ISO/IEC 30118-7:2021

Information Technology – Open Connectivity Foundation (OCF) Specification — Part 7: Wi-Fi easy setup specification

This document defines functional extensions to the capabilities defined in ISO/IEC 30118-1 to meet the requirements of Wi-Fi Easy Setup. It specifies new Resource Types to enable the functionality and any extensions to the existing capabilities defined in ISO/IEC 30118-1.

Technologies de l'information — Specification de la Fondation pour la connectivité ouverte (Fondation OCF) — Partie 7: Spécification de configuration facile du Wi-Fi

General Information

• Status: Published
• Publication Date: 17-Oct-2021
• ICS: 35.200 - Interface and interconnection equipment
• Technical Committee: ISO/IEC JTC 1 - Information technology
• Drafting Committee: ISO/IEC JTC 1 - Information technology
• Current Stage: 6060 - International Standard published
• Start Date: 18-Oct-2021
• Due Date: 16-May-2022
• Completion Date: 18-Oct-2021

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 30118-7
First edition
2021-10
Information Technology — Open
Connectivity Foundation (OCF)
Specification —
Part 7:
Wi-Fi easy setup specification
Technologies de l'information — Specification de la Fondation pour la
connectivité ouverte (Fondation OCF) —
Partie 7: Spécification de configuration facile du Wi-Fi
Reference number
ISO/IEC 30118-7:2021(E)
© ISO/IEC 2021

---------------------- Page: 1 ----------------------
ISO/IEC 30118-7:2021(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
  © ISO/IEC 2021 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 30118-7:2021(E)
Contents Page
Foreword . v
Introduction . vi
1 Scope . 1
2 Normative references . 1
3 Terms, definitions, and abbreviated terms . 2
3.1 Terms and definitions . 2
3.2 Symbols and abbreviated terms . 2
4 Document conventions and organization . 2
4.1 Conventions . 2
4.2 Notation . 3
5 Overview . 4
5.1 Introduction . 4
5.2 Architecture . 4
5.3 Example scenario . 4
6 Resource model . 5
6.1 Introduction . 5
6.2 EasySetup Resource . 5
6.2.1 Overview . 5
6.2.2 Resource . 5
6.3 WiFiConf Resource Type . 7
6.3.1 Introduction . 7
6.3.2 Resource Type . 7
6.4 DevConf Resource Type . 8
6.4.1 Introduction . 8
6.4.2 Resource Type . 8
7 Network and connectivity . 9
8 Functional interactions . 9
8.1 Onboarding, Provisioning and Configuration . 9
8.2 Resource discovery . 9
8.3 Retrieving and updating Easy Setup Resources . 10
8.4 Error handling . 10
8.5 Example easy setup flow . 10
8.6 Easy setup SSID tags . 12
8.7 Easy setup information element . 12
8.7.1 Overview . 12
8.7.2 OCF Device information element (IE) . 12
9 Security . 15
(normative) OpenAPI 2.0 specification definitions . 16
A.1 List of resource type definitions . 16
A.2 Device configuration . 16
A.2.1 Introduction . 16
A.2.2 Example URI . 16
A.2.3 Resource type . 16
A.2.4 OpenAPI 2.0 definition . 16
A.2.5 Property definition . 18
© ISO/IEC 2021 – All rights reserved iii

---------------------- Page: 3 ----------------------
ISO/IEC 30118-7:2021(E)
A.2.6 CRUDN behaviour . 18
A.3 Easy setup collection. 19
A.3.1 Introduction . 19
A.3.2 Example URI . 19
A.3.3 Resource type . 19
A.3.4 OpenAPI 2.0 definition . 19
A.3.5 Property definition . 27
A.3.6 CRUDN behaviour . 29
A.4 Wi-Fi configuration . 29
A.4.1 Introduction . 29
A.4.2 Example URI . 29
A.4.3 Resource type . 29
A.4.4 OpenAPI 2.0 definition . 29
A.4.5 Property definition . 34
A.4.6 CRUDN behaviour . 35

iv © ISO/IEC 2021 – All rights reserved

---------------------- Page: 4 ----------------------
ISO/IEC 30118-7:2021(E)
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are members of
ISO or IEC participate in the development of International Standards through technical committees established
by the respective organization to deal with particular fields of technical activity. ISO and IEC technical
committees collaborate in fields of mutual interest. Other international organizations, governmental and non-
governmental, in liaison with ISO and IEC, also take part in the work.
The procedures used to develop this document and those intended for its further maintenance are described in
the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types of
document should be noted (see www.iso.org/directives or www.iec.ch/members_experts/refdocs).
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. Details of any
patent rights identified during the development of the document will be in the Introduction and/or on the ISO list
of patent declarations received (see www.iso.org/patents) or the IEC list of patent declarations received
(see patents.iec.ch).
Any trade name used in this document is information given for the convenience of users and does not constitute
an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions
related to conformity assessment, as well as information about ISO's adherence to the World Trade
Organization (WTO) principles in the Technical Barriers to Trade (TBT), see  www.iso.org/iso/foreword.html. In
the IEC, see www.iec.ch/understanding-standards.
This document was prepared by the Open Connectivity Foundation (OCF) (as OCF Wi-Fi Easy Setup
Specification, version 2.2.0) and drafted in accordance with its editorial rules. It was adopted, under the JTC 1
PAS procedure, by Joint Technical Committee ISO/IEC JTC 1, Information technology.
A list of all parts in the ISO/IEC 30118 series can be found on the ISO and IEC websites.
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www.iso.org/members.html and www.iec.ch/national-
committees.

