This solution is used within the U.S.. It combines standards associated with US: Security Credentials with those for I–I: Secure Internet (ITS). The US: Security Credentials standards include upper–layer standards required to provide and revoke security credentials, define security policy, and handle enrollment coordination. The I–I: Secure Internet (ITS) standards include lower–layer standards that support secure communications between ITS equipment using X.509 or IEEE 1609.2 security certificates.
| Level | DocNum | FullName | Description |
|---|
| Mgmt | IETF RFC 3411 | An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks | This standard (RFC) defines the basic architecture for SNMPv3 and includes the definition of information objects for managing the SNMP entity's architecture. |
|---|
| Mgmt | IETF RFC 3412 | Message Processing and Dispatching for the Simple Network Management Protocol (SNMP) | This standard (RFC) contains a MIB that assists in managing the message processing and dispatching subsystem of an SNMP entity. |
|---|
| Mgmt | IETF RFC 3413 | Simple Network Management Protocol (SNMP) Applications | This standard (RFC) includes MIBs that allow for the configuration and management of remote Targets, Notifications, and Proxys. |
|---|
| Mgmt | IETF RFC 3414 | User–based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3) | This standard (RFC) contains a MIB that assists in configuring and managing the user–based security model. |
|---|
| Mgmt | IETF RFC 3415 | View–based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP) | This standard (RFC) contains a MIB that supports the configuration and management of the View–based access control model of SNMP. |
|---|
| Mgmt | IETF RFC 3416 | Version 2 of the Protocol Operations for the Simple Network Management Protocol (SNMP) | This standard (RFC) defines the message structure and protocol operations used by SNMPv3. |
|---|
| Mgmt | IETF RFC 3418 | Management Information Base (MIB) for the Simple Network Management Protocol (SNMP) | This standard (RFC) defines the MIB to configure and manage an SNMP entity. |
|---|
| Mgmt | IETF RFC 4293 | Management Information Base for the Internet Protocol (IP) | This standard (RFC) defines the MIB that manages an IP entity. |
|---|
| Security | IETF RFC 5280 | Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile | This standard (RFC) defines how to use X.509 certificates for secure communications over the Internet. |
|---|
| Security | IETF RFC 6749 | The OAuth 2.0 Authorization Framework | The OAuth 2.0 authorization framework enables a third–party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third–party application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 1.0 protocol described in RFC 5849. |
|---|
| Security | IETF RFC 7230 | Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing | This standard (RFC) defines the main Application Layer protocol used for the world–wide web. |
|---|
| Security | IETF RFC 8446 | The Transport Layer Security (TLS) Protocol | This standard (RFC) specifies Version 1.3 of the Transport Layer Security (TLS) protocol. The TLS protocol provides communications security over the Internet. The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery. |
|---|
| Security | ISO 21177 | Intelligent transport systems –– Secure vehicle interface –– ITS–station security services for secure session establishment and authentication | ISO 21177 defines a set of functional components that locally connect a vehicle ITS station (V–ITS–S) to a vehicle in a secure manner with minimum latency. It contains specifications for a set of security services required to ensure the authenticity and integrity of information exchanged between a vehicle and a V–ITS–S. These services include authentication and secure session establishment which are required to exchange information between a vehicle and a V–ITS–S in a trusted and secure manner. |
|---|
| Security | ISO/IEC 8825–7 | Information technology –– ASN.1 encoding rules –– Part 7: Specification of Octet Encoding Rules (OER) | ISO/IEC 8825–7 specifies how to encode structures specified using ASN.1 using a byte–level encoding format. This standard is also available as ITU–T X.696. |
|---|
| ITS Application Entity | No Standard Needed | No Standard Needed | The services related to this portion of the stack are not critical within the scope of this solution. |
|---|
| Facilities | IETF RFC 6749 | The OAuth 2.0 Authorization Framework | The OAuth 2.0 authorization framework enables a third–party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third–party application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 1.0 protocol described in RFC 5849. |
|---|
| Facilities | IETF RFC 7230 | Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing | This standard (RFC) defines the main Application Layer protocol used for the world–wide web. |
|---|
| Facilities | ISO 21177 | Intelligent transport systems –– Secure vehicle interface –– ITS–station security services for secure session establishment and authentication | ISO 21177 defines a set of functional components that locally connect a vehicle ITS station (V–ITS–S) to a vehicle in a secure manner with minimum latency. It contains specifications for a set of security services required to ensure the authenticity and integrity of information exchanged between a vehicle and a V–ITS–S. These services include authentication and secure session establishment which are required to exchange information between a vehicle and a V–ITS–S in a trusted and secure manner. |
|---|
| Facilities | ISO/IEC 8825–7 | Information technology –– ASN.1 encoding rules –– Part 7: Specification of Octet Encoding Rules (OER) | ISO/IEC 8825–7 specifies how to encode structures specified using ASN.1 using a byte–level encoding format. This standard is also available as ITU–T X.696. |
|---|
| TransNet | IETF RFC 2460 | Internet Protocol, Version 6 (IPv6) Specification | This standard (RFC) specifies version 6 of the Internet Protocol (IPv6), also sometimes referred to as IP Next Generation or IPng. |
|---|
| TransNet | IETF RFC 4291 | IP Version 6 Addressing Architecture | This standard (RFC) defines the addressing architecture of the IP Version 6 (IPv6) protocol. It includes the IPv6 addressing model, text representations of IPv6 addresses, definition of IPv6 unicast addresses, anycast addresses, and multicast addresses, and an IPv6 node's required addresses. |
|---|
| TransNet | IETF RFC 4443 | Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification | This standard (RFC) defines the control messages to manage IPv6. |
|---|
| TransNet | IETF RFC 793 | Transmission Control Protocol | This standard (RFC) defines the main connection–oriented Transport Layer protocol used on Internet–based networks. |
|---|
| Access | | Internet Subnet Alternatives | A set of alternative standards that includes any Subnet Layer method of connecting to the Internet. |
|---|
One significant or possibly a couple minor issues. For existing deployments, the chosen solution likely has identified security or management issues not addressed by the communications solution. Deployers should consider additional security measures, such as communications link and physical security as part of these solutions. They should also review the management issues to see if they are relevant to their deployment and would require mitigation. For new deployments, the deployment efforts should consider a path to addressing these issues as a part of their design activities. The solution does not by itself provide a fully secure implementation without additional work.
