ISO/IEC 30118-2:2021
(Main)Information technology — Open Connectivity Foundation (OCF) Specification — Part 2: Security specification
Information technology — Open Connectivity Foundation (OCF) Specification — Part 2: Security specification
This document defines security objectives, philosophy, Resources and mechanism that impacts OCF base layers of ISO/IEC 30118-1. ISO/IEC 30118-1 contains informative security content. The OCF Security Specification contains security normative content and may contain informative content related to the OCF base or other OCF documents.
Technologies de l'information — Specification de la Fondation pour la connectivité ouverte (Fondation OCF) — Partie 2: Spécification de sécurité
General Information
Relations
Buy Standard
Standards Content (Sample)
INTERNATIONAL ISO/IEC
STANDARD 30118-2
Second edition
2021-10
Information technology — Open
Connectivity Foundation (OCF)
Specification —
Part 2:
Security specification
Technologies de l'information — Specification de la Fondation pour la
connectivité ouverte (Fondation OCF) —
Partie 2: Spécification de sécurité
Reference number
ISO/IEC 30118-2:2021(E)
© ISO/IEC 2021
---------------------- Page: 1 ----------------------
ISO/IEC 30118-2:2021(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii
© ISO/IEC 2021 – All rights reserved
---------------------- Page: 2 ----------------------
ISO/IEC 30118-2:2021(E)
Contents Page
Foreword . ix
Introduction . x
1 Scope . 1
2 Normative References . 1
3 Terms, definitions and abbreviated terms . 3
3.1 Terms and definitions . 3
3.2 Symbols and abbreviated terms . 5
4 Document conventions and organization . 7
4.1 Conventions . 7
4.2 Notation . 7
4.3 Data types . 8
4.4 Document structure . 8
5 Security overview . 8
5.1 Preamble . 8
5.2 Access control . 10
5.2.1 Access control general. 10
5.2.2 ACL architecture . 11
5.3 Onboarding overview . 12
5.3.1 Onboarding general . 12
5.3.2 Onboarding steps . 14
5.3.3 Establishing a Device Owner . 15
5.3.4 Provisioning for Normal Operation . 16
5.3.5 OCF Compliance Management System . 16
5.4 Provisioning . 16
5.4.1 Provisioning general . 16
5.4.2 Access control provisioning . 17
5.4.3 Credential provisioning . 17
5.4.4 Role provisioning . 17
5.5 Secure Resource Manager (SRM) . 17
5.6 Credential overview . 18
5.7 Event logging . 18
5.7.1 Event logging general . 18
6 Security for the discovery process . 19
6.1 Preamble . 19
6.2 Security considerations for discovery . 19
7 Security provisioning . 21
7.1 Device identity . 21
7.1.1 General Device identity . 21
7.1.2 Device identity for devices with UAID [Deprecated] . 21
7.2 Device ownership . 21
7.3 Device Ownership Transfer Methods . 22
7.3.1 OTM implementation requirements . 22
7.3.2 SharedKey credential calculation . 23
7.3.3 Certificate credential generation . 24
7.3.4 Just-Works OTM . 24
© ISO/IEC 2021 – All rights reserved iii
---------------------- Page: 3 ----------------------
ISO/IEC 30118-2:2021(E)
7.3.5 Random PIN based OTM . 25
7.3.6 Manufacturer Certificate Based OTM . 28
7.3.7 Vendor specific OTMs . 30
7.3.8 Establishing Owner Credentials . 31
7.3.9 Security profile assignment . 34
7.4 Provisioning . 35
7.4.1 Provisioning flows . 35
8 Device Onboarding state definitions . 36
8.1 Device Onboarding general . 36
8.2 Device Onboarding-Reset state definition . 37
8.3 Device Ready-for-OTM State definition . 38
8.4 Device Ready-for-Provisioning State Definition . 39
8.5 Device Ready-for-Normal-Operation state definition . 39
8.6 Device Soft Reset State definition . 40
9 Security Credential management . 41
9.1 Preamble . 41
9.2 Credential lifecycle . 41
9.2.1 Credential lifecycle general . 41
9.2.2 Creation . 41
9.2.3 Deletion . 41
9.2.4 Refresh . 41
9.2.5 Revocation . 42
9.3 Credential types . 42
9.3.1 Preamble . 42
9.3.2 Pair-wise symmetric key credentials . 42
