Toledo Regional ITS Architecture (2021)

US: Device enrollment - Secure Internet (ITS)

Description

This solution is used within the U.S.. It combines standards associated with US: Device enrollment with those for I–I: Secure Internet (ITS). The US: Device enrollment standards include upper–layer standards required to support device enrollment services. The I–I: Secure Internet (ITS) standards include lower–layer standards that support secure communications between ITS equipment using X.509 or IEEE 1609.2 security certificates.

Includes Standards

Level	DocNum	FullName	Description
Mgmt	IETF RFC 3411	An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks	This standard (RFC) defines the basic architecture for SNMPv3 and includes the definition of information objects for managing the SNMP entity's architecture.
Mgmt	IETF RFC 3412	Message Processing and Dispatching for the Simple Network Management Protocol (SNMP)	This standard (RFC) contains a MIB that assists in managing the message processing and dispatching subsystem of an SNMP entity.
Mgmt	IETF RFC 3413	Simple Network Management Protocol (SNMP) Applications	This standard (RFC) includes MIBs that allow for the configuration and management of remote Targets, Notifications, and Proxys.
Mgmt	IETF RFC 3414	User–based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)	This standard (RFC) contains a MIB that assists in configuring and managing the user–based security model.
Mgmt	IETF RFC 3415	View–based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP)	This standard (RFC) contains a MIB that supports the configuration and management of the View–based access control model of SNMP.
Mgmt	IETF RFC 3416	Version 2 of the Protocol Operations for the Simple Network Management Protocol (SNMP)	This standard (RFC) defines the message structure and protocol operations used by SNMPv3.
Mgmt	IETF RFC 3418	Management Information Base (MIB) for the Simple Network Management Protocol (SNMP)	This standard (RFC) defines the MIB to configure and manage an SNMP entity.
Mgmt	IETF RFC 4293	Management Information Base for the Internet Protocol (IP)	This standard (RFC) defines the MIB that manages an IP entity.
Security	IETF RFC 5280	Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile	This standard (RFC) defines how to use X.509 certificates for secure communications over the Internet.
Security	IETF RFC 6749	The OAuth 2.0 Authorization Framework	The OAuth 2.0 authorization framework enables a third–party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third–party application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 1.0 protocol described in RFC 5849.
Security	IETF RFC 7230	Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing	This standard (RFC) defines the main Application Layer protocol used for the world–wide web.
Security	IETF RFC 8446	The Transport Layer Security (TLS) Protocol	This standard (RFC) specifies Version 1.3 of the Transport Layer Security (TLS) protocol. The TLS protocol provides communications security over the Internet. The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery.
Security	ISO 21177	Intelligent transport systems –– Secure vehicle interface –– ITS–station security services for secure session establishment and authentication	ISO 21177 defines a set of functional components that locally connect a vehicle ITS station (V–ITS–S) to a vehicle in a secure manner with minimum latency. It contains specifications for a set of security services required to ensure the authenticity and integrity of information exchanged between a vehicle and a V–ITS–S. These services include authentication and secure session establishment which are required to exchange information between a vehicle and a V–ITS–S in a trusted and secure manner.
Security	ISO/IEC 8825–7	Information technology –– ASN.1 encoding rules –– Part 7: Specification of Octet Encoding Rules (OER)	ISO/IEC 8825–7 specifies how to encode structures specified using ASN.1 using a byte–level encoding format. This standard is also available as ITU–T X.696.
ITS Application Entity		Application Specific	A placeholder representing that an ITS Information Entity is not required for this support service.
Facilities	IETF RFC 6749	The OAuth 2.0 Authorization Framework	The OAuth 2.0 authorization framework enables a third–party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third–party application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 1.0 protocol described in RFC 5849.
Facilities	IETF RFC 7230	Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing	This standard (RFC) defines the main Application Layer protocol used for the world–wide web.
Facilities	ISO 21177	Intelligent transport systems –– Secure vehicle interface –– ITS–station security services for secure session establishment and authentication	ISO 21177 defines a set of functional components that locally connect a vehicle ITS station (V–ITS–S) to a vehicle in a secure manner with minimum latency. It contains specifications for a set of security services required to ensure the authenticity and integrity of information exchanged between a vehicle and a V–ITS–S. These services include authentication and secure session establishment which are required to exchange information between a vehicle and a V–ITS–S in a trusted and secure manner.
Facilities	ISO/IEC 8825–7	Information technology –– ASN.1 encoding rules –– Part 7: Specification of Octet Encoding Rules (OER)	ISO/IEC 8825–7 specifies how to encode structures specified using ASN.1 using a byte–level encoding format. This standard is also available as ITU–T X.696.
TransNet	IETF RFC 2460	Internet Protocol, Version 6 (IPv6) Specification	This standard (RFC) specifies version 6 of the Internet Protocol (IPv6), also sometimes referred to as IP Next Generation or IPng.
TransNet	IETF RFC 4291	IP Version 6 Addressing Architecture	This standard (RFC) defines the addressing architecture of the IP Version 6 (IPv6) protocol. It includes the IPv6 addressing model, text representations of IPv6 addresses, definition of IPv6 unicast addresses, anycast addresses, and multicast addresses, and an IPv6 node's required addresses.
TransNet	IETF RFC 4443	Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification	This standard (RFC) defines the control messages to manage IPv6.
TransNet	IETF RFC 793	Transmission Control Protocol	This standard (RFC) defines the main connection–oriented Transport Layer protocol used on Internet–based networks.
Access		Internet Subnet Alternatives	A set of alternative standards that includes any Subnet Layer method of connecting to the Internet.

