ecrit B. Rosen Internet-Draft 14 October 2024 Intended status: Standards Track Expires: 17 April 2025 Validation of Locations Around a Planned Change draft-ietf-ecrit-lost-planned-changes-10 Abstract This document defines an extension to the Location to Service Translation (LoST) protocol (RFC5222) that allows a LoST server to notify a client of planned changes to location data. This extension is only useful with the validation function of LoST. It is beneficial for LoST validation clients to be aware of planned changes, since at a known future date, previously valid records may become invalid, and new records may become valid. This extension adds an element to the request to allow a LoST client to request validation as of a specified date. It adds an optional Time-To-Live element to the response, which informs clients of the current expected lifetime of a validation. It also adds a separate interface to a LoST server that allows a client to poll for planned changes. Additionally, this document provides a conventional XML schema for LoST, as a backwards compatible alternative to the RelaxNG schema in RFC5222. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on 17 April 2025. Copyright Notice Copyright (c) 2024 IETF Trust and the persons identified as the document authors. All rights reserved. Rosen Expires 17 April 2025 [Page 1] Internet-Draft LoST Planned Changes October 2024 This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/ license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2 2. Conventions used in this document . . . . . . . . . . . . . . 4 3. Planned Change Poll Interface . . . . . . . . . . . . . . . . 4 4. Element . . . . . . . . . . . . . . . . . . . . . . . 6 5. "validUntil" in Response . . . . . . . . . . . . . . . . . . 7 6. Replacement XML schema . . . . . . . . . . . . . . . . . . . 8 7. Extension XML Schema . . . . . . . . . . . . . . . . . . . . 17 8. plannedChangePoll Interface Description . . . . . . . . . . . 17 9. Security Considerations . . . . . . . . . . . . . . . . . . . 19 10. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 20 10.1. Application Service Tag . . . . . . . . . . . . . . . . 20 10.2. Replacement XML Schema Registration . . . . . . . . . . 20 10.3. Planned Change Extension XML Schema Registration . . . . 20 11. Normative References . . . . . . . . . . . . . . . . . . . . 21 Author's Address . . . . . . . . . . . . . . . . . . . . . . . . 22 1. Introduction Validation of civic locations involves dealing with data that may change over time. A typical example is when a portion of a county or district that was not part of a municipality is "annexed" to a municipality. Prior to the change, a Presence Information Data Format Location Object (PIDF-LO) [RFC5139] specifying a civic location in the affected area would have a blank A3 element, or would contain some other value; after the change, a PIDF-LO specifying the same location would contain an A3 element set to the name of the municipality that annexed that part of the county/district. This kind of annexation has an effective date and time (typically 00:00 on the first or last day of a month), known in advance. Other kinds of changes may also occur, and these will almost always also have an effective date that is known in advance. Records in a LoST client such as a Location Information Server (LIS) must change around these kinds of events. Each affected old record must be discarded, and a new, validated record must be loaded into the client's database. It is often difficult for a LIS operator to know that records must be changed around such events. There are Rosen Expires 17 April 2025 [Page 2] Internet-Draft LoST Planned Changes October 2024 other circumstances where locations that were previously valid become invalid, such as a street renaming or renumbering event. Using [RFC5222] validation, the only way for a LoST client such as a LIS to discover such changes is to periodically revalidate its entire database. Of course, this does not facilitate timely changes, is not coordinated with the actual change event, and also adds significant load to LoST servers as well as LoST clients such as LISs. Even when re-validation is used, a server has no mechanism to control, or suggest the time period for revalidation. This extension allows a LoST client to obtain from a LoST server sets of locations which may change. It makes use of "partial location information" which is a set of location elements and values that, when compared against client location records, identify which of the client records may change as a result of the planned change. A set of such partial locations is termed a "ChangeSet". ChangeSets have an ID, and a date when the change is effective. IDs are ordered so that changes can be completed in the correct order. The planned change interface is a REST/JSON interface that allows a client to poll a server using the last ID that it obtained from that server. The response to a poll is a list of all the newer planned changes the server knows about beyond the ChangeSet whose ID was included in the poll. The ID of the last ChangeSet in the returned list is used by the client in its next poll. When a LoST client such as a LIS receives a new ChangeSet, it may prepare one or more new records so