{"id":231384,"date":"2024-10-19T15:04:16","date_gmt":"2024-10-19T15:04:16","guid":{"rendered":"https:\/\/pdfstandards.shop\/product\/uncategorized\/bsi-pd-cen-iso-ts-211772019\/"},"modified":"2024-10-25T09:23:39","modified_gmt":"2024-10-25T09:23:39","slug":"bsi-pd-cen-iso-ts-211772019","status":"publish","type":"product","link":"https:\/\/pdfstandards.shop\/product\/publishers\/bsi\/bsi-pd-cen-iso-ts-211772019\/","title":{"rendered":"BSI PD CEN ISO\/TS 21177:2019"},"content":{"rendered":"<p>This document contains specifications for a set of ITS station security services required to ensure the authenticity of the source and integrity of information exchanged between trusted entities:<\/p>\n<ul>\n<li>\n<p>devices operated as bounded secured managed entities, i.e. &#8220;ITS Station Communication Units&#8221; (ITS-SCU) and &#8220;ITS station units&#8221; (ITS-SU) specified in <span class=\"std\"> <span class=\"std-ref\">ISO&nbsp;21217<\/span><\/span> , and<\/p>\n<\/li>\n<li>\n<p>between ITS-SUs (composed of one or several ITS-SCUs) and external trusted entities such as sensor and control networks.<\/p>\n<\/li>\n<\/ul>\n<p>These services include authentication and secure session establishment which are required to exchange information in a trusted and secure manner.<\/p>\n<p>These services are essential for many ITS applications and services including time-critical safety applications, automated driving, remote management of ITS stations ( <span class=\"std\"><span class=\"std-ref\">ISO&nbsp;24102-2<\/span><\/span><sup>[<\/sup> <span class=\"xref\"><sup>5<\/sup><\/span><sup>]<\/sup>), and roadside\/infrastructure related services.<\/p>\n<h4>PDF Catalog<\/h4>\n<table border=\"1px\" class=\"des-table\">\n<tr>\n<th>PDF Pages<\/th>\n<th>PDF Title<\/th>\n<\/tr>\n<tr>\n<td><b>2<b><\/td>\n<td>National foreword  <\/td>\n<\/tr>\n<tr>\n<td><b>4<b><\/td>\n<td>European foreword  <\/td>\n<\/tr>\n<tr>\n<td><b>8<b><\/td>\n<td>Foreword  <\/td>\n<\/tr>\n<tr>\n<td><b>9<b><\/td>\n<td>Introduction  <\/td>\n<\/tr>\n<tr>\n<td><b>15<b><\/td>\n<td>1 Scope <br \/> 2 Normative references <br \/> 3 Terms and definitions  <\/td>\n<\/tr>\n<tr>\n<td><b>16<b><\/td>\n<td>4 Symbols and abbreviated terms  <\/td>\n<\/tr>\n<tr>\n<td><b>17<b><\/td>\n<td>5 Overview <br \/> 5.1 Goals  <\/td>\n<\/tr>\n<tr>\n<td><b>18<b><\/td>\n<td>5.2 Architecture and functional entities  <\/td>\n<\/tr>\n<tr>\n<td><b>21<b><\/td>\n<td>5.3 Cryptomaterial handles <br \/> 5.4 Session IDs and state  <\/td>\n<\/tr>\n<tr>\n<td><b>22<b><\/td>\n<td>5.5 Access control and authorisation state <br \/> 5.6 Application level non-repudiation <br \/> 5.7 Service primitive conventions  <\/td>\n<\/tr>\n<tr>\n<td><b>23<b><\/td>\n<td>6 Process flows and sequence diagrams <br \/> 6.1 General <br \/> 6.2 Overview of process flows  <\/td>\n<\/tr>\n<tr>\n<td><b>24<b><\/td>\n<td>6.3 Sequence diagram conventions  <\/td>\n<\/tr>\n<tr>\n<td><b>25<b><\/td>\n<td>6.4 Configure  <\/td>\n<\/tr>\n<tr>\n<td><b>26<b><\/td>\n<td>6.5 Start Session  <\/td>\n<\/tr>\n<tr>\n<td><b>28<b><\/td>\n<td>6.6 Send data  <\/td>\n<\/tr>\n<tr>\n<td><b>31<b><\/td>\n<td>6.7 Send access control PDU  <\/td>\n<\/tr>\n<tr>\n<td><b>32<b><\/td>\n<td>6.8 Receive PDU  <\/td>\n<\/tr>\n<tr>\n<td><b>37<b><\/td>\n<td>6.9 Secure connection brokering <br \/> 6.9.1 Goals  <\/td>\n<\/tr>\n<tr>\n<td><b>38<b><\/td>\n<td>6.9.2 Prerequisites <br \/> 6.9.3 Overview  <\/td>\n<\/tr>\n<tr>\n<td><b>39<b><\/td>\n<td>6.9.4 