World Telecommunication Standardization Assembly (WTSA-16) Yasmine Hammamet, 25 October - 3 November 2016 INTERNATIONAL TELECOMMUNICATION UNION PLENARY MEETING Document 19-E 2016 Original: English ITU-T Study Group 17 REPORT ITU-T TO THE WORLD TELECOMMUNICATION STANDARDIZATION ASSEMBLY (WTSA-16), PART I: GENERAL Abstract: Note by the TSB: The report of Study Group 17 to the WTSA-16 is presented in the following documents: Part I: Document 19 – General; including proposed changes to WTSA Resolution 2 in Annex 2 Part II: Document 20 – Questions proposed for study during the study period 2017-2020 CONTENTS Page SG17
TABLE 1 Meetings of Study Group 17 and its Working Parties Meetings Date Reports Study Group 17 Geneva, 17 – 26 April 2013 COM 17 – R 1 to R 8 Study Group 17 Geneva, 26 August – 4 September 2013 COM 17 – R 9 to R 22 Study Group 17 Geneva, 15 – 24 January 2014 COM 17 – R 23 to R 29 Study Group 17 Geneva, 17 – 26 September 2014 COM 17 – R 30 to R 36 Study Group 17 Geneva, 8 – 17 April 2015 COM 17 – R 37 to R 45 Study Group 17 Geneva, 8 – 17 September 2015 COM 17 – R 46 to R 57 Study Group 17 Geneva, 14 – 23 March 2016 COM 17 – R 58 to R 66 Study Group 17 Geneva, 29 August – 7 September 2016 COM 17 – R 67 to R Management team meetings took place in conjunction with each Study Group 17 meeting. In addition many Rapporteurs’ meetings (including e-meetings) took place during the study period in different locations, see Table 1-bis. TABLE 1-bis Rapporteur meetings organized under Study Group 17 during the study period Dates Place/Host Question(s) Event name 2013-01-14 Korea (Rep. of) [Seoul]/ Soonchunhyang University and KISA 3/17 Q3/17 interim Rapporteur group meeting 2013-01-22 to 2013-01-24 China [Beijing]/China Academy of Telecommunication Research of MIIT (CATR) 8/17 Q8/17 interim Rapporteur group meeting 2013-01-23 to 2013-01-25 E-Meeting 4/17 Q4/17 interim Rapporteur group meeting 2013-02-19 to 2013-02-22 Switzerland [Geneva]/ITU 8/17 Q8/17 interim Rapporteur group meeting 2013-06-17 to 2013-06-21 Korea (Rep. of) [Seoul]/Korean Agency for Technology and Standards (KATS) 11/17 Q11/17 interim Rapporteur group meeting with ISO/IEC JCT 1/SC 6 2013-07-02 to 2013-07-03 E-Meeting 4/17 Q4/17 interim Rapporteur group meeting 2013-07-08 to 2013-07-10 China [Guangzhou]/China Telecom 8/17 Q8/17 interim Rapporteur group meeting 2013-07-09 to 2013-07-10 France [Paris]/LegalBox 11/17 Q11/17 interim Rapporteur group meeting
TABLE 2 Organization of Study Group 17 Designation Questions to be studied Title of the Working Party Chairmn WP 1/17 1, 2, 3 Fundamental security Koji NAKAO WP 2/17 4, 5 Network and information security Sacid SARIKAYA WP 3/17 8, 10 Identity management and cloud computing security Heung Youl YOUM WP 4/17 6, 7, 9 Application security Antonio GUIMARAES WP 5/17 11, 12 Formal languages Zhaoji LIN TABLE 3 Other Groups (if any) Title of the Group Chairman Vice-Chairmen JCA-IdM Co-chairmen: Richard BRACKNEY(1), Jon SHAMAH(2), Hiroshi TAKECHI(3), Abbie BARBIR(4) JCA-COP Co-chairman: Ashley HEINEMAN(5), Philip RUSHTON SG17-RG-AFR Michael KATUNDU Mohamed M. K. Elhaj, Patrick Mwesigwa, Mohamed Touré ASN.1 Project Project leader: Paul THORPE OID Project Project leader: Olivier DUBUISSON Notes: (1) Co-chairman passed away 12 September 2013. (2) Co-chairing until September 2013. (3) Co-chairing since 4 September 2013. (4) Co-chairing since 24 January 2014. (5) Co-chairing until 31 January 2016. 2.2 Questions and Rapporteurs 2.2.1 WTSA-12 assigned to Study Group 17 the following 12 Questions listed in Table 4 and SG17 appointed the listed Rapporteurs and Associate Rapporteurs. 2.2.2 The Questions listed in Table 5 have been adopted anew during this period. Note – While no new Questions were adopted, Questions 6/17, 8/17 and 12/17 were modified during the study period. 2.2.3 The Questions listed in Table 6 have been deleted during this period.