Readiness: High–Moderate

Readiness Description

One significant or possibly a couple minor issues. For existing deployments, the chosen solution likely has identified security or management issues not addressed by the communications solution. Deployers should consider additional security measures, such as communications link and physical security as part of these solutions. They should also review the management issues to see if they are relevant to their deployment and would require mitigation. For new deployments, the deployment efforts should consider a path to addressing these issues as a part of their design activities. The solution does not by itself provide a fully secure implementation without additional work.

Issues

Issue	Severity	Description	Associated Standard	Associated Triple
Performance not fully defined (medium)	Medium	The performance rules are not fully defined for this information flow.	(None)	(All)
Still under development	Medium	A draft of the standard has been developed by the working group, but it was still under development at the time this analysis was performed.	IEEE 1609.2.1 WAVE – Certificate Management	(All)

Supports Interfaces

Source	Destination	Flow
Bowling Green State University Shuttle Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
Bowling Green Transit Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
City of Bowling Green Electric Division Dispatch	Ohio Cooperative ITS Credentials Management System	device enrollment information
City of Bowling Green Emergency Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
City of Bowling Green Maintenance Dispatch	Ohio Cooperative ITS Credentials Management System	device enrollment information
City of Bowling Green Maintenance Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
City of Bowling Green Public Works Dispatch	Ohio Cooperative ITS Credentials Management System	device enrollment information
City of Bowling Green Traffic Signal System	Ohio Cooperative ITS Credentials Management System	device enrollment information
City of Toledo Emergency Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
City of Toledo Maintenance Dispatch (CLIC)	Ohio Cooperative ITS Credentials Management System	device enrollment information
City of Toledo Maintenance Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
City of Toledo Traffic Management System	Ohio Cooperative ITS Credentials Management System	device enrollment information
Commercial Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
Connected/Automated Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
County and City Connected Vehicles Roadside Equipment	Ohio Cooperative ITS Credentials Management System	device enrollment information
Lucas County EMS Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
Lucas County Engineer Dispatch	Ohio Cooperative ITS Credentials Management System	device enrollment information
Lucas County Fire Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
Lucas County Maintenance Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
Lucas County Sheriff Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
Lucas County Traffic Signal System	Ohio Cooperative ITS Credentials Management System	device enrollment information
Municipal Emergency Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
Municipal Maintenance Dispatch	Ohio Cooperative ITS Credentials Management System	device enrollment information
Municipal Maintenance Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
Municipal Traffic Signal Systems	Ohio Cooperative ITS Credentials Management System	device enrollment information
ODOT ATMS	Ohio Cooperative ITS Credentials Management System	device enrollment information
ODOT Connected Vehicles Roadside Equipment	Ohio Cooperative ITS Credentials Management System	device enrollment information
ODOT District 2 Maintenance Garages	Ohio Cooperative ITS Credentials Management System	device enrollment information
ODOT District 2 Maintenance Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
ODOT District 2 Office	Ohio Cooperative ITS Credentials Management System	device enrollment information
ODOT Freeway Safety Patrol Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
ODOT Traffic Signal Control System	Ohio Cooperative ITS Credentials Management System	device enrollment information
Ohio Cooperative ITS Credentials Management System	Bowling Green State University Shuttle Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Bowling Green Transit Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	City of Bowling Green Electric Division Dispatch	enrollment credentials
Ohio Cooperative ITS Credentials Management System	City of Bowling Green Emergency Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	City of Bowling Green Maintenance Dispatch	enrollment credentials
Ohio Cooperative ITS Credentials Management System	City of Bowling Green Maintenance Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	City of Bowling Green Public Works Dispatch	enrollment credentials
