Eastgate Regional ITS Architecture 2021

US: Device enrollment - Secure Internet (ITS)

Description

This solution is used within the U.S.. It combines standards associated with US: Device enrollment with those for I–I: Secure Internet (ITS). The US: Device enrollment standards include upper–layer standards required to support device enrollment services. The I–I: Secure Internet (ITS) standards include lower–layer standards that support secure communications between ITS equipment using X.509 or IEEE 1609.2 security certificates.

Includes Standards

Level	DocNum	FullName	Description
Mgmt	IETF RFC 3411	An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks	This standard (RFC) defines the basic architecture for SNMPv3 and includes the definition of information objects for managing the SNMP entity's architecture.
Mgmt	IETF RFC 3412	Message Processing and Dispatching for the Simple Network Management Protocol (SNMP)	This standard (RFC) contains a MIB that assists in managing the message processing and dispatching subsystem of an SNMP entity.
Mgmt	IETF RFC 3413	Simple Network Management Protocol (SNMP) Applications	This standard (RFC) includes MIBs that allow for the configuration and management of remote Targets, Notifications, and Proxys.
Mgmt	IETF RFC 3414	User–based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)	This standard (RFC) contains a MIB that assists in configuring and managing the user–based security model.
Mgmt	IETF RFC 3415	View–based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP)	This standard (RFC) contains a MIB that supports the configuration and management of the View–based access control model of SNMP.
Mgmt	IETF RFC 3416	Version 2 of the Protocol Operations for the Simple Network Management Protocol (SNMP)	This standard (RFC) defines the message structure and protocol operations used by SNMPv3.
Mgmt	IETF RFC 3418	Management Information Base (MIB) for the Simple Network Management Protocol (SNMP)	This standard (RFC) defines the MIB to configure and manage an SNMP entity.
Mgmt	IETF RFC 4293	Management Information Base for the Internet Protocol (IP)	This standard (RFC) defines the MIB that manages an IP entity.
Security	IETF RFC 5280	Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile	This standard (RFC) defines how to use X.509 certificates for secure communications over the Internet.
Security	IETF RFC 6749	The OAuth 2.0 Authorization Framework	The OAuth 2.0 authorization framework enables a third–party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third–party application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 1.0 protocol described in RFC 5849.
Security	IETF RFC 7230	Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing	This standard (RFC) defines the main Application Layer protocol used for the world–wide web.
Security	IETF RFC 8446	The Transport Layer Security (TLS) Protocol	This standard (RFC) specifies Version 1.3 of the Transport Layer Security (TLS) protocol. The TLS protocol provides communications security over the Internet. The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery.
Security	ISO 21177	Intelligent transport systems –– Secure vehicle interface –– ITS–station security services for secure session establishment and authentication	ISO 21177 defines a set of functional components that locally connect a vehicle ITS station (V–ITS–S) to a vehicle in a secure manner with minimum latency. It contains specifications for a set of security services required to ensure the authenticity and integrity of information exchanged between a vehicle and a V–ITS–S. These services include authentication and secure session establishment which are required to exchange information between a vehicle and a V–ITS–S in a trusted and secure manner.
Security	ISO/IEC 8825–7	Information technology –– ASN.1 encoding rules –– Part 7: Specification of Octet Encoding Rules (OER)	ISO/IEC 8825–7 specifies how to encode structures specified using ASN.1 using a byte–level encoding format. This standard is also available as ITU–T X.696.
ITS Application Entity		Application Specific	A placeholder representing that an ITS Information Entity is not required for this support service.
Facilities	IETF RFC 6749	The OAuth 2.0 Authorization Framework	The OAuth 2.0 authorization framework enables a third–party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third–party application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 1.0 protocol described in RFC 5849.
Facilities	IETF RFC 7230	Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing	This standard (RFC) defines the main Application Layer protocol used for the world–wide web.
Facilities	ISO 21177	Intelligent transport systems –– Secure vehicle interface –– ITS–station security services for secure session establishment and authentication	ISO 21177 defines a set of functional components that locally connect a vehicle ITS station (V–ITS–S) to a vehicle in a secure manner with minimum latency. It contains specifications for a set of security services required to ensure the authenticity and integrity of information exchanged between a vehicle and a V–ITS–S. These services include authentication and secure session establishment which are required to exchange information between a vehicle and a V–ITS–S in a trusted and secure manner.
Facilities	ISO/IEC 8825–7	Information technology –– ASN.1 encoding rules –– Part 7: Specification of Octet Encoding Rules (OER)	ISO/IEC 8825–7 specifies how to encode structures specified using ASN.1 using a byte–level encoding format. This standard is also available as ITU–T X.696.
TransNet	IETF RFC 2460	Internet Protocol, Version 6 (IPv6) Specification	This standard (RFC) specifies version 6 of the Internet Protocol (IPv6), also sometimes referred to as IP Next Generation or IPng.
TransNet	IETF RFC 4291	IP Version 6 Addressing Architecture	This standard (RFC) defines the addressing architecture of the IP Version 6 (IPv6) protocol. It includes the IPv6 addressing model, text representations of IPv6 addresses, definition of IPv6 unicast addresses, anycast addresses, and multicast addresses, and an IPv6 node's required addresses.
TransNet	IETF RFC 4443	Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification	This standard (RFC) defines the control messages to manage IPv6.
TransNet	IETF RFC 793	Transmission Control Protocol	This standard (RFC) defines the main connection–oriented Transport Layer protocol used on Internet–based networks.
Access		Internet Subnet Alternatives	A set of alternative standards that includes any Subnet Layer method of connecting to the Internet.

