ITU-T X 834-1996 Information Technology - Open Systems Interconnection - Generic Upper Layers Security Security Exchange Service Element (SESE) Protocol Implementation Conformance wo.pdf

1、INTERNATIONAL TELECOMMUNICATION UNION lTU=T TELECOMMUNICATION STANDARDIZATION SECTOR OF ITU X.834 (I 0196) SERIES X: DATA NETWORKS AND OPEN SYSTEM CO MM U N ICATIO N Security 4 Information technology - Open systems interconnection - Generic upper layers security: Security exchange service element (S

2、ESE) protocol implementation conformance statement (PICS) proforma ITU-T Recommendation X.834 (Previously “CCITT Recornmendation”) ITU-T X-SERIES RECOMMENDATIONS DATA NETWORKS AND OPEN SYSTEM COMMUNICATION UBLIC DATA NETWORKS Services and facilities Interfaces Transmission, signalling and switching

3、Network aspects Maintenance Administrative arrangements Model and notation Service definitions Connection-mode protocol specifications Connectioniess-mode protocol specification PICS proformas Protocol Identification Security Protocols Layer Managed Objects Conformance testing General Satellite data

4、 transmission systems MESSAGE HANDLING SYSTEMS DIRECTORY 3SI NETWORKING AND SYSTEM ASPECTS Networking Efficiency Naming, Addressing and Registration Abstract Syntax Notation One (ASN. 1) Systems Management fiamework and architecture Management Communication Service and Protocol Structure of Manageme

5、nt Information Management functions )PEN SYSTEM INTERCONNECTION NTERWORKTNG BETWEEN NETWORKS OS1 MANAGEMENT X. 1-X.199 X. l-X. 19 X.20-X.49 X.50-X.89 X.90-X. 149 X. 150-X. 179 X.180-X. 199 X.200-X.299 X.200-X.209 X.210-X.219 X.220-X.229 X.230-X.239 X.240-X.259 X.260-X.269 X.270-X.279 X.280-X.289 X.2

6、90-X.299 X.300-X.399 X.300-X.349 X.350-X.399 X.400-X.499 X.500-X.599 X.600-X.699 X.600-X.629 X.630-X.649 X.650-X.679 X.680-X.699 X.700-X.799 X.700-X.709 X.7 10-X.7 19 X.720-X.729 X.730-X.799 OS1 APPLICATIONS X.850-X.899 Commitment, Concurrency and Recovery Transaction processing Remote operations OP

7、EN DISTRIBUTED PROCESSING X.850-X.859 X.860-X.879 X.880-X.899 X.900-X.999 For further details, please refer to TU-T List of Recommendatiom. FOREWORD ITU (International Telecommunication Union) is the United Nations Specialized Agency in the field of telecommunications. The ITU Telecommunication Stan

8、dardization Sector (ITU-T) is a permanent organ of the IT. Some 179 member countries, 84 telecom operating entities, 145 scientific and industrial organizations and 3 8 international organizations participate in ITU-T which is the body which sets world telecommunications standards (Recommendations).

9、 The approval of Recommendations by the Members of ITU-T is covered by the procedure laid down in WTSC Resolution No. 1 (Helsinki, 1993). In addition, the World Telecommunication Standardization Conference (WTSC), which meets every four years, approves Recommendations submitted to it and establishes

10、 the study programme for the following period. In some areas of information technology which fail within ITU-Ts purview, the necessary standards are prepared on a collaborative basis with IS0 and IEC. The text of IT-T Recommendation X.834 was approved on 5th of October 1996. The identical text is al

11、so published as ISOAEC International Standard 11586-5. NOTE In this Recommendation, the expression “Administration” is used for conciseness to indicate both a telecommunication administration and a recognized operating agency. O ITU 1997 All rights reserved. No part of this publication may be reprod

12、uced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from the IT, except as noted in footnote 1) in Annexe A. I ITU-T Rec. X.834 (1996 E) i STD-ITU-T RECMN X-83q-ENGL 199b m YBb2591 Ob25397 483 = CONTENTS 1 Scope

13、2 Normative references . Identical Recommendations I International Standards Paired Recommendations I International Standards equivalent in technical content 3 Definitions 4 Abbreviations . 5 Conventions . 6 Conformance Annex A -Protocol Implementation Conformance Statement (PICS) proforma for the S

14、ESE protocol 2.1 2.2 A . 1 A.2 A.3 A.4 AS A.6 A.7 A.8 A.9 A.10 A.11 A.12 Notations defned for the proforma . A.l.l Status column A.1.2 Support column . PICS numbers . Completion of the PICS Date of statement Implementation details IW-T Rec . X.832 I ISOOEC 11586-3 protocol details A.6.1 ITU-T Rec .

