ISO/IEC TECHNICAL REPORT TR 13594 First edition 1995-12-15 Information technology -- Lower layers security Technologies de I'information -- Modele de securite pour les couches inferieures TEC Referencenumber ISO/IECTR13594:1995(E) Copyright Intemational Organization for Standardization dbyIHS nitted without license from IHS Not for Resale ISO/IEC TR 13594:1995(E) CONTENTS Page Scope... 1 2 References 1 2.1 2.2 Paired Recommendations I International Standards equivalent in technical content ...... 2 2.3 Additional references 2 3 Definitions..... 2 3.1 OSI Reference Model definitions ..... 2 3.2 Open System Security Frameworks definitions.... 3 3.3 Internal Organization of the Network Layer definitions.. 3.4 Additional definitions .. 3 Abbreviations.. 3 4 5 Security associations. 3 5.1 General overview .... 3 5.2 Establishing a security association for the lower layers....... 5 5.3 Security association close .... 6 5.4 Modification of attributes in a connection .. 6 6 Influence on existing protocols ... 6 6.1 6 6.2 Connectionless SDU size.. 6 6.3 Concatenation of PDUs... 6 6.4 6 7 Common security PDU structure 7 8 Determination of security services and mechanisms... 7 9 Protection QOs 7 10 Security rules... 7 11 Placementof security in thelower layer 7 12 Use of (N-1)-layer(s) to enhance (N)-layer security . 13 13 Security labelling ... 13 14 Security domains... 13 15 Security of routeing. 13 16 Security Management.. 14 16.1 Security policy.... 14 16.2Security association management. 14 16.3 Key management ... 14 16.4 Security Audit.. 14 17 Traffic flow confidentiality .. 14 18 Guidelines for the definition of SA-Attributes... 15 19 Error handling.. 15 Annex A - Illustrative example of an Agreed Set of Security Rules . 16 ?ISO/IEC1995 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from the publisher. ISO/IEC Copyright Office ·Case postale 56· CH-1211 Geneve 20· Switzerland Printed in Switzerland Copyright International Organization for Standardizatior No reproduction or networking permited without license from IHS Not for Resale @ ISO/IEC ISO/IEC TR 13594:1995(E) Foreword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. The main task of technical committees is to prepare International Standards, but in exceptional circumstances a technical type 1, when the required support cannot be obtained for the publication of an International Standard, despite repeated efforts type 2, when the subject is still under technical development or where for any other reason there is the future but not immediate possibility of an agreement on an International Standard; type 3, when a technical committee has collected data of a different kind from that which is normally published as an International Standard ("state of the art", for example). Technical reports of types 1 and 2 are subject to review within three years of publication, to decide whether they can be transformed into International Standards. Technical Reports of type 3 do not necessarily have to be reviewed until the datatheyprovideareconsideredtobenolongervalidoruseful. ISO/IEC TR 13594, which is a Technical Report of type 3, was prepared by Joint Tec