CAN/CSA-ISO/IEC 11586-1-00 (R2018)

1 Scope
2 Normative references
3 Definitions
4 Abbreviations
5 General overview
6 Security exchanges
7 Security transformations
8 Abstract syntax notation for selective field
  protection
9 Conformance
Annex A - ASN.1 definitions
Annex B - Registration of security exchanges and
          security transformations
Annex C - Security exchange specifications
Annex D - Security transformation specification
Annex E - Protection mapping specification
Annex F - Object identifier usage
Annex G - Guidelines for the use of generic upper
          layers security facilities
Annex H - Relationship to other standards
Annex I - Examples of use of the generic upper layer
          security facilities
Annex J - Bibliography

Scope 1.1 This series of Recommendations / International Standards defines a set of generic facilities to assist in the provision of security services in OSI applications. These include: (a) a set of notational tools to support the specification of selective field protection requirements in an abstract syntax specification, and to support the specification of security exchange s and security transformations (b) a service definition, protocol specification and PICS proforma for an application-service-element (ASE) to support the provision of security services within the Application Layer of OSI (c) a specification and PICS proforma for a security transfer syntax, associated with Presentation Layer support for security services in the Application Layer. 1.2 This Recommendation / International Standard defines the following: (a) general models of security exchange protocol functions and security transformations, based on the concepts described in the OSI Upper Layers Security Model (ITU-T Rec. X.803 / ISO/IEC 10745) (b) a set of notational tools to support the specification of selective field protection requirements in an abstract syntax specification, and to support the specification of security exchanges and security transformations (c) a set of informative guidelines as to the application of the generic upper layers security facilities covered by this series of Recommendations / International Standards 1.3 This Recommendation / International Standard does not define the following: (a) a complete set of upper layer security facilities which may be required by other Recommendations / International Standards (b) a complete set of security facilities for specific applications (c) the mechanisms employed to support security services. 1.4 The security exchange model, and supporting notation, are intended both for use as the basis of defining the security exchange service element in subsequent parts of this series of Recommendations / International Standards, and for use by any other ASE which may import security exchanges into its own specification.

Scope 1.1 This series of Recommendations / International Standards defines a set of generic facilities to assist in the provision of security services in OSI applications. These include: (a) a set of notational tools to support the specification of selective field protection requirements in an abstract syntax specification, and to support the specification of security exchange s and security transformations (b) a service definition, protocol specification and PICS proforma for an application-service-element (ASE) to support the provision of security services within the Application Layer of OSI (c) a specification and PICS proforma for a security transfer syntax, associated with Presentation Layer support for security services in the Application Layer. 1.2 This Recommendation / International Standard defines the following: (a) general models of security exchange protocol functions and security transformations, based on the concepts described in the OSI Upper Layers Security Model (ITU-T Rec. X.803 / ISO/IEC 10745) (b) a set of notational tools to support the specification of selective field protection requirements in an abstract syntax specification, and to support the specification of security exchanges and security transformations (c) a set of informative guidelines as to the application of the generic upper layers security facilities covered by this series of Recommendations / International Standards 1.3 This Recommendation / International Standard does not define the following: (a) a complete set of upper layer security facilities which may be required by other Recommendations / International Standards (b) a complete set of security facilities for specific applications (c) the mechanisms employed to support security services. 1.4 The security exchange model, and supporting notation, are intended both for use as the basis of defining the security exchange service element in subsequent parts of this series of Recommendations / International Standards, and for use by any other ASE which may import security exchanges into its own specification.