ECRITInternet Engineering Task Force (IETF) R. GellensInternet-DraftRequest for Comments: 8148 Core Technology ConsultingIntended status:Category: Standards Track B. RosenExpires: July 23, 2017ISSN: 2070-1721 NeuStar, Inc. H. Tschofenig IndividualJanuary 19,May 2017 Next-Generation Vehicle-Initiated Emergency Callsdraft-ietf-ecrit-car-crash-23.txtAbstract This document describes how to use IP-based emergency services mechanisms to support the next generation of emergency calls placed by vehicles (automatically in the event of a crash or serious incident, or manually invoked by a vehicle occupant) and conveying vehicle, sensor, and location data related to the crash or incident. Such calls are often referred to as "Automatic Crash Notification" (ACN), or "Advanced Automatic Crash Notification" (AACN), even in the case of manual trigger. The "Advanced" qualifier refers to the ability to carry a richer set of data. This document also registers a MIME media type and Emergency CallAdditionalDataBlockType for the vehicle, sensor, and location data (often referred to as "crash data" even though there is not necessarily a crash) anda SIPan INFO package to enable carrying this and related data in SIP INFO requests. An external specification for the data format, contents, and structureareis referenced in this document. This document reuses the technical aspects of next-generationpan-Pan- European eCall (a mandated and standardized system for emergency calls by in-vehicle systems (IVSs) within Europe and other regions). However, this document specifies use of a different set of vehicle (crash) data, specifically, the Vehicle Emergency Data Set (VEDS) rather than the eCall Minimum Set of Data (MSD). This document is an extension of the IETF eCall document, with the primary differences being that this document makes the MSD data set optional and VEDS mandatory, and it adds attribute values to the metadata/control object to permit greater functionality. This document registers a newSIPINFO package (identical to that registered for eCall but with the addition of the VEDS MIME type). This document also describes legacy (circuit-switched) ACN systems and their migration to next-generation emergency calling, to provide background information and context. Status of This Memo ThisInternet-Draftissubmitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documentsan Internet Standards Track document. This document is a product of the Internet Engineering Task Force (IETF).Note that other groups may also distribute working documents as Internet-Drafts. The listIt represents the consensus ofcurrent Internet- Drafts is at http://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents validthe IETF community. It has received public review and has been approved fora maximumpublication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available in Section 2 of RFC 7841. Information about the current status ofsix monthsthis document, any errata, and how to provide feedback on it may beupdated, replaced, or obsoleted by other documentsobtained atany time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on July 23, 2017.http://www.rfc-editor.org/info/rfc8148. Copyright Notice Copyright (c) 2017 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1.Terminology .Introduction . . . . . . . . . . . . . . . . . . . . . . . .34 2.IntroductionTerminology . . . . . . . . . . . . . . . . . . . . . . . .4. 6 3. Document Scope . . . . . . . . . . . . . . . . . . . . . . .78 4. Overview of Legacy Deployment Models . . . . . . . . . . . . 8 5. Migration toNext-GenerationNext Generation . . . . . . . . . . . . . . . .910 6. Vehicle Data . . . . . . . . . . . . . . . . . . . . . . . .1213 7. Data Transport . . . . . . . . . . . . . . . . . . . . . . .1314 8. Call Setup . . . . . . . . . . . . . . . . . . . . . . . . .1516 9. New Metadata/Control Values . . . . . . . . . . . . . . . . .1617 9.1. NewvaluesValues for the'action' attribute'"action" Attribute . . . . . . . . .17. 18 9.2.RequestExample <request> Element . . . . . . . . . . . . . . . .. . . . . 1819 9.3. The <ack>elementElement . . . . . . . . . . . . . . . . . . . . 19 9.4. The <capabilities>elementElement . . . . . . . . . . . . . . . 20 10. Test Calls . . . . . . . . . . . . . . . . . . . . . . . . . 21 11. Example. . . . . . . .Call Initiation . . . . . . . . . . . . . . . . . . . 22 12. Security Considerations . . . . . . . . . . . . . . . . . . . 27 13. Privacy Considerations . . . . . . . . . . . . . . . . . . . 28 14. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 28 14.1. MIME Media Type Registration for'application/EmergencyCall.VEDS+xml'application/EmergencyCall.VEDS+xml . . . . . . . . . . . 28 14.2. Registration of the'VEDS' entry"VEDS" Entry in the Emergency Call Data TypesregistryRegistry . . . . . . . . . . . . . . . . . . 30 14.3. New Action Values . . . . . . . . . . . . . . . . . . . 30 14.4. Emergency Call StaticMessageMessages Registry . . . . . . . .. 3031 14.5. Emergency Call Vehicle LampIDIDs Registry . . . . . . . .3132 14.6. Emergency Call Vehicle CameraIDIDs Registry . . . . . . .3233 14.7. TheemergencyCallData.eCall.VEDS SIPEmergencyCallData.VEDS INFOpackage . . . 33 15. Acknowledgements . . . . . . . . .Package . . . . . . . . 35 15. References . . . . .36 16. Changes from Previous Versions. . . . . . . . . . . . . . .37 16.1. Changes from draft-ietf-18 to draft-ietf-19. . . . . 38 15.1. Normative References .37 16.2. Changes from draft-ietf-17 to draft-ietf-18. . . . . .37 16.3. Changes from draft-ietf-16 to draft-ietf-17. . . . . .37 16.4. Changes from draft-ietf-14 to draft-ietf-15. . . . . 38 15.2. Informative references .37 16.5. Changes from draft-ietf-13 to draft-ietf-14. . . . . .37 16.6. Changes from draft-ietf-11 to draft-ietf-13. . . . . .37 16.7. Changes from draft-ietf-10 to draft-ietf-11. . . . 39 Acknowledgments . .37 16.8. Changes from draft-ietf-09 to draft-ietf-10. . . . . .38 16.9. Changes from draft-ietf-08 to draft-ietf-09. . . . . .38 16.10. Changes from draft-ietf-07 to draft-ietf-08. . . . . .38 16.11. Changes from draft-ietf-06 to draft-ietf-07. . . . . 40 Authors' Addresses .38 16.12. Changes from draft-ietf-05 to draft-ietf-06. . . . . .38 16.13. Changes from draft-ietf-04 to draft-ietf-05 . . . . . . 38 16.14. Changes from draft-ietf-03 to draft-ietf-04 . . . . . . 38 16.15. Changes from draft-ietf-02 to draft-ietf-03 . . . . . . 39 16.16. Changes from draft-ietf-01 to draft-ietf-02 . . . . . . 39 16.17. Changes from draft-ietf-00 to draft-ietf-01 . . . . . . 39 16.18. Changes from draft-gellens-02 to draft-ietf-00 . . . . . 39 16.19. Changes from draft-gellens-01 to -02 . . . . . . . . . . 39 16.20. Changes from draft-gellens-00 to -01 . . . . . . . . . . 39 17. References . . . . . . . . . . . . . . . . . . . . . . . . . 40 17.1. Normative References . .. . . . . . . . . . . . . . . . 4017.2. Informative references . . . . . . . . . . . . . . . . . 41 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 42 2.1. Introduction Emergency calls made by in-vehicle systems (e.g., automatically in the event of a crash or serious incident or manually by a vehicle occupant) assist in significantly reducing road deaths and injuries by allowing emergency services to respond quickly and appropriately to the specifics of the incident, often with better location accuracy. Drivers often have a poor location awareness, especially outside of major cities, atnightnight, and when away from home (especially abroad). In the most crucial cases, the victim(s) might not be able to call because they have been injured or trapped. For more than two decades, some vehicles have been equipped with telematics systemswhich,that, among other features, place an emergency call automatically in the event of a crash or manually in response to an emergency call button. Such systems generally have on-board location determination systems that make use of satellite-based positioning technology, inertial sensors, gyroscopes, etc., which can provide an accurate position for the vehicle. Such built-in systems can take advantage of the benefits of being integrated into a vehicle, such as more power capacity, ability to have larger or specialized antenna, ability to be engineered to avoid orminimiseminimize degradation by vehicle glass coatings, interference from other vehicle systems, etc. Thus, thePSAPPublic Safety Answering Point (PSAP) can be provided with a good estimate of where the vehicle is during an emergency. Vehicle manufacturers are increasingly adopting such systems, both for the safety benefits and for the additional features and services they enable (e.g., remote engine diagnostics, remote door unlock, stolen vehicle tracking and disabling, etc.).The generalA common term for such systems is Automatic Crash Notification (ACN) or"AdvancedAdvanced Automatic CrashNotification"Notification (AACN)."ACN"Sometimes the word "Collision" is usedininstead of "Crash." In thisdocumentdocument, "ACN" is used as a general term. ACN systems transmit some amount of data specific to the incident, referred to generally as "crash data" (the term is commonly used even though there might not have been a crash). While different systems transmit different amounts of crash data, standardized formats, structures, and mechanisms are needed to provide interoperability among systems and PSAPs. As of the date of this document, currently deployed in-vehicle telematics systems are circuit-switched and lack a standards-based ability to convey crash data directly to the PSAP (generally relying on either a human advisor or an automated text-to-speech system to provide the PSAP call taker with some crash data orally, or in some cases via a proprietary mechanism). In most cases, the PSAP call taker needs to first realize that the call is related to a vehicle incident, and then listen to the data and transcribe it. Circuit- switched ACN systems are referred to here asCS-ACN."CS-ACN". The transition to next-generationcalling in general, and foremergency callingin particular,provides an opportunity to vastly improve the scope, breadth,reliabilityreliability, and usefulness of crash dataduring an emergencybyallowingtransmitting a standardized setto be transmittedduring callset-up; tosetup; the data can beautomaticallyprocessed by the PSAP in an integrated, automated way and made available to the call takerin an integrated, automated way; as well as provideat call presentation. It also provides the ability fora PSAPthe call taker to request that a vehicle take certain actions, such as flashing lights or unlocking doors. In addition, vehicle manufacturers are provided an opportunity to take advantage of the same standardized mechanisms for data transmission and request processing for internal use if they wish (such as telemetry between the vehicle and a service center for both emergency and non-emergency uses, including location-based services,multi-mediamultimedia