Detailed specification  <\/td>\n<\/tr>\n<tr>\n<td><b>47<b><\/td>\n<td>6.10 Force end session  <\/td>\n<\/tr>\n<tr>\n<td><b>49<b><\/td>\n<td>6.11 Session terminated at session layer <br \/> 6.12 Deactivate  <\/td>\n<\/tr>\n<tr>\n<td><b>50<b><\/td>\n<td>6.13 Secure session example  <\/td>\n<\/tr>\n<tr>\n<td><b>52<b><\/td>\n<td>7 Security Subsystem: interfaces and data types <br \/> 7.1 General  <\/td>\n<\/tr>\n<tr>\n<td><b>53<b><\/td>\n<td>7.2 Access control policy and state  <\/td>\n<\/tr>\n<tr>\n<td><b>54<b><\/td>\n<td>7.3 Enhanced authentication <br \/> 7.3.1 Definition and possible states <br \/> 7.3.2 States for owner role enhanced authentication  <\/td>\n<\/tr>\n<tr>\n<td><b>56<b><\/td>\n<td>7.3.3 State for accessor role enhanced authentication <br \/> 7.3.4 Use by Access Control <br \/> 7.3.5 Methods for providing enhanced authentication <br \/> 7.3.6 Enhanced authentication using SPAKE2  <\/td>\n<\/tr>\n<tr>\n<td><b>57<b><\/td>\n<td>7.4 Extended authentication  <\/td>\n<\/tr>\n<tr>\n<td><b>58<b><\/td>\n<td>7.5 Data types <br \/> 7.5.1 General <br \/> 7.5.2 Imports <br \/> 7.5.3 Iso21177AccessControlPdu <br \/> 7.5.4 AccessControlResult  <\/td>\n<\/tr>\n<tr>\n<td><b>59<b><\/td>\n<td>7.5.5 ExtendedAuthPdu <br \/> 7.5.6 ExtendedAuthRequest <br \/> 7.5.7 InnerExtendedAuthRequest  <\/td>\n<\/tr>\n<tr>\n<td><b>60<b><\/td>\n<td>7.5.8 AtomicExtendedAuthRequest <br \/> 7.5.9 ExtendedAuthResponse  <\/td>\n<\/tr>\n<tr>\n<td><b>61<b><\/td>\n<td>7.5.10 ExtendedAuthResponsePayload <br \/> 7.5.11 EnhancedAuthPdu <br \/> 7.5.12 SpakeRequest <br \/> 7.5.13 SpakeResponse  <\/td>\n<\/tr>\n<tr>\n<td><b>62<b><\/td>\n<td>7.5.14 SpakeRequesterResponse <br \/> 7.6 App-Sec Interface <br \/> 7.6.1 App-Sec-Configure.request  <\/td>\n<\/tr>\n<tr>\n<td><b>63<b><\/td>\n<td>7.6.2 App-Sec-Configure.confirm <br \/> 7.6.3 App-Sec-StartSession.indication  <\/td>\n<\/tr>\n<tr>\n<td><b>64<b><\/td>\n<td>7.6.4 App-Sec-Data.request <br \/> 7.6.5 App-Sec-Data.confirm  <\/td>\n<\/tr>\n<tr>\n<td><b>65<b><\/td>\n<td>7.6.6 App-Sec-Incoming.request  <\/td>\n<\/tr>\n<tr>\n<td><b>66<b><\/td>\n<td>7.6.7 App-Sec-Incoming.confirm <br \/> 7.6.8 App-Sec-EndSession.request <br \/> 7.6.9 App-Sec-EndSession.confirm <br \/> 7.6.10 App-Sec-EndSession.indication  <\/td>\n<\/tr>\n<tr>\n<td><b>67<b><\/td>\n<td>7.6.11 App-Sec-Deactivate.request <br \/> 7.6.12 App-Sec-Deactivate.confirm  <\/td>\n<\/tr>\n<tr>\n<td><b>68<b><\/td>\n<td>7.6.13 App-Sec-Deactivate.indication <br \/> 7.7 Security Subsystem internal interface <br \/> 7.7.1 General <br \/> 7.7.2 Sec-AuthState.request  <\/td>\n<\/tr>\n<tr>\n<td><b>69<b><\/td>\n<td>7.7.3 Sec-AuthState.confirm  <\/td>\n<\/tr>\n<tr>\n<td><b>70<b><\/td>\n<td>8 Adaptor Layer: Interfaces and data types <br \/> 8.1 General  <\/td>\n<\/tr>\n<tr>\n<td><b>71<b><\/td>\n<td>8.2 Data types <br \/> 8.2.1 General <br \/> 8.2.2 Iso21177AdaptorLayerPDU <br \/> 8.2.3 Apdu  <\/td>\n<\/tr>\n<tr>\n<td><b>72<b><\/td>\n<td>8.2.4 Access Control <br \/> 8.2.5 TlsClientMsg1 <br \/> 8.2.6 TlsServerMsg1 <br \/> 8.3 App-AL Interface <br \/> 8.3.1 App-AL-Data.request  <\/td>\n<\/tr>\n<tr>\n<td><b>73<b><\/td>\n<td>8.3.2 App-AL-Data.confirm <br \/> 8.3.3 App-AL-Data.indication <br \/> 8.3.4 App-AL-EnableProxy.request  <\/td>\n<\/tr>\n<tr>\n<td><b>75<b><\/td>\n<td>8.4 Sec-AL Interface <br \/> 8.4.1 Sec-AL-AccessControl.request  <\/td>\n<\/tr>\n<tr>\n<td><b>76<b><\/td>\n<td>8.4.2 Sec-AL-AccessControl.confirm <br \/> 8.4.3 