that, at the precise planned event date and time, it may insert the new records into its active database and delete the old records. As part of preparing the new records in advance of the change, a client may use the "asOf" date component of this extension to perform a LoST validation of the new record as of the effective date. The "asOf" date component of this extension allow a LoST client such as a LIS to be prepared for and smoothly transition to planned changes. The polling mechanism allows a client to be informed of planned changes, while the "asOf" date allows it to verify the validity of locations before they become active. Rosen Expires 17 April 2025 [Page 3] Internet-Draft LoST Planned Changes October 2024 Unplanned changes will occur, and periodic revalidation can still be used to maintain the data in the client's records. However, LoST servers should be able to influence the rate of such revalidation. For this purpose, this extension adds an optional "expires" element to the to provide advice from a server to a client as to when revalidation is suggested. In a , a LoST server may include the "expires" element to expressly state when the location should be re-validated. This avoids clients blindly revalidating every address on an arbitrary schedule. There are quite a few implementations of LoST. Experience with these implementations indicates that the RelaxNG schema is very difficult to deal with, both because many commonly used development tools don't support it, and development staff is often unfamiliar with it. Informal alternative schemas have been circulated, which is undesirable as they may not be in conformance with the RelaxNG schema in [RFC5222]. This document provides an XML schema that replaces the RelaxNG schema. It can be used by any implementation interchangeably with the RelaxNG schema. 2. Conventions used in this document The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. "Server" in this document refers to a LoST server and "Client" is a LoST client. 3. Planned Change Poll Interface This document defines a new interface to a LoST server. The interface has three endpoints: 1. Versions, which returns the current version(s) the interface supports. This allows the interface to evolve over time. 2. PlannedChangePoll, which supports a polling mechanism. The poll returns a list of changeSetIds which identify ChangeSet objects. 3. GetChangeSet, which accepts a changeSetId and returns the identified ChangeSet object. A ChangeSet object contains an identifier (changeSetId), a date (changeSetEffective) and an array of partial locations. Rosen Expires 17 April 2025 [Page 4] Internet-Draft LoST Planned Changes October 2024 A partial location is an array of location information element name and value pairs. A LoST client (such as a LIS) compares the location elements with its records. For each of the client's records where all of the location elements provided in the partial location have the same values as those in the partial location, that client record may be affected by the planned change. The client's records may have other location elements, but those are not considered in the comparison. So, for example, a partial location may have Country, A1, A2, A3 and A4 location elements, which means that any address with those Country, A1, A2, A3 and A4 values may be affected by the planned change, regardless of street name and number. As another example, a partial location with Country, A1, A2, A3, A4, RD and POD but not HN applies to any address number on the specified street. Servers supporting this extension maintain an ordered list of changeSetIds. A changeSetId is a string, which might not show the ordering. For example, the ID could be a hashed timestamp, or a hashed sequence number, among other things. Given a changeSetId returned in a prior poll, a server can identify which ChangeSets it has that come next, in order, after the specified changeSetId. A new client that does not know any IDs, or a client that lost the last changeSetId that it had, uses the PlannedChangePoll endpoint, omitting the changeSetId in the poll query. In the response, the server returns all the ChangeSets it knows about. The effective date of a ChangeSet returned by a server need not be in the future. Tardy clients might not keep up. On the other hand, a server is not obligated to keep ChangeSets whose changeSetEffective date has passed by more than some arbitrary time. A 12 month time period may be appropriate for a server whose service area doesn't have many changes, while a three month time period may be needed in a service area with frequent changes. A tardy client in a fast-changing environment might receive a large number of ChangeSetIds in response to a poll. Polls are expected every few minutes. A new client (or one that has lost its last changeSetID) performs a poll without specifying an ID, and the server responds with all the changeSetsIds that it knows about. Thereafter, the client retains the last changeSetId from its most recent poll and uses that in the next poll. If the response to that poll contains no changeSetIds, it means the changeSetId the client has is the latest change the server knows about; the client uses the same changeSetId in subsequent polls until the server returns a new