Q10/17 Identity management architecture and mechanisms 3/17 Abbie Barbir Associate Rapporteurs: Richard BRACKNEY(6), Hiroshi TAKECHI(4), Junjie XIA(3) Q11/17 Generic technologies to support secure applications 5/17 Erik Andersen Associate Rapporteur: Jean-Paul LEMAIRE Q12/17 Formal languages for telecommunication software and testing 5/17 Dieter Hogrefe Associate Rapporteurs: Gunter MUSSBACHER, Rick Reed Note: (1) Appointed associate Rapporteur (17 April 2015) (2) Appointed associate Rapporteur (8 April 2015) (3) Appointed associate Rapporteur (24 January 2014) (4) Appointed associate Rapporteur (4 September 2013) (5) Appointed associate Rapporteur (9 October 2015) (6) Associate Rapporteur passed away 12 September 2013 (7) Associate Rapporteur until March 2015 (8) Associate Rapporteur stepped-down (27 September 2015) (9) Associate Rapporteur stepped-down (26 February 2016) (10) Rapporteur until 17 September 2015 (11) Appointed Rapporteur (14 March 2016) (12) Appointed associate Rapporteur (23 March 2016) (13) Appointed associate Rapporteur (17 September 2015). TABLE 5 Study Group 17 – New Questions adopted and Rapporteurs Questions Title of the Questions WP Rapporteur None TABLE 6 Study Group 17 – Questions deleted Questions Title of Questions Rapporteurs Results None
SG13 Y.3032 Configurations of node identifiers and their mapping with locators in future networks SG13 Y.3520 (revised) Cloud computing framework for end-to-end resource management SG15 G.808.1 Generic protection switching – Linear trail and subnetwork protection SG15 G.808.3 Generic protection switching Shared mesh protection SG15 G.873.1 Optical Transport Network (OTN) Linear protection SG15 G.873.1 Amd.1 Optical Transport Network (OTN): Linear protection Amendment 1: New Appendix III – Optical layer protection SG15 G.873.2 ODUk shared ring protection SG15 G.8031/Y.1342 (revised) Ethernet linear protection switching SG16 F.748.1 Requirements and common characteristics of IoT identifier for IoT services SG16 F.771 Amd.1 Service description and requirements for multimedia information access triggered by tag-based identification – Amendment 1: Supporting multiple air interfaces SG16 H.235.0 (revised) H.323 security: Framework for security in H-series (H.323 and other multimedia systems SG16 H.235.6 (revised) H.323 security: Encryption profile with native H.235/H.245 key management SG16 H.248.84 Gateway control protocol NAT traversal for peer-to-peer services SG16 H.248.86 Gateway control protocol: H.248 Support for deep packet inspection SG16 H.248.90 Gateway control protocol: H.248 packages for control of transport security using TLS SG16 H.248.91 Gateway control protocol: Guidelines on the use of ITU-T H.248 capabilities for transport security in TLS networks in ITU-T H.248 profiles SG16 H.248.93 Gateway control protocol: H.248 support for control of transport security using DTLS SG16 H.460.18 Traversal of H.323 signalling across network address translators and firewalls SG16 H.460.19 Traversal of H.323 media across network address translators and firewalls SG16 H.460.22 Negotiation of security protocols to protect H.225.0 call signalling messages SG16 H.621 Amd.1 Architecture of a system for multimedia information access triggered by identification: Amendment 1: Supporting multiple air interfaces SG16 H.751 Metadata for rights information interoperability in IPTV services
X.227bis Cor.1 In force AAP Information technology – Open Systems Interconnection – Connection-mode protocol for the Application Service Object Association Control Service Element – Technical Corrigendum 1 X.509 (2012) Cor.1 In force AAP Information technology – Open Systems Interconnection – The Directory – Public-key and attribute certificate frameworks – Technical Corrigendum 1 X.509 (2012) Cor.2 In force AAP Information technology – Open Systems Interconnection – The Directory – Public-key and attribute certificate frameworks – Technical Corrigendum 2 X.520 (2012) Cor.1 In force AAP Information technology – Open Systems Inteconnection - The Directory: Selected Attribute Types – Technical Corrigendum 1 X.667 Revised In force AAP Informationtechnology - Procedures for the operation of Object Identifier Registration Authorities: Generation of Universally Unique identifier (UUIDS) and their use in object identifiers