entertainment systems, remote door unlocking, remote diagnostics, androad-sideroadside assistance applications). Next-generation ACN provides an opportunity for such calls to be recognized and processed as such during callset-up,setup, and routed to an equipped PSAP where the vehicle data is available to assist the call taker in assessing and responding to the situation. Next-generation (IP-based) ACN systems are referred to here as NG-ACN. An ACN call can be initiated by a vehicle occupant or automatically initiated by vehicle systems in the event of a serious incident. (The "A" in "ACN" does stand for"Automatic,""Automatic", but the term is broadly used to refer to the class of calls that are placed by an in-vehicle system (IVS) or by Telematics Service Providers(TSP)(TSPs) and that carry incident-related data as well as voice.) Automatically triggered calls indicate a car crash or some other serious incident (e.g., a fire). Manually triggered calls include reports of observed crashes or serious hazards (such as impaired drivers or roadwaydebris).debris), requests for medical assistance, etc. The Association of Public-Safety Communications Officials (APCO) and the National Emergency Number Association (NENA) have jointly developed a standardized set of incident-related vehicle data for ACN use, called the Vehicle Emergency Data Set (VEDS) [VEDS]. Such data is often referred to as crash data although it is applicable in incidents other than crashes. This document describes how the IETF mechanisms for IP-based emergency calls are used to provide the realization of next- generation ACN. Although this specification is designed with the requirements for North America ACN in mind (and both APCO and NENA are based in the U.S.), it is specified generically such that the technology can bere-usedreused or extended to suit requirements in other regions. This document reuses the technical aspects of next-generationpan-Pan- European eCall (a mandated and standardized system for emergency calls by in-vehicle systems within Europe), as described in[I-D.ietf-ecrit-ecall].[RFC8147]. However, this document specifies use of a different set of vehicle (crash) data, specifically,the Vehicle Emergency Data Set (VEDS)VEDS rather than the eCall Minimum Set of Data (MSD). This document is an extension of[I-D.ietf-ecrit-ecall],[RFC8147], with the differences being that this document makes the MSD data set optional and VEDS mandatory, and it adds new attribute values to the metadata/control object defined in that document. This document also registers a newSIPINFO package (identical to that defined in[I-D.ietf-ecrit-ecall][RFC8147] with the addition of the VEDS MIME type). This document registers the'application/EmergencyCallData.VEDS+xml'application/EmergencyCallData.VEDS+xml MIME media type,registers the 'VEDS' entry inthe VEDS Emergency Call DataTypes registry,Type, andregisters a SIPthe EmergencyCallData.VEDS INFO package to enable carrying this and related data in SIP INFO requests. Section 6 introduces VEDS. Section 7 describes how VEDS data and metadata/control blocks are transported within NG-ACN calls. Section 8 describes how such calls are placed. These mechanisms are used to place emergency calls that are identifiable as ACN calls and that carry standardized crash data in an interoperable way. Calls by in-vehicle systems are placed using cellular networks, which might ignore location information sent by an originating device in an emergency call INVITE, instead substituting their own location information(often(although often determined in cooperation with the originating device). Standardized crash data structuresoftentypically include location as determined by the IVS. A benefit of this is that it allows the PSAP to see both the location as determined by the cellular network(often in cooperation with the originating device)and the location as determined by the IVS. This specification inherits the ability to utilize test call functionality from Section 15 of [RFC6881].1.2. Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119]. This documentre-usesreuses terminology defined in Section 3 of [RFC5012]. Additionally, we use the following abbreviations:+--------+----------------------------------------------------------+ | Term | Expansion | +--------+----------------------------------------------------------+ | 3GPP |3GPP: 3rd Generation Partnership Project| | AACN |AACN: Advanced Automatic Crash Notification| | ACN |ACN: Automatic Crash Notification| | APCO |APCO: Association of Public-Safety Communications Officials| | EENA |EENA: European Emergency Number Association| | ESInet |ESInet: Emergency Services IP network| | GNSS |GNSS: Global Navigation Satellite System (which includes| | |various systems such as the Global Positioning System or| | |GPS)| | IVS |IVS: In-Vehicle System| | MNO |MNO: Mobile Network Operator| | MSD | eCallMSD: Minimum Set of Data| | NENA |NENA: National Emergency Number Association| | NG | Next-Generation | | POTS |NG: Next Generation POTS: Plain Old Telephone Service (normal, circuit-switched| | |voice calls)| | PSAP |PSAP: Public Safety Answering Point| | TSP |TSP: Telematics Service Provider| | VEDS |VEDS: Vehicle Emergency Data Set| +--------+----------------------------------------------------------+Because the endpoints of aNext-Generationnext-generation ACN call are a PSAP and either an IVS or a TSP, to avoidreceptivelyrepetitively writing "IVS or TSP", the term "IVS" is used to represent either an IVS or a TSP when discussing signaling behavior (e.g., sending VEDS data, sending a SIP INVITE request, receiving a SIP INFO request, etc.). 3. Document Scope This document is focused on how an ACN emergency call issetupset up and incident-related data (including vehicle, sensor, and location data) is transmitted to the PSAP using IETF specifications. For the direct model, this is the end-to-end description (between the vehicle and the PSAP). For the TSP model, this describes the call leg between the TSP and the PSAP, leaving the call leg between the vehicle and the TSP up to the entities involved (i.e., IVS and TSP vendors) who arethenfree to use the same mechanismasforthe other legboth legs, or not. Note that Europe has a mandated and standardized system for emergency calls by in-vehicle systems. Thispan-EuropeanPan-European system is known as "eCall" and is the subject of a separate document,[I-D.ietf-ecrit-ecall],[RFC8147], which this document builds on. Vehicles designed to operate in multiple regions might need to support eCall as well as NG-ACN as described here. A vehicle IVS might determine whether to use eCall or ACN by first determining the region or country in which it is located (e.g., from a GNSS location estimate and/or identity of or information from an MNO). If other regions adopt other data formats, a multi-region vehicle might need to support those as well. This document adopts the callset-upsetup and other technical aspects of[I-D.ietf-ecrit-ecall],[RFC8147], which uses [RFC7852]; this makes it straightforward to use a different data set while keeping other technical aspects unchanged. Hence, bothNG-next- generation eCall (NG-eCall) and the NG-ACN mechanism described here are compatible, differing primarily in the specific data block that is sent (the eCall MSD in the case ofNG-eCall,NG-eCall andthe APCO/NENAVEDSusedin thisdocument),document) and some additions to the metadata/control data block. If other regions adopt their own vehicle data sets, this can be similarlyaccomodatedaccommodated without changing other technical aspects. Note that any additional data formats require a newSIPINFO package to permit transport within SIP INFO requests. 4. Overview of Legacy Deployment Models Legacy (circuit-switched) systems for placing emergency calls byin- vehiclein-vehicle systems generally have some ability to convey at least location and in some cases telematics data to the PSAP. Most such systems use one of three architectural models, which are described here as:"Telematics Service Provider" (TSP),"TSP", "direct", and "paired". These three models are illustrated below. In the TSP model, both emergency andnon-emergencyroutine TSP service calls are placed to aTelematics Service Provider (TSP);TSP; a proprietary technique (e.g., a proprietary in-band modem) is used for data transfer(such as a proprietary in-band modem)between the TSP and the vehicle. In an emergency,generally thetypically a TSPcall takeragent verifies the emergency, bridges in thePSAPPSAP, and communicates location, crash data (such as impact severity and trauma prediction), and other data (such as the vehicle description) to the PSAP call takerverballyorally (in some cases, a proprietary out-of-band interface is used). Since the TSP knows the location of the vehicle (from on-board GNSS and sensors),location-basedlocation- based routing is usually used to route to the appropriate PSAP. In some cases, the TSP is able to transmit location automatically, using similar techniques as for wireless calls.Typically, aA three-way voice call is generally established between the vehicle, the TSP, and the PSAP, allowing communication between the PSAP call taker, the TSPcall taker,agent, and the vehicle occupants (who might be unconscious). ///----\\\ proprietary+------++-----+ 911 trunk or POTS +------+ ||| IVS|||-------------->+|||-------------->| TSP+------------------->+|--------------------->| PSAP | \\\----/// crash data+------++-----+ location via trunk +------+ Figure 1: Legacy TSPModel.Model In the paired model, the IVS uses a local link (typically Bluetooth [Bluetooth]) with apreviously-pairedpreviously paired handset to establish an emergency call with the PSAP (by dialing a standard emergency number; 9-1-1 in NorthAmerica),America) and then communicates location data to the PSAP via text-to-speech; crash data might or might not be conveyed also using text-to-speech. Some such systems use an automated voice prompt menu for the PSAP call taker (e.g., "this is an automatic emergency call from a vehicle; press 1 to open a voice path to the vehicle; press 2 to hear the location read out") to allow the call taker to request location data via text-to-speech.