ITU-T X 1161-2008 Framework for secure peer-to-peer communications (Study Group 17)《(预发布)安全对等通信框架》.pdf

1、 International Telecommunication Union ITU-T X.1161TELECOMMUNICATION STANDARDIZATION SECTOR OF ITU (05/2008) SERIES X: DATA NETWORKS, OPEN SYSTEM COMMUNICATIONS AND SECURITY Telecommunication security Framework for secure peer-to-peer communications Recommendation ITU-T X.1161 ITU-T X-SERIES RECOMME

2、NDATIONS DATA NETWORKS, OPEN SYSTEM COMMUNICATIONS AND SECURITY PUBLIC DATA NETWORKS Services and facilities X.1X.19 Interfaces X.20X.49 Transmission, signalling and switching X.50X.89 Network aspects X.90X.149 Maintenance X.150X.179 Administrative arrangements X.180X.199 OPEN SYSTEMS INTERCONNECTIO

3、N Model and notation X.200X.209 Service definitions X.210X.219 Connection-mode protocol specifications X.220X.229 Connectionless-mode protocol specifications X.230X.239 PICS proformas X.240X.259 Protocol Identification X.260X.269 Security Protocols X.270X.279 Layer Managed Objects X.280X.289 Conform

4、ance testing X.290X.299 INTERWORKING BETWEEN NETWORKS General X.300X.349 Satellite data transmission systems X.350X.369 IP-based networks X.370X.379 MESSAGE HANDLING SYSTEMS X.400X.499DIRECTORY X.500X.599 OSI NETWORKING AND SYSTEM ASPECTS Networking X.600X.629 Efficiency X.630X.639 Quality of servic

5、e X.640X.649 Naming, Addressing and Registration X.650X.679 Abstract Syntax Notation One (ASN.1) X.680X.699 OSI MANAGEMENT Systems Management framework and architecture X.700X.709 Management Communication Service and Protocol X.710X.719 Structure of Management Information X.720X.729 Management funct

6、ions and ODMA functions X.730X.799 SECURITY X.800X.849 OSI APPLICATIONS Commitment, Concurrency and Recovery X.850X.859 Transaction processing X.860X.879 Remote operations X.880X.889 Generic applications of ASN.1 X.890X.899 OPEN DISTRIBUTED PROCESSING X.900X.999 TELECOMMUNICATION SECURITY X.1000 For

7、 further details, please refer to the list of ITU-T Recommendations. Rec. ITU-T X.1161 (05/2008) i Recommendation ITU-T X.1161 Framework for secure peer-to-peer communications Summary Recommendation ITU-T X.1161 describes security threats and security requirements to the peer-to-peer (P2P) communica

8、tions based on the service scenarios and characteristics of P2P communications. In addition, this Recommendation describes security functions that satisfy the security requirements. Source Recommendation ITU-T X.1161 was approved on 29 May 2008 by ITU-T Study Group 17 (2005-2008) under Recommendatio

9、n ITU-T A.8 procedure. ii Rec. ITU-T X.1161 (05/2008) FOREWORD The International Telecommunication Union (ITU) is the United Nations specialized agency in the field of telecommunications, information and communication technologies (ICTs). The ITU Telecommunication Standardization Sector (ITU-T) is a

10、 permanent organ of ITU. ITU-T is responsible for studying technical, operating and tariff questions and issuing Recommendations on them with a view to standardizing telecommunications on a worldwide basis. The World Telecommunication Standardization Assembly (WTSA), which meets every four years, es

11、tablishes the topics for study by the ITU-T study groups which, in turn, produce Recommendations on these topics. The approval of ITU-T Recommendations is covered by the procedure laid down in WTSA Resolution 1. In some areas of information technology which fall within ITU-Ts purview, the necessary

12、standards are prepared on a collaborative basis with ISO and IEC. NOTE In this Recommendation, the expression “Administration“ is used for conciseness to indicate both a telecommunication administration and a recognized operating agency. Compliance with this Recommendation is voluntary. However, the

13、 Recommendation may contain certain mandatory provisions (to ensure e.g. interoperability or applicability) and compliance with the Recommendation is achieved when all of these mandatory provisions are met. The words “shall“ or some other obligatory language such as “must“ and the negative equivalen

14、ts are used to express requirements. The use of such words does not suggest that compliance with the Recommendation is required of any party. INTELLECTUAL PROPERTY RIGHTS ITU draws attention to the possibility that the practice or implementation of this Recommendation may involve the use of a claime

15、d Intellectual Property Right. ITU takes no position concerning the evidence, validity or applicability of claimed Intellectual Property Rights, whether asserted by ITU members or others outside of the Recommendation development process. As of the date of approval of this Recommendation, ITU had not