9.3.3 Group symmetric key credentials . 42
9.3.4 Asymmetric authentication key credentials . 43
9.3.5 Asymmetric Key Encryption Key credentials . 43
9.3.6 Certificate credentials . 44
9.3.7 Password credentials . 44
9.4 Certificate based key management . 44
9.4.1 Overview . 44
9.4.2 X.509 digital certificate profiles . 45
9.4.3 Certificate Revocation List (CRL) Profile [deprecated] . 54
9.4.4 Resource model . 54
9.4.5 Certificate provisioning . 54
9.4.6 CRL provisioning [deprecated] . 55
10 Device authentication . 55
10.1 Device authentication general . 55
10.2 Device authentication with symmetric key credentials . 56
10.3 Device authentication with raw asymmetric key credentials . 56
10.4 Device authentication with certificates. 56
10.4.1 Device authentication with certificates general . 56
10.4.2 Role assertion with certificates . 57
10.4.3 OCF PKI Roots . 58
10.4.4 PKI Trust Store . 58
10.4.5 Path Validation and extension processing . 59
iv © ISO/IEC 2021 – All rights reserved
---------------------- Page: 4 ----------------------
ISO/IEC 30118-2:2021(E)
11 Message integrity and confidentiality. 59
11.1 Preamble . 59
11.2 Session protection with DTLS . 59
11.2.1 DTLS protection general . 59
11.2.2 Unicast session semantics . 59
11.3 Cipher suites . 59
11.3.1 Cipher suites general . 59
11.3.2 Cipher suites for Device Ownership Transfer . 60
11.3.3 Cipher Suites for symmetric keys . 60
11.3.4 Cipher auites for asymmetric credentials . 61
12 Access control . 62
12.1 ACL generation and management . 62
12.2 ACL evaluation and enforcement . 62
12.2.1 ACL evaluation and enforcement general . 62
12.2.2 Host reference matching . 62
12.2.3 Resource wildcard matching . 62
12.2.4 Multiple criteria matching . 63
12.2.5 Subject matching using wildcards . 63
12.2.6 Subject matching using roles . 64
12.2.7 ACL evaluation . 64
13 Security Resources . 66
13.1 Security Resources general . 66
13.2 Device Owner Transfer Resource . 68
13.2.1 Device Owner Transfer Resource General . 68
13.2.2 OCF defined OTMs . 71
13.3 Credential Resource . 71
13.3.1 Credential Resource general . 71
13.3.2 Properties of the Credential Resource . 76
13.3.3 Key formatting . 78
13.3.4 Credential Refresh Method details [deprecated] . 79
13.4 Certificate Revocation List . 79
13.4.1 CRL Resource definition [deprecated] . 79
13.5 ACL Resources . 79
13.5.1 ACL Resources general . 79
13.5.2 OCF Access Control List (ACL) BNF defines ACL structures. . 79
13.5.3 ACL Resource . 80
13.6 Access Manager ACL Resource [deprecated] . 85
13.7 Signed ACL Resource [deprecated] . 85
13.8 Provisioning Status Resource . 85
13.9 Certificate Signing Request Resource . 91
13.10 Roles Resource . 91
13.11 Auditable Events List Resource . 93
13.11.1 Auditable Events List Resource general . 93
13.12 Security Virtual Resources (SVRs) and Access Policy . 96
13.13 SVRs, discoverability and OCF Endpoints . 97
13.14 Additional privacy consideration for Core Resources . 97
13.15 Easy Setup Resource Device state . 98
© ISO/IEC 2021 – All rights reserved v
---------------------- Page: 5 ----------------------
ISO/IEC 30118-2:2021(E)
13.16 List of Auditable Events . 100
13.17 Security Domain Information Resource . 102
14 Security hardening guidelines/ execution environment security . 103
14.1 Preamble . 103
14.2 Execution environment elements . 103
14.2.1 Execution environment elements general . 103
14.2.2 Secure storage . 103
14.2.3 Secure execution engine . 106
14.2.4 Trusted input/output paths . 106
14.2.5 Secure clock . 106
14.2.6 Approved algorithms . 107
14.2.7 Hardware tamper protection . 107
14.3 Secure Boot . 107
14.3.1 Concept of software module authentication . 107
14.3.2 Secure Boot process . 109
14.3.3 Robustness requirements . 109
14.4 Attestation . 110
14.5 Software Update . 110
14.5.1 Overview . 110
14.5.2 Recognition of current differences . 110