+---+///----\\\| H | 911/etc+----+ 911/etc. voice call via handset +------+ ||| IVS |||-->|S +----------------------------------->+HS |----------------------------------->| PSAP | \\\----///+---++----+ location via text-to-speech +------+ (Note: "HS" is handset.) Figure 2: Legacy Paired Model In the direct model, the IVS directly places an emergency call with the PSAP by dialing a standard emergency number (9-1-1 in North America). Such systems might communicate location data to the PSAP via text-to-speech; crash data might or might not be conveyed using text-to-speech. Some such systems use an automated voice prompt menu (e.g., "this is an automatic emergency call from a vehicle; press 1 to open a voice path to the vehicle; press 2 to hear the location read out") to allow the call taker to request location data viatext- to-speech.text-to-speech. ///----\\\911/etc911/etc. voice call via IVS +------+ ||| IVS|||---------------------------------------->+|||---------------------------------------->| PSAP | \\\----/// location via text-to-speech +------+ Figure 3: Legacy Direct Model 5. Migration toNext-Generation MigrationNext Generation The migration of emergency calls placed by in-vehicle systems tonext- generationnext-generation (all-IP) technology per this document provides a standardized mechanism to identify such calls and to convey crash data with the call setup, as well as enabling additional communications modalities and enhanced functionality. This allows ACN calls and crash data to be automatically processed by the PSAP and made available to the call taker in an integrated, automated way. Because the crash data is carried in the initial SIP INVITE (per [RFC7852]) the PSAP can present it to the call taker simultaneously with the appearance of the call. The PSAP can also process the data to take other actions (e.g., if multiple calls from the same location arrive when the PSAP is busy and a subset of them are NG-ACN calls, a PSAP might choose to store the information and reject the calls, since the IVS will receive confirmation that the information has been successfully received; a PSAP could also choose to include a message stating that it is aware of the incident and responders are on theway;way, and a PSAP could call the vehicle back when a call taker is available). The migration of origination devices and networks, PSAPs, emergency services networks, and other telephony environments tonext-next generation technology provides enhanced interoperability and functionality, especially for emergency calls carrying additional data such as vehicle crash data. (In the U.S., a network specifically for emergency responders is being developed. This network, FirstNet, will benext-generationnext generation from the start, enhancing the ability for data exchange between PSAPs and responders.) NG-ACN calls can be recognized asoriginating from a vehicle,such during call set-up; they can be routed to a PSAP that is prepared both technically and operationally to handle such calls, and the vehicle-determined location and crash data can be processed automatically by the PSAP and made available to the call taker simultaneously with the call appearance.The PSAP can take advantage of enhanced functionality, includingEnhanced functionality includes the ability for the PSAP call taker to request the vehicle to take an action, such as sending an updated set of data,converyingconveying a message to the occupants, flashing lights, unlocking doors, etc. Vehicle manufacturers using the TSP model can choose to take advantage of the same mechanism to carry telematics data and requests and responses between the vehicle and the TSP for both emergency and non-emergency calls as are used for the interface with the PSAP.A next-generationAn IVS establishes a next-generation emergency call (see [RFC6443] and[RFC6881]),[RFC6881]) with an initial INVITE containing a Request-URI indicating an ACNtype ofemergency call and Call-Info header fields indicating that both vehicle crash and capabilities data are included; the IVS typically does not perform routing or location queriesbut relies(relying on thecarrierMNO forthis. [I-D.ietf-ecrit-ecall]this). [RFC8147] registers new service URN children within the "sos" subservice. These URNs request NG-ACNresources,resources and differentiate between manually and automatically triggered NG-ACN calls (which might be subject to different treatment depending on policy). The two service URNs registered in[I-D.ietf-ecrit-ecall][RFC8147] are "urn:service:sos.ecall.automatic" and "urn:service:sos.ecall.manual". The same service URNs are used for ACN as for eCall since in any region only one of these is supported, making a distinction unnecessary. (Further, PSAP equipment might support multiple data formats, allowing a PSAP to handle a vehicle that erroneously sent the wrong data object.) Note that in North America, routing queries performed by clients outside of an ESInet typically treat all sub-services of "sos" identically to "sos" with no sub-service. However, the Request-URI header field retains the full sub-service; route and handling decisions within an ESInet or PSAP can take the sub-service into account. For example, in a region with multiple cooperating PSAPs, an NG-ACN call might be routed to a PSAP that is NG-ACN capable, or one that specializes in vehicle-related incidents. Migration of the three architectural models tonext-generation (all- IP)next generation (all-IP) is described below. In the TSP model, the IVS transmits crash and location data to the TSP either byre-usingreusing the mechanisms and data objects described in thisdocument,document or by using a proprietary mechanism. In an emergency, the TSP bridges in thePSAPPSAP, and the TSP transmits crash and other data to the PSAP using the mechanisms and data objects described in this document. There is a three-way call between the vehicle, the TSP, and the PSAP, allowing communication between the PSAP call taker, the TSPcall taker,agent, and the vehicle occupants (who might be unconscious). The TSP relays PSAP requests and vehicle responses. proprietary ///----\\\ or standard+------++-----+ standard +------+ ||| IVS||| ------------------->+|||------------------->| TSP+------------------->+|------------------->| PSAP | \\\----///crash + othercrash+other data+------+ crash + other+-----+ crash+other data +------+ Figure 4: Next-Generation TSP Model The vehicle manufacturer and the TSP can choose to use the same mechanisms and data objects on the left call leg in Figure 4 as on the right. (Note that the TSP model can be more difficult when the vehicle is in a different country than the TSP (e.g., a US resident driving in Canada) because of the additional complexity in choosing the correct PSAP based on vehicle location performed by a TSP in a different country.) In the direct model, the IVS communicates crash data to the PSAP directly using the mechanisms and data objects described in this document. ///----\\\ NG emergency call +------+ ||| IVS|||----------------------------------------->+|||----------------------------------------->| PSAP | \\\----/// crash + other data +------+ Figure 5: Next-Generation Direct Model In the paired model, the IVS uses aBluetoothlocal link to apreviously-previously paired handset to establish an emergency call with the PSAP; it is unclear what facilities are or will be available for transmitting crash data through theBluetoothlink to the handset for inclusion in an NG emergencycall.call and receiving additional data items from the response. Hence, manufacturers that use the paired model for legacy calls might choose to adopt either the direct or TSPmodelsmodel for next-generation calls.+---+///----\\\ (undefined)| H |+----+ standard +------+ ||| IVS|||------------------>| S +------------------->+|||----------------->| HS |--------------------->| PSAP | \\\----/// (undefined)+---++----+ crash + other data +------+ Figure 6: Next-Generation Paired ModelIfRegardless of model, if the call is routed to a PSAP that is notcapable of processing the vehicle data,NG-ACN capable, the PSAP ignores (or does not receive) the vehicle data. This is detectable by the IVS or TSP when the status response to the INVITE (e.g., 200 OK) lacks a metadata/control structure acknowledging receipt of the data[I-D.ietf-ecrit-ecall].[RFC8147]. The IVS or TSP then proceeds as it would for a CS-ACN call (e.g.,verbaloral conveyance ofdata)data). 6. Vehicle DataThe Association of Public-Safety Communications Officials (APCO)APCO andthe National Emergency Number Association (NENA)NENA have jointly developed a standardized set ofincident-relatedincident- related vehicle data for ACN use, called the Vehicle Emergency Data Set (VEDS) [VEDS]. Such data is often referred to as crash data although it is applicable in incidents other than crashes. VEDS provides a standard data set for the transmission, exchange, and interpretation of vehicle-related data. A standard data format allows the data to be generated by an IVS or TSP and interpreted by PSAPs, emergency responders, and medical facilities. It includes incident-related information such as airbag deployment, location and compass orientation of the vehicle, spatial orientation of the vehicle (e.g., upright, onits side or roof ora side, roof, or bumper),varioussensor data that can indicate the potential severity of the crash and the likelihood of severe injuries to the vehicle occupants, etc. This data better informs the PSAP and emergency responders as to the type of response that might be needed. Some of this information has been included in U.S. government guidelines for field triage of injured patients [triage-2008] [triage-2011]. These guidelines are designed to help responders identify the potential existence of severe internal injuries and to make critical decisions about how and where a patient needs to be transported. VEDS is an XML structure (see [VEDS]) transported in SIP using the'application/EmergencyCallData.VEDS+xml'application/EmergencyCallData.VEDS+xml MIME media type. If new data blocks are needed (e.g., in other regions or for enhanced data), the steps required during standardization are briefly summarized below: o A set of data is standardized byan SDOa Standards Development Organization (SDO) or appropriateorganizationorganization. o A MIME media type for the crash data set is registered with IANA * If the data is specifically for use in emergency calling, the MIME media type is normally under the'application'application type with a subtype starting with'EmergencyCallData.'EmergencyCallData. * If the data format is XML, then by convention the name has a suffix of'+xml'"+xml". o The item is registered in theEmergency"Emergency Call DataTypesTypes" registry, as defined in Section 11.1.9 of[RFC7852][RFC7852]. * For emergency-call-specific formats, the registered name is the root of the MIME media type (not including the'EmergencyCallData'EmergencyCallData prefix and any suffix such as'+xml')"+xml") as described in Section 4.1 of [RFC7852]. o A newSIPINFO package is registered that permits carrying the new media type, the metadata/control object (defined in[I-D.ietf-ecrit-ecall]),[RFC8147]), and for compatibility, the MSD and VEDS objects, in SIP INFO requests. 