16、 received notice of intellectual property, protected by patents, which may be required to implement this Recommendation. However, implementers are cautioned that this may not represent the latest information and are therefore strongly urged to consult the TSB patent database at http:/www.itu.int/ITU

17、-T/ipr/. ITU 2009 All rights reserved. No part of this publication may be reproduced, by any means whatsoever, without the prior written permission of ITU. Rec. ITU-T X.1161 (05/2008) iii CONTENTS Page 1 Scope 1 2 References. 1 3 Definitions 1 3.1 Terms defined elsewhere 1 3.2 Terms defined in this

18、Recommendation. 3 4 Abbreviations 3 5 Conventions 3 6 Concepts of P2P communications 3 6.1 Basic P2P service concept 3 6.2 Unstructured and structured P2P communications. 4 7 Service scenarios of P2P communications . 4 7.1 Information sharing and contents distribution 4 7.2 Communication platform 4

19、7.3 Groupware (Collaboration) 4 7.4 Distributed computing 5 8 Characteristics of P2P communications . 5 9 Security threats to P2P communications 5 9.1 Eavesdropping 5 9.2 Communication jamming . 5 9.3 Injection and modification of data 6 9.4 Unauthorized access . 6 9.5 Repudiation. 6 9.6 Man-in-the-

20、middle attack . 6 9.7 Sybil attack . 6 10 Security requirements for P2P communications. 6 10.1 User authentication. 6 10.2 Anonymity 6 10.3 Privacy 7 10.4 Data integrity 7 10.5 Data confidentiality 7 10.6 Access control 7 10.7 Non-repudiation 7 10.8 Usability . 8 10.9 Availability. 8 10.10 Traceabil

21、ity. 8 10.11 Traffic control. 8 10.12 Relationship between security requirements and security threats 8 iv Rec. ITU-T X.1161 (05/2008) Page 11 Security functions for satisfying security requirements of P2P communications 9 11.1 Encipherment 10 11.2 Key exchange . 10 11.3 Digital signature . 10 11.4

22、Trust management 10 11.5 Access control 11 11.6 Data integrity mechanism. 11 11.7 Authentication exchange 12 11.8 Notarization 12 11.9 Secure routing. 12 11.10 Traffic control mechanism . 12 11.11 ID assignment. 13 11.12 Relationship between security requirements and functions . 13 Bibliography. 14

23、Rec. ITU-T X.1161 (05/2008) 1 Recommendation ITU-T X.1161 Framework for secure peer-to-peer communications 1 Scope Peer-to-peer (P2P) is an instantiation of network architectures where all peers have equivalent authority and responsibility, differing completely from that of server and client system.

24、 In the case of P2P communications, a peer can be both the server and the client. When data or messages are exchanged in a P2P network, a peer communicates with other peers directly. Because traffic and processing are distributed to each peer, the P2P network does not require high performance comput

25、ing power and high bandwidth network compared with the server and client system. Because the P2P communication architecture differs from that of the server and client system, further security threats emerge, which are not applicable to server and client architecture. With this in mind, P2P applicati

26、ons should be carefully built while taking into consideration the security threats to P2P communications. This Recommendation describes the framework for secure P2P communications, which includes security threats and security requirements for P2P communications. In addition, this Recommendation desc

27、ribes the security functions for satisfying the security requirements of P2P communications. Security architectures and operations of P2P communications are defined in ITU-T X.1162. 2 References The following ITU-T Recommendations and other references contain provisions which, through reference in t

28、his text, constitute provisions of this Recommendation. At the time of publication, the editions indicated were valid. All Recommendations and other references are subject to revision; users of this Recommendation are therefore encouraged to investigate the possibility of applying the most recent ed

29、ition of the Recommendations and other references listed below. A list of the currently valid ITU-T Recommendations is regularly published. The reference to a document within this Recommendation does not give it, as a stand-alone document, the status of a Recommendation. ITU-T X.1162 Recommendation

30、ITU-T X.1162 (2008), Security architecture and operations for peer-to-peer networks. 3 Definitions 3.1 Terms defined elsewhere This Recommendation uses the following terms defined elsewhere: 3.1.1 access control b-ITU-T X.800: The prevention of unauthorized use of a resource, including the preventio

31、n of use of a resource in an unauthorized manner. 3.1.2 authentication b-ITU-T X.800: See data origin authentication defined in clause 3.1.10, and peer-entity authentication defined in clause 3.1.20. NOTE In this Recommendation, the term “authentication“ is not used in connection with data integrity

32、; the term “data integrity“ is used instead. 3.1.3 authentication information b-ITU-T X.800: Information used to establish the validity of a claimed identity. 3.1.4 authentication exchange b-ITU-T X.800: A mechanism intended to ensure the identity of an entity by means of information exchange. 2 Rec