14.5.3 Software Version Validation . 111
14.5.4 Software Update . 111
14.5.5 Recommended usage . 112
14.6 Non-OCF Endpoint interoperability . 112
14.7 Security levels . 112
14.8 Security Profiles . 113
14.8.1 Security Profiles general . 113
14.8.2 Identification of Security Profiles (Normative) . 114
14.8.3 Security Profiles . 115
15 Device Type specific requirements . 120
15.1 Bridging security . 120
15.1.1 Universal requirements for Bridging to another Ecosystem . 120
15.1.2 Additional security requirements specific to bridged protocols . 121
Annex A (informative) Access control examples . 123
A.1 Example OCF ACL Resource . 123
Annex B (informative) Execution environment security profiles . 124
Annex C (normative) Resource Type definitions . 125
C.1 List of Resource Type definitions . 125
C.2 Access Control List-2 . 125
C.2.1 Introduction . 125
C.2.2 Well-known URI. 125
C.2.3 Resource type . 125
C.2.4 OpenAPI 2.0 definition. 125
C.2.5 Property definition . 133
C.2.6 CRUDN behaviour . 133
C.3 Credential . 134
C.3.1 Introduction . 134
C.3.2 Well-known URI. 134
vi © ISO/IEC 2021 – All rights reserved
---------------------- Page: 6 ----------------------
ISO/IEC 30118-2:2021(E)
C.3.3 Resource type . 134
C.3.4 OpenAPI 2.0 definition . 134
C.3.5 Property definition . 143
C.3.6 CRUDN behaviour . 143
C.4 Certificate Signing Request. 143
C.4.1 Introduction . 143
C.4.2 Well-known URI . 143
C.4.3 Resource type . 143
C.4.4 OpenAPI 2.0 definition . 144
C.4.5 Property definition . 145
C.4.6 CRUDN behaviour . 145
C.5 Device Owner Transfer Method . 146
C.5.1 Introduction . 146
C.5.2 Well-known URI . 146
C.5.3 Resource type . 146
C.5.4 OpenAPI 2.0 definition . 146
C.5.5 Property definition . 149
C.5.6 CRUDN behaviour . 150
C.6 Device provisioning status . 151
C.6.1 Introduction . 151
C.6.2 Well-known URI . 151
C.6.3 Resource type . 151
C.6.4 OpenAPI 2.0 definition . 151
C.6.5 Property definition . 154
C.6.6 CRUDN behaviour . 158
C.7 Asserted roles . 158
C.7.1 Introduction . 158
C.7.2 Well-known URI . 158
C.7.3 Resource type . 158
C.7.4 OpenAPI 2.0 definition . 158
C.7.5 Property definition . 166
C.7.6 CRUDN behaviour . 167
C.8 Security Profile . 167
C.8.1 Introduction . 167
C.8.2 Well-known URI . 167
C.8.3 Resource type . 167
C.8.4 OpenAPI 2.0 definition . 167
C.8.5 Property definition .
...
INTERNATIONAL ISO/IEC
STANDARD 30118-2
Second edition
Information technology — Open
Connectivity Foundation (OCF)
Specification —
Part 2:
Security specification
PROOF/ÉPREUVE
Reference number
ISO/IEC 30118-2:2021(E)
©
ISO/IEC 2021
---------------------- Page: 1 ----------------------
ISO/IEC 30118-2:2021(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii PROOF/ÉPREUVE © ISO/IEC 2021 – All rights reserved
---------------------- Page: 2 ----------------------
ISO/IEC 30118-2:2021(E)
Contents Page
Foreword . ix
Introduction . x
1 Scope . 1
2 Normative References . 1
3 Terms, definitions and abbreviated terms . 3
3.1 Terms and definitions . 3
3.2 Symbols and abbreviated terms . 5
4 Document conventions and organization . 7
4.1 Conventions . 7
4.2 Notation . 7
4.3 Data types . 8
4.4 Document structure . 8
5 Security overview . 8
5.1 Preamble . 8
5.2 Access control . 10
5.2.1 Access control general. 10
5.2.2 ACL architecture . 11
5.3 Onboarding overview . 12
5.3.1 Onboarding general . 12
5.3.2 Onboarding steps . 14
5.3.3 Establishing a Device Owner . 15
5.3.4 Provisioning for Normal Operation . 16
5.3.5 OCF Compliance Management System . 16
5.4 Provisioning . 16
5.4.1 Provisioning general . 16
5.4.2 Access control provisioning . 17
5.4.3 Credential provisioning . 17
5.4.4 Role provisioning . 17
5.5 Secure Resource Manager (SRM) . 17
5.6 Credential overview . 18
5.7 Event logging . 18
5.7.1 Event logging general . 18
6 Security for the discovery process . 19
6.1 Preamble . 19