7. Data Transport [RFC7852] establishes a general mechanism for including blocks of data within a SIP emergency call. This document makes use of that mechanism. This document also registersa SIPan INFO package (in Section 14.7) to enableNG-ACN relatedNG-ACN-related data blocks to be carried in SIP INFO requests (per [RFC6086], new SIP INFO method usages require the definition ofa SIPan INFO package).The Vehicle Emergency Data Set (VEDS)VEDS is an XML structure defined bythe Association of Public-Safety Communications Officials (APCO)APCO andthe National Emergency Number Association (NENA)NENA [VEDS]. It is carried in a body part with MIME media type'application/ EmergencyCallData.VEDS+xml'.application/ EmergencyCallData.VEDS+xml. AnIn-Vehicle System (IVS)IVS transmits a VEDS data block (see [VEDS]) by including it as a body part of a SIP message per [RFC7852]. The body part is identified by its MIME media type('application/ emergencyCallData.VEDS+xml')(application/ EmergencyCallData.VEDS+xml) in the Content-Type header field of the body part. The body part is assigned a unique identifierwhichthat is listed in a Content-ID header field in the body part. The SIP message is marked as containing the VEDS data by adding (or appending to) a Call-Info header field at the top level of the SIP message. This Call-Info header field contains aCIDContent Identifier (CID) URL referencing the body part's uniqueidentifier,identifier and a'purpose'"purpose" parameter identifying the data as a VEDS data block per theEmergency"Emergency CallAdditionalDataTypesTypes" registry entry; the'purpose'"purpose" parameter's value is'emergencyCallData.VEDS'."EmergencyCallData.VEDS". A VEDS data block is carried in a SIP INFO request by using theSIPINFO package defined in Section 14.7. A PSAP or IVS transmits a metadata/control object (see[I-D.ietf-ecrit-ecall])[RFC8147]) by including it in a SIP message as a MIME body part per [RFC7852]. The body part is identified by its MIME media type('application/emergencyCallData.control+xml')(application/ EmergencyCallData.Control+xml) in the Content-Type header field of the body part. The body part is assigned a unique identifierwhichthat is listed in a Content-ID header field in the body part. The SIP message is marked as containing the metadata/control block by adding (or appending to) a Call-Info header field at the top level of the SIP message. This Call-Info header field contains a CID URL referencing the body part's uniqueidentifier,identifier and a'purpose'"purpose" parameter identifying the data as a metadata/control block per theEmergency"Emergency CallAdditionalDataTypesTypes" registry entry; the'purpose'"purpose" parameter's value is'emergencyCallData.control'."EmergencyCallData.Control". A metadata/control object is carried in a SIP INFO request by using theSIPINFO package defined in Section 14.7. A body part containing a VEDS or metadata/control object has a Content-Disposition header field value containing "By-Reference" and is always enclosed in a multipart body part (even if it would otherwise be the only body part in the SIPmessage), since as of the date of this document, the use of Content-ID as a SIP header field is not defined (while it is defined for use as a MIME header field).message). AnIn-Vehicle System (IVS)IVS initiating an NG-ACN call includes in the initial INVITE a VEDS data block and a metadata/control object informing the PSAP of its capabilities. The VEDS andmetadata/ controlmetadata/control body parts (andPIDF-LO)Presence Information Data Format Location Object (PIDF-LO)) have a Content-Disposition header field with the value "By-Reference; handling=optional". Specifying handling=optional prevents the INVITE from being rejected if it is processed by a legacy element (e.g., a gateway between SIP and circuit-switched environments) that does not understand the VEDS or metadata/control (or PIDF-LO) objects. The PSAP creates ametadata/ controlmetadata/control object acknowledging receipt of the VEDS data and includes it in the SIP final response to the INVITE. The metadata/control object is not included in provisional (e.g., 180) responses. If the IVS receives an acknowledgment for a VEDS data object with received=false, this indicates that the PSAP was unable to properly decode or process the VEDS. The IVS action is not defined (e.g., it might only log an error). Since the PSAP is able to request an updated VEDS during the call, if an initial VEDS is unsatisfactory in any way, the PSAP can choose to request another one. A PSAP can request that the vehicle send an updated VEDS data block during a call. To do so, the PSAP creates a metadata/control object requesting VEDS data and includes it as a body part of a SIP INFO request sent within the dialog. The IVS then includes an updated VEDS data object as a body part of a SIP INFO request and sends it within the dialog. If the IVS is unable to send theVEDS,VEDS for any reason, it instead sends a metadata/control object containing an <ack> element acknowledging the request and containing an <actionResult> element with the'success'"success" parameter set to'false'"false" and a'reason'"reason" parameter (and optionally a'details'"details" parameter) indicating why the request cannot be accomplished. Per [RFC6086], metadata/control objects and VEDS data are sent using theSIPINFO package defined in Section 14.7. In addition, to align with the way a VEDS or metadata/control block is transmitted in a SIP message other than a SIP INFO request, one or more Call-Info header fields are included in the SIP INFO request referencing the VEDS or metadata/control block. See Section 14.7 for more information on the use of SIP INFO requests within NG-ACN calls. Any metadata/control object sent by a PSAP can request that the vehicle perform an action (such as sending a data block, flashing lights, providing a camera feed,etc.)etc.). ThevehicleIVS sends anacknowledgementacknowledgment for any request other than a successfully executed send-data action. Multiple requests with the same'action'"action:" value MUST be sent in separate metadata/control body parts (to avoid any ambiguity in theacknowledgement).acknowledgment). For each metadata/control block received containing one or more <request> elements (except for successfully executed send-data requests), the IVS sends a metadata/ control object containing an <ack> element acknowledging the received metadata/control block, containing an <actionResult> element per <request> element. If the IVS is aware that VEDS data it sent previously has changed, it MAY send an unsolicited VEDS in any convenient SIP message, including a SIP INFO request during the call. The PSAP sends an acknowledgment for an unsolicited VEDSobject (ifobject; if the IVS sent the unsolicited VEDS in a SIP INFO request, the acknowledgment is sent in a newSPSIP INFOrequest, otherwiserequest; otherwise, it is sent in the reply to the SIP request containing theVEDS).VEDS. 8. Call SetupA next-generation In-Vehicle System (IVS)An IVS initiating an NG-ACN call sends a SIP INVITE request using one of the SOS sub-services "SOS.ecall.automatic" or "SOS.ecall.manual" in the Request-URI. This SIP INVITE request includes standard sets of both crash and capabilities data as described in Section 7. Entities along the path between the vehicle and the PSAP are able to identify the call as an ACN call and handle it appropriately. The PSAP is able to identify the crash and capabilities data included in the SIP INVITE request by examining the Call-Info header fields for'purpose'"purpose" parameters whose values start with'EmergencyCallData.'EmergencyCallData. The PSAP is able to access the data it is capable of handling and is interested in by checking the'purpose'"purpose" parameter values. This document extends[I-D.ietf-ecrit-ecall][RFC8147] by reusing the callset- upsetup and other normative requirements with the exception that in this document, support for the eCall MSD is OPTIONAL and support for VEDSinis REQUIRED. This document also adds new attribute values to the metadata/control object defined in[I-D.ietf-ecrit-ecall].[RFC8147]. 9. New Metadata/Control Values This document adds new attribute values to the metadata/control structure defined in[I-D.ietf-ecrit-ecall].[RFC8147]. In addition to the base usage from the PSAP to the IVS to acknowledge receipt of crash data, the <ack> element is also contained in a metadata/control block sent by the IVS to the PSAP. This is used by the IVS to acknowledge receipt of a request by the PSAP and indicate if the request was carried out when that request would not otherwise be acknowledged (if the PSAP requests the vehicle to send data and the vehicle does so, the data serves as a successacknowledgement).acknowledgment); see Section 8 for details. The <capabilities> element is used in a metadata/control block sent from the IVS to the PSAP (e.g., in the initial INVITE) to inform the PSAP of the vehicle capabilities. Child elements contain all actions and data types supported by the vehicle and all available lamps (lights) and cameras. New request values are added to the <request> element to enable the PSAP to request the vehicle to perform additional actions. Mandatory Actions (the IVS and the PSAP MUST support): o Transmit data object (VEDS MUST be supported; MSD MAY be supported) Optional Actions (the IVS and the PSAP MAY support): oPlayDisplay and/ordisplayplay static (pre-defined) message oSpeak/displayDisplay and/or speak dynamic text (text supplied in action) o Flash or turn on or off a lamp (light) o Honk horn o Lock or unlock doors o Enable a camera The <ack> element indicates the object being acknowledged (i.e., a data object or a metadata/control block containing <request>elements),elements) and reports success or failure. The <capabilities> element has child <request> elements indicating the actions (including data types, lamps (lights), and cameras) supported by the IVS. The <request> element contains attributes to indicate the request and to supply any needed information, and it MAY contain a <text> child element to contain the text for a dynamic message. The'action'"action" attribute is mandatory and indicates the specific action.[I-D.ietf-ecrit-ecall][RFC8147] established an IANA registry to contain the allowed values; this document adds new values to that registry in Table2. Per [I-D.ietf-ecrit-ecall],1. 9.1. New Values for thePSAP sends"action" Attribute The following new "action" values are defined: msg-static: displays or plays ametadata/control block in response topre-defined message (translated as appropriate for theVEDS data sent by the IVS in SIP requests other than INFO (e.g., the INVITE). This metadata/control block is sent in the SIP response to the request (e.g., the INVITE response). When the PSAP needs to send a control block that is not an immediate response to a VEDS or other data sent by the IVS, the metadata/ control block is transmitted from the PSAP to the IVS in a SIP INFO request within the established dialog. The IVS sends the requested data (e.g., the VEDS) or an acknowledgment (for requests other than to send data or to indicate an inability to send the requested data) in a new SIP INFO request. This mechanism flexibly allows the PSAP to send metadata/control data to the IVS and the IVS to respond. If a metadata/control block sent in a SIP response message requests the IVS to send a new VEDS or other data block, or to perform an action other than sending data, the IVS sends the requested data or an acknowledgment regarding the action in a SIP INFO request within the dialog. 