{
  "number": 9140,
  "title": "Nimble Out-of-Band Authentication for EAP (EAP-NOOB)",
  "authors": [
    "T. Aura",
    "M. Sethi",
    "A. Peltonen"
  ],
  "published": "2021-12",
  "status": "Proposed Standard",
  "stream": "IETF",
  "area": "sec",
  "working_group": "emu",
  "pages": 51,
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "abstract": "The Extensible Authentication Protocol (EAP) provides support for multiple authentication methods. This document defines the EAP-NOOB authentication method for nimble out-of-band (OOB) authentication and key derivation. The EAP method is intended for bootstrapping all kinds of Internet-of-Things (IoT) devices that have no preconfigured authentication credentials. The method makes use of a user-assisted, one-directional, out-of-band (OOB) message between the peer device and authentication server to authenticate the in-band key exchange. The device must have a nonnetwork input or output interface, such as a display, microphone, speaker, or blinking light, that can send or receive dynamically generated messages of tens of bytes in length.",
  "keywords": [
    "IoT security",
    "cybersecurity",
    "network access authorization",
    "Extensible Authentication Protocol",
    "key exchange"
  ],
  "draft": "draft-ietf-emu-eap-noob-06",
  "doi": "10.17487/RFC9140",
  "updated_by": [
    "RFC9965"
  ],
  "urls": {
    "html": "https://rfc.dk/rfc9140/",
    "text": "https://rfc.dk/rfc9140.txt",
    "rfc_editor": "https://www.rfc-editor.org/rfc/rfc9140",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9140/"
  },
  "text_modified": "2021-12-30T20:23:00.011396266Z"
}