version Date Author Notes

0.1 04.05.2021 ThomasPusztai(TUW) TableofContents

0.2 10.06.2021 ThomasPusztai(TUW) AddSections2and3

0.3 11.06.2021 VasileiosPsomiadis(AUTH),ThomasPusztai(TUW)

ReviewandRevision

0.4 18.06.2021 ThomasPusztai(TUW),DemetrisTrihinas(UCY)

AddOpenHorizonpresentationtoAnnex

0.5 18.06.2021 FrankScherber(IFAT) AddSection4

0.6 18.06.2021 ThomasPusztai(TUW) AddSections1and5

0.7 29.06.2021 ChristinaStratigaki(UBI),ClaudioCasetti(POLITO),ThanassisGiannetsos(DTU),ThomasPusztai(TUW)

Reviewandrevision

1.0 05.07.2021 FrankScherber(IFAT),ThomasPusztai(TUW)

Finalchanges

Disclaimer

Thisdocumentcontainsmaterialand informationthat isproprietaryandconfidential to theRAINBOWConsortiumandmaynotbecopied,reproducedormodifiedinwholeorinpartforanypurposewithoutthepriorwrittenconsentoftheRAINBOWConsortium

Despitethematerialandinformationcontainedinthisdocumentisconsideredtobepreciseandaccurate,neithertheProjectCoordinator,noranypartneroftheRAINBOWConsortiumnoranyindividualactingonbehalf of any of the partners of the RAINBOW Consortium make any warranty or representationwhatsoever,expressorimplied,withrespecttotheuseofthematerial, information,methodorprocessdisclosedinthisdocument,includingmerchantabilityandfitnessforaparticularpurposeorthatsuchusedoesnotinfringeorinterferewithprivatelyownedrights.

In addition, neither the Project Coordinator, nor any partner of the RAINBOW Consortium nor anyindividualactingonbehalfofanyofthepartnersoftheRAINBOWConsortiumshallbeliableforanydirect,indirect or consequential loss, damage, claim or expense arising out of or in connection with anyinformation,material,advice,inaccuracyoromissioncontainedinthisdocument.



Page 2 of 19


Table of Contents

Executive Summary ........................................................................................................... 3

1 Introduction ............................................................................................................... 4

2 Standardization Strategy ........................................................................................... 5

2.1 Goal ............................................................................................................................... 5

2.2 Target Standardization Groups ....................................................................................... 5

3 Open Horizon ............................................................................................................. 6

3.1 Project Overview ............................................................................................................ 6

3.2 RAINBOW Contribution Plan .......................................................................................... 6

3.3 Activity until M18 ........................................................................................................... 7

4 Trusted Computing Group .......................................................................................... 8

4.1 Group Overview ............................................................................................................. 8

4.2 RAINBOW Contribution Plan .......................................................................................... 8

4.3 Activity until M18 ......................................................................................................... 10

5 Conclusion and Future Steps .................................................................................... 11

6 References ............................................................................................................... 12

Annex I – RAINBOW Presentation for Open Horizon ........................................................ 13

List of Abbreviations

Abbreviation DefinitionTCG TrustedComputingGroupLFEdge LinuxFoundationEdgeTSC TechnicalSteeringCommitteeTPM TrustedPlatformModuleTNC TrustedNetworkCommunicationsTC TrustedComputingCPC CertificationProgramCommitteeDAA DirectAnonymousAttestationTSS TPMSoftwareStack



Page 3 of 19


Executive Summary

ThisdocumentcontainsacomprehensivereportofRAINBOW’sstandardizationactivitiesconducted in the first 18 months of the project. It first describes the goals of thestandardizationactivities,aswellastheworkinggroupstargeted.Then,foreachworkinggroup, an overview of its purpose and goals is provided, followed by RAINBOW’scontributionplan,andtheactivitiesundertakenuntilmonth18.This is a livedocument thatwill beupdatedwith theprogressof the standardizationactivitiesuntiltheendoftheproject,whenits2ndandfinalversionwillbereleased.