9.1. New values for the 'action' attribute' The following new "action" values are defined: msg-static displays or plays a predefined message (translated as appropriate for the language oflanguage of the vehicle's interface). A registry is created in Section 14.4 for messages and their IDs. Vehicles include the highest registered message in their <capabilities> element to indicate support for all messages up to and including the indicated value. A registry of message identification values is defined in Section 14.4. There is only one static message initially defined (listed in Table3).2). Because all compliant vehicles are expected to support all static messages translated into all languages supported by the vehicle, it is important to limit the number of such messages. Therefore, this registry operates under "Specification Required" rules as defined in [RFC5226], whichrequirerequires a stable, public document and implies expert review of the publication.msg-dynamicmsg-dynamic: displays or speaks (via text-to-speech) adynamicmessage contained in a child <text> element within the request.honkhonk: sounds the horn.lamp turnslamp: flashes a lamp (light)on, off,orflashes.turns it on or off. The lamp is identified by a lamp ID token contained in an "element-id" attribute of the request. The desired state of the lamp is either "on", "off", or "flash" as indicated in a "requested-state" attribute. The duration of the lamp's requested state is specified in a "persistence" attribute. A registry of lamp identification values is defined in Section 14.5. The initial values (listed in Table4)3) are head, interior, fog-front,fog- rear,fog-rear, brake, brake-center, position-front, position-rear,turn- left,turn-left, turn-right, and hazard.enable-cameraenable-camera: adds a one-way media stream (established via SIPre- INVITEre-INVITE sent by the vehicle) to enable the PSAP call taker to view a feed from a camera. A registry of camera identification values is defined in Section 14.6. The initial values (listed in Table5)4) are backup, left-rear, right-rear, forward, rear-wide, lane, interior, night-front, night-rear, night-left, and night- right.door-lockdoor-lock: locks or unlocks all door locks. A "requested-state" attribute contains either "locked" or "unlocked" to indicate if the doors are to be locked or unlocked. Note that there is no'request'"request" action to play dynamic media (such as an audio message). The PSAP can send a SIP re-INVITE to establish a one-way media stream for this purpose. 9.2.RequestExample <request> Element <?xml version="1.0" encoding="UTF-8"?><EmergencyCallData.control<EmergencyCallData.Control xmlns="urn:ietf:params:xml:ns:EmergencyCallData:control" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <request action="send-data" datatype="VEDS"/> <request action="lamp" element-id="hazard" requested-state="flash" persistence="PT1H"/> <request action="msg-static" int-id="1"/> <request action="msg-dynamic"> <text>Remain calm. Help is on the way.</text> </request></EmergencyCallData.control></EmergencyCallData.Control> Figure 7:Request<request> Example 9.3. The <ack>element In [I-D.ietf-ecrit-ecall], theElement The <ack> element is transmitted by the PSAP to acknowledgethe MSD. Here, the <ack> element is also transmittedunsolicited data sent by thePSAP to acknowledge the VEDS dataIVS and transmitted by the IVS to acknowledge receipt of a <request> elementthat requested the IVS to perform an actionother thantransmittingadata objectsuccessfully performed "send-data" request (e.g., a request to display a messagewould beto the vehicle occupants is acknowledged, but a request to transmit VEDS datawould not result in a separate <ack> element being sent,is not, since thedata object itselftransmitted VEDS serves asacknowledgment.)acknowledgment). An <ack> element sent by an IVS references the unique ID of the metadata/control object containing therequest(s)request(s), and for each request being acknowledged, it indicates whether the request was successfully performed, and if not,optionally includes an explanation.it indicates why not. 9.3.1.AckExamples of the <ack> Element <?xml version="1.0" encoding="UTF-8"?><EmergencyCallData.control<EmergencyCallData.Control xmlns="urn:ietf:params:xml:ns:EmergencyCallData:control" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <ack ref="1234567890@atlanta.example.com"> <actionResult action="msg-dynamic" success="true"/> <actionResult action="lamp" success="false" reason="unable" details="The requested lamp is inoperable"/> </ack></EmergencyCallData.control></EmergencyCallData.Control> Figure 8:AckExample <ack> from IVS to PSAP 9.4. The <capabilities>elementElement The <capabilities> element([I-D.ietf-ecrit-ecall])[RFC8147] is transmitted by the IVS to indicate its capabilities to the PSAP. The <capabilities> element contains a <request> child element per action supported by the vehicle. The vehicle MUST support sending the VEDS data object and so includes at a minimum a <request> child element with the'action'"action" attribute set to "send-data" and the'supported-values'"supported-values" attribute containing all data blocks supported by the IVS, which MUST include'VEDS'."VEDS". All other actions are OPTIONAL. If the "msg-static" action is supported, a <request> child element with the'action'"action" attribute set to "msg-static" is included, with the'int-id'"int-id" attribute set to the highest supported static message supported by the vehicle. A registry is created in Section 14.4 to map'int-id'"int-id" values to static text messages. By sending the highest supported static message number in its <capabilities> element, the vehicle indicates its support for all static messages in the registry up to and including that value. If the "lamp" action is supported, a <request> child element with the'action'"action" attribute set to "lamp" is included, with the'supported- values'"supported- values" attribute set to all supported lamp IDs. A registry is created in Section 14.5 to contain lamp ID values. If the "enable-camera" action is supported, a <request> child element with the'action'"action" attribute set to "enable-camera" is included, with the'supported-values'"supported-values" attribute set to all supported camera IDs. A registry is created in Section 14.6 to contain camera ID values. 9.4.1.CapabilitiesExample <capabilities> Element <?xml version="1.0" encoding="UTF-8"?><EmergencyCallData.control<EmergencyCallData.Control xmlns="urn:ietf:params:xml:ns:EmergencyCallData:control" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <capabilities> <request action="send-data" supported-values="VEDS"/> <request action="lamp" supported-values="head;interior;fog-front; fog-rear;brake;position-front;position-rear; turn-left;turn-right;hazard"/> <request action="msg-static" int-id="3"/> <request action="msg-dynamic"/> <request action="honk"/> <request action="enable-camera" supported-values="backup; interior"/> <request action="door-lock"/> </capabilities></EmergencyCallData.control></EmergencyCallData.Control> Figure 9:Capabilities<capabilities> Example 10. Test Calls An NG-ACN test call is a call that is recognized and treated to some extent as an NG-ACN call but is not given emergency call treatmentand notnor handled by a PSAP call taker. The specific handling of test NG-ACN calls isnot itself standardized;outside the scope of this document; typically, the test call facilityis intended to allowallows the IVS, user, or TSP to verify that an NG-ACN call can be successfully established with voice and/or other media communication. The IVS might also be able to verify that the crash data was successfully received. This document builds on[I-D.ietf-ecrit-ecall],[RFC8147], which inherits the ability to utilize test call functionality from Section 15 of [RFC6881]. A service URN starting with "test." indicates a test call.[I-D.ietf-ecrit-ecall] registeredPer [RFC8147], "urn:service:test.sos.ecall" is used for test NG-ACN calls. MNOs, emergency authorities, ESInets, and PSAPsdetermine how to treathandle a vehicle call requesting the "test" service URN so that the desired functionality is tested, but this is outside the scope of this document. (One possibility is that MNOs route such calls as non-emergency calls to an ESInet, which routes them to a PSAP that supports NG-ACN calls; the PSAP accepts test calls, sends a crash data acknowledgment, and plays an audio clip (for example, saying that the call reached an appropriate PSAP and the vehicle data was successfully processed) in addition to supporting media loopback per[RFC6881]).[RFC6881].) Note that since test calls are placed using "test" as the parent service URN and "sos" as a child, such calls are not treated as an emergencycall andcall, so some functionality might not apply (such as preemption orserviceavailability for devices lacking service("non- service-initialized" or "NSI"("non-service-initialized" (NSI) devices) if those are available for emergency calls). 11. Example Call Initiation Figure 10 shows an NG-ACN callrouting.initiation. Themobile network operator (MNO)vehicle initiates an NG-ACN call using an MNO. The MNO routes the call to anEmergency services IP Network (ESInet),ESInet, as for any emergency call. The ESInet routes the call to an appropriate NG-ACN-capable PSAP (using location information and the fact thatthatit is an NG-ACN call). The call is processed by the Emergency Services Routing Proxy (ESRP), as the entry point to the ESInet. The ESRP routes the call to an appropriate NG-ACN-capable PSAP, where the call isreceivedhandled by a call taker. (In deployments where there is no ESInet, the MNO itself routes the call directly to an appropriate NG-ACN-capable PSAP.) +---------------------------------------+ | | +------------+ | +-------+ | | | | | PSAP2 | | | | | +-------+ | | Originating| | | | Mobile | | +------++-------++----------------------+ | Vehicle-->| Network|--+->||--|->| ESRP|---->||--->| PSAP1|--> Call-Taker--> Call Taker | | | | | +------++-------++----------------------+ | | | | | +------------+ | +-------+ | | | PSAP3 | | | +-------+ | | | | | | | | ESInet | +---------------------------------------+ Figure 10: Exampleof Vehicle-Placed EmergencyCallMessage Flow The example, shown inInitiation Figure11,11 illustratesaan example SIP emergency call INVITE request as generated by the IVS. It includes a PIDF-LO with vehicle-determined locationinformation (a PIDF-LO), VEDS crash data (ainformation, a VEDSdata block), and capabilities data (a metadata/controlblock withextensions defined in this document) included in the SIP INVITE request message.crash data, and a metadata/ control block with capabilities