33、. ITU-T X.1161 (05/2008) 3.1.5 authorization b-ITU-T X.800: The granting of rights, which includes the granting of access based on access rights. 3.1.6 availability b-ITU-T X.800: The property of being accessible and useable upon demand by an authorized entity. 3.1.7 confidentiality b-ITU-T X.800: T

34、he property that information is not made available or disclosed to unauthorized individuals, entities, or processes. 3.1.8 cryptography b-ITU-T X.800: The discipline which embodies principles, means, and methods for the transformation of data in order to hide its information content, prevent its und

35、etected modification and/or prevent its unauthorized use. NOTE Cryptography determines the methods used in encipherment and decipherment. An attack on a cryptographic principle, means, or method is cryptanalysis. 3.1.9 data integrity b-ITU-T X.800: The property that data has not been altered or dest

36、royed in an unauthorized manner. 3.1.10 data origin authentication b-ITU-T X.800: The corroboration that the source of data received is as claimed. 3.1.11 decipherment b-ITU-T X.800: The reversal of a corresponding reversible encipherment. 3.1.12 denial of service b-ITU-T X.800: The prevention of au

37、thorized access to resources or the delaying of time-critical operations. 3.1.13 digital signature b-ITU-T X.800: Data appended to, or a cryptographic transformation (see cryptography) of a data unit that allows a recipient of the data unit to prove the source and integrity of the data unit and prot

38、ect against forgery, e.g., by the recipient. 3.1.14 encipherment b-ITU-T X.800: The cryptographic transformation of data (see cryptography) to produce ciphertext. NOTE Encipherment may be irreversible, in which case the corresponding decipherment process cannot feasibly be performed. 3.1.15 integrit

39、y b-ITU-T X.800: See data integrity. 3.1.16 key b-ITU-T X.800: A sequence of symbols that controls the operations of encipherment and decipherment. 3.1.17 key management b-ITU-T X.800: The generation, storage, distribution, deletion, archiving and application of keys in accordance with a security po

40、licy. 3.1.18 notarization b-ITU-T X.800: The registration of data with a trusted third party that allows the later assurance of the accuracy of its characteristics such as content, origin, time and delivery. 3.1.19 password b-ITU-T X.800: Confidential authentication information, usually composed of

41、a string of characters. 3.1.20 peer-entity authentication b-ITU-T X.800: The corroboration that a peer entity in an association is the one claimed. 3.1.21 privacy b-ITU-T X.800: The right of individuals to control or influence what information related to them may be collected and stored and by whom

42、and to whom that information may be disclosed. NOTE Because this term relates to the right of individuals, it cannot be very precise and its use should be avoided except as a motivation for requiring security. 3.1.22 repudiation b-ITU-T X.800: Denial by one of the entities involved in a communicatio

43、n of having participated in all or part of the communication. Rec. ITU-T X.1161 (05/2008) 3 3.1.23 routing control b-ITU-T X.800: The application of rules during the process of routing so as to choose or avoid specific networks, links or relays. 3.1.24 threat b-ITU-T X.800: A potential violation of

44、security. 3.2 Terms defined in this Recommendation This Recommendation defines the following terms: 3.2.1 anonymity: Ability to allow anonymous access to services, which avoid the tracking of users personal information and user behaviour such as user location, frequency of a service usage, etc. 3.2.

45、2 content: Information created by individuals, institutions and technology to benefit audiences in contexts that they value. The contents are exchanged over the P2P networks. 3.2.3 P2P communications: Communications on P2P network, whereby each peer communicates with another peer directly for sharin

46、g information, resource, etc. 3.2.4 peer: Communication node on P2P network that functions simultaneously as both “client“ and “server“ to the other nodes on the network. 3.2.5 traceability: A process to ensure that the communication of past activities can be checked. 3.2.6 traffic control: Adjustme

47、nt of traffic amount for communications. 3.2.7 user authentication: The corroboration that a user of peer entity in an association is the one claimed. 4 Abbreviations This Recommendation uses the following abbreviations and acronyms: DoS Denial of Service ID Identifier P2P Peer-to-Peer 5 Conventions

48、 None. 6 Concepts of P2P communications Before describing the security threats and requirements for P2P communications, the concepts of P2P communications are explained in this clause. 6.1 Basic P2P service concept Figure 1 shows a basic P2P service architecture. In the case of P2P communications, i

49、nformation data processed by each peer are exchanged directly among users. Because there is no central sever to store the information data, each peer needs to find which peers have target information data before retrieving the same. Moreover, each peer must also permit accesses from other peers to exchange the information data. 4 Rec. ITU-T X.1161 (05/2008) Figure 1 P2P service architecture 6.2 Unstructured and structured P2P communications There are two major kinds of P2P service concepts. O