ISO/IEC 29341-13-11:2008 PDF

Overview

ISO/IEC 29341-13-11:2008 - “Information technology - UPnP Device Architecture - Part 13-11: Device Security Device Control Protocol - Security Console Service” - defines the Security Console Service for UPnP-enabled devices. It specifies a user-facing service that provides an administration interface for access control on security-aware UPnP devices, including management of access control lists (ACLs), certificate handling, and discovery of control points in peer-to-peer, ad-hoc networks. The part is published as one element of the broader ISO/IEC 29341 (UPnP) series that standardizes pervasive device connectivity.

Key Topics and Requirements

• User interface for access control: Defines how a Security Console exposes administrative controls for ACL creation and editing and for transferring security ownership of devices.
• Control Point Discovery: Mechanisms for discovering and presenting control points that can interact with devices on the local network.
• Certificate management: Includes certificate caching (outgoing cache), certificate delivery, renewal, and related actions for secure device interactions.
• Service model and actions: Specifies state variables, eventing/moderation and actions such as PresentKey, GetNameList, GetMyCertificates, and RenewCertificate used by the Security Console Service.
• Protocol details: Describes namespaces, XML argument usage, BASE32 encoding considerations, and common error codes for integration consistency.
• Operational scope: Targets networks where devices and external control points may coexist (e.g., wireless or cable networks without strict isolation), not isolated personal-domain-only networks.

Practical Applications

• Secure administration of smart home and IoT devices that use UPnP for discovery and control.
• Firmware and device software components that need to present a management console for ACLs and certificate lifecycle management.
• Gateways, media servers, and consumer electronics implementing UPnP security where multiple control points (apps, controllers, or third-party devices) might be present on the same network.
• Use in small-business and public space deployments where ad-hoc peer-to-peer device connectivity requires standardized security administration.

Who Should Use This Standard

• UPnP device and firmware developers implementing secure device control functionality.
• System integrators and product architects designing secure consumer electronics, IoT devices, and networked appliances.
• Network and security engineers who need to integrate UPnP security controls with device management and certificate workflows.
• UPnP implementers and test labs validating compliance with UPnP Device Security features.

Related Standards

• ISO/IEC 29341-1 - UPnP Device Architecture (base architecture)
• ISO/IEC 29341-13-10 - Device Security Device Control Protocol (DeviceSecurity service)
• Other parts of the ISO/IEC 29341 series covering UPnP device and service profiles

Keywords: ISO/IEC 29341-13-11:2008, UPnP Security Console Service, UPnP Device Security, ACL management, certificate renewal, control point discovery, UPnP architecture, device security standards.