data. The INVITE has a request URI containing the'urn:service:sos.ecall.automatic'urn:service:sos.ecall.automatic service URN. For brevity, the example VEDS block does not show VEDS location information, although this is generally present. The example VEDS data structure shows information about a crashed vehicle. The example communicates that the car is a model year 2015 Saab 9-5 (a carwhichthat does not exist). The front airbag deployed as a consequence of the crash. The'VehicleBodyCategoryCode'<VehicleBodyCategoryCode> indicates that the crashed vehicle is a passenger car (the code is set to'101')"101") and that it is not a convertible (the'ConvertibleIndicator'<ConvertibleIndicator> value is set to'false')."false"). The'VehicleCrashPulse'<VehicleCrashPulse> element provides further information about the crash, namely that the force of impact based on the change in velocity over the duration of the crash pulse was 100 MPH. The principal direction of the force of the impact is set to'12'"12" (which refers to 12O'Clock,o'clock, corresponding to a frontal collision). This value isdescribedin the'CrashPulsePrincipalDirectionOfForceValue'<CrashPulsePrincipalDirectionOfForceValue> element. The'CrashPulseRolloverQuarterTurnsValue'<CrashPulseRolloverQuarterTurnsValue> indicates the number of quarter turns in concert with a rollover expressed as a number; in our case 1. No roll bar was deployed, as indicated in'VehicleRollbarDeployedIndicator'<VehicleRollbarDeployedIndicator> being set to'false'."false". Next, there is information indicatingseatbeltseat belt and seat sensor data for individual seat positions in the vehicle. In our example, information from the driver seat is available (value'1'"1" in the'VehicleSeatLocationCategoryCode' element),<VehicleSeatLocationCategoryCode> element) showing that theseatbeltseat belt was monitored('VehicleSeatbeltMonitoredIndicator'(<VehicleSeatbeltMonitoredIndicator> element),thattheseatbeltseat belt was fastened('VehicleSeatbeltFastenedIndicator' element)(<VehicleSeatbeltFastenedIndicator> element), and the seat sensor determined that the seat was occupied('VehicleSeatOccupiedIndicator'(<VehicleSeatOccupiedIndicator> element).Finally, information about theThe weight of thevehicle, whichvehicle when empty is listed as 600kilogramkilograms in our example.In additionThe <SevereInjuryIndicator> element is set tothe"true", indicating a likelihood that a vehicle occupant has suffered a severe injury requiring immediate trauma care. Additional informationabout the vehicle, further indications areis provided,namelyincluding the presence of fuel leakage('FuelLeakingIndicator'(<FuelLeakingIndicator> element), an indication whether the vehicle was subjected to multiple impacts('MultipleImpactsIndicator'(<MultipleImpactsIndicator> element), the orientation of the vehicle at final rest('VehicleFinalRestOrientationCategoryCode' element)(<VehicleFinalRestOrientationCategoryCode> element), and an indication thatthere areno parts of the vehicle are currently detected as being on fire (the'VehicleFireIndicator'<VehicleFireIndicator> element). INVITE urn:service:sos.ecall.automatic SIP/2.0 To: urn:service:sos.ecall.automatic From: <sip:+13145551111@example.com>;tag=9fxced76sl Call-ID: 3848276298220188511@atlanta.example.com Geolocation: <cid:target123@example.com> Geolocation-Routing: no Call-Info: <cid:1234567890@atlanta.example.com>; purpose=EmergencyCallData.VEDS Call-Info: <cid:1234567892@atlanta.example.com>;purpose=emergencyCallData.controlpurpose=EmergencyCallData.Control Accept: application/sdp, application/pidf+xml,application/emergencyCallData.control+xmlapplication/EmergencyCallData.Control+xml Recv-Info:emergencyCallData.eCallEmergencyCallData.eCall Allow: INVITE, ACK, PRACK, INFO, OPTIONS, CANCEL, REFER, BYE, SUBSCRIBE, NOTIFY, UPDATE CSeq: 31862 INVITE Content-Type: multipart/mixed; boundary=boundary1 Content-Length: ... --boundary1 Content-Type: application/sdp ...Session Description Protocol (SDP) goes here --boundary1 Content-Type: application/pidf+xml Content-ID: <target123@atlanta.example.com> Content-Disposition: by-reference;handling=optional <?xml version="1.0" encoding="UTF-8"?> <presence xmlns="urn:ietf:params:xml:ns:pidf" xmlns:dm="urn:ietf:params:xml:ns:pidf:data-model" xmlns:gp="urn:ietf:params:xml:ns:pidf:geopriv10" xmlns:dyn="urn:ietf:params:xml:ns:pidf:geopriv10:dynamic" xmlns:gml="http://www.opengis.net/gml" xmlns:gs="http://www.opengis.net/pidflo/1.0" entity="sip:+13145551111@example.com"> <dm:device id="123"> <gp:geopriv> <gp:location-info> <gml:Point srsName="urn:ogc:def:crs:EPSG::4326"> <gml:pos>-34.407 150.883</gml:pos> </gml:Point> <dyn:Dynamic> <dyn:heading>278</dyn:heading><dyn:direction><dyn:direction><dyn:direction></dyn:direction> </dyn:Dynamic> </gp:location-info> <gp:usage-rules/> <method>gps</method> </gp:geopriv> <timestamp>2012-04-5T10:18:29Z</timestamp> <dm:deviceID>1M8GDM9A_KP042788</dm:deviceID> </dm:device> </presence> --boundary1 Content-Type: application/EmergencyCallData.VEDS+xml Content-ID: <1234567890@atlanta.example.com> Content-Disposition: by-reference;handling=optional <?xml version="1.0" encoding="UTF-8"?> <AutomatedCrashNotification xmlns="http://www.veds.org/acn/1.0"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <Crash> <CrashVehicle> <ItemMakeName xmlns="http://niem.gov/niem/niem-core/2.0"> Saab </ItemMakeName> <ItemModelName xmlns="http://niem.gov/niem/niem-core/2.0"> 9-5 </ItemModelName> <ItemModelYearDate xmlns="http://niem.gov/niem/niem-core/2.0"> 2015 </ItemModelYearDate> <Airbag> <AirbagCategoryCode>FRONT</AirbagCategoryCode> <AirbagDeployedIndicator>true </AirbagDeployedIndicator> </Airbag> <ConvertibleIndicator>false</ConvertibleIndicator> <PowerSourceCategoryCode>MAIN</PowerSourceCategoryCode> <VehicleBodyCategoryCode xmlns="http://niem.gov/niem/domains/jxdm/4.1"> 101 </VehicleBodyCategoryCode> <VehicleCrashPulse> <CrashPulseChangeInVelocityMeasure> <MeasurePointValue xmlns="http://niem.gov/niem/niem-core/2.0"> 100 </MeasurePointValue> <MeasureUnitText xmlns="http://niem.gov/niem/niem-core/2.0"> MPH</MeasureUnitText> </CrashPulseChangeInVelocityMeasure> <CrashPulsePrincipalDirectionOfForceValue>12 </CrashPulsePrincipalDirectionOfForceValue> <CrashPulseRolloverQuarterTurnsValue>1 </CrashPulseRolloverQuarterTurnsValue> </VehicleCrashPulse> <VehicleRollbarDeployedIndicator>false </VehicleRollbarDeployedIndicator> <VehicleSeat> <VehicleSeatLocationCategoryCode>1 </VehicleSeatLocationCategoryCode> <VehicleSeatOccupiedIndicator>true </VehicleSeatOccupiedIndicator> <VehicleSeatbeltFastenedIndicator>true </VehicleSeatbeltFastenedIndicator> <VehicleSeatbeltMonitoredIndicator>true </VehicleSeatbeltMonitoredIndicator> </VehicleSeat> <VehicleUnladenWeightMeasure xmlns="http://niem.gov/niem/niem-core/2.0"> <MeasurePointValue xmlns="http://niem.gov/niem/niem-core/2.0"> 600 </MeasurePointValue> <MeasureUnitText xmlns="http://niem.gov/niem/niem-core/2.0"> kilogram </MeasureUnitText> </VehicleUnladenWeightMeasure> </CrashVehicle> <FuelLeakingIndicator>true</FuelLeakingIndicator> <MultipleImpactsIndicator>false</MultipleImpactsIndicator> <SevereInjuryIndicator>true</SevereInjuryIndicator> <VehicleFinalRestOrientationCategoryCode>Driver </VehicleFinalRestOrientationCategoryCode> <VehicleFireIndicator>false</VehicleFireIndicator> </Crash> </AutomatedCrashNotification> --boundary1 Content-Type:application/emergencyCallData.control+xmlapplication/EmergencyCallData.Control+xml Content-ID: <1234567892@atlanta.example.com> Content-Disposition: by-reference;handling=optional <?xml version="1.0" encoding="UTF-8"?><EmergencyCallData.control<EmergencyCallData.Control xmlns="urn:ietf:params:xml:ns:EmergencyCallData:control" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <capabilities> <request action="send-data" supported-datatypes="VEDS"/> <request action="lamp" supported-values="head;interior;fog-front;fog-rear; brake;position-front;position-rear;turn-left; turn-right;hazard"/> <request action="msg-static" int-id="3"/> <request action="msg-dynamic"/> <request action="honk"/> <request action="enable-camera" supported-values="backup;interior"/> <request action="door-lock"/> </capabilities></EmergencyCallData.control></EmergencyCallData.Control> --boundary1-- Figure 11: SIP INVITE for aVehicle-InitatedVehicle-Initiated Emergency Call 12. Security Considerations Since this document relies on[I-D.ietf-ecrit-ecall][RFC8147] and [RFC7852], the security considerations describedthere andin[RFC5069]those specifications apply here. The security considerations of [RFC5069] apply as well. Implementors are cautioned to read and understand the discussion in those documents.As withIn emergency service systems where location data is supplied or determined with the assistance of an end host,thereit isthe possibility thatpossible that the location is incorrect, eitherintentiallyintentionally (e.g., in adenial of servicedenial- of-service attack against the emergency services infrastructure) or due to a malfunctioning device. The reader is referred to [RFC7378] for a discussion of some of these vulnerabilities. In addition to the security considerations discussion specific to the metadata/control object in[I-D.ietf-ecrit-ecall],[RFC8147], note that vehicles MAY decline to carry out any requested action (e.g., if the vehicle requires but is unable to verify the certificate used to sign the request). The vehicle MAY use any value in the reason registry to indicate why it did not take an action (e.g., the generic "unable" or the more specific "security-failure"). Because some actions carry more potential risk than others (e.g., unlocking a door versus flashing lights), vehicle policy MAY decline to carry out some requests in some circumstances (e.g.,decliningdecline a request to unlock doors, send an updated VEDS, or enable a camera received in a vehicle-terminated call while carrying out such requests received in a vehicle-initiated emergency call). 13. Privacy Considerations Since this document builds on[I-D.ietf-ecrit-ecall],[RFC8147], which itself builds on [RFC7852], the data structures specified there, and the corresponding privacy considerations discussed there, apply here as well. The VEDS data structure contains optional elements that can carry identifying and personal information, both about the vehicle and about the owner, as well as location information,andso it needs to be protected against unauthorized disclosure, as discussed in [RFC7852]. Local regulations may impose additional privacy protection requirements. The additional functionality enabled by this document, such as access to vehicle camera streams, carries a burden ofprotection andprotection, so implementations need to be careful that access is only provided within the context of an emergency call or to an emergency services provider (e.g., by verifying that the request for camera access is signed by a certificate issued by an emergency services registrar). 