© ISO/IEC 2021 – All rights reserved v

---------------------- Page: 5 ----------------------
ISO/IEC 30118-7:2021(E)
Introduction
This document, and all the other parts associated with this document, were developed in response to
worldwide demand for smart home focused Internet of Things (IoT) devices, such as appliances, door
locks, security cameras, sensors, and actuators; these to be modelled and securely controlled, locally
and remotely, over an IP network.
While some inter-device communication existed, no universal language had been developed for the
IoT. Device makers instead had to choose between disparate frameworks, limiting their market share,
or developing across multiple ecosystems, increasing their costs. The burden then falls on end users
to determine whether the products they want are compatible with the ecosystem they bought into, or
find ways to integrate their devices into their network, and try to solve interoperability issues on their
own.
In addition to the smart home, IoT deployments in commercial environments are hampered by a lack
of security. This issue can be avoided by having a secure IoT communication framework, which this
standard solves.
The goal of these documents is then to connect the next 25 billion devices for the IoT, providing secure
and reliable device discovery and connectivity across multiple OSs and platforms. There are multiple
proposals and forums driving different approaches, but no single solution addresses the majority of
key requirements. This document and the associated parts enable industry consolidation around a
common, secure, interoperable approach.
ISO/IEC 30118 consists of eighteen parts, under the general title Information technology — Open
Connectivity Foundation (OCF) Specification. The parts fall into logical groupings as described herein:
– Core framework
– Part 1: Core Specification
– Part 2: Security Specification
– Part 13: Onboarding Tool Specification
– Bridging framework and bridges
– Part 3: Bridging Specification
– Part 6: Resource to Alljoyn Interface Mapping Specification
– Part 8: OCF Resource to oneM2M Resource Mapping Specification
– Part 14: OCF Resource to BLE Mapping Specification
– Part 15: OCF Resource to EnOcean Mapping Specification
– Part 16: OCF Resource to UPlus Mapping Specification
– Part 17: OCF Resource to Zigbee Cluster Mapping Specification
– Part 18: OCF Resource to Z-Wave Mapping Specification
vi © ISO/IEC 2021 – All rights reserved

---------------------- Page: 6 ----------------------
ISO/IEC 30118-7:2021(E)
– Resource and Device models
– Part 4: Resource Type Specification
– Part 5: Device Specification
– Core framework extensions
– Part 7: Wi-Fi Easy Setup Specification
– Part 9: Core Optional Specification
– OCF Cloud
– Part 10: Cloud API for Cloud Services Specification
– Part 11: Device to Cloud Services Specification
– Part 12: Cloud Security Specification

© ISO/IEC 2021 – All rights reserved vii

---------------------- Page: 7 ----------------------
INTERNATIONAL STANDARD ISO/IEC 30118-7:2021(E)

Information Technology — Open Connectivity
Foundation (OCF) Specification —
Part 7:
Wi-Fi easy setup specification
1 Scope
This document defines functional extensions to the capabilities defined in ISO/IEC 30118-1 to meet
the requirements of Wi-Fi Easy Setup. It specifies new Resource Types to enable the functionality and
any extensions to the existing capabilities defined in ISO/IEC 30118-1.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
ISO/IEC 30118-1 Information technology -- Open Connectivity Foundation (OCF) Specification -- Part 1:
Core specification
https://www.iso.org/standard/53238.html

ISO/IEC 30118-2 Information technology -- Open Connectivity Foundation (OCF) Specification -- Part 2:
Security specification
https://www.iso.org/standard/74239.html

ISO/IEC 30118-5 Information technology -- Open Connectivity Foundation (OCF) Specification -- Part 5:
Smart home device specification
https://www.iso.org/standard/74242.html

IEEE 802.11, IEEE Standard for Information technology—Telecommunications and information
exchange between systems Local and metropolitan area networks—Specific requirements - Part 11:
Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications, December 2016
https://standards.ieee.org/findstds/standard/802.11-2016.html
IETF RFC 5646, Tags for Identifying Languages, September 2009
https://www.rfc-editor.org/info/rfc5646
OpenAPI specification, aka Swagger RESTful API Documentation Specification, Version 2.0
https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md
© ISO/IEC 2021 – All rights reserved 1

---------------------- Page: 8 ----------------------
ISO/IEC 30118-7:2021(E)
3 Terms, definitions, and abbreviated terms
3.1 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO/IEC 30118-1 and the
following apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
– ISO Online browsing platform: available at https://www.iso.org/obp
– IEC Electropedia: available at http://www.electropedia.org/
3.1.1
Easy Setup
process of configuring an Enrollee (3.1.3) using a Mediator (3.1.5) by transferring of essential
information to the Enrollee (3.1.3)
3.1.2
Easy Setup Enrollment
step during Easy Setup in which the Enrollee (3.1.3) is contacted by the Mediator (3.1.5) to configure
the Enroller's (3.1.4) information by means of accessing Easy Setup (3.1.1) Resources
3.1.3
Enrollee
device that needs to be configured and connected. E.g. Air-conditioner, Printer
3.1.4
Enroller
target network entity to which the Enrollee (3.1.3) connects. E.g. Wi-Fi AP
3.1.5
Mediator
logical function that enables the Enrollee (3.1.3) to connect to the target network (i.e. Enroller (3.1.4))
Note 1 to Entry: The Mediator transfers configuration information to the Enrollee. E.g. Mobile Phone
3.2 Symbols and abbreviated terms
CID  Company Identifier (ID)
IE  Information Element
Soft AP Software Enabled Access Point
TLV  type-length-value
4 Document conventions and organization
4.1 Conventions
In this document a number of terms, conditions, mechanisms, sequences, parameters, events, states,
or similar terms are printed with the first letter of each word in uppercase and the rest lowercase (e.g.,
Network Architecture). Any lowercase uses of these words have the normal technical English meaning.
2 © ISO/IEC 2021 – All rights reserved