Page 4 of 19


1 Introduction

Thepresentdeliverable isprepared inthecontextofWorkPackage7“Dissemination,ExploitationandCommunication”anditisassociatedwiththeworkbeingdonewithintaskT7.2“StandardizationActivities”.This deliverable complements D7.2 “Open-Source Contributions, Dissemination,ClusteringandWorkshopActivitiesReport-Version1”(specificallySection3.6)ledbyAUTH,byprovidingacomprehensiveoverviewofthestandardizationactivitiesthatareplannedaspartofRAINBOWandwhichhavebeenundertakenuntilM18.Astheprojectandthestandardizationactivitiesprogress,thisplanmaybeupdatedtoreflectchangedcircumstancesofRAINBOWorthetargetedstandardizationgroups.This report is structuredas follows:Section2outlines thegoalof thestandardizationactivitiesandliststhetargetstandardizationgroups.Sections3and4discussthetargetgroups,ourplansforcontributions,andtheactivitiesthathavebeenundertakensofar.Section5concludesthisreport.



Page 5 of 19


2 Standardization Strategy

2.1 Goal

The goal of the RAINBOW standardization activities is to influence fog computingarchitectures of future applications and allow them to benefit from the outcomes ofRAINBOW. There are multiple ways to achieve this goal. One option is to influencerelevant standards, such as OASIS TOSCA or Trusted Computing Group TPM, whileanotheroptionistocontributetosoftwareplatformsthatwilllikelybeusedasabaseforcreatingalargenumberoffogapplicationsinthefuture,makingthemsimilartoade-factoindustrystandard.ForRAINBOW,wearepursuingbothoptions.

2.2 Target Standardization Groups

TheRAINBOWDoAstatesthegoalofcontributingtothreestandardizationgroups.ThesewereoriginallydefinedasOASISTOSCA,TCG,andathirdonetobechosenafterstartingtheproject.WehavechosentotargetthefollowinggroupsaspartoftheRAINBOWstandardizationactivities:

• OpenHorizon1softwareplatformformanagingcontainerizedworkloadsonthenetworkedge(seeSection3).OriginallystartedbyIBM,OpenHorizonisnowpartoftheLinuxFoundationEdgeandhasthepotentialforwidespreadadoptioninedge/fogapplications.

• TrustedComputingGroup (TCG)2,which is the consortium responsible for theTPMstandard(seeSection4).

Originally, OASIS TOSCA3 was supposed to be targeted. It is an open standard formodellingthetopologyofcloudapplications,includingtherelationshipsbetweentheircomponentsandthemanagementprocesses involved.TheoriginalplanforRAINBOWwastoextendTOSCAforthefog,thusmakinganofficialcontributiontothisstandardalogicalstep.However,wedecidedtotakeaKubernetes-nativeapproachforthedesignand development of RAINBOW. Kubernetes is one of the most popular containerorchestration systems in production use,whichmeans that support for this platformleads to higher chances of adoption of RAINBOW by the open source and industrialcommunity.Since,RAINBOWdoesnotmakeuseofTOSCA,itnolongermakessensetocontributetothisstandard,leadingtotheexclusionofTOSCAfromourlistoftargetstandardizationgroups.Instead,wehavedecidedtofocusmoreontheOpenHorizonplatform,becauseofitspotentialtomakealargeimpactinthenearfuture.

1https://www.lfedge.org/projects/openhorizon/2https://trustedcomputinggroup.org3https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=tosca



Page 6 of 19


3 Open Horizon

3.1 Project Overview

Open Horizon4 is an open-source platform for managing containerized applicationdeployments and machine learning on edge nodes. The main goal is managing thelifecycle of applications without administrator intervention by finding the mostappropriate devices for their execution and managing updates of these applications.Furthermore,OpenHorizonenablesanapplicationononedevicetousecapabilitiesofotherdevices.TheprojectwasinitiatedbyIBMandcontributedtoLinuxFoundationEdge(LFEdge)inApril2020.WithinLFEdge,italreadyhasmanysynergieswithotherprojects.LFEdgeclassifiesOpenHorizonasaStage2“Growth”project,whichmakesitaprojectthat islikely to have an impact, while offering favourable possibilities for RAINBOW tocontribute[1][2].