15、X.832 1 ISO/IEC 11586-3 technical corrigenda implemented . Global statement of conformance . Supported APDUs . Supported APDU parameters . A.9.1 SE-Transfer (SETR) A.9.2 SE-U-Abort (SEAB) . A.9.3 SE-P-Abort (SEPA) A.9.4 Problem codes . Application Context A.12.1 Class of Security Exchange Supported

16、. A.12.2 Exchange Supported . A.12.3 A.12.4 Directory Authentication Exchange (two way) . A.12.5 Simple Negotiation Exchange . Abstract syntax Security exchanges Directory Authentication Exchange (one way) . Page 1 1 1 1 2 2 2 2 3 3 3 3 4 4 4 5 5 5 5 6 6 6 6 7 7 7 7 7 8 8 8 8 11 ITU-T Rec . X.834 (1

17、996 E) -. STD-ITU-T RECMN Xn34-ENGL 277b m 48b2571 Ob25348 31T W Summary This Recommendation I International Standard belongs to a series of Recommendations on Generic Upper Layers Security (GULS). It is the Protocol Implementation Conformance Statement (PICS) proforma for the Security Exchange Serv

18、ice Element Protocol specified in IT-T Rec. X.832 1 ISOAEC 11586-3 and the Security Exchange described in IT-T Rec. X.830 I ISO/IEC 11586-1, Annex C. This Recommendation I Intemational Standard provides a description of the standardized capabilities and options in a form that supports conformance ev

19、aluation of a particular implementation. Introduction Tnis Recommendation I International Standard forms part of a senes of Recommendations I International Standards that provide generic upper layer security services. The parts are as follows: - Part 1 : Overview, Model and Notation. - Pari 2: Secur

20、ity Exchange Service Element Service Definition. - Part 3: Security Exchange Service Element Protocol Specification. - Part 4: Protecting Transfer Syntax Specification. - Part 5: Security Exchange Service Element Service PICS Proforma. - Part 6: Protecting Transfer Syntax PICS Proforma. This Recomme

21、ndation 1 Intemational Standard constitutes Part 5 of the series. Part 3 defines a protocol for the communication of security exchange information between open systems as part of the operation of a security mechanism. To evaluate the conformance of a particular implementation, it is necessary to hav

22、e a description of the capabilities and options which have been implemented. Such a description is called a Protocol Implementation Conformance Statement (PICS). This Recommendation I Iptemational Standard includes the PICS proforma for the security exchange service element protocol specified in Par

23、t 3 and the security exchanges defined in Part 1, Annex C. . 111 ITU-T Rec. X.834 (1996 E) STD-ITU-T RECMN X.834-ENGL L77b S LiAb257L Ob25347 25b INTERNATIONAL STANDARD ITU-T RECOMMENDATION INFORMATION TECHNOLOGY - OPEN SYSTEMS INTERCONNECTION - GENERIC UPPER LAYERS SECURITY: SECURITY EXCHANGE SERVI

24、CE ELEMENT (SESE) PROTOCOL IMPLEMENTATION CONFORMANCE STATEMENT (PICS) PROFORMA 1 Scope This Recommendation I International Standard defines a Protocol Implementation Conformance Statement (PICS) proforma for the detailed expression of the conformance requirements of ITU-T Rec. X.832 1 ISOAEC 11586-

25、3 and Annex C of IT-T Rec. X.830 I ISO/IEC 11586-1. This PICS proforma is in compliance with the relevant requirements, and in accordance with the relevant guidance for a PICS proforma, given in ITU-T Rec. X.291 and ISOIEC 9646-2. Detail of the use of this proforma is provided in this Recommendation

26、 I International Standard. Implementations claiming conformance to ITiJ-T Rec. X.832 I ISOIEC 11586-3 or Annex C of ITU-T Rec. X.830 I ISOIEC 11586-1 shall complete the profonna as part of the conformance requirements. The level of detail required in the proforma exceeds that of the protocol specifi

27、cation by requiring details to uniquely identi the implementation and the supplier. NOTE - PICS are related to base Recommendations and Standards and only base Recommendations and Standards. PICS structure might be expanded and refined for other documents using the base Standards (e.g. ISPICS). f 2

28、Normative references The following Recommendations and International Standards contain provisions which, through reference in this text, constitute provisions of this Recommendation 1 International Standard. At the time of publication, the editions indicated were valid. All Recommendations and Stand

29、ards are subject to revision, and the parties to agreements based on this Recommendation 1 International Standard are encouraged to investigate the possibility of applying the most recent edition of the Recommendations and Standards indicated below. Members of IEC and IS0 maintain registers of curre

30、ntly valid International Standards. The Telecommunication Standardization Bureau of the IT maintains a list of currently valid ITU-T Recommendations. 2.1 Identical Recommendations I International Standards - ITU-T Recommendation X.210 (1993) I ISOAEC 1073 1 : 1994 Information technology - Open Syste

31、ms Interconnection - Basic Reference Model: Conventions for the dejnition of OSI services. ITU-T Recommendation X.830 (1995) I ISODEC 11586-1:1996, Information technology - Open Systems Interconnection - Generic upper layers security: Overview, models and notation. ITU-T Recommendation X.832 (1995)

32、I ISODEC 11586-3:1996, Information technology - Open Systems Interconnection - Generic upper layers security: Security Exchange Service Element (SESE) protocol specification. - - 2.2 Paired Recommendations I International Standards equivalent in technical content - ITiJ-T Recommendation X.290 (1995)