---------------------- Page: 9 ----------------------
ISO/IEC 30118-7:2021(E)
In this document, to be consistent with the IETF usages for RESTful operations, the RESTful operation
words CRUDN, CREATE, RETRIVE, UPDATE, DELETE, and NOTIFY will have all letters capitalized.
Any lowercase uses of these words have the normal technical English meaning.
4.2 Notation
In this document, features are described as required, recommended, allowed or DEPRECATED as
follows:
Required (or shall or mandatory)(M).
– These basic features shall be implemented to comply with Core Architecture. The phrases "shall
not", and "PROHIBITED" indicate behaviour that is prohibited, i.e. that if performed means the
implementation is not in compliance.
Recommended (or should)(S).
– These features add functionality supported by Core Architecture and should be implemented.
Recommended features take advantage of the capabilities Core Architecture, usually without
imposing major increase of complexity. Notice that for compliance testing, if a recommended
feature is implemented, it shall meet the specified requirements to be in compliance with these
guidelines. Some recommended features could become requirements in the future. The phrase
"should not" indicates behaviour that is permitted but not recommended.
Allowed (may or allowed)(O).
– These features are neither required nor recommended by Core Architecture, but if the feature is
implemented, it shall meet the specified requirements to be in compliance with these guidelines.
DEPRECATED.
– Although these features are still described in this document, they should not be implemented except
for backward compatibility. The occurrence of a deprecated feature during operation of an
implementation compliant with the current document has no effect on the implementation’s
operation and does not produce any error conditions. Backward compatibility may require that a
feature is implemented and functions as specified but it shall never be used by implementations
compliant with this document.
Conditionally allowed (CA)
– The definition or behaviour depends on a condition. If the specified condition is met, then the
definition or behaviour is allowed, otherwise it is not allowed.
Conditionally required (CR)
– The definition or behaviour depends on a condition. If the specified condition is met, then the
definition or behaviour is required. Otherwise the definition or behaviour is allowed as default
unless specifically defined as not allowed.
Strings that are to be taken literally are enclosed in "double quotes".
Words that are emphasized are printed in italic.
© ISO/IEC 2021 – All rights reserved 3

---------------------- Page: 10 ----------------------
ISO/IEC 30118-7:2021(E)
5 Overview
5.1 Introduction
This document describes a way to setup and configure a new Device, using an already configured
Device or onboarding tool.
The described setup and configure mechanism is optional and other mechanisms are allowed to be
used.
Specifically, this method allows the transferring of essential information to the new Device, which
includes:
– Local network connection information, e.g. in case of Wi-Fi it will be Wi-Fi access point information.
– Device Configuration: Additional Device configuration information.
Easy Setup can be enhanced in future by incorporating other suitable technologies.
Annex A specifies the Resource Type definitions using the schema defined in the OpenAPI
specification as the API definition language that shall be followed by a Device realizing the Resources
specified in this document.
5.2 Architecture
Figure 1 shows the deployment architectural approach.

Figure 1 – Easy Setup deployment architecture
Easy Setup defines the following roles: Enrollee, Enroller, and Mediator. Please refer to clause 3 for
the definitions thereof.
5.3 Example scenario
The following scenario presents a typical setup case.
The configuration information and steps taken may vary depending on the Device’s type and status.
1) The Enrollee enters Easy Setup mode (when the Device is unboxed for the first time, it may be in
this mode by default).
4 © ISO/IEC 2021 – All rights reserved

---------------------- Page: 11 ----------------------
ISO/IEC 30118-7:2021(E)
2) The Mediator discovers and connects to the Enrollee.
3) The Mediator performs Security Provisioning of the Enrollee.
4) The Mediator transmits Wi-Fi Setting Information to the Enrollee.
5) Using the information received from the Mediator, the Enrollee connects to the Enroller (Wi-Fi AP).
6 Resource model
6.1 Introduction
Devices capable of Easy Setup shall support the following Resource Types.
1) EasySetup Resource Type
2) WiFiConf Resource Type
3) DevConf Resource Type
Instances of these Resources Type (Resources) shall be excluded in the IDD for the Introspection
Resource (see clause 11.4 in ISO/IEC 30118-1).
The EasySetup Resource Type is a Collection Resource and shall contain Links to instances of at least
WiFiConf and DevConf. A vendor may add links to other Resource Types. The relationship between
the EasySetup Resource Type and linked Resources is shown in Figure 2.
NOTE The EasySetup Resource Type supports the batch Interface ("oic.if.b") which allows for efficient data
delivery with a single request rather than multiple requests to each linked Resource.