3.2 RAINBOW Contribution Plan

WeintendtocontributeRAINBOWcomponents,aftersuitablemodification,totheOpenHorizonplatform.ThegoalisthatthesecomponentsshouldoutlivetheRAINBOWprojectandbeusedinproductionapplications.SinceOpenHorizon ispartof LFEdgeand supportedby IBM, it has thepotential forbecomingveryinfluentialintheedge/fogcommunity.Thus,acontributiontothisproject,wouldinfluencealargenumberofapplications,whichcouldbecreatedbasedonOpenHorizon,leadingtoadirectimpactofRAINBOWinproduction-levelapplications.We have initially identified the following RAINBOW components as candidates forcontributionstoOpenHorizon:

1. TheRAINBOWSidecarProxy forbootstrappingOpenHorizonservicesonedgenodes.

2. RAINBOW Monitoring services for establishing a monitoring infrastructure inOpenHorizon.

3. TheFogifysimulatorforfacilitatingtestingofsomeOpenHorizonscenarios.AsRAINBOWprogressesandthecollaborationwithOpenHorizoncontinues,additionalcomponentsmaybecomeeligibleforcontribution.

4https://www.lfedge.org/projects/openhorizon/



Page 7 of 19


3.3 Activity until M18

TUWhasestablishedcontacttoOpenHorizon’sTechnicalSteeringCommittee(TSC)inFebruary2021.On29March2021TUWandUCYpresented5theRAINBOWplatformandthecontributioncandidate components to theOpenHorizonTSC [3]. Thepresentation anddiscussionhave sparked interest in the RAINBOW platform and the suggested contributions.Specifically,theyexpressedthefollowinginterests:

• TheRAINBOWSidecarProxy forbootstrappingOpenHorizonservicesonedgenodes.

• The RAINBOW Monitoring service for gathering and analysing metrics aboutrunningapplicationsonanOpenHorizoncluster.ThisisanaspectthatiscurrentlymissingfromtheOpenHorizonplatform.

• TheFogifyfogsimulatorwasidentifiedasapossibleadditionalcontribution,iftheothercontributionsaresuccessful.

OpenHorizoniscurrentlywaitingforthefirstRAINBOWrelease,whichtheywouldliketotryoutontheirsystems.Afterthistest,theconcretecontributionsfromRAINBOWandfutureactionpointswillbedefined.OpenHorizonhasavarietyoftestsystems,whichareemployedasnecessaryforaparticulartestinggoal.Thesesystemsrangefromthousandsofvirtualmachinestophysicaledgedevices.ThetargetsettingforatestoftheRAINBOWplatformwasnotspecified.TheOpenHorizonTSChasremarkedthataconditionforcontributionstotheirproject,is theavailabilityof support for thedonatedcomponentsnotonly for thedurationofRAINBOW,butalsoaftertheRAINBOWprojectends.WearecurrentlyworkingonfindingasolutiontocaterbothtothisconditionandtheoverallcommitmentpossibilitiesoftheRAINBOWpartnerstowardstheplatform’sdevelopment.InaRAINBOWonlinemeetingofallworkpackageleaders,thefollowingtwoinitialsolutionswereproposed:

1. The Sidecar Proxy could be presented as an optional component in an OpenHorizondeployment.WhencreatinganOpenHorizoncluster,peoplewouldbeable to choosewhether touse theRAINBOWSidecarProxyornot. Ifused, theSidecarProxywouldprovideforeasierbootstrappingofedgenodes.

2. We could try to quickly engage the open source community in the donatedRAINBOWcomponents,whichwouldallowotherdeveloperstoprovidesupportforthesecomponentsaftertheendofRAINBOW.

ThenextstepforRAINBOWistoevaluatetheseoptionsandproposeaplantoOpenHorizon,aftertheyhaveevaluatedthefirstreleaseoftheRAINBOWplatform.

5ThepresentationcanbefoundinAnnexI.



