ISO/IEC 30118-2:2021 PDF

Name: ISO/IEC 30118-2:2021 — Information technology — Open Connectivity Foundation (OCF) Specification — Part 2: Security specification
SKU: ISO/IEC 30118-2:2021
Price: 25 EUR
Availability: InStock

Information technology — Open Connectivity Foundation (OCF) Specification — Part 2: Security specification

Название (английский):

ISO/IEC 30118-2:2021

Information technology — Open Connectivity Foundation (OCF) Specification — Part 2: Security specification

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 187
Дата публикации:: 18 октября 2021 г.
Издание:: ISO/IEC IS 30118 edition 2 version 1
ICS:: 35.200

Тип поставки:

Full version2 805 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:32 раб. дн. (перевод)

Цена:2 805 €

Описание (английский):

This document defines security objectives, philosophy, Resources and mechanism that impacts OCF base layers of ISO/IEC 30118-1. ISO/IEC 30118-1 contains informative security content. The OCF Security Specification contains security normative content and may contain informative content related to the OCF base or other OCF documents.

Abstract

Похожие стандарты

Упомянутые в описании и другие стандарты ISO

Overview

ISO/IEC 30118-2:2021 - Information technology - Open Connectivity Foundation (OCF) Specification - Part 2: Security specification - defines the normative security content for OCF-based IoT devices and platforms. It complements ISO/IEC 30118-1 (OCF base layer) by specifying security objectives, mechanisms, resources and lifecycle behaviors that affect device onboarding, provisioning, authentication, access control and message protection. This standard targets secure interoperability across OCF ecosystems and provides prescriptive security resources and profiles for implementers.

Key technical topics and requirements

The standard covers a broad set of security functions and requirements, including:

Security overview and philosophy - access control models, onboarding concepts, provisioning flows and secure resource management (SRM).

Device onboarding & ownership transfer (OTM) - defined OTM methods (Just‑Works, PIN, Manufacturer Certificate, etc.), owner establishment and state transitions for onboarding.

Credentials & lifecycle management - credential types (symmetric keys, asymmetric keys, certificates, passwords), creation, refresh, revocation and provisioning.

Certificate-based key management and PKI - X.509 certificate profiles, certificate provisioning, trust store and path validation.

Device authentication - authentication methods using symmetric keys, raw asymmetric keys and certificates, and role assertions.

Message integrity & confidentiality - session protection (e.g., DTLS), cipher suite guidance and session semantics.

Access control (ACL) - ACL generation, evaluation, wildcard and role matching, and ACL resource models.

Security resources & APIs - standardized security resource definitions (Credential, ACL, CSR, Provisioning Status, Auditable Events, Roles, Security Domain Information, SVRs).

Event logging & auditing - auditable event lists and security logging expectations.

Execution environment security - secure storage, secure execution engine considerations and hardening guidance.

Practical applications

Secure onboarding and provisioning of consumer and industrial IoT devices.

Implementing standardized ACLs and role-based access for smart home, building automation and industrial gateways.

Designing device firmware and platform security modules (SRM, credential stores, PKI).

Building test plans for product certification and OCF compliance management.

Related standards

ISO/IEC 30118-1 (OCF base specification) - informative base layer referenced by 30118-2

Standards and technologies referenced in the document: X.509, DTLS, PKI concepts

Keywords: ISO/IEC 30118-2, OCF Security Specification, IoT security, device onboarding, access control, credential management, DTLS, X.509, PKI.

ISO/IEC 30118-2:2021 PDF

Abstract

Похожие стандарты

Overview

Key technical topics and requirements

Practical applications

Who should use this standard

Related standards

Технические детали

BS ISO/IEC 30118-1:2018

Information technology. Open Connectivity Foundation (OCF) Specification - Core specification

BS ISO/IEC 30118-2:2021

Information technology. Open Connectivity Foundation (OCF) Specification. Security specification.

ISO 8689-1:2000

Water quality — Biological classification of rivers — Part 1: Guidance on the interpretation of biological qu…

ISO/ASTM51540-04(2012)

Standard Practice for Use of a Radiochromic Liquid Dosimetry System (Withdrawn 2020)

ISO/ASTM51204-04

Standard Practice for Dosimetry in Gamma Irradiation Facilities for Food Processing (Withdrawn 2013)

ISO/ASTM51431-05

Standard Practice for Dosimetry in Electron Beam and X-Ray (Bremsstrahlung) Irradiation Facilities for Food P…

ISO/ASTM52628-20e1

Standard Practice for Dosimetry in Radiation Processing

ISO/ASTM52921-13(2019)

Standard Terminology for Additive Manufacturing—Coordinate Systems and Test Methodologies