Figure 2 – Easy Setup Resource Types
6.2 EasySetup Resource
6.2.1 Overview
The EasySetup Resource stores useful information including current status of Enrollee and last error
code which was produced in the process of Easy Setup.
6.2.2 Resource
The Easy Setup Resource Type is as defined in Table 1.
© ISO/IEC 2021 – All rights reserved 5

---------------------- Page: 12 ----------------------
ISO/IEC 30118-7:2021(E)
Table 1 – EasySetup Resource Type
Example URI Resource Resource Type ID Interfaces Description Related
Type Title ("rt" value) Functional
Interaction
/example/Easy EasySetup oic.r.easysetup, oic.if.baseline, Top level Resource for N/A
SetupResURI oic.wk.col oic.if.ll, oic.if.b Easy Setup. Indicates
easy setup status.
The Resource
properties exposed are
listed in Table 2.
Table 2 defines the details for the "oic.r.easysetup" Resource Type. Complete details are provided in
annex A.3.
Table 2 – "oic.r.easysetup" Resource Type definition
Property Property Value Value Unit Access Mandatory Description
title name type rule mode
Easy Setup ps integer enum N/A R Yes Easy setup provisioning
Provisioning status of the Device
Status
0: Need to Setup,
1: Connecting to Enroller,
2: Connected to Enroller,
3: Failed to Connect to
Enroller,
4~254: Reserved,
255: EOF
Last Error lec integer enum N/A R Yes Indicates a failure reason if
Code it fails to connect to Enroller
0: No error,
1: Given SSID is not found,
2: Wi-Fi password is wrong,
3: IP address is not
allocated,
4: NO internet connection,
5: Timeout,
6: Wi-Fi Auth Type is not
supported by the Enrollee,
7: Wi-Fi Encryption Type is
not supported by the
Enrollee,
8: Wi-Fi Auth Type is wrong
(failure while connecting to
the Enroller),
9: Wi-Fi Encryption Type is
wrong (failure while
connecting to the Enroller),
10~254: Reserved,
255: Unknown error.
6 © ISO/IEC 2021 – All rights reserved

---------------------- Page: 13 ----------------------
ISO/IEC 30118-7:2021(E)
Property Property Value Value Unit Access Mandatory Description
title name type rule mode
Connect cn array of N/A N/A RW Yes Array of connection types to
integer trigger Enrollee to initiate
connection:
1: Wi-Fi,
2: Other transport to be
added in a future (e.g.
BLE))
Links links array N/A N/A R Yes Array of links that are
WiFiConf and DevConf
Resource.
Enrollee shall set the following as default values (for example, when Device is unboxed first time):
– "ps" equal to 0.
– "lec" equal to 0.
– "cn" equal to an empty array.
6.3 WiFiConf Resource Type
6.3.1 Introduction
The WiFiConf Resource Type stores information to help an Enrollee to connect to an existing Wi-Fi
AP.
6.3.2 Resource Type
The WiFiConf Resource Type is as defined in Table 3.
Table 3 – WiFiConf Resource Type
Example URI Resource Resource Type ID Interfaces Description Related
Type Title ("rt" value) Functional
Interaction
/example/WiFi WiFiConf oic.r.wificonf Contains Wi-Fi N/A
oic.if.baseline,
ConfResURI related properties
oic.if.rw
The Resource
properties exposed
are listed in Table 4.
Table 4 defines the details for the "oic.r.wificonf" Resource Type. Complete details are provided in
annex A.4.
© ISO/IEC 2021 – All rights reserved 7

---------------------- Page: 14 ----------------------
ISO/IEC 30118-7:2021(E)
Table 4 – "oic.r.wificonf" Resource Type definition
Property Property Value Value rule Unit Access Mandatory Description
title name type mode
Supported swmt array of enum N/A R Yes Supported Wi-Fi modes
Wi-Fi Mode string by Enrollee. Can be
Type multiple.
("A", "B", "G","N", "AC")
Supported swf array of Refer to N/A R Yes Supported Wi-Fi
Wi-Fi string description frequencies by Enrollee.
Frequency for valid Can be multiple.
values.
("2.4G", "5G")
Target tnn string N/A N/A RW Yes Target network name
Network (SSID of Wi-Fi AP i.e.
Name enroller)
Credential cd string N/A N/A RW No Credential information of
Wi-Fi AP (Password
used to connect to
enroller).
Wi-Fi Auth wat string enum N/A RW Yes Wi-Fi auth type
Type
("None", "WEP",
"WPA_PSK",
"WPA2_PSK")
Wi-Fi wet string enum N/A RW Yes Wi-Fi encryption type
Encryption
("None", "WEP_64",
Type
"WEP_128", "TKIP",
"AES", "TKIP_AES")
Supported swat array of enum N/A R Yes Supported Wi-Fi Auth
Wi-Fi Auth string types. Can be multiple.
Type
("None", "WEP",
"WPA_PSK",
"WPA2_PSK")
Supported swet array of enum N/A R Yes Supported Wi-Fi
Wi-Fi string Encryption types. Can
Encryption be multiple.
Type
("None", "WEP-64",
"WEP_128", "TKIP",
"AES", "TKIP_AES")
6.4 DevConf Resource Type
6.4.1 Introduction
The DevConf Resource Type stores Device configuration information required in Wi-Fi Easy Setup.
6.4.2 Resource Type
The DevConf Resource Type is as defined in Table 5
8 © ISO/IEC 2021 – All rights reserved

---------------------- Page: 15 ----------------------
ISO/IEC 30118-7:2021(E)
Table 5 – DevConf Resource Type
Example URI Resource Resource Type ID Interfaces Description Related
Type Title ("rt" value) Functional
Interaction
/example/Dev DevConf oic.r.devconf oic.if.baseline, Stores device N/A
ConfResURI "oic.if.r" configuration information
required in Easy Setup
process
The Resource properties
exposed are listed in
Table 6.
Table 6 defines the details for the "oic.r.devconf" Resource Type. Complete details are provided in
annex A.2.
Table 6 – "oic.r.devconf" Resource Type definition
Property Property Value Value Unit Access Mandatory Description
title name type rule mode
Device dn one of: N/A N/A R Yes Indicates a pre-configured device
Name name in language indicated by
string
"dl" in "/oic/con".
or
or
array of
An array of objects where each
object
object has a language field
(containing an IETF RFC 5646
language tag) and a value field
containing the pre-configured
device name in the indic
...