Page 8 of 19


4 Trusted Computing Group

4.1 Group Overview

TheTrustedComputingGroup(TCG)6isanot-for-profitorganizationformedtodevelop,defineandpromoteopen,vendor-neutral,globalindustryspecificationsandstandards,supportive of a hardware-based root of trust, for interoperable trusted computingplatforms.TCG’scoretechnologiesincludespecificationsandstandardsfortheTrustedPlatformModule(TPM),TrustedNetworkCommunications(TNC)networksecurityandself-encryptingdrives.TCGalsohasworkinggroupstoextendcoreconceptsof

• trustintofogandcloudsecurity,• virtualizationandotherplatforms,• computingservicesfromtheenterprisetotheInternetofThings.

4.2 RAINBOW Contribution Plan

TheTCG is the internationallyacceptedstandardizationgroup,whichsetsall relevanttechnologiesandstandardsforTrustedComputing(TC).RAINBOWisworkingonandusingthesebasicTCstandardsforbuildingtrustedsystems.Therefore,boththeRAINBOWprojectandTCGbenefitfromthecontinuousexchangeofstandardizationandbackgroundinformation.Infineon’sSecuritybusinessunitismarketleaderforsemiconductor-basedsecurityandsystemsolutionswithsmartcardsecuritycontrollers.ForTCsolutions,Infineonisnowworldwidemarketleaderandistheonlyvendor,whichdeliversthewholeTCsolutionpackageofuseoutofonehand:TPM(thesecuritykernelchip)withthestandardsecurityfirmware, the TPM Software Stack (TSS) according to the TCG specification andapplications.Duetothiscustomer-orientedbackground,Infineonhasabroadexperiencefordeveloping,testingandintegratinghardwareparts(chips)aswellasthenecessarysoftwareandknow-howtocombinethemtosystemsolutions.TheRAINBOWprojectpartnerInfineonTechnologiesAT(IFAT)isanactivememberoftheTCGandcontributesintensivelytotheTCGstandards,usingexperiencefromitswidesecuritybackground,especiallytotheTPM,theTSSspecificationandtheplatformsystemsolutionstandards.Additionally,theRAINBOWprojectpartnerDTUhasalsoestablishedanacademicliaisonwithTCG.InfineonparticipatesinTCGasfollows:

• TCGPromoterlevelmembership• MemberintheTCGsBoardofDirectors

6http://www.trustedcomputinggroup.org



Page 9 of 19


• Co-ChairoftheCertificationProgramCommittee(CPC),whichtargetsespeciallythedevelopmentofthenewTCGComplianceandConformanceprogram,theTSSworkinggroupandtheSecurityEvaluationworkinggroup

• ContributesactivelyinWorkingGroups,e.g.theCyberResilience,TPM,PCClient,andTechnicalCommittee

MaintasksattributedtotheRAINBOWproject:

• Infineon along with DTU and UBITECH plans to contribute with relatedorganizationalandtechnicalsupport,technologyandknow-how:

o IntensivetechnicalandorganizationallinksandcapabilitiestotheTCGinTPM,TSSandespeciallytotheCPC(InfineonispresentandengagedinanumberofrelevantgroupsandactivitiesintheTCG).

o Specific TC support and management implementations, which could beusedasasourceofexperienceandalsoastestobjects.

o Existing and novel concepts and their realization for using TC indatacentres (Cloud, Fog, edge) and also in embedded controllers, likeembedded systems or automotive (Non-PC), market demands andevaluationrequirements.

• DTU along with Infineon and UBITECH plans to contribute to the TCGstandardization and discuss the latest advances in DAA andattestation/revocationthathavebeenperformedbyRAINBOW:

o EvaluationoftheconceptforProvisioningofenhancedremoteattestationvariantsintheAttestationWGfocusingontheverificationofpropertiesforcontainers towards the creation of trust aware service graph chains.ValidationofthecurrentconceptwithTCGmembersandtheimpactonthecurrent specificationwhen it comes to the zero-touchattestationaspectofferedbyRAINBOW.

o Evaluationof theDAAmechanism for integration in theCJDNSnetwork.DAA is a privacy-preserving platform authentication mechanismsupportedbyTCGandtheyareinterestedinpromotingtheuseofDAAinvariousapplicationdomains.ThefactthatRAINBOWintroducestheDAAasanintegralpartofCJDNSisaninterestingaspectfortheTNCworkinggroup.

