iTeh StandardsiTeh Standards
EURUSD
Your shopping cart is empty.
ISO

ISO/IEC 9594-8:2020/Cor 2:2024

(Corrigendum)

Information technology — Open systems interconnection — Part 8: The Directory: Public-key and attribute certificate frameworks — Technical Corrigendum 2

Information technology — Open systems interconnection — Part 8: The Directory: Public-key and attribute certificate frameworks — Technical Corrigendum 2

Technologies de l'information — Interconnexion de systèmes ouverts (OSI) — Partie 8: Titre manque — Rectificatif technique 2

General Information

Status
Published
Publication Date
21-Feb-2024
ICS
35.100.70 - Application layer
Technical Committee
ISO/IEC JTC 1/SC 6 - Telecommunications and information exchange between systems
Drafting Committee
ISO/IEC JTC 1/SC 6 - Telecommunications and information exchange between systems
Current Stage
6060 - International Standard published
Start Date
22-Feb-2024
Completion Date
22-Feb-2024
Ref Project

Relations

Corrects
ISO/IEC 9594-8:2020 - Information technology — Open systems interconnection — Part 8: The Directory: Public-key and attribute certificate frameworks
Effective Date
27-May-2023

Buy Standard

ISO/IEC 9594-8:2020/Cor 2:2024 - Information technology — Open systems interconnection — Part 8: The Directory: Public-key and attribute certificate frameworks — Technical Corrigendum 2 Released:22. 02. 2024ISO/IEC 9594-8:2020/Cor 2:2024 - Information technology — Open systems interconnection — Part 8: The Directory: Public-key and attribute certificate frameworks — Technical Corrigendum 2 Released:22. 02. 2024
PreviousNext
Standard
ISO/IEC 9594-8:2020/Cor 2:2024 - Information technology — Open systems interconnection — Part 8: The Directory: Public-key and attribute certificate frameworks — Technical Corrigendum 2 Released:22. 02. 2024
English language
5 pages
sale 15% off
Preview
sale 15% off
Preview

Standards Content (Sample)

International
Standard
ISO/IEC 9594-8
Information technology — Open
Ninth edition
systems interconnection —
2020-11
Part 8:
TECHNICAL
CORRIGENDUM 2
The Directory: Public-key and
attribute certificate frameworks
TECHNICAL CORRIGENDUM 2
Reference number
ISO/IEC 9594-8:2020/Cor.2:2024(en) © ISO/IEC 2024

---------------------- Page: 1 ----------------------
ISO/IEC 9594-8:2020/Cor.2:2024(en)
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2024
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
© ISO/IEC 2024 – All rights reserved
ii

---------------------- Page: 2 ----------------------
ISO/IEC 9594-8:2020/Cor.2:2024(en)
This document was prepared by ITU-T as ITU-T X.509 (2019) Cor. 2 (10/2023) and drafted in
accordance with its editorial rules, in collaboration with Joint Technical Committee ISO/IEC JTC
1, Information technology, Subcommittee SC 6, Telecommunications and information exchange
between systems.
© ISO/IEC 2024 – All rights reserved
iii

---------------------- Page: 3 ----------------------
ISO/IEC 9594-8:2020/Cor.2:2024(en)
INTERNATIONAL STANDARD ISO/IEC 9594-8
RECOMMENDATION ITU-T X.509
Information technology – Open Systems Interconnection – The Directory: Public-key and
attribute certificate frameworks
Technical Corrigendum 2
Summary
Corrigendum 2 to ITU-T X.509 (2019) | ISO/IEC 9594-8:2020 covers resolution to defect reports 434 and 435.