| Source | Destination | Flow |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Emergency Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Emergency Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Emergency Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Maintenance Dispatch | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Maintenance Dispatch | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Maintenance Dispatch | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Maintenance Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Maintenance Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Maintenance Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Traffic Signal System | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Traffic Signal System | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Niles Traffic Signal System | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Emergency Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Emergency Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Emergency Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Maintenance Dispatch | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Maintenance Dispatch | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Maintenance Dispatch | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Maintenance Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Maintenance Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Maintenance Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Traffic Signal System | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Traffic Signal System | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Warren Traffic Signal System | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Emergency Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Emergency Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Emergency Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Maintenance Dispatch | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Maintenance Dispatch | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Maintenance Dispatch | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Maintenance Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Maintenance Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Maintenance Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Traffic Signal System | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Traffic Signal System | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | City of Youngstown Traffic Signal System | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Commercial Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Commercial Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Commercial Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Connected/Automated Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Connected/Automated Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Connected/Automated Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | County and City Connected Vehicle Roadside Equipment | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | County and City Connected Vehicle Roadside Equipment | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | County and City Connected Vehicle Roadside Equipment | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | County Emergency Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | County Emergency Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | County Emergency Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Mahoning County Maintenance Dispatch | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Mahoning County Maintenance Dispatch | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Mahoning County Maintenance Dispatch | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Mahoning County Maintenance Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Mahoning County Maintenance Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Mahoning County Maintenance Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Mahoning County Signal Control System | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Mahoning County Signal Control System | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Mahoning County Signal Control System | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT ATMS | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT ATMS | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT ATMS | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT Connected Vehicle Roadside Equipment | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT Connected Vehicle Roadside Equipment | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT Connected Vehicle Roadside Equipment | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT District 4 Maintenance Garages | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT District 4 Maintenance Garages | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT District 4 Maintenance Garages | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT District 4 Maintenance Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT District 4 Maintenance Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT District 4 Maintenance Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT District 4 Office | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT District 4 Office | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT District 4 Office | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT Freeway Safety Patrol Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT Freeway Safety Patrol Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT Freeway Safety Patrol Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT Traffic Signal Control System | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT Traffic Signal Control System | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | ODOT Traffic Signal Control System | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | OSHP Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | OSHP Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | OSHP Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Emergency Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Emergency Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Emergency Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Maintenance Garages | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Maintenance Garages | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Maintenance Garages | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Maintenance Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Maintenance Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Maintenance Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Traffic Signal Systems | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Traffic Signal Systems | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Other Municipality or Township Traffic Signal Systems | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Central Dispatch | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Central Dispatch | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Central Dispatch | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Connected Vehicles Roadside Equipment | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Connected Vehicles Roadside Equipment | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Connected Vehicles Roadside Equipment | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Maintenance and Construction Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Maintenance and Construction Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Maintenance and Construction Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Maintenance Dispatch Offices | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Maintenance Dispatch Offices | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Maintenance Dispatch Offices | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Public Service Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Public Service Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | OTIC Public Service Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Traveler Information Devices | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Traveler Information Devices | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Traveler Information Devices | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Trumbull County Maintenance Dispatch | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Trumbull County Maintenance Dispatch | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Trumbull County Maintenance Dispatch | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Trumbull County Maintenance Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Trumbull County Maintenance Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Trumbull County Maintenance Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Trumbull County Signal Control System | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Trumbull County Signal Control System | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Trumbull County Signal Control System | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Western Reserve Port Authority | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Western Reserve Port Authority | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Western Reserve Port Authority | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | Western Reserve Port Authority Connected Vehicle Roadside Equipment | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | Western Reserve Port Authority Connected Vehicle Roadside Equipment | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | Western Reserve Port Authority Connected Vehicle Roadside Equipment | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | WRTA ADA All–Access Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | WRTA ADA All–Access Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | WRTA ADA All–Access Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | WRTA Countywide Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | WRTA Countywide Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | WRTA Countywide Vehicles | security policy and networking information |
|---|
| ODOT Cooperative ITS Credentials Management System | WRTA Fixed Route Vehicles | security credential revocations |
|---|
| ODOT Cooperative ITS Credentials Management System | WRTA Fixed Route Vehicles | security credentials |
|---|
| ODOT Cooperative ITS Credentials Management System | WRTA Fixed Route Vehicles | security policy and networking information |
|---|