ISO 21177:2023

Intelligent transport systems — ITS station security services for secure session establishment and authentication between trusted devices

This document contains specifications for a set of ITS station security services required to ensure the authenticity of the source and integrity of information exchanged between trusted entities, i.e.: — between devices operated as bounded secured managed entities, i.e. "ITS Station Communication Units" (ITS-SCU) and "ITS station units" (ITS-SU) as specified in ISO 21217; and — between ITS-SUs (composed of one or several ITS-SCUs) and external trusted entities such as sensor and control networks. These services include the authentication and secure session establishment which are required to exchange information in a trusted and secure manner. These services are essential for many intelligent transport system (ITS) applications and services including time-critical safety applications, automated driving, remote management of ITS stations (ISO 24102-2), and roadside/infrastructure-related services.

Systèmes de transport intelligents — Services de sécurité des stations ITS pour l’établissement et l’authentification des sessions sécurisées entre dispositifs de confiance

Le présent document contient les spécifications d’un ensemble de services de sécurité des stations ITS nécessaires pour garantir l’authenticité de la source et l’intégrité des informations échangées entre des entités de confiance, c’est-à-dire: — entre des dispositifs exploités en tant qu’entités délimitées gérées de manière sécurisée, c’est-à-dire les «unités de communication de station ITS» (ITS-SCU) et les «unités de station ITS» (ITS-SU) comme spécifiées dans l’ISO 21217; et — entre les ITS-SUs (composées d’une ou plusieurs ITS-SCUs) et les entités de confiance externes telles que les réseaux de capteurs et de contrôle. Ces services comprennent l’authentification et l’établissement de sessions sécurisées, nécessaires pour échanger des informations dans le cadre d’une relation de confiance et de manière sécurisée. Ces services sont essentiels pour de nombreux services et applications de systèmes de transport intelligents (ITS), notamment les applications de sécurité revêtant un caractère d’urgence, la conduite automatisée, la gestion à distance des stations ITS (ISO 24102-2), et les services routiers liés aux infrastructures.

General Information

• Status: Published
• Publication Date: 06-Apr-2023
• ICS: 03.220.01 - Transport in general
• ICS: 35.030 - IT Security
• ICS: 35.240.60 - IT applications in transport
• Technical Committee: ISO/TC 204 - Intelligent transport systems
• Drafting Committee: ISO/TC 204/WG 18 - Cooperative systems
• Current Stage: 9599 - Withdrawal of International Standard
• Completion Date: 19-Mar-2024

Relations

• Consolidates: ISO 26162-2:2019 - Management of terminology resources — Terminology databases — Part 2: Software
• Effective Date: 06-Jun-2022
• Revised: ISO 21177:2024 - Intelligent transport systems — ITS station security services for secure session establishment and authentication between trusted devices
• Effective Date: 17-Jun-2023
• Revises: ISO/TS 21177:2019 - Intelligent transport systems — ITS station security services for secure session establishment and authentication between trusted devices
• Effective Date: 08-May-2020

Standards Content (Sample)

INTERNATIONAL ISO
STANDARD 21177
First edition
2023-04
Intelligent transport systems —
ITS station security services for
secure session establishment and
authentication between trusted
devices
Systèmes de transport intelligents — Services de sécurité des stations
ITS pour l’établissement et l’authentification des sessions sécurisées
entre dispositifs de confiance
Reference number
ISO 21177:2023(E)
© ISO 2023

---------------------- Page: 1 ----------------------
ISO 21177:2023(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
  © ISO 2023 – All rights reserved

---------------------- Page: 2 ----------------------
ISO 21177:2023(E)
Contents Page
Foreword . vi
Introduction .vii
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Abbreviated terms . 2
5 Overview . 4
5.1 General description, relationship to transport layer security (TLS) and
relationship to application specifications . 4
5.2 Goals . 5
5.3 Architecture and functional entities . 5
5.4 Cryptomaterial handles . 10
5.5 Session IDs and state . 10
5.6 Access control and authorization state . 11
5.7 Application level non-repudiation . 11
5.8 Service primitive conventions . 11
6 Process flows and sequence diagrams .12
6.1 General .12
6.2 Overview of process flows . 12
6.3 Sequence diagram
...

INTERNATIONAL ISO
STANDARD 21177
First edition
Intelligent transport systems —
ITS station security services for
secure session establishment and
authentication between trusted
devices
Systèmes de transport intelligents — Services de sécurité de la station
ITS pour l'établissement et l'authentification des sessions sécurisées
entre dispositifs de confiance
PROOF/ÉPREUVE
Reference number
ISO 21177:2023(E)
© ISO 2023

---------------------- Page: 1 ----------------------
ISO 21177:2023(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
PROOF/ÉPREUVE © ISO 2023 – All rights reserved

---------------------- Page: 2 ----------------------
ISO 21177:2023(E)
Contents Page
Foreword . vi
Introduction .vii
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Abbreviated terms . 2
5 Overview . 4
5.1 General description, relationship to transport layer security (TLS) and
relationship to application specifications . 4
5.2 Goals . 5
5.3 Architecture and functional entities . 5
5.4 Cryptomaterial handles . 10
5.5 Session IDs and state . 10
5.6 Access control and authorization state . 11
5.7 Application level non-repudiation . 11
5.8 Service primitive conventions . 11
6 Process flows and sequence diagrams .12
6.1 General .12
6.2 Overview of process flows . 12
6.
...

INTERNATIONAL STANDARD
Style Definition: List Bullet: Indent: Left: 0 cm,
Hanging: 0.63 cm, No bullets or numbering, Tab stops:
ISO 21177:20222023(E)
0.63 cm, List tab
ISO TC 204/WG 18
Style Definition: List Bullet 3: Indent: Left: 1 cm,
Hanging: 0.63 cm, No bullets or numbering, Tab stops:
Date: 2022-06-172023-02
1.63 cm, List tab
Intelligent transport systems — ITS station security services for secure session establishment
Style Definition: List Bullet 4: Indent: Left: 1.5 cm,
and authentication between trusted devices
Hanging: 0.63 cm, No bullets or numbering, Tab stops:
2.13 cm, List tab
Style Definition: List Bullet 5: Indent: Left: 2 cm,
Hanging: 0.63 cm, No bullets or numbering, Tab stops:
2.63 cm, List tab
Style Definition: List Number 5: Indent: Left: 2 cm,
Hanging: 0.63 cm, No bullets or numbering, Tab stops:
2.63 cm, List tab
Formatted: English (United Kingdom)
Formatted: English (United Kingdom)

---------------------- Page: 1 ----------------------
ISO/DIS 21177:20222023(E)
© ISO 20222023 Formatted
All rights reserved. Unless otherwise specified, or required in the context of its implementation,
no part of this publication may be reproduced or utilized otherwise in any form or by any means,
electronic or mechanical, including photocopying, or posting on the internet or an intranet,
without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
iiii © ISO 20222023 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/DIS 21177:20222023(E)
Contents
Foreword . vii
Introduction . viii
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 2
4 Symbols and abbreviated terms . 3
5 Overview . 5
5.1 General description, relationship to Transport Layer Security (TLS), and
relationship to application specifications . 5
5.2 Goals . 5
5.3 Architecture and functional entities . 6
5.4 Cryptomaterial handles . 10
5.5 Session IDs and state . 10
5.6 Access control and authorisation state. 11
5.7 Application level non-repudiation . 11
5.8 Service primitive conventions . 12
6 Process flows and sequence diagrams . 12
6.1 General . 12
6.2 Overview of process flows . 12
6.3 Sequence diagram conventions . 13
6.4 Configure .
...