*
History
Edition Recommendation Approval Study Group Unique ID
ITU-T X.509 11.1002/1000/2999
1.0 1988-11-25
ITU-T X.509 11.1002/1000/3000
2.0 1993-11-16 7
ITU-T X.509 11.1002/1000/4123
3.0 1997-08-09 7
ITU-T X.509 (1997) Technical Cor. 1 11.1002/1000/5033
3.1 2000-03-31 7
ITU-T X.509 (1997) Technical Cor. 2 11.1002/1000/5311
3.2 2001-02-02 7
ITU-T X.509 (1997) Technical Cor. 3 11.1002/1000/5559
3.3 2001-10-29 7
ITU-T X.509 (1997) Technical Cor. 4 11.1002/1000/6025
3.4 2002-04-13 17
ITU-T X.509 (1997) Technical Cor. 5 11.1002/1000/6236
3.5 2003-02-13 17
ITU-T X.509 (1997) Technical Cor. 6 11.1002/1000/7285
3.6 2004-04-29 17
ITU-T X.509 11.1002/1000/5034
4.0 2000-03-31 7
ITU-T X.509 (2000) Technical Cor. 1 11.1002/1000/5560
4.1 2001-10-29 7
ITU-T X.509 (2000) Technical Cor. 2 11.1002/1000/6026
4.2 2002-04-13 17
ITU-T X.509 (2000) Technical Cor. 3 11.1002/1000/15258
4.3 2003-02-13 17
ITU-T X.509 (2000) Technical Cor. 3 11.1002/1000/7284
4.3 2004-04-29 17
ITU-T X.509 (2000) Technical Cor. 4 11.1002/1000/8637
4.4 2007-01-13 17
ITU-T X.509 11.1002/1000/8501
5.0 2005-08-29 17
ITU-T X.509 (2005) Cor. 1 11.1002/1000/9051
5.1 2007-01-13 17
ITU-T X.509 (2005) Cor. 2 11.1002/1000/9591
5.2 2008-11-13 17
ITU-T X.509 (2005) Cor. 3 11.1002/1000/11042
5.3 2011-02-13 17
ITU-T X.509 (2005) Cor. 4 11.1002/1000/11577
5.4 2012-04-13 17
ITU-T X.509 11.1002/1000/9590
6.0 2008-11-13 17
ITU-T X.509 (2008) Cor. 1 11.1002/1000/11043
6.1 2011-02-13 17
ITU-T X.509 (2008) Cor. 2 11.1002/1000/11578
6.2 2012-04-13 17
ITU-T X.509 (2008) Cor. 3 11.1002/1000/11736
6.3 2012-10-14 17
ITU-T X.509 11.1002/1000/11735
7.0 2012-10-14 17
____________________
*
To access the Recommendation, type the URL https://handle.itu.int/ in the address field of your web
browser, followed by the Recommendation's unique ID.
Rec. ITU-T X.509 (2019) Cor. 2 (10/2023)
© ISO/IEC 2024 – All rights reserved
iv

---------------------- Page: 4 ----------------------
ISO/IEC 9594-8:2020/Cor.2:2024(en)
ITU-T X.509 (2012) Cor. 1 11.1002/1000/12474
7.1 2015-05-29 17
ITU-T X.509 (2012) Cor. 2 11.1002/1000/12844
7.2 2016-04-29 17
ITU-T X.509 (2012) Cor. 3 11.1002/1000/13032
7.3 2016-10-14 17
ITU-T X.509 11.1002/1000/13031
8.0 2016-10-14 17
ITU-T X.509 11.1002/1000/14033
9.0 2019-10-14 17
ITU-T X.509 (2019) Cor. 1 11.1002/1000/14791
9.1 2021-10-14 17
ITU-T X.509 (2019) Cor. 2 11.1002/1000/15705
9.2 2023-10-29 17
Rec. ITU-T X.509 (2019) Cor. 2 (10/2023)
© ISO/IEC 2024– All rights reserved
v

---------------------- Page: 5 ----------------------
ISO/IEC 9594-8:2020/Cor.2:2024(en)
FOREWORD
The International Telecommunication Union (ITU) is the United Nations specialized agency in the field of
telecommunications, information and communication technologies (ICTs). The ITU Telecommunication
Standardization Sector (ITU-T) is a permanent organ of ITU. ITU-T is responsible for studying technical,
operating and tariff questions and issuing Recommendations on them wit
...

Questions, Comments and Discussion

Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.

