The major item still left to discuss, before we have an infrastructure where we can control ownership of the information it generates, is provisioning. Provisioning is the means to control who can access your devices, and do what with them.
The IEEE IoT Harmonization working group, which we presented in previous chapters, provides an extension to XMPP for provisioning. (This interface is based on legacy interfaces defined in XEP-0324.) The provisioning extension provides things with decision support in answering three main questions:
- Am I allowed to accept a presence subscription request from an entity?
- Am I allowed to be read by an entity, and if so, which data?
- Am I allowed to be controlled by an entity, and ...