ISO/IEC 24767-2:2009 PDF

Name: ISO/IEC 24767-2:2009 — Information technology — Home network security — Part 2: Internal security services: Secure Communication Protocol for Middleware (SCPM)
SKU: ISO/IEC 24767-2:2009
Price: 25 EUR
Availability: InStock

Information technology — Home network security — Part 2: Internal security services: Secure Communication Protocol for Middleware (SCPM)

Название (английский):

ISO/IEC 24767-2:2009

Information technology — Home network security — Part 2: Internal security services: Secure Communication Protocol for Middleware (SCPM)

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 37
Дата публикации:: 15 января 2009 г.
Издание:: ISO/IEC IS 24767 edition 1 version 1
ICS:: 35.110

Тип поставки:

Full version555 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:7 раб. дн. (перевод)

Цена:555 €

Описание (английский):

ISO/IEC 24767-2:2009(E) specifies security in a home network for equipment with limited IT capability. Secure Communication Protocol for Middleware (SCPM) is designed to support network security for equipment which is not capable of supporting Internet security protocols. SCPM provides the security services at the network layer and the protocol does not rely on any specific media transmission.

Abstract

Похожие стандарты

Упомянутые в описании и другие стандарты ISO

Overview

ISO/IEC 24767-2:2009 - "Information technology - Home network security - Part 2: Internal security services - Secure Communication Protocol for Middleware (SCPM)" specifies a lightweight, network-layer security protocol for home-networked devices with limited IT capability. SCPM is media-independent and intended for middleware and devices that cannot support Internet security protocols (e.g., IPSec or SSL/TLS). The standard defines message formats, security services, information flows and processing rules required to implement SCPM within home networks.

Key topics

Scope & design principles: security for constrained devices, minimization of resources, independence from communication media and cryptographic algorithms, and extensibility for variant usages.

SCPM concept and placement: how SCPM operates at the network layer to protect middleware traffic without replacing existing protocol security.

Secure message frame format: structure includes headers, secure header (SHD), source/destination addresses, sequence number field (SNF), byte counters, padding (PDG), block check code (BCC) and message data authentication signature (MDAS).

Processing & algorithms: guidance on encryption and data-authentication processing, cipher-block-chaining (CBC) mode, initialization vectors (IV), and SNF initialization/verification. (The standard’s figures include an example using AES‑CBC.)

Key management: initialization of user, service-provider and maker keys; master key update, synchronization and update flows; and key exchange methods (figures reference use of DH - Diffie‑Hellman - for controlled master key updates).

Conformance & security considerations: threat categories (unsafe transmission, intentional misuse), and recommended combinations of security measures.

Applications

ISO/IEC 24767-2:2009 and SCPM are practical for:

Device manufacturers producing smart appliances, set-top boxes, IoT endpoints and other home-networked hardware with limited CPU, memory or OS stack.

Middleware and platform vendors who need a standardized, lightweight network-layer security method to protect inter-device communications.

Home gateway and HES (Home Environment Server) designers implementing security for mixed-protocol networks where constrained devices cannot run full Internet security stacks.

System integrators and security architects creating secure home-network deployments that require media-independent, interoperable protection and robust key management.

Related standards

Other parts of the ISO/IEC 24767 series (home network security) provide complementary guidance; SCPM is intentionally not a replacement for Internet security standards (IPSec, TLS) but a supplement for constrained devices.

Keywords: ISO/IEC 24767-2:2009, SCPM, Secure Communication Protocol for Middleware, home network security, network layer security, key management, AES‑CBC, Diffie‑Hellman.

ISO/IEC 24767-2:2009 PDF

Abstract

Похожие стандарты

Overview

Key topics

Applications

Related standards

Технические детали

ISO/IEC 24767-1:2008

Information technology — Home network security — Part 1: Security requirements

ISO 8689-1:2000

Water quality — Biological classification of rivers — Part 1: Guidance on the interpretation of biological qu…

ISO/ASTM51540-04(2012)

Standard Practice for Use of a Radiochromic Liquid Dosimetry System (Withdrawn 2020)

ISO/ASTM51204-04

Standard Practice for Dosimetry in Gamma Irradiation Facilities for Food Processing (Withdrawn 2013)

ISO/ASTM51431-05

Standard Practice for Dosimetry in Electron Beam and X-Ray (Bremsstrahlung) Irradiation Facilities for Food P…

ISO/ASTM52628-20e1

Standard Practice for Dosimetry in Radiation Processing

ISO/ASTM52921-13(2019)

Standard Terminology for Additive Manufacturing—Coordinate Systems and Test Methodologies

ISO/ASTMTR52917-EB

Additive Manufacturing — Round Robin Testing — General Guidelines