X.675 New In force AAP OID-based resolution framework for heterogeneous identifiers and locators X.680 Revised In force AAP Information technology – Abstract Syntax Notation One (ASN.1): Specification of basic notation X.680 (2008) Cor.2 Superseded AAP Informationtechnology - Abstract Syntax Notation One (ASN.1): Specification of basic notation – Technical Corrigendum 2 X.681 Revised In force AAP Information technology – Abstract Syntax Notation One (ASN.1): Information object specification X.682 Revised In force AAP Information technology – Abstract Syntax Notation One (ASN.1): Constraint specification X.682 (2008) Cor.1 Superseded AAP Information technology – Abstract Syntax Notation One (ASN.1): Constraint specification – Technical Corrigendum 1 X.683 Revised In force AAP Information technology – Abstract Syntax Notation One (ASN.1): Parameterization of ASN.1 specifications X.683 (2008) Cor.1 Superseded AAP Information technology – Abstract Syntax Notation One (ASN.1): Parameterization of ASN.1 specifications – Technical Corrigendum 1 X.690 Revised In force AAP Information technology – ASN.1 encoding rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER) X.690 (2008) Cor.2 Superseded AAP Information technology – ASN.1 encoding rules: specification of basic encoding rules (BER), canonical encoding rules (CER) and distinguished encoding rules (DER) – Technical Corrigendum 2 13
X.691 Revised In force AAP Information technology – ASN.1 encoding rules: Specification of Packed Encoding Rules (PER) X.691 (2008) Cor.3 Superseded AAP Information technology – Specification of Packed Encoding Rules (PER) – Technical Corrigendum 3 X.691 (2008) Cor.4 Superseded AAP Information technology – Specification of Packed Encoding Rules (PER) – Technical Corrigendum 4 X.692 Revised In force AAP Information technology – ASN.1 encoding rules: Specification of Encoding Control Notation (ECN) X.693 Revised In force AAP Information technology – ASN.1 encoding rules: XML Encoding Rules (XER) X.693 (2008) Cor.2 Superseded AAP Information technology – ASN.1 encoding rules: XML Encoding Rules (XER) – Technical Corrigendum 2 X.694 Revised In force AAP Information technology – ASN.1 encoding rules: Mapping W3C XML schema definitions into ASN.1 X.694 (2008) Cor.2 Superseded AAP Information technology – ASN.1 encoding rules: Mapping W3C XML schema definitions into ASN.1 – Technical Corrigendum 2 X.695 Revised In force AAP Information technology – ASN.1 encoding rules: Registration and application of PER encoding instructions X.696 New Superseded AAP Information technology – ASN.1 encoding rules: Specification of Octet Encoding Rules (OER) X.696 Revised In force AAP Information technology – ASN.1 encoding rules: Specification of Octet Encoding Rules (OER)
X.906 Revised In force AAP Information technology – Open distributed processing – Use of UML for ODP system specifications X.911 Revised In force AAP Information technology – Open distributed processing – Reference model – Enterprise language X.1033 New In force AAP Guidelines on security of the individual information service provided by the operators X.1037 New In force AAP Technical security guideline on deploying IPv6 X.1051 Revised In force AAP Information technology – Security techniques – Code of practice for Information security controls based on ISO/IEC 27002 for telecommunications organizations X.1092 New In force AAP Integrated framework for telebiometric data protection in and telemedicines X.1144 New In force AAP eXtensible Access Control Markup Language (XACML) 3.0 X.1154 New In force TAP General framework of combined authentication on multiple identity service provider environments X.1155 New In force AAP Guidelines on local linkable anonymous authentication for electronic services X.1156 New In force AAP Non-repudiation framework based on a one time password X.1157 New In force TAP Technical capabilities of fraud detection and response for services with high assurance level requirements
