This solution is used within the U.S.. It combines standards associated with US: Security Credentials with those for I–I: Secure Internet (ITS). The US: Security Credentials standards include upper–layer standards required to provide and revoke security credentials, define security policy, and handle enrollment coordination. The I–I: Secure Internet (ITS) standards include lower–layer standards that support secure communications between ITS equipment using X.509 or IEEE 1609.2 security certificates.
| Level | DocNum | FullName | Description |
|---|
| Mgmt | IETF RFC 3411 | An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks | This standard (RFC) defines the basic architecture for SNMPv3 and includes the definition of information objects for managing the SNMP entity's architecture. |
|---|
| Mgmt | IETF RFC 3412 | Message Processing and Dispatching for the Simple Network Management Protocol (SNMP) | This standard (RFC) contains a MIB that assists in managing the message processing and dispatching subsystem of an SNMP entity. |
|---|
| Mgmt | IETF RFC 3413 | Simple Network Management Protocol (SNMP) Applications | This standard (RFC) includes MIBs that allow for the configuration and management of remote Targets, Notifications, and Proxys. |
|---|
| Mgmt | IETF RFC 3414 | User–based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3) | This standard (RFC) contains a MIB that assists in configuring and managing the user–based security model. |
|---|
| Mgmt | IETF RFC 3415 | View–based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP) | This standard (RFC) contains a MIB that supports the configuration and management of the View–based access control model of SNMP. |
|---|
| Mgmt | IETF RFC 3416 | Version 2 of the Protocol Operations for the Simple Network Management Protocol (SNMP) | This standard (RFC) defines the message structure and protocol operations used by SNMPv3. |
|---|
| Mgmt | IETF RFC 3418 | Management Information Base (MIB) for the Simple Network Management Protocol (SNMP) | This standard (RFC) defines the MIB to configure and manage an SNMP entity. |
|---|
| Mgmt | IETF RFC 4293 | Management Information Base for the Internet Protocol (IP) | This standard (RFC) defines the MIB that manages an IP entity. |
|---|
| Security | IETF RFC 5280 | Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile | This standard (RFC) defines how to use X.509 certificates for secure communications over the Internet. |
|---|
| Security | IETF RFC 6749 | The OAuth 2.0 Authorization Framework | The OAuth 2.0 authorization framework enables a third–party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third–party application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 1.0 protocol described in RFC 5849. |
|---|
| Security | IETF RFC 7230 | Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing | This standard (RFC) defines the main Application Layer protocol used for the world–wide web. |
|---|
| Security | IETF RFC 8446 | The Transport Layer Security (TLS) Protocol | This standard (RFC) specifies Version 1.3 of the Transport Layer Security (TLS) protocol. The TLS protocol provides communications security over the Internet. The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery. |
|---|
| Security | ISO 21177 | Intelligent transport systems –– Secure vehicle interface –– ITS–station security services for secure session establishment and authentication | ISO 21177 defines a set of functional components that locally connect a vehicle ITS station (V–ITS–S) to a vehicle in a secure manner with minimum latency. It contains specifications for a set of security services required to ensure the authenticity and integrity of information exchanged between a vehicle and a V–ITS–S. These services include authentication and secure session establishment which are required to exchange information between a vehicle and a V–ITS–S in a trusted and secure manner. |
|---|
| Security | ISO/IEC 8825–7 | Information technology –– ASN.1 encoding rules –– Part 7: Specification of Octet Encoding Rules (OER) | ISO/IEC 8825–7 specifies how to encode structures specified using ASN.1 using a byte–level encoding format. This standard is also available as ITU–T X.696. |
|---|
| ITS Application Entity | No Standard Needed | No Standard Needed | The services related to this portion of the stack are not critical within the scope of this solution. |
|---|
| Facilities | IETF RFC 6749 | The OAuth 2.0 Authorization Framework | The OAuth 2.0 authorization framework enables a third–party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third–party application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 1.0 protocol described in RFC 5849. |
|---|
| Facilities | IETF RFC 7230 | Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing | This standard (RFC) defines the main Application Layer protocol used for the world–wide web. |
|---|
| Facilities | ISO 21177 | Intelligent transport systems –– Secure vehicle interface –– ITS–station security services for secure session establishment and authentication | ISO 21177 defines a set of functional components that locally connect a vehicle ITS station (V–ITS–S) to a vehicle in a secure manner with minimum latency. It contains specifications for a set of security services required to ensure the authenticity and integrity of information exchanged between a vehicle and a V–ITS–S. These services include authentication and secure session establishment which are required to exchange information between a vehicle and a V–ITS–S in a trusted and secure manner. |
|---|
| Facilities | ISO/IEC 8825–7 | Information technology –– ASN.1 encoding rules –– Part 7: Specification of Octet Encoding Rules (OER) | ISO/IEC 8825–7 specifies how to encode structures specified using ASN.1 using a byte–level encoding format. This standard is also available as ITU–T X.696. |
|---|
| TransNet | IETF RFC 2460 | Internet Protocol, Version 6 (IPv6) Specification | This standard (RFC) specifies version 6 of the Internet Protocol (IPv6), also sometimes referred to as IP Next Generation or IPng. |
|---|
| TransNet | IETF RFC 4291 | IP Version 6 Addressing Architecture | This standard (RFC) defines the addressing architecture of the IP Version 6 (IPv6) protocol. It includes the IPv6 addressing model, text representations of IPv6 addresses, definition of IPv6 unicast addresses, anycast addresses, and multicast addresses, and an IPv6 node's required addresses. |
|---|
| TransNet | IETF RFC 4443 | Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification | This standard (RFC) defines the control messages to manage IPv6. |
|---|
| TransNet | IETF RFC 793 | Transmission Control Protocol | This standard (RFC) defines the main connection–oriented Transport Layer protocol used on Internet–based networks. |
|---|
| Access | | Internet Subnet Alternatives | A set of alternative standards that includes any Subnet Layer method of connecting to the Internet. |
|---|
One significant or possibly a couple minor issues. For existing deployments, the chosen solution likely has identified security or management issues not addressed by the communications solution. Deployers should consider additional security measures, such as communications link and physical security as part of these solutions. They should also review the management issues to see if they are relevant to their deployment and would require mitigation. For new deployments, the deployment efforts should consider a path to addressing these issues as a part of their design activities. The solution does not by itself provide a fully secure implementation without additional work.