This May Also Interest You

ISO
ISO/IEC 9594-2:2020/Amd 1:2021(Amendment)
Information technology — Open systems interconnection — Part 2: The Directory: Models — Amendment 1
  • Standard
    1 page
    English language
    sale 15% off
ISO
ISO/IEC 9594-8:2020/Cor 1:2021(Corrigendum)
Information technology — Open systems interconnection — Part 8: The Directory: Public-key and attribute certificate frameworks — Technical Corrigendum 1
  • Standard
    2 pages
    English language
    sale 15% off
ISO
ISO/IEC 9594-11:2020(Main)
Information technology — Open systems interconnection directory — Part 11: Protocol specifications for secure operations

The scope of this Recommendation | International Standard is threefold. This Recommendation | International Standard provides guidance on how to prepare new and old protocols for cryptographic algorithm migration, and defines auxiliary cryptographic algorithms to be used for migration purposes. This Recommendation | International Standard specifies a general wrapper protocol that provides authentication, integrity and confidentiality (encryption) protection for other protocols. This wrapper protocol includes a migration path for cryptographic algorithms allowing for smooth migration to stronger cryptographic algorithms as such requirements evolve. This will allow migration to quantum-safe cryptographic algorithms. Protected protocols can then be developed without taking security and cryptographic algorithms into consideration. This Recommendation | International Standard also includes some protocols to be protected by the wrapper protocol primarily for support of public-key infrastructure (PKI). Other specifications, e.g., Recommendations or International Standards, may also develop protocols designed to be protected by the wrapper protocol.

  • Standard
    84 pages
    English language
    sale 15% off
ISO
ISO/IEC 9594-1:2020(Main)
Information technology — Open systems interconnection — Part 1: The Directory: Overview of concepts, models and services

This document provides the directory capabilities required by many application layer standards and telecommunication services. Among the capabilities which it provides are those of "user-friendly naming", whereby objects can be referred to by names which are suitable for citing by human users (though not all objects need have user-friendly names); and "name-to-address mapping" which allows the binding between objects and their locations to be dynamic. The latter capability allows networks, for example, to be "self-configuring" in the sense that addition, removal and the changes of object location do not affect network operation. The Directory is not intended to be a general-purpose database system, although it may be built on such systems. It is assumed, for instance, that, as is typical with communication directories, there is a considerably higher frequency of "queries" than of updates. The rate of updates is expected to be governed by the dynamics of people and organizations, rather than, for example, the dynamics of networks. There is also no need for instantaneous global commitment of updates; transient conditions, where both old and new versions of the same information are available, are quite acceptable. It is a characteristic of the Directory that, except as a consequence of differing access rights or un-propagated updates, the results of directory queries will not be dependent on the identity or location of the inquirer. This characteristic renders the Directory unsuitable for some telecommunication applications, for example some types of routing. For cases where the results are dependent on the identity of the inquirer, access to directory information and updates of the Directory may be denied.

  • Standard
    22 pages
    English language
    sale 15% off
  • Standard
    22 pages
    English language
    sale 15% off
ISO
ISO/IEC 9594-7:2020(Main)
Information technology — Open systems interconnection — Part 7: The Directory: Selected object classes

This document defines a number of object classes and name forms which may be found useful across a range of applications of the Directory. The definition of an object class involves listing a number of attribute types which are relevant to objects of that class. The definition of a name form involves naming the object class to which it applies and listing the attributes to be used in forming names for objects of that class. These definitions are used by the administrative authority which is responsible for the management of the directory information. Any administrative authority can define its own object classes or subclasses and name forms for any purpose. NOTE 1 ? Those definitions may or may not use the notation specified in Rec. ITU-T X.501 | ISO/IEC 9594-2. NOTE 2 ? It is recommended that an object class defined in this Recommendation | International Standard, or a subclass derived from one, or a name form defined in this Recommendation | International Standard, be used in preference to the generation of a new one, whenever the semantics is appropriate for the application. Administrative authorities may support some or all the selected object classes and name forms, and may also add additional ones. All administrative authorities shall support the object classes which the directory uses for its own purpose (the top, alias and Directory system agent (DSA) object classes).