• Infineon’spreviousexperienceswhicharerelevanttothetasksattributedtothe

RAINBOWproject:o TCtestingexperiencefromalreadydevelopedcommercialmodules,APIs

andmanagementsoftware,togetherwiththedevelopmentresultsfromtheFutureTPM,E2SGorCumulusprojectfortheLinuxworldandalsoalreadyexperience for TPM functionality implementation with embeddedprocessorslikeembeddedsystemsandothercommunicationparts.

o ParticipationinseveraltrustandsecurityrelatedpublicprojectsatEUandnationallevelalsoinleadingpositions:

§ FP2020andHorizonEurope,Eniac,ITEA§ Germany:BMBF,BMWi



Page 10 of 19


4.3 Activity until M18

Infineonparticipatedinavarietyofworkinggroupswithleadingpositionsaschairandactivecontributortospecifications.InfineonattendedalsothemembersmeetingaspartoftheTCGsBoardofDirectors.Inparticular,sincebeginoftheRAINBOWprojectseveralregular phone conferences and the following members meetings with about 70-100participantseachwereusedfordisseminationactivities:

• TCGMembersMeetingFebruary2020• TCGMembersMeetingJune2020• TCGMembersMeetingOctober2020• TCGMembersMeetingFebruary2021• TCGMembersMeetingJune2021

As part of the DAA mechanism enhanced in the context of RAINBOW, DTU worked together with the TCG responsible for the TSS implementation towards the definition of a new privacy-preserving revocation model presented in the ACM WiSec 2021 conference [4].



Page 11 of 19


5 Conclusion and Future Steps

InthisDeliverable,areportoftheRAINBOWStandardizationActivitieswaspresented.Theproject’sstrategyistoinfluencefogcomputingapplicationsofthefutureandletthembenefitfromtheoutcomesofRAINBOW.Tothisend,wehavechosentwotargetgroups:OpenHorizonisanopen-sourceplatformdevelopedbytheLinuxFoundationEdgewiththeaimofmanagingthelifecycleofproductionedgeapplications,whichmakesitagoodtarget for influencing future fog applications. The Trusted Computing Group isresponsiblefortheTPMandothersecurity-relatedstandardsandis,thus,agoodplaceforinfluencingthesecurityaspectsoffutureapplications.Wereportedonourplansforcontributionstobothtargetgroups.ContacthasalreadybeenestablishedwiththegroupsandRAINBOWwasalreadypresentedtoOpenHorizon,sparkinggreatinterestinsomeofourcomponents.Duringthesecondhalfoftheproject,theStandardizationActivitieswillincreasetofulfiltheplanswehaveestablished.Basedontheresponsesofthetargetgroupstoourfirstrelease,adaptations to theseplansmayberequired,while fulfillingourgoals for taskT7.2.Thisdocumentwillbeupdatedwiththeprogressofthestandardizationactivitiesuntiltheendoftheproject,whenits2ndandfinalversionwillbereleased.



Page 12 of 19


6 References

[1]LFEdge,“OpenHorizon,”[Online].Available:https://www.lfedge.org/projects/openhorizon/.[Accessed09062021].

[2]LFEdge,“ProjectStages:DefinitionsandExpectations,”[Online].Available:https://wiki.lfedge.org/display/LE/Project+Stages%3A+Definitions+and+Expectations.[Accessed09062021].

[3]LFEdge,“TSC2021-03-29,”[Online].Available:https://wiki.lfedge.org/display/OH/TSC+2021-03-29.[Accessed10062021].

[4]B.Larsen,T.Giannetsos,I.KrontirisandK.Goldman,“Directanonymousattestationontheroad:efficientandprivacy-preservingrevocationinC-ITS,”inWiSec'21:Proceedingsofthe14thACMConferenceonSecurityandPrivacyinWirelessandMobileNetworks,2021.



Page 13 of 19


Annex I – RAINBOW Presentation for Open Horizon



Page 14 of 19




Page 15 of 19




Page 16 of 19




Page 17 of 19




Page 18 of 19




Page 19 of 19


D7.4 – Standardization Activities Report – Version 1

Documents

Transcript of D7.4 – Standardization Activities Report – Version 1