Z.161.3 Revised Superseded AAP Testing and Test Control Notation version 3: TTCN-3 language extensions: Advanced parameterization Z.161.3 Revised In force AAP Testing and Test Control Notation version 3: TTCN-3 language extensions: Advanced parameterization Z.161.4 New Superseded AAP Testing and Test Control Notation version 3: TTCN-3 Language Extensions: Behaviour types Z.161.4 New In force AAP Testing and Test Control Notation version 3: TTCN-3 Language Extensions: Behaviour types Z.161.5 New Superseded AAP Testing and Test Control Notation version 3: TTCN-3 Language extensions: Performance and real time testing Z.161.5 New In force AAP Testing and Test Control Notation version 3: TTCN-3 Language extensions: Performance and real time testing Z.165 Revised Superseded AAP Testing and Test Control Notation version 3: TTCN-3 runtime interface (TRI) Z.165 Revised Superseded AAP Testing and Test Control Notation version 3: TTCN-3 runtime interface (TRI) Z.165 Revised In force AAP Testing and Test Control Notation version 3: TTCN-3 runtime interface (TRI) Z.165.1 Revised Superseded AAP Testing and Test Control Notation version 3: Extension Package: Extended TRI Z.165.1 Revised Superseded AAP Testing and Test Control Notation version 3: Extension Package: Extended TRI Z.165.1 Revised In force AAP Testing and Test Control Notation version 3: Extension Package: Extended TRI
TABLE 9 Study Group 17 – Recommendations deleted during study period Recommendation Last version Withdrawal date Title Z.400 1993-03 December 2015 Structure and format of quality manuals for telecommunications software Z.600 2000-11 December 2015 Distributed processing environment architecture Z.601 2007-02 December 2015 Data architecture of one software system TABLE 10 Study Group 17 – Recommendations submitted to WTSA-16 Recommendation Proposal Title Reference None TABLE 11 Study Group 17 – Supplements Supplement Approval Status Title X.Suppl.10 (09/2011) (revised) In force ITU-T X.1205 – Supplement on usability of network traceback
X.Suppl.18 In force ITU-T X.1205 – Supplement on guidelines for abnormal traffic detection and control on IP-based telecommunication networks X.Suppl.19 In force ITU-T X.1120 series - Supplement on security aspects of smartphones X.Suppl.20 In force ITU-T X.1205 – Supplement on framework of security information sharing negotiation X.Suppl.21 In force ITU-T X.1143 – Supplement on security framework for web mashup services X.Suppl.22 In force ITU-T X.1144 – Supplement on enhancements and new features in eXtensible Access Control Markup Language (XACML 3.0) X.Suppl.23 In force ITU-T X.1037 – Supplement on Security management guideline for the implementation of an IPv6 environment in telecommunications organizations X.Suppl.24 In force ITU-T X.1120-X.1139 series – Supplement on a secure application distribution framework for communication devices X.Suppl.25 216-03-23 In force ITU-T X.1231 – Supplement on guidance to assist in countering spam for mobile phone developers X.Suppl.26 216-03-23 In force ITU-T X.1111 – Supplement on security functional architecture for smart grid services using telecommunication networks Z.Sup1 (revised) In force ITU-T Z.100-series – Supplement on methodology on the use of description techniques TABLE 12 Study Group 17 – Non-normative publications (Handbooks, Manuals) agreed Publication Approval Status Title Technical Report 2014-09-26 Published Current and new challenges for public-key infrastructure standardization Technical Report 2015-09-17 Published Security in telecommunications and information technology – An overview of issues and the deployment of existing ITU-T Recommendations for secure telecommunications; 6th edition
TABLE Study Group 17 – Recommendations, determined/consented and rejected Recommendation Consent / Determination TAP / AAP Title Draft X.1126 (ex X.msec-6) (Note 1) 2013-04 TAP Security aspects of smartphones Note 1 - X.1126 (ex X.msec-6) standardization activity has ceased (2013-04) within SG17, revectored as X.Suppl.19.