CEN ISO/TS 17574:2004

Road transport and traffic telematics - Electronic Fee Collection (EFC) - Guidelines for EFC security protection profiles

This document gives guidelines for the preparation and evaluation of security requirements specifications, referred to as Protection Profiles (PP) in ISO/IEC 15408 Evaluation criteria for IT security and ISO/IEC PDTR 15446 Guide for the production of protection profiles and security target. By a Protection Profile (PP) is meant a set of security requirements for a category of products or systems which meet specific needs. A typical example would be a PP for OBEs to be used in an EFC system and in this case the PP would be an implementation-independent set of security requirements for the OBEs meeting the operators and users needs for security.
The document uses an OBE with an integrated circuit(s) card (ICC) as an example describing both the structure of the PP as well as the proposed content.
Figure 1 shows how this document fits in the overall picture of EFC security architecture. The shaded boxes are the aspects mostly related to the preparation of PPs for EFC systems.

Straßentransport- und Verkehrstelematik - Elektronische Gebührenerhebung - Sicherheitsrahmenbedingungen

Transports routiers et télématique routière - Systèmes de péage électronique - Lignes directrices concernant les profils de protection de la sécurité des péages

Cestna transportna in prometna telematika - Elektronsko pobiranje pristojbin (EFC) – Smernice za zaščito varnostnih profilov EFC

General Information

• Status: Withdrawn
• Publication Date: 31-Oct-2004
• Withdrawal Date: 14-Sep-2009
• ICS: 35.240.60 - IT applications in transport
• Technical Committee: CEN/TC 278 - Road transport and traffic telematics
• Drafting Committee: CEN/TC 278/WG 1 - Electronic fee collection and access control (EFC)
• Current Stage: 9960 - Withdrawal effective - Withdrawal
• Start Date: 15-Sep-2009
• Completion Date: 15-Sep-2009
• Ref Project: SIST-TS CEN ISO/TS 17574:2005 - Road transport and traffic telematics - Electronic Fee Collection (EFC) - Guidelines for EFC security protection profiles

Relations

• Replaced By: CEN ISO/TS 17574:2009 - Electronic fee collection - Guidelines for security protection profiles (ISO/TS 17574:2009)
• Effective Date: 22-Dec-2008

Standards Content (Sample)

SLOVENSKI STANDARD
SIST-TS CEN ISO/TS 17574:2005
01-april-2005
&HVWQDWUDQVSRUWQDLQSURPHWQDWHOHPDWLND(OHNWURQVNRSRELUDQMHSULVWRMELQ
()&±6PHUQLFH]D]DãþLWRYDUQRVWQLKSURILORY()&
Road transport and traffic telematics - Electronic Fee Collection (EFC) - Guidelines for
EFC security protection profiles
Straßentransport- und Verkehrstelematik - Elektronische Gebührenerhebung -
Sicherheitsrahmenbedingungen
Transports routiers et télématique routiere - Systemes de péage électronique - Lignes
directrices concernant les profils de protection de la sécurité des péages
Ta slovenski standard je istoveten z: CEN ISO/TS 17574:2004
ICS:
35.240.60 Uporabniške rešitve IT v IT applications in transport
transportu in trgovini and trade
SIST-TS CEN ISO/TS 17574:2005 en
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------

SIST-TS CEN ISO/TS 17574:2005

---------------------- Page: 2 ----------------------

SIST-TS CEN ISO/TS 17574:2005
TECHNICAL SPECIFICATION
CEN ISO/TS 17574
SPÉCIFICATION TECHNIQUE
TECHNISCHE SPEZIFIKATION
November 2004
ICS 35.240.60
English version
Road transport and traffic telematics - Electronic Fee Collection
(EFC) - Guidelines for EFC security protection profiles
Transports routiers et télématique routière - Systèmes de
péage électronique - Lignes directrices concernant les
profils de protection de la sécurité des péages
This Technical Specification (CEN/TS) was approved by CEN on 30 October 2003 for provisional application.
The period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested to submit their
comments, particularly on the question whether the CEN/TS can be converted into a European Standard.
CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS available
promptly at national level in an appropriate form. It is permissible to keep conflicting national standards in force (in parallel to the CEN/TS)
until the final decision about the possible conversion of the CEN/TS into an EN is reached.
CEN members are the national standards bodies of Austria, Belgium, Cyprus, Czech Republic, Denmark, Estonia, Finland, France,
Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Slovakia,
Slovenia, Spain, Sweden, Switzerland and United Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION
EUROPÄISCHES KOMITEE FÜR NORMUNG
Management Centre: rue de Stassart, 36  B-1050 Brussels
© 2004 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN ISO/TS 17574:2004: E
worldwide for CEN national Members.

---------------------- Page: 3 ----------------------

SIST-TS CEN ISO/TS 17574:2005
CEN ISO/TS 17574:2004 (E)
Contents page
Foreword.3
Introduction .4
1 Scope .5
2 Normative references.10
3 Terms and definitions .11
4 Abbreviations.14
5 Outlines of Protection Profile.16
5.1 Structure.16
Annex A (informative) Procedures of Preparing Documents.18
A.1 Introduction .18
Annex B (informative) Example of Threat Analysis Evaluation Method .50
B.1 Identification of threats .50
Annex C (informative) Abstract from “Definition of threats and security co
...