INTERNATIONAL ISO/IEC
STANDARD 30118-7
First edition
Information Technology — Open
Connectivity Foundation (OCF) —
Part 7:
Wi-Fi easy setup specification
PROOF/ÉPREUVE
Reference number
ISO/IEC 30118-7:2021(E)
©
ISO/IEC 2021

---------------------- Page: 1 ----------------------
ISO/IEC 30118-7:2021(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii PROOF/ÉPREUVE © ISO/IEC 2021 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 30118-7:2021(E)
Contents Page
Foreword . v
Introduction . vi
1 Scope . 1
2 Normative references . 1
3 Terms, definitions, and abbreviated terms . 2
3.1 Terms and definitions . 2
3.2 Symbols and abbreviated terms . 2
4 Document conventions and organization . 2
4.1 Conventions . 2
4.2 Notation . 3
5 Overview . 4
5.1 Introduction . 4
5.2 Architecture . 4
5.3 Example scenario . 4
6 Resource model . 5
6.1 Introduction . 5
6.2 EasySetup Resource . 5
6.2.1 Overview . 5
6.2.2 Resource . 5
6.3 WiFiConf Resource Type . 7
6.3.1 Introduction . 7
6.3.2 Resource Type . 7
6.4 DevConf Resource Type . 8
6.4.1 Introduction . 8
6.4.2 Resource Type . 8
7 Network and connectivity . 9
8 Functional interactions . 9
8.1 Onboarding, Provisioning and Configuration . 9
8.2 Resource discovery . 9
8.3 Retrieving and updating Easy Setup Resources . 10
8.4 Error handling . 10
8.5 Example easy setup flow . 10
8.6 Easy setup SSID tags . 12
8.7 Easy setup information element . 12
8.7.1 Overview . 12
8.7.2 OCF Device information element (IE) . 12
9 Security . 15
(normative) OpenAPI 2.0 specification definitions . 16
A.1 List of resource type definitions . 16
A.2 Device configuration . 16
A.2.1 Introduction . 16
A.2.2 Example URI . 16
A.2.3 Resource type . 16
A.2.4 OpenAPI 2.0 definition . 16
A.2.5 Property definition . 18
© ISO/IEC 2021 – All rights reserved iii

---------------------- Page: 3 ----------------------
ISO/IEC 30118-7:2021(E)
A.2.6 CRUDN behaviour . 18
A.3 Easy setup collection. 19
A.3.1 Introduction . 19
A.3.2 Example URI . 19
A.3.3 Resource type . 19
A.3.4 OpenAPI 2.0 definition . 19
A.3.5 Property definition . 27
A.3.6 CRUDN behaviour . 29
A.4 Wi-Fi configuration . 29
A.4.1 Introduction . 29
A.4.2 Example URI . 29
A.4.3 Resource type . 29
A.4.4 OpenAPI 2.0 definition . 29
A.4.5 Property definition . 34
A.4.6 CRUDN behaviour . 35

iv © ISO/IEC 2021 – All rights reserved

---------------------- Page: 4 ----------------------
ISO/IEC 30118-7:2021(E)
Foreword
ISO (the International Organization for Standardization) and IEC (the International
Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies
that are members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical activity.
ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work.
The procedures used to develop this document and those intended for its further maintenance are described
in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types
of document should be noted (see www.iso.org/directives or www.iec.ch/members_experts/refdocs).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights.
Details of any patent rights identified during the development of the document will be in the Introduction and/
or on the ISO list of patent declarations received (see www.iso.org/patents) or the IEC list of patent
declarations received (see patents.iec.ch).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as information about ISO's adherence to the
World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see  www.iso.org/iso/
foreword.html. In the IEC, see www.iec.ch/understanding-standards.
This document was prepared by the Open Connectivity Foundation (OCF) (as OCF Wi-Fi Easy
Setup Specification, version 2.2.0) and drafted in accordance with its editorial rules. It was adopted, under
the JTC 1 PAS procedure, by Joint Technical Committee ISO/IEC JTC 1, Information technology.
A list of all parts in the ISO/IEC 30118 series can be found on the ISO and IEC websites.
Any feedback or questions on this document should be directed to the user’s national standards body.
A complete listing of these bodies can be found at www.iso.org/members.html and www.iec.ch/
national-committees.
© ISO/IEC 2021 – All rights reserved v