6.2 Security considerations for discovery . 19
7 Security provisioning . 21
7.1 Device identity . 21
7.1.1 General Device identity . 21
7.1.2 Device identity for devices with UAID [Deprecated] . 21
7.2 Device ownership . 21
7.3 Device Ownership Transfer Methods . 22
7.3.1 OTM implementation requirements . 22
7.3.2 SharedKey credential calculation . 23
7.3.3 Certificate credential generation . 24
7.3.4 Just-Works OTM . 24
© ISO/IEC 2021 – All rights reserved iii
---------------------- Page: 3 ----------------------
ISO/IEC 30118-2:2021(E)
7.3.5 Random PIN based OTM . 25
7.3.6 Manufacturer Certificate Based OTM . 28
7.3.7 Vendor specific OTMs . 30
7.3.8 Establishing Owner Credentials . 31
7.3.9 Security profile assignment . 34
7.4 Provisioning . 35
7.4.1 Provisioning flows . 35
8 Device Onboarding state definitions . 36
8.1 Device Onboarding general . 36
8.2 Device Onboarding-Reset state definition . 37
8.3 Device Ready-for-OTM State definition . 38
8.4 Device Ready-for-Provisioning State Definition . 39
8.5 Device Ready-for-Normal-Operation state definition . 39
8.6 Device Soft Reset State definition . 40
9 Security Credential management . 41
9.1 Preamble . 41
9.2 Credential lifecycle . 41
9.2.1 Credential lifecycle general . 41
9.2.2 Creation . 41
9.2.3 Deletion . 41
9.2.4 Refresh . 41
9.2.5 Revocation . 42
9.3 Credential types . 42
9.3.1 Preamble . 42
9.3.2 Pair-wise symmetric key credentials . 42
9.3.3 Group symmetric key credentials . 42
9.3.4 Asymmetric authentication key credentials . 43
9.3.5 Asymmetric Key Encryption Key credentials . 43
9.3.6 Certificate credentials . 44
9.3.7 Password credentials . 44
9.4 Certificate based key management . 44
9.4.1 Overview . 44
9.4.2 X.509 digital certificate profiles . 45
9.4.3 Certificate Revocation List (CRL) Profile [deprecated] . 54
9.4.4 Resource model . 54
9.4.5 Certificate provisioning . 54
9.4.6 CRL provisioning [deprecated] . 55
10 Device authentication . 55
10.1 Device authentication general . 55
10.2 Device authentication with symmetric key credentials . 56
10.3 Device authentication with raw asymmetric key credentials . 56
10.4 Device authentication with certificates. 56
10.4.1 Device authentication with certificates general . 56
10.4.2 Role assertion with certificates . 57
10.4.3 OCF PKI Roots . 58
10.4.4 PKI Trust Store . 58
10.4.5 Path Validation and extension processing . 59
iv © ISO/IEC 2021 – All rights reserved
---------------------- Page: 4 ----------------------
ISO/IEC 30118-2:2021(E)
11 Message integrity and confidentiality. 59
11.1 Preamble . 59
11.2 Session protection with DTLS . 59
11.2.1 DTLS protection general . 59
11.2.2 Unicast session semantics . 59
11.3 Cipher suites . 59
11.3.1 Cipher suites general . 59
11.3.2 Cipher suites for Device Ownership Transfer . 60
11.3.3 Cipher Suites for symmetric keys . 60
11.3.4 Cipher auites for asymmetric credentials . 61
12 Access control . 62
12.1 ACL generation and management . 62
12.2 ACL evaluation and enforcement . 62
12.2.1 ACL evaluation and enforcement general . 62
12.2.2 Host reference matching . 62
12.2.3 Resource wildcard matching . 62
12.2.4 Multiple criteria matching . 63
12.2.5 Subject matching using wildcards . 63
12.2.6 Subject matching using roles . 64
12.2.7 ACL evaluation . 64
13 Security Resources . 66
13.1 Security Resources general . 66
13.2 Device Owner Transfer Resource . 68
13.2.1 Device Owner Transfer Resource General . 68
13.2.2 OCF defined OTMs . 71
13.3 Credential Resource . 71
13.3.1 Credential Resource general . 71
13.3.2 Properties of the Credential Resource . 76
13.3.3 Key formatting . 78
13.3.4 Credential Refresh Method details [deprecated] . 79
13.4 Certificate Revocation List . 79
13.4.1 CRL Resource definition [deprecated] . 79
13.5 ACL Resources . 79
13.5.1 ACL Resources general . 79
13.5.2 OCF Access Control List (ACL) BNF defines ACL structures. . 79