Sec-AL-AccessControl.indication <br \/> 8.4.4 Sec-AL-EndSession.request  <\/td>\n<\/tr>\n<tr>\n<td><b>77<b><\/td>\n<td>8.4.5 Sec-AL-EndSession.confirm <br \/> 9 Secure Session services <br \/> 9.1 General <br \/> 9.2 App-Sess interfaces <br \/> 9.2.1 App-Sess-EnableProxy.request  <\/td>\n<\/tr>\n<tr>\n<td><b>78<b><\/td>\n<td>9.3 Sec-Sess interface <br \/> 9.3.1 Sec-Sess-Configure.request  <\/td>\n<\/tr>\n<tr>\n<td><b>80<b><\/td>\n<td>9.3.2 Sec-Sess-Configure.confirm <br \/> 9.3.3 Sec-Sess-Start.indication  <\/td>\n<\/tr>\n<tr>\n<td><b>81<b><\/td>\n<td>9.3.4 Sec-Sess-EndSession.indication <br \/> 9.3.5 Sec-Sess-Deactivate.request  <\/td>\n<\/tr>\n<tr>\n<td><b>82<b><\/td>\n<td>9.3.6 Sec-Sess-Deactivate.confirm <br \/> 9.4 AL-Sess interface <br \/> 9.4.1 AL-Sess-Data.request <br \/> 9.4.2 AL-Sess-Data.confirm <br \/> 9.4.3 AL-Sess-Data.indication  <\/td>\n<\/tr>\n<tr>\n<td><b>83<b><\/td>\n<td>9.4.4 AL-Sess-EndSession.request <br \/> 9.4.5 AL-Sess-EndSession.confirm <br \/> 9.4.6 AL-Sess-ClientHelloProxy.request  <\/td>\n<\/tr>\n<tr>\n<td><b>84<b><\/td>\n<td>9.4.7 AL-Sess-ClientHelloProxy.indication  <\/td>\n<\/tr>\n<tr>\n<td><b>85<b><\/td>\n<td>9.4.8 AL-Sess-ServerHelloProxy.request <br \/> 9.4.9 AL-Sess-ServerHelloProxy.indication  <\/td>\n<\/tr>\n<tr>\n<td><b>86<b><\/td>\n<td>9.4.10 AL-Sess-EndSession.request  <\/td>\n<\/tr>\n<tr>\n<td><b>87<b><\/td>\n<td>9.4.11 AL-Sess-EndSession.confirm <br \/> 9.5 Permitted mechanisms <br \/> 9.5.1 TLS 1.3  <\/td>\n<\/tr>\n<tr>\n<td><b>88<b><\/td>\n<td>9.5.2 DTLS 1.3  <\/td>\n<\/tr>\n<tr>\n<td><b>89<b><\/td>\n<td>Annex A (informative) Usage scenarios  <\/td>\n<\/tr>\n<tr>\n<td><b>96<b><\/td>\n<td>Annex B (normative) ASN.1 module  <\/td>\n<\/tr>\n<tr>\n<td><b>97<b><\/td>\n<td>Bibliography  <\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p><b>Intelligent transport systems. ITS station security services for secure session establishment and authentication between trusted devices<\/b><\/p>\n<table class=\"shortdes-table\" style=\"width: 100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td>Published By<\/td>\n<td>Publication Date<\/td>\n<td>Number of Pages<\/td>\n<\/tr>\n<tr>\n<td><a href=\"https:\/\/pdfstandards.shop\/product-category\/publishers\/bsi\/\"><b>BSI<\/b><\/a><\/td>\n<td>2020<\/td>\n<td>98<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"featured_media":231386,"template":"","meta":{"rank_math_lock_modified_date":false,"ep_exclude_from_search":false},"product_cat":[107,2641],"product_tag":[],"class_list":{"0":"post-231384","1":"product","2":"type-product","3":"status-publish","4":"has-post-thumbnail","6":"product_cat-03-220-01","7":"product_cat-bsi","9":"first","10":"instock","11":"sold-individually","12":"shipping-taxable","13":"purchasable","14":"product-type-simple"},"_links":{"self":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product\/231384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product"}],"about":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/types\/product"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/media\/231386"}],"wp:attachment":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/media?parent=231384"}],"wp:term":[{"taxonomy":"product_cat","embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product_cat?post=231384"},{"taxonomy":"product_tag","embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product_tag?post=231384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}