---------------------- Page: 5 ----------------------
ISO/IEC 30118-7:2021(E)
Introduction
This document, and all the other parts associated with this document, were developed in response to
worldwide demand for smart home focused Internet of Things (IoT) devices, such as appliances, door
locks, security cameras, sensors, and actuators; these to be modelled and securely controlled, locally
and remotely, over an IP network.
While some inter-device communication existed, no universal language had been developed for the
IoT. Device makers instead had to choose between disparate frameworks, limiting their market share,
or developing across multiple ecosystems, increasing their costs. The burden then falls on end users
to determine whether the products they want are compatible with the ecosystem they bought into, or
find ways to integrate their devices into their network, and try to solve interoperability issues on their
own.
In addition to the smart home, IoT deployments in commercial environments are hampered by a lack
of security. This issue can be avoided by having a secure IoT communication framework, which this
standard solves.
The goal of these documents is then to connect the next 25 billion devices for the IoT, providing secure
and reliable device discovery and connectivity across multiple OSs and platforms. There are multiple
proposals and forums driving different approaches, but no single solution addresses the majority of
key requirements. This document and the associated parts enable industry consolidation around a
common, secure, interoperable approach.
ISO/IEC 30118 consists of eighteen parts, under the general title Information technology — Open
Connectivity Foundation (OCF) Specification. The parts fall into logical groupings as described herein:
– Core framework
– Part 1: Core Specification
– Part 2: Security Specification
– Part 13: Onboarding Tool Specification
– Bridging framework and bridges
– Part 3: Bridging Specification
– Part 6: Resource to Alljoyn Interface Mapping Specification
– Part 8: OCF Resource to oneM2M Resource Mapping Specification
– Part 14: OCF Resource to BLE Mapping Specification
– Part 15: OCF Resource to EnOcean Mapping Specification
– Part 16: OCF Resource to UPlus Mapping Specification
– Part 17: OCF Resource to Zigbee Cluster Mapping Specification
– Part 18: OCF Resource to Z-Wave Mapping Specification
vi © ISO/IEC 2021 – All rights reserved

---------------------- Page: 6 ----------------------
ISO/IEC 30118-7:2021(E)
– Resource and Device models
– Part 4: Resource Type Specification
– Part 5: Device Specification
– Core framework extensions
– Part 7: Wi-Fi Easy Setup Specification
– Part 9: Core Optional Specification
– OCF Cloud
– Part 10: Cloud API for Cloud Services Specification
– Part 11: Device to Cloud Services Specification
– Part 12: Cloud Security Specification
© ISO/IEC 2021 – All rights reserved vii

---------------------- Page: 7 ----------------------
INTERNATIONAL STANDARD ISO/IEC 30118-7:2021(E)
Information Technology — Open Connectivity
Foundation (OCF) —
Part 7:
Wi-Fi easy setup specification
1 Scope
This document defines functional extensions to the capabilities defined in ISO/IEC 30118-1 to meet
the requirements of Wi-Fi Easy Setup. It specifies new Resource Types to enable the functionality and
any extensions to the existing capabilities defined in ISO/IEC 30118-1.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
ISO/IEC 30118-1 Information technology -- Open Connectivity Foundation (OCF) Specification -- Part 1:
Core specification
https://www.iso.org/standard/53238.html
ISO/IEC 30118-2 Information technology -- Open Connectivity Foundation (OCF) Specification -- Part 2:
Security specification
https://www.iso.org/standard/74239.html
ISO/IEC 30118-5 Information technology -- Open Connectivity Foundation (OCF) Specification -- Part 5:
Smart home device specification
https://www.iso.org/standard/74242.html
IEEE 802.11, IEEE Standard for Information technology—Telecommunications and information
exchange between systems Local and metropolitan area networks—Specific requirements - Part 11:
Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications, December 2016
https://standards.ieee.org/findstds/standard/802.11-2016.html
IETF RFC 5646, Tags for Identifying Languages, September 2009
https://www.rfc-editor.org/info/rfc5646
OpenAPI specification, aka Swagger RESTful API Documentation Specification, Version 2.0
https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md
© ISO/IEC 2021 – All rights reserved 1

---------------------- Page: 8 ----------------------
ISO/IEC 30118-7:2021(E)
3 Terms, definitions, and abbreviated terms
3.1 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO/IEC 30118-1 and the
following apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
– ISO Online browsing platform: available at https://www.iso.org/obp
– IEC Electropedia: available at http://www.electropedia.org/
3.1.1
Easy Setup
process of configuring an Enrollee (3.1.3) using a Mediator (3.1.5) by transferring of essential
information to the Enrollee (3.1.3)
3.1.2
Easy Setup Enrollment
step during Easy Setup in which the Enrollee (3.1.3) is contacted by the Mediator (3.1.5) to configure
the Enroller's (3.1.4) information by means of accessing Easy Setup (3.1.1) Resources
3.1.3
Enrollee
device that needs to be configured and connected. E.g. Air-conditioner, Printer
3.1.4
Enroller
target network entity to which the Enrollee (3.1.3) connects. E.g. Wi-Fi AP
3.1.5
Mediator
logical function that enables the Enrollee (3.1.3) to connect to the target network (i.e. Enroller (3.1.4))
Note 1 to Entry: The Mediator transfers configuration information to the Enrollee. E.g. Mobile Phone
3.2 Symbols and abbreviated terms
CID Company Identifier (ID)
IE Information Element
Soft AP Software Enabled Access Point
TLV type-length-value
4 Document conventions and organization
4.1 Conventions
In this document a number of terms, conditions, mechanisms, sequences, parameters, events, states,
or similar terms are printed with the first letter of each word in uppercase and the rest lowercase (e.g.,
Network Architecture). Any lowercase uses of these words have the normal technical English meaning.
2 © ISO/IEC 2021 – All rights reserved

