4851903 0660873 627 INTERNATIONAL ISO/IEC STANDARD 11586-1 First edition 1996-06-01 Information technology - Open Systems Interconnection -- Generic upper layers security: Overview, models and notation Technologies de I'information - Interconnexion de systemes ouverts (Osl) --- Sécurite des couches supérieures géneriques: Présentation, modeles et notation TEC TS 0 Reference number ISO/IEC 11586-1·1996(E) Copyright International Organization for Standardization networking permitted without license from IHS Not for Resale 4851903 0660874 563 ISO/IEC 11586-1:1996(E) Contents Page 1 Scope.. 1 2 Normative references .. I 2.1 Identical Recommendations I International Standards. 2 2.2 Paired Recommendations I International Standards equivalent in technical content 2 3 Definitions. 2 4 Abbreviations... 4 5 General overview. 4 6 Security exchanges.... 5 6.1 Security exchange model . 5 6.2 Notationforspecifyingsecurityexchanges. 6 7 Security transformations .... 7 7.1 Security transformation mode.. 7 7.2 Notation for specifying security transformations.. 11 8 Abstract syntax notation for selective field protection.. 12 8.1 Basic notation.. 12 8.2 Notation with transformation qualifier.. 14 8.3 Mapping protection requirements to security transformations . 15 8.4 Notation for specifying protection mappings... 15 Conformance. 16 9 AnnexA--ASN.1definitions. 17 Annex B - Registration of security exchanges and security transformations 22 Annex C -- Security exchange specifications . 23 Annex D - Security transformation specifications... 27 Annex E - Protection mapping specifications 38 Annex F -- Object identifier usage... 41 Annex G - Guidelines for the use of generic upper layers security facilities ..... 42 Annex H -- Relationship to other standards. 47 Annex I -Examples of use of the generic upper layers security facilities 50 Annex J - Bibliography .. 54 @ISO/IEC1996 All rights reserved.Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from the publisher. ISO/IEC Copyright Office · Case postale 56 - CH-1211 Geneve 20 · Switzerland Printed in Switzerland Not for Resale 4851903 0660875 4TT @ ISO/IEC ISO/IEC 11586-1:1996(E) Foreword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non- governmental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. Draft International Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of the national bodies casting a vote. International Standard ISO/IEC 11586-1 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 21, Open systems interconnection, data management and open distributed processing, in collaboration with ITU-T. The identical text is published ITU-T RecommendationX.830. ISO/IEC 11586 consists of the following parts, under the general title Information technology - Open Systems Interconnection -- Generic upper layers security: Part I: Overview, models and notation Part 2: Security Exchange Service Element (SESE) service definition Part 3: Security Exchange Service Element (SESE) protocol specification Part 4: Protecting transfer syntax specification Part 5: Security Exchange Service Ele