14. IANA Considerations This document registers the'application/EmergencyCall.VEDS+xml'application/EmergencyCallData.VEDS+xml MIME mediatype,type and adds "VEDS" to theEmergency"Emergency Call DataTypesTypes" registry. This document adds to and creates sub-registries in the "Emergency Call Metadata/Control Data" registry created in[I-D.ietf-ecrit-ecall]. This[RFC8147]. In addition, this document registers a newSIPINFO package. 14.1. MIME Media Type Registration for'application/ EmergencyCall.VEDS+xml' This specification requests the registration ofapplication/ EmergencyCall.VEDS+xml IANA has registered a new MIME media type according to the procedures ofRFC 6838[RFC6838] and guidelines inRFC 7303[RFC7303]. MIME media type name: application MIME subtype name: EmergencyCallData.VEDS+xml Mandatory parameters: none Optional parameters: charset Indicates the character encoding of enclosed XML. Encoding considerations: Uses XML, which can employ 8-bit characters, depending on the character encoding used. See Section 3.2 of RFC 7303 [RFC7303]. Security considerations: This media type is designed to carry vehicle crash data during an emergency call. This data can contain personal information including vehicle VIN, location, direction, etc. Appropriate precautions need to be taken to limit unauthorized access, inappropriate disclosure to third parties, and eavesdropping of this information. Please refer toSectionSections 9 andSection10 of [RFC7852] for more information. When this media type is contained in a signed or encrypted body part, the enclosing multipart (e.g., multipart/signed or multipart/encrypted) has the same Content-ID as the data part. This allows an entity to identify and access the data blocks it is interested in without having to dive deeply into the message structure or decrypt parts it is not interested in. (The'purpose'"purpose" parameter in a Call-Info header field identifies the data, and the CID URL points to the data block in the body, which has a matching Content-ID body part headerfield).field.) Interoperability considerations: None Published specification: [VEDS] Applications which use this media type: Emergency Services Additional information: None Magic Number: None File Extension: .xml Macintosh file type code:'TEXT'TEXT Persons and email addresses for further information: RandallGellensGellens, rg+ietf@randy.pensive.org; Hannes Tschofenig, Hannes.Tschofenig@gmx.net Intended usage: LIMITED USE Author: This specification is a work item of the IETF ECRIT working group, with mailing list address <ecrit@ietf.org>. Change controller: The IESG <ietf@ietf.org> 14.2. Registration of the'VEDS' entry"VEDS" Entry in the Emergency Call Data Typesregistry This specification requestsRegistry IANAto add the 'VEDS' entryhas added "VEDS" to theEmergency"Emergency Call DataTypesTypes" registry, with a reference to this document; the'Data About'"Data About" value is'The Call'."The Call". TheEmergency"Emergency Call DatatypesTypes" registry was established by [RFC7852]. 14.3. New Action Values This document adds new values for the'action'"action" attribute of the <request> element in the "Emergency Call Action" registry created by[I-D.ietf-ecrit-ecall]. +---------------+-------------------------------------+[RFC8147]. +---------------+-------------------------+ | Name | Description |+---------------+-------------------------------------++---------------+-------------------------+ | msg-static | Section 9.1 of[TBD: THIS DOCUMENT]RFC 8148 | | | | | msg-dynamic | Section 9.1 of[TBD: THIS DOCUMENT]RFC 8148 | | | | | honk | Section 9.1 of[TBD: THIS DOCUMENT]RFC 8148 | | | | | lamp | Section 9.1 of[TBD: THIS DOCUMENT]RFC 8148 | | | | | enable-camera | Section 9.1 of[TBD: THIS DOCUMENT]RFC 8148 | | | | | door-lock | Section 9.1 of[TBD: THIS DOCUMENT]RFC 8148 |+---------------+-------------------------------------++---------------+-------------------------+ Table2:1: Emergency Call Action Registry New Values 14.4. Emergency Call StaticMessageMessages Registry This document creates a new sub-registry called "Emergency Call StaticMessage"Messages" in the "Emergency Call Metadata/Control Data" registry established by[I-D.ietf-ecrit-ecall].[RFC8147]. Becauseallcompliant vehicles are expected to support all static messages translated into all languages supported by the vehicle, it is important to limit the number of such messages. As defined in [RFC5226], this registry operates under "SpecificationRequired" rules,Required", whichrequirerequires a stable, public document and implies expert review of the publication. The expert should determine that the document has been published by an appropriate emergency services organization (e.g., NENA, EENA, or APCO) or by the IETF with input from an emergency services organization, and that the proposed message is sufficiently distinguishable from other messages. The contents of this registry are: ID: An integer identifier to be used in the'int-id'"int-id" attribute of a metadata/control <request> element. Message: The text of the message. Messages are listed in the registry in English; vehicles are expected to implement translations into languages supported by the vehicle. When new messages are added to the registry, the message text is determined by the registrant; IANA assigns the IDs. Each message is assigned a consecutive integer value as its ID. This allows an IVS to indicate by a single integer value that it supports all messages with that value or lower. The value 0 is reserved; usable messages start with 1. The initial set of values is listed in Table3.2. +----+--------------------------------------------------------------+ | ID | Message | +----+--------------------------------------------------------------+ | 0 | Reserved | | | | | 1 | Emergency services has received your information and | | |location,location but cannot speak with you right now. We will get | | | help to you as soon as possible. | +----+--------------------------------------------------------------+ Table3:2: Emergency Call StaticMessageMessages Registry Initial Values 14.5. Emergency Call Vehicle LampIDIDs Registry This document creates a new sub-registry called "Emergency Call Vehicle LampID"IDs" in the "Emergency Call Metadata/Control Data" registry established by[I-D.ietf-ecrit-ecall].[RFC8147]. This newsub- registrysub-registry uniquely identifies the names of automotive lamps (lights). As defined in [RFC5226], this registry operates under "Expert Review" rules. The expert should determine that the proposed lamp name is clearly understandable and is sufficiently distinguishable from other lamp names. The contents of this registry are: Name: The identifier to be used in the'element-id'"element-id" attribute of a metadata/control <request> element. Description: A description of the lamp (light). The initial set of values is listed in Table4.3. +----------------+---------------------------------------------+ | Name | Description | +----------------+---------------------------------------------+ | head | The main lamps used to light the road ahead | | | | | interior | Interior lamp, often at the top center | | | | | fog-front | Front fog lamps | | | | | fog-rear | Rear fog lamps | | | | | brake | Brake indicator lamps | | | | | brake-center | CenterHigh Mounted Stop Lamphigh-mounted stop lamp | | | | | position-front | Front position/parking/standing lamps | | | | | position-rear | Rear position/parking/standing lamps | | | | | turn-left | Left turn/directional lamps | | | | | turn-right | Right turn/directional lamps | | | | | hazard | Hazard/four-way lamps | +----------------+---------------------------------------------+ Table4:3: Emergency Call Lamp ID Registry Initial Values 14.6. Emergency Call Vehicle CameraIDIDs Registry This document creates a new sub-registry called "Emergency Call Vehicle CameraID"IDs" in the "Emergency Call Metadata/Control Data" registry established by[I-D.ietf-ecrit-ecall].[RFC8147]. This newsub- registrysub-registry uniquely identifies automotive cameras. As defined in [RFC5226], this registry operates under "Expert Review" rules. The expert should determine that the proposed camera name is clearly understandable and is sufficiently distinguishable from other camera names. The contents of this registry are: Name: The identifier to be used in the'element-id'"element-id" attribute of a control <request> element. Description: A description of the camera. The initial set of values is listed in Table5.4. +-------------+-----------------------------------------------------+ | Name | Description | +-------------+-----------------------------------------------------+ | backup | Shows what is behind the vehicle, e.g., often used | | | for driver display when the vehicle is in reverse. | | | Also known as rearview, reverse, rear visibility, | | | etc. | | | | | left-rear | Shows view to the left and behind (e.g.,left sideleft-side | | |rear-viewrearview mirror or blind spot view) | | | | | right-rear | Shows view to the right and behind (e.g.,rightright- | | | siderear-viewrearview mirror or blind spot view) | | | | | forward | Shows what is in front of the vehicle | | | | | rear-wide | Shows what is behind the vehicle (e.g., used byrear-| | |collisionrear-collision detection systems), separate frombackup| | | backup view | | | | | lane | Used by systems to identify road lane and/or | | | monitor the vehicle's position within lane | | | | | interior | Shows the interior (e.g., driver) | | | | | night-front | Night-vision view of what is in front of the | | | vehicle | | | | | night-rear | Night-vision view of what is behind the vehicle | | | | | night-left | Night-vision view of what is to the left of the | | | vehicle | | | | | night-right | Night-vision view of what is to the right of the | | | vehicle | +-------------+-----------------------------------------------------+ Table5:4: Emergency Call Vehicle CameraIDIDs Registry Initial Values 14.7. TheemergencyCallData.eCall.VEDS SIPEmergencyCallData.VEDS INFOpackagePackage This document registers the'emergencyCallData.eCall.VEDS' SIPEmergencyCallData.VEDS INFOpackage.package in the "Info Packages Registry". Both endpoints (the IVS and the PSAP equipment) include'emergencyCallData.eCall.VEDS'"EmergencyCallData.VEDS" in a Recv-Info header field per [RFC6086] to indicate the ability to receive SIP INFO messages carrying data as described here. Support for the'emergencyCallData.eCall.VEDS' SIPEmergencyCallData.VEDS INFO package indicates the ability to receiveNG-ACN relatedNG-ACN-related body parts as specified in[TBD: THIS DOCUMENT].this document. A SIP INFO request message carrying data related to an emergency call as described in[TBD: THIS DOCUMENT]this document has an Info-Package header field set to'emergencyCallData.eCall.VEDS'"EmergencyCallData.VEDS" per [RFC6086]. The requirements of Section 10 of [RFC6086] are addressed in the following sections. 