---------------------- Page: 9 ----------------------
ISO/IEC 30118-7:2021(E)
In this document, to be consistent with the IETF usages for RESTful operations, the RESTful operation
words CRUDN, CREATE, RETRIVE, UPDATE, DELETE, and NOTIFY will have all letters capitalized.
Any lowercase uses of these words have the normal technical English meaning.
4.2 Notation
In this document, features are described as required, recommended, allowed or DEPRECATED as
follows:
Required (or shall or mandatory)(M).
– These basic features shall be implemented to comply with Core Architecture. The phrases "shall
not", and "PROHIBITED" indicate behaviour that is prohibited, i.e. that if performed means the
implementation is not in compliance.
Recommended (or should)(S).
– These features add functionality supported by Core Architecture and should be implemented.
Recommended features take advantage of the capabilities Core Architecture, usually without
imposing major increase of complexity. Notice that for compliance testing, if a recommended
feature is implemented, it shall meet the specified requirements to be in compliance with these
guidelines. Some recommended features could become requirements in the future. The phrase
"should not" indicates behaviour that is permitted but not recommended.
Allowed (may or allowed)(O).
– These features are neither required nor recommended by Core Architecture, but if the feature is
implemented, it shall meet the specified requirements to be in compliance with these guidelines.
DEPRECATED.
– Although these features are still described in this document, they should not be implemented except
for backward compatibility. The occurrence of a deprecated feature during operation of an
implementation compliant with the current document has no effect on the implementation’s
operation and does not produce any error conditions. Backward compatibility may require that a
feature is implemented and functions as specified but it shall never be used by implementations
compliant with this document.
Conditionally allowed (CA)
– The definition or behaviour depends on a condition. If the specified condition is met, then the
definition or behaviour is allowed, otherwise it is not allowed.
Conditionally required (CR)
– The definition or behaviour depends on a condition. If the specified condition is met, then the
definition or behaviour is required. Otherwise the definition or behaviour is allowed as default
unless specifically defined as not allowed.
Strings that are to be taken literally are enclosed in "double quotes".
Words that are emphasized are printed in italic.
© ISO/IEC 2021 – All rights reserved 3

---------------------- Page: 10 ----------------------
ISO/IEC 30118-7:2021(E)
5 Overview
5.1 Introduction
This document describes a way to setup and configure a new Device, using an already configured
Device or onboarding tool.
The described setup and configure mechanism is optional and other mechanisms are allowed to be
used.
Specifically, this method allows the transferring of essential information to the new Device, which
includes:
– Local network connection information, e.g. in case of Wi-Fi it will be Wi-Fi access point information.
– Device Configuration: Additional Device configuration information.
Easy Setup can be enhanced in future by incorporating other suitable technologies.
Annex A specifies the Resource Type definitions using the schema defined in the OpenAPI
specification as the API definition language that shall be followed by a Device realizing the Resources
specified in this document.
5.2 Architecture
Figure 1 shows the deployment architectural approach.
Figure 1 – Easy Setup deployment architecture
Easy Setup defines the following roles: Enrollee, Enroller, and Mediator. Please refer to clause 3 for
the definitions thereof.
5.3 Example scenario
The following scenario presents a typical setup case.
The configuration information and steps taken may vary depending on the Device’s type and status.
1) The Enrollee enters Easy Setup mode (when the Device is unboxed for the first time, it may be in
this mode by default).
4 © ISO/IEC 2021 – All rights reserved

---------------------- Page: 11 ----------------------
ISO/IEC 30118-7:2021(E)
2) The Mediator discovers and connects to the Enrollee.
3) The Mediator performs Security Provisioning of the Enrollee.
4) The Mediator transmits Wi-Fi Setting Information to the Enrollee.
5) Using the information received from the Mediator, the Enrollee connects to the Enroller (Wi-Fi AP).
6 Resource model
6.1 Introduction
Devices capable of Easy Setup shall support the following Resource Types.
1) EasySetup Resource Type
2) WiFiConf Resource Type
3) DevConf Resource Type
Instances of these Resources Type (Resources) shall be excluded in the IDD for the Introspection
Resource (see clause 11.4 in ISO/IEC 30118-1).
The EasySetup Resource Type is a Collection Resource and shall contain Links to instances of at least
WiFiConf and DevConf. A vendor may add links to other Resource Types. The relationship between
the EasySetup Resource Type and linked Resources is shown in Figure 2.
NOTE The EasySetup Resource Type supports the batch Interface ("oic.if.b") which allows for efficient data
delivery with a single request rather than multiple requests to each linked Resource.
Figure 2 – Easy Setup Resource Types
6.2 EasySetup Resource
6.2.1 Overview
The EasySetup Resource stores useful information including current status of Enrollee and last error
code which was produced in the process of Easy Setup.
6.2.2 Resource
The Easy Setup Resource Type is as defined in Table 1.
© ISO/IEC 2021 – All rights reserved 5

---------------------- Page: 12 ----------------------
ISO/IEC 30118-7:2021(E)
Table 1 – EasySetup Resource Type
Example URI Resource Resource Type ID Interfaces Description Related
Type Title ("rt" value) Functional
Interaction
/example/Easy EasySetup oic.r.easysetup, oic.if.baseline, Top level Resource for N/A
SetupResURI oic.wk.col oic.if.ll, oic.if.b Easy Setup. Indicates
easy setup status.
The Resource
properties exposed are
listed in Table 2.
Table 2 defines the details for the "oic.r.easysetup" Resource Type. Complete details are provided in
annex A.3.
Table 2 – "oic.r.easysetup" Resource Type definition
Property Property Value Value Unit Access Mandatory Description
title name type rule mode
Easy Setup ps integer enum N/A R Yes Easy setup provisioning
Provisioning status of the Device
Status
0: Need to Setup,
1: Connecting to Enroller,
2: Connected to Enroller,
3: Failed to Connect to
Enroller,
4~254: Reserved,
255: EOF
Last Error lec integer enum N/A R Yes Indicates a failure reason if
Code it fails to connect to Enroller
0: No error,
1: Given SSID is not found,
2: Wi-Fi password is wrong,
3: IP address is not
allocated,
4: NO internet connection,
5: Timeout,
6: Wi-Fi Auth Type is not
supported by the Enrollee,
7: Wi-Fi Encryption Type is
not supported by the
Enrollee,
8: Wi-Fi Auth Type is wrong
(failure while connecting to
the Enroller),
9: Wi-Fi Encryption Type is
wrong (failure while
connecting to the Enroller),
10~254: Reserved,
255: Unknown error.
6 © ISO/IEC 2021 – All rights reserved

