1、 ETSI TS 102 556 V1.1.1 (2006-11)Technical Specification Telecommunications and Internet converged Services andProtocols for Advanced Networking (TISPAN);Protection ProfileETSI ETSI TS 102 556 V1.1.1 (2006-11) 2 Reference DTS/TISPAN-07008-Tech Keywords H.248, IMS, internet, profile, protection, secu
2、rity ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de Grasse (06) N 7803/88 Important notice Individual copies of the present document
3、can be downloaded from: http:/www.etsi.org The present document may be made available in more than one electronic version or in print. In any case of existing or perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF). In case of dispute, t
4、he reference shall be the printing on ETSI printers of the PDF version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI do
5、cuments is available at http:/portal.etsi.org/tb/status/status.asp If you find errors in the present document, please send your comment to one of the following services: http:/portal.etsi.org/chaircor/ETSI_support.asp Copyright Notification No part may be reproduced except as authorized by written p
6、ermission. The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute 2006. All rights reserved. DECTTM, PLUGTESTSTM and UMTSTM are Trade Marks of ETSI registered for the benefit of its Members. TIPHONTMand the TIPHON logo are Tra
7、de Marks currently being registered by ETSI for the benefit of its Members. 3GPPTM is a Trade Mark of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. ETSI ETSI TS 102 556 V1.1.1 (2006-11) 3 Contents Intellectual Property Rights4 Foreword.4 Introduction 4 1 Sco
8、pe 6 2 References 7 3 Definitions, symbols and abbreviations .8 3.1 Definitions8 3.2 Abbreviations .9 4 Protection profiles NGN examples10 4.1 NGN IMS Authentication Partial PP10 4.1.1 PP Introduction .10 4.1.1.1 PP identification10 4.1.1.2 PP overview 11 4.1.2 Target Of Evaluation (TOE) description
9、 11 4.1.3 TOE security environment12 4.1.4 Security objectives14 4.1.5 IT security requirements .14 4.1.5.1 The relationship between security objectives and security requirements14 4.1.5.2 TOE Security requirements.14 4.1.6 Application notes (OPTIONAL).18 4.1.7 Rationale.19 4.2 NGN-NDS Source Authen
10、tication Partial PP 19 4.2.1 PP Introduction .19 4.2.1.1 PP identification19 4.2.1.2 PP overview 19 4.2.2 Target Of Evaluation (TOE) description 20 4.2.3 TOE security environment21 4.2.4 Security objectives24 4.2.5 IT security requirements .25 4.2.5.1 The relationship between security objectives and
11、 security requirements25 4.2.5.2 TOE security requirements .25 4.2.6 Application notes (OPTIONAL).30 4.2.7 Rationale.30 4.3 NGN H.248 Deployment Partial PP.30 4.3.1 PP Introduction .31 4.3.1.1 PP identification31 4.3.1.2 PP overview 31 4.3.2 Target Of Evaluation (TOE) description 31 4.3.3 TOE securi
12、ty environment32 4.3.4 Security objectives33 4.3.5 IT security requirements .34 4.3.5.1 The relationship between security objectives and security requirements34 4.3.5.2 TOE security requirements .34 4.3.6 Application notes (OPTIONAL).35 4.3.7 Rationale.35 Annex A (informative): Partial Protection Pr
13、ofile (PP) for NGN-IMS Authentication.36 Annex B (informative): Partial Protection Profile (PP) for NGN-NDS Source Authentication .40 Annex C (informative): Partial Protection Profile (PP) for NGN H.248 Deployment .47 Annex D (informative): Bibliography.50 History 51 ETSI ETSI TS 102 556 V1.1.1 (200
14、6-11) 4 Intellectual Property Rights IPRs essential or potentially essential to the present document may have been declared to ETSI. The information pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found in ETSI SR 000 314: “Intellectual
15、Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web server (http:/webapp.etsi.org/IPR/home.asp). Pursuant to the ETSI IPR Policy, no investigation,
16、 including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become, essential to the present document. Foreword This Technical Specification (
17、TS) has been produced by ETSI Technical Committee Telecommunications and Internet converged Services and Protocols for Advanced Networking (TISPAN). Introduction The present document is one of a set of documents that addresses standardization of security protocols and mechanisms within the context o
18、f the eEurope 2005 programme. The documents in this suite are composed as follows: ETSI EG 202 387 4: “Telecommunications and Internet converged Services and Protocols for Advanced Networking (TISPAN); Security Design Guide; Method for application of Common Criteria to ETSI deliverables“. ETSI ES 20