  • Standard
    30 pages
    English language
    sale 15% off
  • Standard
    30 pages
    English language
    sale 15% off
ISO
ISO/IEC 9594-6:2020(Main)
Information technology — Open systems interconnection — Part 6: The Directory: Selected attribute types

This document defines a number of attribute types and matching rules which may be found useful across a range of applications of the Directory. Attribute types and matching rules fall into three categories, as described below. Some attribute types and matching rules are used by a wide variety of applications or are understood and/or used by the Directory itself. NOTE 1 ? It is recommended that an attribute type or matching rule defined in this Recommendation | International Standard be used, in preference to the generation of a new one, whenever it is appropriate for the application. NOTE 2 ? The attribute and context types definitions by this Recommendation | International Standard have some associated semantics. Such specifications should not be used in situations where these semantics do not apply. Some attribute types and matching rules are internationally standardized, but are application‑specific. These are defined in the standards associated with the application concerned. Any administrative authority can define its own attribute types and matching rules for any purpose. These are not internationally standardized, and are available to others beyond the administrative authority which created them only through bilateral agreement.

  • Standard
    122 pages
    English language
    sale 15% off
  • Standard
    122 pages
    English language
    sale 15% off
ISO
ISO/IEC 9594-3:2020(Main)
Information technology — Open systems interconnection — Part 3: The Directory: Abstract service definition

This document defines in an abstract way the externally visible service provided by the Directory. This document does not specify individual implementations or products.

  • Standard
    120 pages
    English language
    sale 15% off
  • Draft
    120 pages
    English language
    sale 15% off
ISO
ISO/IEC 9594-5:2020(Main)
Information technology — Open systems interconnection — Part 5: The Directory: Protocol specifications

This document specifies the Directory Access Protocol, the Directory System Protocol, the Directory Information Shadowing Protocol, and the Directory Operational Binding Management Protocol which fulfil the abstract services specified in Rec. ITU-T X.511 | ISO/IEC 9594-3, Rec. ITU-T X.518 | ISO/IEC 9594-4, Rec. ITU‑T X.525 | ISO/IEC 9594-9, and Rec. ITU-T X.501 | ISO/IEC 9594-2.

  • Standard
    83 pages
    English language
    sale 15% off
  • Standard
    83 pages
    English language
    sale 15% off
ISO
ISO/IEC 9594-4:2020(Main)
Information technology — Open systems interconnection — Part 4: The Directory: Procedures for distributed operation

This document specifies the behaviour of DSAs taking part in a distributed directory consisting of multiple Directory systems agents (DSAs) and/or LDAP servers with at least one DSA. The allowed behaviour has been designed to ensure a consistent service given a wide distribution of the DIB across a distributed directory. Only the behaviour of DSAs taking part in a distributed directory is specified. The behaviour of LDAP servers are specified in relevant LDAP specifications. There are no special requirements on an LDAP server beyond those given by the LDAP specifications. The Directory is not intended to be a general purpose database system, although it may be built on such systems. It is assumed that there is a considerably higher frequency of queries than of updates.

  • Standard
    125 pages
    English language
    sale 15% off
  • Draft
    125 pages
    English language
    sale 15% off
ISO
ISO/IEC 9594-8:2020(Main)
Information technology — Open systems interconnection — Part 8: The Directory: Public-key and attribute certificate frameworks

This document addresses some of the security requirements in the areas of authentication and other security services through the provision of a set of frameworks upon which full services can be based. Specifically, this Recommendation | International Standard defines frameworks for: ? public-key certificates; and ? attribute certificates. The public-key certificate framework defined in this Recommendation | International Standard specifies the information objects and data types for a public-key infrastructure (PKI), including public-key certificates, certificate revocation lists (CRLs), trust broker and authorization and validation lists (AVLs). The attribute certificate framework specifies the information objects and data types for a privilege management infrastructure (PMI), including attribute certificates, and attribute certificate revocation lists (ACRLs). This Recommendation | International Standard also provides the framework for issuing, managing, using and revoking certificates. An extensibility mechanism is included in the defined formats for both certificate types and for all revocation list schemes. This Recommendation | International Standard also includes a set of extensions, which is expected to be generally useful across a number of applications of PKI and PMI. The schema components (including object classes, attribute types and matching rules) for storing PKI and PMI information in a directory, are included in this Recommendation | International Standard. This Recommendation | International Standard specifies the framework for strong authentication, involving credentials formed using cryptographic techniques. It is not intended to establish this as a general framework for authentication, but it can be of general use for applications which consider these techniques adequate. Authentication (and other security services) can only be provided within the context of a defined security policy. It is a matter for users of an application to define their own security policy.

  • Standard
    224 pages
    English language
    sale 15% off
  • Standard
    224 pages
    English language
    sale 15% off