| Source | Destination | Flow |
|---|
| Ohio Cooperative ITS Credentials Management System | Bowling Green State University Shuttle Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Bowling Green State University Shuttle Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Bowling Green State University Shuttle Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Bowling Green Transit Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Bowling Green Transit Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Bowling Green Transit Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Electric Division Dispatch | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Electric Division Dispatch | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Electric Division Dispatch | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Emergency Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Emergency Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Emergency Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Maintenance Dispatch | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Maintenance Dispatch | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Maintenance Dispatch | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Maintenance Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Maintenance Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Maintenance Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Public Works Dispatch | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Public Works Dispatch | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Public Works Dispatch | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Traffic Signal System | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Traffic Signal System | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Bowling Green Traffic Signal System | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Emergency Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Emergency Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Emergency Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Maintenance Dispatch (CLIC) | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Maintenance Dispatch (CLIC) | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Maintenance Dispatch (CLIC) | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Maintenance Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Maintenance Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Maintenance Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Traffic Management System | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Traffic Management System | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | City of Toledo Traffic Management System | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Commercial Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Commercial Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Commercial Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Connected/Automated Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Connected/Automated Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Connected/Automated Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | County and City Connected Vehicles Roadside Equipment | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | County and City Connected Vehicles Roadside Equipment | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | County and City Connected Vehicles Roadside Equipment | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County EMS Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County EMS Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County EMS Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Engineer Dispatch | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Engineer Dispatch | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Engineer Dispatch | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Fire Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Fire Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Fire Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Maintenance Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Maintenance Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Maintenance Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Sheriff Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Sheriff Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Sheriff Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Traffic Signal System | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Traffic Signal System | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Lucas County Traffic Signal System | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Emergency Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Emergency Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Emergency Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Maintenance Dispatch | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Maintenance Dispatch | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Maintenance Dispatch | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Maintenance Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Maintenance Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Maintenance Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Traffic Signal Systems | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Traffic Signal Systems | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Municipal Traffic Signal Systems | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT ATMS | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT ATMS | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT ATMS | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT Connected Vehicles Roadside Equipment | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT Connected Vehicles Roadside Equipment | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT Connected Vehicles Roadside Equipment | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT District 2 Maintenance Garages | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT District 2 Maintenance Garages | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT District 2 Maintenance Garages | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT District 2 Maintenance Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT District 2 Maintenance Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT District 2 Maintenance Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT District 2 Office | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT District 2 Office | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT District 2 Office | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT Freeway Safety Patrol Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT Freeway Safety Patrol Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT Freeway Safety Patrol Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT Traffic Signal Control System | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT Traffic Signal Control System | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | ODOT Traffic Signal Control System | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | OSHP District 1 and 2 Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | OSHP District 1 and 2 Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | OSHP District 1 and 2 Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | OSHP District 10 Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | OSHP District 10 Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | OSHP District 10 Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Central Dispatch | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Central Dispatch | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Central Dispatch | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Connected Vehicles Roadside Equipment | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Connected Vehicles Roadside Equipment | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Connected Vehicles Roadside Equipment | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Maintenance and Construction Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Maintenance and Construction Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Maintenance and Construction Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Maintenance Dispatch Offices | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Maintenance Dispatch Offices | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Maintenance Dispatch Offices | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Public Service Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Public Service Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | OTIC Public Service Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | TARPS Paratransit Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | TARPS Paratransit Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | TARPS Paratransit Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | TARTA Fixed Route Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | TARTA Fixed Route Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | TARTA Fixed Route Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Toledo–Lucas County Port Authority | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Toledo–Lucas County Port Authority | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Toledo–Lucas County Port Authority | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Toledo–Lucas County Port Authority Connected Vehicle Roadside Equipment | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Toledo–Lucas County Port Authority Connected Vehicle Roadside Equipment | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Toledo–Lucas County Port Authority Connected Vehicle Roadside Equipment | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Traveler Information Devices | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Traveler Information Devices | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Traveler Information Devices | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Wood County Emergency Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Wood County Emergency Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Wood County Emergency Vehicles | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Wood County Maintenance Dispatch | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Wood County Maintenance Dispatch | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Wood County Maintenance Dispatch | security policy and networking information |
|---|
| Ohio Cooperative ITS Credentials Management System | Wood County Maintenance Vehicles | security credential revocations |
|---|
| Ohio Cooperative ITS Credentials Management System | Wood County Maintenance Vehicles | security credentials |
|---|
| Ohio Cooperative ITS Credentials Management System | Wood County Maintenance Vehicles | security policy and networking information |
|---|