19、2 383 5: “Telecommunications and Internet converged Services and Protocols for Advanced Networking (TISPAN); Security Design Guide; Method and proforma for defining Security Targets“. ETSI ES 202 382 6: “Telecommunications and Internet converged Services and Protocols for Advanced Networking (TISPAN
20、); Security Design Guide; Method and proforma for defining Protection Profiles“. ETSI TS 102 165-1 1: “Telecommunications and Internet converged Services and Protocols for Advanced Networking (TISPAN); Methods and protocols; Method and proforma for Threat, Risk, Vulnerability Analysis“. ETSI TS 102
21、165-2 2: “Telecommunications and Internet converged Services and Protocols for Advanced Networking (TISPAN); Protocol Framework Definition; Security Counter Measures“. The present document ETSI EN 102 556: “Telecommunications and Internet converged Services and Protocols for Advanced Networking (TIS
22、PAN); Protection file“. ETSI EG 287 www: “Telecommunication and Internet converged Services and Protocols for Advanced Networking (TISPAN); Design Guide; Application of security countermeasures to service capabilities“. These documents are developed based on the objectives of the eEurope programme a
23、nd are also developed to ensure they comply with the overall objectives of the European regulatory framework as defined in the following documents: Directive 2002/19/EC of the European Parliament and of the council of 7 March 2002 on access to, and interconnection of, electronic communications netwo
24、rks and associated facilities (Access Directive). Directive 2002/20/EC of the European Parliament and of the council of 7 March 2002 on the authorization of electronic communications networks and services (Authorization Directive). Directive 2002/21/EC of the European Parliament and of the council o
25、f 7 March 2002 on a common regulatory framework for electronic communications networks and services (Framework Directive). Directive 2002/22/EC of the European Parliament and of the council of 7 March 2002 on universal service and users rights relating to electronic communications networks and servi
26、ces (Universal Service Directive). ETSI ETSI TS 102 556 V1.1.1 (2006-11) 5 Directive 2002/58/EC of the European Parliament and of the council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and ele
27、ctronic communications). In particular the present document forms part of the standardization initiative for the Next Generation Network (NGN) platform to be used in eEurope and upon which the trust and viability of the e-enabled community will, to a very large part, depend. The eEurope 2005 action
28、plan has been drawn up to focus on “the widespread availability and use of broadband networks throughout the Union and the security of networks and information, eGovernment, eHealth and eBusiness“ requiring a supporting infrastructure, which is truly pan-European. To quote COM(2002)263: “By 2005 Eur
29、ope should have a secure information infrastructure“. ETSI ETSI TS 102 556 V1.1.1 (2006-11) 6 1 Scope The present document defines 3 partial Protection Profiles (PPs) for security capabilities in the NGN and conforms to the guidance and PP Proforma available in ES 202 382 6 with respect to the guide
30、lines found in EG 202 387 4. The background and input for the PPs are presented in clause 4. The PPs are detailed in annexes to the present document as follows: Annex A: PP for NGN-IMS authentication, source document TS 133 203 9. Annex B: PP for NGN-NDS source authentication, source document TS 133
31、 210 10. Annex C: PP for NGN H.248 deployment, source document ES 283 002 8. The present document is for the use of NGN standards developers and may be used in the context of formal evaluation. NOTE 1: A PP is one of the document types subject to evaluation under the evaluation criteria defined in I
32、SO/IEC 15408 11. The evaluation criteria are commonly known as the Common Criteria (CC) and in the present document “Common Criteria“ is used synonymously to ISO/IEC 15408 11 (and its Part 1-3 derivatives). NOTE 2: The present document has not been submitted by ETSI for formal evaluation. Its intend
33、ed use is to be a basis for future PPs in the area. The context of the present document is depicted in figure 1. cd STF292-7008DocumentTS102165-3DocumentISO15408Document15408-1Document15408-2Document15408-3DocumentEG202387DocumentES202382DocumentES202387DocumentTS133203DocumentTS133210DocumentES2830
34、02+Gives guidance on+Adopts proforma from+Provides outline PP forFigure 1: Context of the present document, with main source documents + Adopts PP requirements from + Adopts PP guidance ETSI ETSI TS 102 556 V1.1.1 (2006-11) 7 The PPs in the present document may be primarily considered as measures of