Ohio Cooperative ITS Credentials Management System	City of Bowling Green Traffic Signal System	enrollment credentials
Ohio Cooperative ITS Credentials Management System	City of Toledo Emergency Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	City of Toledo Maintenance Dispatch (CLIC)	enrollment credentials
Ohio Cooperative ITS Credentials Management System	City of Toledo Maintenance Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	City of Toledo Traffic Management System	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Commercial Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Connected/Automated Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	County and City Connected Vehicles Roadside Equipment	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Lucas County EMS Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Lucas County Engineer Dispatch	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Lucas County Fire Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Lucas County Maintenance Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Lucas County Sheriff Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Lucas County Traffic Signal System	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Municipal Emergency Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Municipal Maintenance Dispatch	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Municipal Maintenance Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Municipal Traffic Signal Systems	enrollment credentials
Ohio Cooperative ITS Credentials Management System	ODOT ATMS	enrollment credentials
Ohio Cooperative ITS Credentials Management System	ODOT Connected Vehicles Roadside Equipment	enrollment credentials
Ohio Cooperative ITS Credentials Management System	ODOT District 2 Maintenance Garages	enrollment credentials
Ohio Cooperative ITS Credentials Management System	ODOT District 2 Maintenance Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	ODOT District 2 Office	enrollment credentials
Ohio Cooperative ITS Credentials Management System	ODOT Freeway Safety Patrol Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	ODOT Traffic Signal Control System	enrollment credentials
Ohio Cooperative ITS Credentials Management System	OSHP District 1 and 2 Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	OSHP District 10 Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	OTIC Central Dispatch	enrollment credentials
Ohio Cooperative ITS Credentials Management System	OTIC Connected Vehicles Roadside Equipment	enrollment credentials
Ohio Cooperative ITS Credentials Management System	OTIC Maintenance and Construction Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	OTIC Maintenance Dispatch Offices	enrollment credentials
Ohio Cooperative ITS Credentials Management System	OTIC Public Service Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	TARPS Paratransit Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	TARTA Fixed Route Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Toledo–Lucas County Port Authority	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Toledo–Lucas County Port Authority Connected Vehicle Roadside Equipment	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Traveler Information Devices	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Wood County Emergency Vehicles	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Wood County Maintenance Dispatch	enrollment credentials
Ohio Cooperative ITS Credentials Management System	Wood County Maintenance Vehicles	enrollment credentials
OSHP District 1 and 2 Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
OSHP District 10 Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
OTIC Central Dispatch	Ohio Cooperative ITS Credentials Management System	device enrollment information
OTIC Connected Vehicles Roadside Equipment	Ohio Cooperative ITS Credentials Management System	device enrollment information
OTIC Maintenance and Construction Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
OTIC Maintenance Dispatch Offices	Ohio Cooperative ITS Credentials Management System	device enrollment information
OTIC Public Service Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
TARPS Paratransit Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
TARTA Fixed Route Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
Toledo–Lucas County Port Authority	Ohio Cooperative ITS Credentials Management System	device enrollment information
Toledo–Lucas County Port Authority Connected Vehicle Roadside Equipment	Ohio Cooperative ITS Credentials Management System	device enrollment information
Traveler Information Devices	Ohio Cooperative ITS Credentials Management System	device enrollment information
Wood County Emergency Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information
Wood County Maintenance Dispatch	Ohio Cooperative ITS Credentials Management System	device enrollment information
Wood County Maintenance Vehicles	Ohio Cooperative ITS Credentials Management System	device enrollment information