---------------------- Page: 13 ----------------------
ISO/IEC 30118-7:2021(E)
Property Property Value Value Unit Access Mandatory Description
title name type rule mode
Connect cn array of N/A N/A RW Yes Array of connection types to
integer trigger Enrollee to initiate
connection:
1: Wi-Fi,
2: Other transport to be
added in a future (e.g.
BLE))
Links links array N/A N/A R Yes Array of links that are
WiFiConf and DevConf
Resource.
Enrollee shall set the following as default values (for example, when Device is unboxed first time):
– "ps" equal to 0.
– "lec" equal to 0.
– "cn" equal to an empty array.
6.3 WiFiConf Resource Type
6.3.1 Introduction
The WiFiConf Resource Type stores information to help an Enrollee to connect to an existing Wi-Fi
AP.
6.3.2 Resource Type
The WiFiConf Resource Type is as defined in Table 3.
Table 3 – WiFiConf Resource Type
Example URI Resource Resource Type ID Interfaces Description Related
Type Title ("rt" value) Functional
Interaction
/example/WiFi WiFiConf oic.r.wificonf Contains Wi-Fi N/A
oic.if.baseline,
ConfResURI related properties
oic.if.rw
The Resource
properties exposed
are listed in Table 4.
Table 4 defines the details for the "oic.r.wificonf" Resource Type. Complete details are provided in
annex A.4.
© ISO/IEC 2021 – All rights reserved 7

---------------------- Page: 14 ----------------------
ISO/IEC 30118-7:2021(E)
Table 4 – "oic.r.wificonf" Resource Type definition
Property Property Value Value rule Unit Access Mandatory Description
title name type mode
Supported swmt array of enum N/A R Yes Supported Wi-Fi modes
Wi-Fi Mode string by Enrollee. Can be
Type multiple.
("A", "B", "G","N", "AC")
Supported swf array of Refer to N/A R Yes Supported Wi-Fi
Wi-Fi string description frequencies by Enrollee.
Frequency for valid Can be multiple.
values.
("2.4G", "5G")
Target tnn string N/A N/A RW Yes Target network name
Network (SSID of Wi-Fi AP i.e.
Name enroller)
Credential cd string N/A N/A RW No Credential information of
Wi-Fi AP (Password
used to connect to
enroller).
Wi-Fi Auth wat string enum N/A RW Yes Wi-Fi auth type
Type
("None", "WEP",
"WPA_PSK",
"WPA2_PSK")
Wi-Fi wet string enum N/A RW Yes Wi-Fi encryption type
Encryption
("None", "WEP_64",
Type
"WEP_128", "TKIP",
"AES", "TKIP_AES")
Supported swat array of enum N/A R Yes Supported Wi-Fi Auth
Wi-Fi Auth string types. Can be multiple.
Type
("None", "WEP",
"WPA_PSK",
"WPA2_PSK")
Supported swet array of enum N/A R Yes Supported Wi-Fi
Wi-Fi string Encryption types. Can
Encryption be multiple.
Type
("None", "WEP-64",
"WEP_128", "TKIP",
"AES", "TKIP_AES")
6.4 DevConf Resource Type
6.4.1 Introduction
The DevConf Resource Type stores Device configuration information required in Wi-Fi Easy Setup.
6.4.2 Resource Type
The DevConf Resource Type is as defined in Table 5
8 © ISO/IEC 2021 – All rights reserved

---------------------- Page: 15 ----------------------
ISO/IEC 30118-7:2021(E)
Table 5 – DevConf Resource Type
Example URI Resource Resource Type ID Interfaces Description Related
Type Title ("rt" value) Functional
Interaction
/example/Dev DevConf oic.r.devconf oic.if.baseline, Stores device N/A
ConfResURI "oic.if.r" configuration information
required in Easy Setup
process
The Resource properties
exposed are listed in
Table 6.
Table 6 defines the details for the "oic.r.devconf" Resource Type. Complete details are provided in
annex A.2.
Table 6 – "oic.r.devconf" Resource Type definition
Property Property Value Value Unit Access Mandatory Description
title name type rule mode
Device dn one of: N/A N/A R Yes Indicates a pre-configured device
Name name in language indicated by
string
"dl" in "/oic/con".
or
or
array of
An array of objects where each
object
object has a language field
(containing an IETF RFC 5646
language tag) and a value field
containing the pre-configured
device name in the indicated
language.
The pre-configured device name
is presented by enrollee to
mediator during easy-setup
process.
7 Network and connectivity
Both the Mediator and Enrollee communicate via a common connectivity (e.g. Wi-Fi).
If using Wi-Fi for Easy Setup, then the Enrollee shall have ca
...