35、 completeness of the standardization effort. A security standard is considered complete and suitable for evaluation when every part of the proforma can be filled in by reference to the standardization process and the output documents from that process. Thus it can be conveyed to an assessor that the
36、 security development process and the steps towards assurance have been dealt with properly. The purpose of the PPs in the present document is to assist manufacturers by having agreed content that may be used by them in the process of having a product evaluated using the Common Criteria concept. The
37、 PPs may be used as part of the manufacturers documentation suite for use in an evaluation of a product. The intention of ETSI is not to have the presented PPs evaluated and certified in ETSIs name. The PPs in the present document are not complete enough for submission for evaluation, but provides t
38、he basis to be added to (worked on) for use in group development. Thus the annexes show generic outlines of PPs open for further refinement. Each PP is open for extended functionality as described in the Common Criteria ISO/IEC 15408-3 14. NOTE 1: Extension, according to the Common Criteria ISO/IEC
39、15408-3 14, of any of these PPs is open for future work, and should be performed to improve the commercial usability. NOTE 2: The present Protection Profiles are provided as examples only. They are not intended to be registered or stored by ETSI in any archive or registry in any Common Criteria cont
40、ext. The PP format used in the present document complies with the proforma in annex A of ES 202 382 6. NOTE 3: Relevant requirements from other sources than the target document and the guidance documents have been included in the requirement section. 2 References The following documents contain prov
41、isions which, through reference in this text, constitute provisions of the present document. References are either specific (identified by date of publication and/or edition number or version number) or non-specific. For a specific reference, subsequent revisions do not apply. For a non-specific ref
42、erence, the latest version applies. Referenced documents which are not found to be publicly available in the expected location might be found at http:/docbox.etsi.org/Reference. NOTE: While any hyperlinks included in this clause were valid at the time of publication ETSI cannot guarantee their long
43、term validity. 1 ETSI TS 102 165-1 (V4.1.1): “Telecommunications and Internet Protocol Harmonization Over Networks (TIPHON) Release 4; Protocol Framework Definition; Methods and Protocols for Security; Part 1: Threat Analysis“. 2 ETSI TS 102 165-2 (V4.1.1): “Telecommunications and Internet Protocol
44、Harmonization Over Networks (TIPHON) Release 4; Protocol Framework Definition; Methods and Protocols for Security; Part 2: Counter Measures“. 3 ETSI TS 187 001 (V1.1.1): “Telecommunications and Internet converged Services and Protocols for Advanced Networking (TISPAN); NGN SECurity (SEC); Requiremen
45、ts“. 4 ETSI EG 202 387 (V1.1.1) : “Telecommunications and Internet converged Services and Protocols for Advanced Networking (TISPAN); Security Design Guide; Method for application of Common Criteria to ETSI deliverables“. 5 ETSI ES 202 383 (V1.1.1): “Telecommunications and Internet converged Service
46、s and Protocols for Advanced Networking (TISPAN); Security Design Guide; Method and proforma for defining Security Targets“. ETSI ETSI TS 102 556 V1.1.1 (2006-11) 8 6 ETSI ES 202 382 (V1.1.1): “Telecommunications and Internet converged Services and Protocols for Advanced Networking (TISPAN); Securit
47、y Design Guide; Method and proforma for defining Protection Profiles“. 7 ETSI ES 282 002: “Telecommunications and Internet converged Services and Protocols for Advanced Networking (TISPAN); PSTN/ISDN Emulation Sub-system (PES); Functional architecture“. 8 ETSI ES 283 002 (V1.1.1): “Telecommunication
48、s and Internet converged Services and Protocols for Advanced Networking (TISPAN); PSTN/ISDN Emulation Subsystem (PES); NGN Release 1 H.248 Profile for controlling Access and Residential Gateways“. 9 ETSI TS 133 203 (V7.0.0): “Digital cellular telecommunications system (Phase 2+); Universal Mobile Te
49、lecommunications System (UMTS); 3G security; Access security for IP-based services (3GPP TS 33.203 version 7.0.0 Release 7)“. 10 ETSI TS 133 210 (V7.0.0): “Digital cellular telecommunications system (Phase 2+); Universal Mobile Telecommunications System (UMTS); 3G Security; Network Domain Security (NDS); IP network layer security (3GPP TS 33.210 version 7.0.0 Release 7)“. 11 ISO/IEC 15408: “Information technology - Security techniques - Evaluation criteria for IT