13.5.3 ACL Resource . 80
13.6 Access Manager ACL Resource [deprecated] . 85
13.7 Signed ACL Resource [deprecated] . 85
13.8 Provisioning Status Resource . 85
13.9 Certificate Signing Request Resource . 91
13.10 Roles Resource . 91
13.11 Auditable Events List Resource . 93
13.11.1 Auditable Events List Resource general . 93
13.12 Security Virtual Resources (SVRs) and Access Policy . 96
13.13 SVRs, discoverability and OCF Endpoints . 97
13.14 Additional privacy consideration for Core Resources . 97
13.15 Easy Setup Resource Device state . 98
© ISO/IEC 2021 – All rights reserved v
---------------------- Page: 5 ----------------------
ISO/IEC 30118-2:2021(E)
13.16 List of Auditable Events . 100
13.17 Security Domain Information Resource . 102
14 Security hardening guidelines/ execution environment security . 103
14.1 Preamble . 103
14.2 Execution environment elements . 103
14.2.1 Execution environment elements general . 103
14.2.2 Secure storage . 103
14.2.3 Secure execution engine . 106
14.2.4 Trusted input/output paths . 106
14.2.5 Secure clock . 106
14.2.6 Approved algorithms . 107
14.2.7 Hardware tamper protection . 107
14.3 Secure Boot . 107
14.3.1 Concept of software module authentication . 107
14.3.2 Secure Boot process . 109
14.3.3 Robustness requirements . 109
14.4 Attestation . 110
14.5 Software Update . 110
14.5.1 Overview . 110
14.5.2 Recognition of current differences . 110
14.5.3 Software Version Validation . 111
14.5.4 Software Update . 111
14.5.5 Recommended usage . 112
14.6 Non-OCF Endpoint interoperability . 112
14.7 Security levels . 112
14.8 Security Profiles . 113
14.8.1 Security Profiles general . 113
14.8.2 Identification of Security Profiles (Normative) . 114
14.8.3 Security Profiles . 115
15 Device Type specific requirements . 120
15.1 Bridging security . 120
15.1.1 Universal requirements for Bridging to another Ecosystem . 120
15.1.2 Additional security requirements specific to bridged protocols . 121
Annex A (informative) Access control examples . 123
A.1 Example OCF ACL Resource . 123
Annex B (informative) Execution environment security profiles . 124
Annex C (normative) Resource Type definitions . 125
C.1 List of Resource Type definitions . 125
C.2 Access Control List-2 . 125
C.2.1 Introduction . 125
C.2.2 Well-known URI. 125
C.2.3 Resource type . 125
C.2.4 OpenAPI 2.0 definition. 125
C.2.5 Property definition . 133
C.2.6 CRUDN behaviour . 133
C.3 Credential . 134
C.3.1 Introduction . 134
C.3.2 Well-known URI. 134
vi © ISO/IEC 2021 – All rights reserved
---------------------- Page: 6 ----------------------
ISO/IEC 30118-2:2021(E)
C.3.3 Resource type . 134
C.3.4 OpenAPI 2.0 definition . 134
C.3.5 Property definition . 143
C.3.6 CRUDN behaviour . 143
C.4 Certificate Signing Request. 143
C.4.1 Introduction . 143
C.4.2 Well-known URI . 143
C.4.3 Resource type . 143
C.4.4 OpenAPI 2.0 definition . 144
C.4.5 Property definition . 145
C.4.6 CRUDN behaviour . 145
C.5 Device Owner Transfer Method . 146
C.5.1 Introduction . 146
C.5.2 Well-known URI . 146
C.5.3 Resource type . 146
C.5.4 OpenAPI 2.0 definition . 146
C.5.5 Property definition . 149
C.5.6 CRUDN behaviour . 150
C.6 Device provisioning status . 151
C.6.1 Introduction . 151
C.6.2 Well-known URI . 151
C.6.3 Resource type . 151
C.6.4 OpenAPI 2.0 definition . 151
C.6.5 Property definition . 154
C.6.6 CRUDN behaviour . 158
C.7 Asserted roles . 158
C.7.1 Introduction . 158
C.7.2 Well-known URI . 158
C.7.3 Resource type . 158
C.7.4 OpenAPI 2.0 definition . 158
C.7.5 Property definition . 166
C.7.6 CRUDN behaviour . 167
C.8 Security Profile . 167
C.8.1 Introduction . 167
C.8.2 Well-known URI . 167
C.8.3 Resource type . 167
C.8.4 OpenAPI 2.0 definition . 167
C.8.5 Property definition . 169
C.8.6 CRUDN behaviour . 170
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.