14.7.1. Overall Description This section describes"whatwhat type of information is carried inInfoINFO requests associated with theInfo Package,INFO package and for what types of applications and functionalitiesUAsUser Agents (UAs) can use theInfo Package."INFO package. SIP INFO requests associated with theemergencyCallData.eCall.VEDS SIPEmergencyCallData.VEDS INFO package carry data associated with emergency calls as defined in[TBD: THIS DOCUMENT].this document. The application isvehicle- initiatedvehicle-initiated emergency calls established using SIP. The functionality is to carry vehicle data and metadata/control information between vehicles and PSAPs.Refer to [TBD: THIS DOCUMENT] for more information.14.7.2. Applicability This section describes"whywhy theInfo PackageINFO package mechanism, rather than some other mechanism, has been chosen for the specificuse-case...."use case. The use of the SIP INFO method is based on an analysis of the requirements against the intent and effects of the INFO method versus other approaches (which included the SIP MESSAGE method, SIP OPTIONS method, SIP re-INVITE method,media planemedia-plane transport, and non-SIP protocols). In particular, the transport of emergency call data blocks occurs within a SIP emergency dialog, per Section 7, and is normally carried in the initial INVITE request and its response; the use of the INFO method only occurs when emergency-call-related data needs to be sentmid-call.mid call. While the SIP MESSAGE method could be used, it is not tied to a SIP dialog as is the INFO method and thus might not be associated with the dialog. Both the SIP OPTIONS orre- INVITEre-INVITE methods could also be used, butisthey are seen as less clean than the INFO method. The SIP SUBSCRIBE/NOTIFY method could be coerced into service, but the semantics are not a good fit, e.g., thesubscribe/ notifysubscribe/notify mechanism provides one-way communication consisting of (often multiple) notifications from notifier to subscriber indicating that certain events in the notifier have occurred, whereas what's needed here is two-way communication of data related to the emergency dialog. Use ofthe media planemedia-plane mechanisms was discounted because the number of messages needing to be exchanged in a dialog is normally zero or very few, and the size of the data is likewise very small. The overhead caused byuser planeuser-plane setup (e.g., to useMSRPthe Message Session Relay Protocol (MSRP) as transport) would be disproportionately large. Based on the analyses, the SIP INFO method was chosen to provide for mid-call data transport. 14.7.3.InfoINFO Package Name TheSIPINFO package name isemergencyCallData.eCall.VEDSEmergencyCallData.VEDS. 14.7.4.InfoINFO Package Parameters None 14.7.5. SIP Option-Tags None 14.7.6. INFO Request Body Parts The body of anemergencyCallData.eCall.VEDS SIPEmergencyCallData.VEDS INFO package is a multipart bodywhich MAY containcontaining zero or oneapplication/ emergencyCallData.eCall.VEDS+xmlapplication/EmergencyCallData.VEDS+xml parts (containing a VEDS datablock) part,block), zero or moreapplication/emergencyCallData.control+xmlapplication/ EmergencyCallData.Control+xml (containing a metadata/control object) parts, and zero or oneapplication/ emergencyCallData.eCall.MSD+perapplication/EmergencyCallData.eCall.MSD parts (containing anMSD) part.MSD). At least one VEDS, MSD, or metadata/control body part is expected; the behavior upon receiving a SIP INFO request with none is undefined. The body parts are sent per[RFC6086], and[RFC6086]; in addition, to align withwithhow these body parts are sent in non-INFO messages, each associated body part is referenced by a Call-Info header field at the top level of the SIP message. The body part has aContent- DispositionContent-Disposition header field set to "By-Reference". AVEDS orVEDS, metadata/controlblockblock, or MSD is always enclosed in a multipart body part (even if it would otherwise be the only body part in the SIPmessage), since as of the date of this document, the use of Content-ID as a SIP header field is not defined (while it is defined for use as a MIME header field).message). Theinnermostoutermost multipart that contains only body parts associated with theSIPINFO package has a Content-Disposition value ofInfo-Package."Info-Package". Service providers in the call path are not expected to add[RFC7852]Additional Data [RFC7852] to SIP INFOrequests. See [TBD: THIS DOCUMENT] for more information.requests (as they would to an initial INVITE request). 14.7.7.InfoINFO Package Usage Restrictions Usage is limited to vehicle-initiated emergency calls as defined in[TBD: THIS DOCUMENT].this document. 14.7.8. Rate of INFO Requests The SIP INFO request is used within an established emergency call dialogfor the PSAP to request the IVSto sendanrequests, updateddata set, and for the IVS to send the requested data set.data, or an acknowledgment. Becausethis isrequests are normallydonesent only on manualrequestaction of the PSAP call taker (who suspects some aspect of the vehicle state haschanged),changed) and updated data is sent only when an aspect of previously sent data has changed, the rate of SIP INFO requests associated with theemergencyCallData.eCall.VEDS SIPEmergencyCallData.VEDS INFO package is normally quite low (most dialogs are likely to contain zero SIP INFO requests, while others can be expected to carry an occasional request). 14.7.9.InfoINFO Package Security Considerations The MIME media typeregistationsregistrations for the data blocks that can be carried using thisSIPINFO package contains a discussion of the security and/or privacy considerations specific to that data block.The "Security Considerations"See Sections 12 and"Privacy Considerations" sections of [TBD: THIS DOCUMENT] discuss13 for information on the security and privacy considerations of the data carried in vehicle-initiated emergencycalls as described in that document.calls. 14.7.10. Implementation Details See[TBD: THIS DOCUMENT]Sections 7 and 8 for protocol details. 14.7.11. Examples See[TBD: THIS DOCUMENT]Section 11 for protocol examples.17.15. References17.1.15.1. Normative References[I-D.ietf-ecrit-ecall] Gellens, R. and H. Tschofenig, "Next-Generation Pan- European eCall", draft-ietf-ecrit-ecall-24 (work in progress), January 2017.[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, <http://www.rfc-editor.org/info/rfc2119>. [RFC5226] Narten, T. and H. Alvestrand, "Guidelines for Writing an IANA Considerations Section in RFCs", BCP 26, RFC 5226, DOI 10.17487/RFC5226, May 2008, <http://www.rfc-editor.org/info/rfc5226>. [RFC6086] Holmberg, C., Burger, E., and H. Kaplan, "Session Initiation Protocol (SIP) INFO Method and Package Framework", RFC 6086, DOI 10.17487/RFC6086, January 2011, <http://www.rfc-editor.org/info/rfc6086>. [RFC6838] Freed, N., Klensin, J., and T. Hansen, "Media Type Specifications and Registration Procedures", BCP 13, RFC 6838, DOI 10.17487/RFC6838, January 2013, <http://www.rfc-editor.org/info/rfc6838>. [RFC6881] Rosen, B. and J. Polk, "Best Current Practice for Communications Services in Support of Emergency Calling", BCP 181, RFC 6881, DOI 10.17487/RFC6881, March 2013, <http://www.rfc-editor.org/info/rfc6881>. [RFC7303] Thompson, H. and C. Lilley, "XML Media Types", RFC 7303, DOI 10.17487/RFC7303, July 2014, <http://www.rfc-editor.org/info/rfc7303>. [RFC7852] Gellens, R., Rosen, B., Tschofenig, H., Marshall, R., and J. Winterbottom, "Additional Data Related to an Emergency Call", RFC 7852, DOI 10.17487/RFC7852, July 2016, <http://www.rfc-editor.org/info/rfc7852>. [RFC8147] Gellens, R. and H. Tschofenig, "Next-Generation Pan- European eCall", RFC 8147, DOI 10.17487/RFC8147, May 2017, <http://www.rfc-editor.org/info/rfc8147>. [VEDS] APCO International, "Vehicular Emergency Data Set (VEDS)", Version 3.0, Prepared by the Advanced Automatic Crash Notification (AACN) JointAPCO/ NENAAPCO/NENA Data StandardizationWorkgroup, , "Vehicular Emergency Data Set (VEDS) version 3", JulyWorking Group, February 2012,<https://www.apcointl.org/resources/telematics/aacn-and- veds.html>. 17.2.<https://www.apcointl.org/ resources/telematics/aacn-and-veds.html>. 15.2. Informative references [Bluetooth] Bluetooth Special InterestGroup, ,Group (SIG), "Bluetooth Specifications",<https://https://www.bluetooth.com/<https://www.bluetooth.com/ specifications>. [RFC5012] Schulzrinne, H. and R. Marshall, Ed., "Requirements for Emergency Context Resolution with Internet Technologies", RFC 5012, DOI 10.17487/RFC5012, January 2008, <http://www.rfc-editor.org/info/rfc5012>. [RFC5069] Taylor, T., Ed., Tschofenig, H., Schulzrinne, H., and M. Shanmugam, "Security Threats and Requirements for Emergency Call Marking and Mapping", RFC 5069, DOI 10.17487/RFC5069, January 2008, <http://www.rfc-editor.org/info/rfc5069>. [RFC6443] Rosen, B., Schulzrinne, H., Polk, J., and A. Newton, "Framework for Emergency Calling Using Internet Multimedia", RFC 6443, DOI 10.17487/RFC6443, December 2011, <http://www.rfc-editor.org/info/rfc6443>. [RFC7378] Tschofenig, H., Schulzrinne, H., and B. Aboba, Ed., "Trustworthy Location", RFC 7378, DOI 10.17487/RFC7378, December 2014, <http://www.rfc-editor.org/info/rfc7378>. [triage-2008] National Center for Injury Prevention and Control,and Centers for Disease Control and Prevention,"Recommendations from the Expert Panel: Advanced Automatic Collision Notification and Triage of the Injured Patient", Centers for Disease Control and Prevention, 2008, <https://stacks.cdc.gov/view/cdc/5304/>. [triage-2011] National Center for Injury Prevention and Control,and Centers for Disease Control and Prevention,"Guidelines forfield triageField Triage ofinjured patients: recommendationsInjured Patients: Recommendations of the National Expert Panel on Field Triage", Centers for Disease Control and Prevention, January 2012,<https://www.researchgate.net/journal/1545-8601_MMWR_Recom mendations_and_reports_Morbidity_and_mortality_weekly_repo rt_Recommendations_and_reports_Centers_for_Disease_Control >. 15. Acknowledgements<https://www.cdc.gov/mmwr/preview/mmwrhtml/ rr6101a1.htm>. Acknowledgments We would like to thank Lena Chaponniere, Alissa Cooper, Stephen Edge, Christer Holmberg, Allison Mankin, and Dan Romascanu for their review and suggestions; Robert Sparks and Paul Kyzivat for their help with the SIP mechanisms; Michael Montag, Arnoud van Wijk, Ban Al-Bakri, Wes George, Gunnar Hellstrom, and Rex Buddenberg for their feedback; and Ulrich Dietz for his help withearlierpreliminary draft versions of the originalversion ofdocument that later evolved into this document. Authors' Addresses Randall Gellens Core Technology Consulting Email:rg+ietf@randy.pensive.orgrg+ietf@coretechnologyconsulting.com URI: http://www.coretechnologyconsulting.com Brian Rosen NeuStar, Inc. 470 Conrad Dr Mars, PA 16046USUnited States of America Email: br@brianrosen.net Hannes Tschofenig Individual Email: Hannes.Tschofenig@gmx.net URI: http://www.tschofenig.priv.at