changeSetId. The version mechanism returns a list of versions of the web service the server supports. This document specifies version 1.0. Versions are described as a major version and a minor version, where major and minor versions are integers, and a version description is a string Rosen Expires 17 April 2025 [Page 5] Internet-Draft LoST Planned Changes October 2024 consisting of the major version, a dot, and the minor version. A backwards-compatible change within a major version MAY increment only the minor version number. A non-backwards-compatible change MUST increment the major version number. To achieve backwards compatibility, implementations MUST ignore any object members they do not recognize. Minor version specifications SHALL only add objects, non-required members of existing objects, and non-mandatory-to-use functions and SHALL NOT delete any objects, members of objects or functions. This means an implementation of a specific major version and minor version is backwards compatible with all minor versions of the major version. The versions mechanism returns an array of supported versions, one for each major version supported, with the minor version listed being the highest supported minor version. When versions are written or used as a string, the major version is first and separated from the minor version with a period. For example major version 3, minor version 2 is written as "3.2". Discovering the Planned Change Poll interface uses the "lost+plannedchange" application tag with U-NAPTR using the name (application unique string) of the LoST server that provided validation as input along with this new service tag. The normative definition of the web interface for these endpoints is contained in Section 8 4. Element This document defines a new element in the request called 'asOf', which contains a date and time in dateTime format with a required timezone. A server supporting this extension validates the location in the request as of the date and time specified, taking into account planned changes. This allows a client to verify in advance that it can make changes in its records in accordance with changes at the LoST server. A server responds with what it knows (as of the moment of the request) will be in effect on or before the 'asOf' date The LoST server is not expected to retain a history of changes. Therefore, an 'asOf' date in the past will return the same results as omitting it (meaning current data). There are no constraints on how far in advance planned changes may occur, and changes to the data may occur at any time. Therefore, two queries with the same future 'asOf' value placed at different times can return different results. The server responds with its current understanding of planned changes (including any planned or unplanned changes that have already occurred) and makes no representations about future queries of the same location. Rosen Expires 17 April 2025 [Page 6] Internet-Draft LoST Planned Changes October 2024 5. "validUntil" in Response This extension adds an 'validUntil' attribute to the element. The 'validUntil' attribute contains a date and time after which the client may wish to revalidate the location with the server. A server MAY add this attribute to a response when validation is requested. This attribute takes the form of the 'expires' attribute pattern of [RFC5222], which allows the values "NO-CACHE" or "NO-EXPIRATION" to be returned instead of a dateTime value. However, for the 'validUntil' attribute specified here, "NO-CACHE" has no meaning and MUST NOT be returned; "NO- EXPIRATION" means the server does not have a suggested revalidation period. Selecting a revalidation interval is a complex balancing of timeliness, server load, stability of the underlying data, and policy at the LoST server. Too short, and load on the server may be undesirably large. Too long, and invalid data may persist in clients for unacceptable lengths of time. The polling mechanism provides timely notice to synchronize changes, but even with it, it is advisable for clients to periodically revalidate their records. In areas that have little change in data, such as fully built out, stable communities already part of a municipality, it may be reasonable to set revalidation periods of six months or longer. In areas that are quickly growing, 20-30 day revalidation may be more appropriate, even though these revalidations might be a majority of the traffic at the LoST server. When a change is planned, typically the 'validUntil' value of the affected records is lowered approaching and after the change, so that clients with affected records revalide soon after the change is implemented. For example, one technique is to start lowering the 'validUntil' value of the affected records at the length of the previous 'validUntil' value in advance of the planned change. For example, if the old 'validUntil' value of the affected records is three months, then at least three months before the planned change, the 'validUntil' value of the affected records might be lowered to 20 days, and then 15-20 days before the planned change the value might be lowered again, to 10 days or so. It is not advisable to set the expiration precisely at the planned change time if a large number of records will be changed, since