33、, OS conformance testing methodology and jiamework for protocol Recommendations for ITU-T applications - General concepts. ISOAEC 9646- 1 : 1994, Information technology - Open Systems Interconnection - Conformance testing methodology andpamework - Part 1: General concepts. ITU-T Recommendation X.291

34、 (1995), OSI conformance testing methodology and jiamework for protocol Recommendations for ITU-T applications - Abstract test suite specification. ISO/IEC 9646-2: 1994, Information technology - Open Systems Interconnection - Conformance testing methodology andpamework - Part 2: Abstract Test Suite

35、specification. - ITU-T Rec. X.834 (1996 E) 1 STD-ITU-T RECMN XD834-ENGL 199b 48b2591 Ob25351 904 ISO/IEC 11586-5 : 1997 (E) 3 Definitions 3.1 This Recommendation 1 International Standard makes use of the following terms defined in ITU-T Rec. X.290 and ISOAEC 9646-1 : a) b) PICS profonna; c) Protocol

36、 Implementation Conformance Statement (PICS); Protocol Implementation extra Information for Testing (PIXIT). 4 Abbreviations 4.1 The following abbreviations used in this Recommendation I International Standard are defined in ITU-T Rec. X.290 and ISOAEC 9646-1: a) PICS; b) PIXIT. 5 Conventions This R

37、ecommendation I International Standard uses the descriptive conventions in the OS1 Service Conventions, IT-T Rec. X.210 I ISOAEC 1073 1. The PICS proforma annex has been designed to be a self contained section of this Recommendation 1 International Standard, for use in testing and procurement. 6 Con

38、formance A conforming PICS proforma shall be technically equivalent to the IT-T I ISOAEC published PICS proforma and shall preserve the numbering and ordering of the items in the ITU-T I ISOAEC PICS proforma. A PICS which conforms to this Recommendation I International Standard shalk a) b) c) descri

39、be an implementation which conforms to ITU-T Rec. X.832 I ISOAEC 11586-3; be a conforming PICS profonna, which has been completed in accordance with the instruction for completion given in A.l and A.3; and include the information necessary to uniquely identie both the supplier and the implementation

40、. 2 ITU-T Rec. X.834 (1996 E) STD-ITU-T RECMN X-834-ENGL L99b 48b257L Ob25352 BqO ISO/IEC 11586-5 : 1997 (E) Annex Ai) Protocol Implementation Conformance Statement (PICS) proforma for the SESE protocol (This annex forms an integral part of this Recommendation I International Standard) A.l Notations

41、 defined for the proforma In order to reduce the size of tables in the PICS proforma, notations have been introduced that have allowed the use of a multi-column layout, where the columns are headed Status, and Support. The definition of each of these follows. A.l.l Status column This column indicate

42、s the level of support required for conformance to ITU-T Rec. X.832 I ISOAEC 11586-3. The values are as follows: M Mandatory support is required. O Optional support is permitted for conformance to ITU-T Rec. X.832 1 ISO/IEC 11586-3. If implemented, it must conform to the specifications and restricti

43、ons contained in ITU-T Rec. X.832 I ISODEC 11586-3. These restrictions may affect the optionality of other items. da cn The item is not applicable. The item is conditional (where n is the number which identifies the condition which is applicable). The definitions for the conditional statements used

44、in this annex are written under the tables in which they first appear. 0.n The item is optional, but the optionality is qualified (where n is the number which identifies the qualification which is applicable). The definitions for the qualified optional statements used in this annex are written under

45、 the tables in which they first appear. A.1.2 Support column The Support column shall be completed by the supplier or implementor to indicate the level of implementation of each feature. The proforma has been designed such that the only entries required in the Support column are: 1 Y Yes, the featur

46、e has been implemented N No, the feature has not been implemented - Not applicable. A.2 PICS numbers Each line within the PICS proforma which requires implementation detail to be entered is numbered at the left hand edge of the line. This numbering is included as a means of uniquely identifiing all

47、possible implementation details within the PICS proforma. The need for such unique referencing has been identified by the testing bodies. The means of referencing individual responses should be to specify the following sequence: a) b) a solidus character, /; a reference to the smallest subclause enc

48、losing the relevant item; c) the reference number of the row in which the response appears; d) if, and only if, more than one response occurs in the row identified by the reference number, then each possible entry is implicitly labelled a, b, c, etc., from left to right, and this letter is appended

49、to the sequence. I 1 Copyright release for PICS proforma: Users of this Recommendation I International Standard may freely reproduce the PICS proforma in this annex so that it can be used for its intended purpose, and may further publish the completed PICS. ITU-T Rec. X.834 (1996 E) 3 STD-ITU-T RECMN X-834-ENGL L77b 48b259L Ob25353 787 = ISO/IEC 11586-5 : 1997 (E) A.3 Completion of the PICS The implementor shall complete all entries in the column marked Support. In certain clauses of the PICS proforma further guidance for completion may be necessary.