Readiness: High–Moderate

Readiness Description

One significant or possibly a couple minor issues. For existing deployments, the chosen solution likely has identified security or management issues not addressed by the communications solution. Deployers should consider additional security measures, such as communications link and physical security as part of these solutions. They should also review the management issues to see if they are relevant to their deployment and would require mitigation. For new deployments, the deployment efforts should consider a path to addressing these issues as a part of their design activities. The solution does not by itself provide a fully secure implementation without additional work.

Issues

Issue	Severity	Description	Associated Standard	Associated Triple
Performance not fully defined (medium)	Medium	The performance rules are not fully defined for this information flow.	(None)	(All)
Still under development	Medium	A draft of the standard has been developed by the working group, but it was still under development at the time this analysis was performed.	IEEE 1609.2.1 WAVE – Certificate Management	(All)

Supports Interfaces

Source	Destination	Flow
City of Niles Emergency Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
City of Niles Maintenance Dispatch	ODOT Cooperative ITS Credentials Management System	device enrollment information
City of Niles Maintenance Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
City of Niles Traffic Signal System	ODOT Cooperative ITS Credentials Management System	device enrollment information
City of Warren Emergency Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
City of Warren Maintenance Dispatch	ODOT Cooperative ITS Credentials Management System	device enrollment information
City of Warren Maintenance Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
City of Warren Traffic Signal System	ODOT Cooperative ITS Credentials Management System	device enrollment information
City of Youngstown Emergency Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
City of Youngstown Maintenance Dispatch	ODOT Cooperative ITS Credentials Management System	device enrollment information
City of Youngstown Maintenance Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
City of Youngstown Traffic Signal System	ODOT Cooperative ITS Credentials Management System	device enrollment information
Commercial Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
Connected/Automated Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
County and City Connected Vehicle Roadside Equipment	ODOT Cooperative ITS Credentials Management System	device enrollment information
County Emergency Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
Mahoning County Maintenance Dispatch	ODOT Cooperative ITS Credentials Management System	device enrollment information
Mahoning County Maintenance Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
Mahoning County Signal Control System	ODOT Cooperative ITS Credentials Management System	device enrollment information
ODOT ATMS	ODOT Cooperative ITS Credentials Management System	device enrollment information
ODOT Connected Vehicle Roadside Equipment	ODOT Cooperative ITS Credentials Management System	device enrollment information
ODOT Cooperative ITS Credentials Management System	City of Niles Emergency Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	City of Niles Maintenance Dispatch	enrollment credentials
ODOT Cooperative ITS Credentials Management System	City of Niles Maintenance Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	City of Niles Traffic Signal System	enrollment credentials
ODOT Cooperative ITS Credentials Management System	City of Warren Emergency Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	City of Warren Maintenance Dispatch	enrollment credentials
ODOT Cooperative ITS Credentials Management System	City of Warren Maintenance Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	City of Warren Traffic Signal System	enrollment credentials
ODOT Cooperative ITS Credentials Management System	City of Youngstown Emergency Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	City of Youngstown Maintenance Dispatch	enrollment credentials
ODOT Cooperative ITS Credentials Management System	City of Youngstown Maintenance Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	City of Youngstown Traffic Signal System	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Commercial Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Connected/Automated Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	County and City Connected Vehicle Roadside Equipment	enrollment credentials
ODOT Cooperative ITS Credentials Management System	County Emergency Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Mahoning County Maintenance Dispatch	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Mahoning County Maintenance Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Mahoning County Signal Control System	enrollment credentials