that would cause a large spike in traffic at the change time. Rather, the validUntil time should have a random additional time added to it to spread out the load. Rosen Expires 17 April 2025 [Page 7] Internet-Draft LoST Planned Changes October 2024 6. Replacement XML schema This schema is an alternative to The Relax NG schema in [RFC5222]. Future extensions to LoST are expected to use this schema as the base for the extensions, rather than the Relax NG schema. Existing extensions described using the Relax NG schema continue to be valid. Rosen Expires 17 April 2025 [Page 8] Internet-Draft LoST Planned Changes October 2024 Rosen Expires 17 April 2025 [Page 9] Internet-Draft LoST Planned Changes October 2024 Rosen Expires 17 April 2025 [Page 10] Internet-Draft LoST Planned Changes October 2024 Rosen Expires 17 April 2025 [Page 11] Internet-Draft LoST Planned Changes October 2024 Rosen Expires 17 April 2025 [Page 12] Internet-Draft LoST Planned Changes October 2024 Rosen Expires 17 April 2025 [Page 13] Internet-Draft LoST Planned Changes October 2024 Exception pattern. Rosen Expires 17 April 2025 [Page 14] Internet-Draft LoST Planned Changes October 2024 Any element not in the LoST namespace. Rosen Expires 17 April 2025 [Page 15] Internet-Draft LoST Planned Changes October 2024 A wildcard pattern for including any element from any other namespace. A wildcard pattern for including any element from any other namespace. A point where future extensions (elements from other namespaces) can be added. Rosen Expires 17 April 2025 [Page 16] Internet-Draft LoST Planned Changes October 2024 7. Extension XML Schema This schema provides the extension to the prior section schema for planned changes: 8. plannedChangePoll Interface Description openapi: 3.0.1 info: title: LoST plannedChange version: "1.0" servers: - url: http://localhost/LoST/v1 paths: /PlannedChangePoll: get: summary: Get a list of planned changeSetIds operationId: getPlannedChangeIds responses: '200': Rosen Expires 17 April 2025 [Page 17] Internet-Draft LoST Planned Changes October 2024 description: Planned Changes content: application/json: schema: $ref: '#/components/schemas/PlannedChangeIdList' /GetChangeSet: get: summary: Get a ChangeSet operationId: getChangeSet parameters: - in: query name: changeSetId schema: type: string description: ID of a ChangeSet responses: '200': description: return ChangeSet object content: application/json: schema: $ref: '#/components/schemas/ChangeSet' /Versions: servers: - url: https://api.example.com/rum description: Override base path for Versions query get: summary: Retrieves all supported versions operationId: RetrieveVersions responses: '200': description: Versions supported content: application/json: schema: $ref: '#/components/schemas/VersionsArray' components: schemas: PlannedChangeIdList: type: array items: type: string ChangeSet: type: object properties: changeSetId: type: string Rosen Expires 17 April 2025 [Page 18] Internet-Draft LoST Planned Changes October 2024 description: ID of the ChangeSet changeSetEffective: type: string format: datetime description: date and time change will come into effect in dateTime format with a required timezone partialLocationList: type: array items: type: object properties: caType: type: string description: CAtype name from IANA registry value: type: string description: value for this caType VersionsArray: type: object required: - versions properties: versions: type: array items: type: object required: - major - minor properties: major: type: integer format: int32 description: Version major number minor: type: integer format: int32 description: Version minor number 9. Security Considerations As an extension to LoST, this document inherits the security issues raised in [RFC5222]. Clients could poll at a rate which could affect other processing at the LoST server. This is not unlike any other type of denial of service attack at an HTTP server and similar mitigations are necessary. Rosen Expires 17 April 2025 [Page 19] Internet-Draft LoST Planned Changes October 2024 10. IANA Considerations 10.1. Application Service Tag This document registers the following U-NAPTR application service tag: Application Service Tag: LoST-PlannedChange Defining Publication: The specification contained within this document. 10.2. Replacement XML Schema Registration URI: urn:ietf:params:xml:schema:lost3 Registrant Contact: IETF ECRIT Working Group, Brian Rosen (br@brianrosen.net). XML: BEGIN LoST Planned Change Namespace

Namespace for LoST

urn:ietf:params:xml:ns:lostPlannedChange1

See RFC????.

END The XML Schema is found in Section 7. 11. Normative References [RFC5139] Thomson, M. and J. Winterbottom, "Revised Civic Location Format for Presence Information Data Format Location Object (PIDF-LO)", RFC 5139, DOI 10.17487/RFC5139, February 2008, . [RFC5222] Hardie, T., Newton, A., Schulzrinne, H., and H. Tschofenig, "LoST: A Location-to-Service Translation Protocol", RFC 5222, DOI 10.17487/RFC5222, August 2008, . [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, . [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, . Rosen Expires 17 April 2025 [Page 21] Internet-Draft LoST Planned Changes October 2024 Author's Address Brian Rosen Email: br@brianrosen.net Rosen Expires 17 April 2025 [Page 22]