ODOT Cooperative ITS Credentials Management System	ODOT ATMS	enrollment credentials
ODOT Cooperative ITS Credentials Management System	ODOT Connected Vehicle Roadside Equipment	enrollment credentials
ODOT Cooperative ITS Credentials Management System	ODOT District 4 Maintenance Garages	enrollment credentials
ODOT Cooperative ITS Credentials Management System	ODOT District 4 Maintenance Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	ODOT District 4 Office	enrollment credentials
ODOT Cooperative ITS Credentials Management System	ODOT Freeway Safety Patrol Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	ODOT Traffic Signal Control System	enrollment credentials
ODOT Cooperative ITS Credentials Management System	OSHP Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Other Municipality or Township Emergency Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Other Municipality or Township Maintenance Garages	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Other Municipality or Township Maintenance Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Other Municipality or Township Traffic Signal Systems	enrollment credentials
ODOT Cooperative ITS Credentials Management System	OTIC Central Dispatch	enrollment credentials
ODOT Cooperative ITS Credentials Management System	OTIC Connected Vehicles Roadside Equipment	enrollment credentials
ODOT Cooperative ITS Credentials Management System	OTIC Maintenance and Construction Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	OTIC Maintenance Dispatch Offices	enrollment credentials
ODOT Cooperative ITS Credentials Management System	OTIC Public Service Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Traveler Information Devices	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Trumbull County Maintenance Dispatch	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Trumbull County Maintenance Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Trumbull County Signal Control System	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Western Reserve Port Authority	enrollment credentials
ODOT Cooperative ITS Credentials Management System	Western Reserve Port Authority Connected Vehicle Roadside Equipment	enrollment credentials
ODOT Cooperative ITS Credentials Management System	WRTA ADA All–Access Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	WRTA Countywide Vehicles	enrollment credentials
ODOT Cooperative ITS Credentials Management System	WRTA Fixed Route Vehicles	enrollment credentials
ODOT District 4 Maintenance Garages	ODOT Cooperative ITS Credentials Management System	device enrollment information
ODOT District 4 Maintenance Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
ODOT District 4 Office	ODOT Cooperative ITS Credentials Management System	device enrollment information
ODOT Freeway Safety Patrol Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
ODOT Traffic Signal Control System	ODOT Cooperative ITS Credentials Management System	device enrollment information
OSHP Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
Other Municipality or Township Emergency Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
Other Municipality or Township Maintenance Garages	ODOT Cooperative ITS Credentials Management System	device enrollment information
Other Municipality or Township Maintenance Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
Other Municipality or Township Traffic Signal Systems	ODOT Cooperative ITS Credentials Management System	device enrollment information
OTIC Central Dispatch	ODOT Cooperative ITS Credentials Management System	device enrollment information
OTIC Connected Vehicles Roadside Equipment	ODOT Cooperative ITS Credentials Management System	device enrollment information
OTIC Maintenance and Construction Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
OTIC Maintenance Dispatch Offices	ODOT Cooperative ITS Credentials Management System	device enrollment information
OTIC Public Service Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
Traveler Information Devices	ODOT Cooperative ITS Credentials Management System	device enrollment information
Trumbull County Maintenance Dispatch	ODOT Cooperative ITS Credentials Management System	device enrollment information
Trumbull County Maintenance Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
Trumbull County Signal Control System	ODOT Cooperative ITS Credentials Management System	device enrollment information
Western Reserve Port Authority	ODOT Cooperative ITS Credentials Management System	device enrollment information
Western Reserve Port Authority Connected Vehicle Roadside Equipment	ODOT Cooperative ITS Credentials Management System	device enrollment information
WRTA ADA All–Access Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
WRTA Countywide Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information
WRTA Fixed Route Vehicles	ODOT Cooperative ITS Credentials Management System	device enrollment information