General

ISO/IEC 10608 is applicable to End Systems concerned with operating in the Open Systems Interconnection (OSI) environment. It specifies a combination of OSI standards which collectively provide the connection-mode Transport Service using the connectionless-mode Network Service.

This part of ISO/IEC 10608 specifies the profile requirements for the provision of security services using cryptographic techniques with the Network Layer Security Protocol connectionless-mode.

This part of ISO/IEC 10608 specifies profile requirements that are applicable to any type of subnetwork.

Position within the Taxonomy

The taxonomy of profiles is specified in ISO/IEC TR 10000-2. This part of ISO/IEC ISP 10608 supports security services for any TA profile specified in ISO/IEC ISP 10608 (Connection-mode transport over Connectionless-mode Network Service).

Scenario

End System

Security Services

The following security services are within the scope of this part of ISO/IEC ISP 10608:

• Data origin authentication
• Connectionless integrity
• Access control using security labels (optional)
• Connectionless confidentiality (optional)
• Traffic flow confidentiality (optional)

Security Mechanisms

This part of ISP 10608 provides no assurance as to the strength of the security mechanisms employed.

This part of ISO/IEC ISP 10608 does not specify the cryptographic algorithms to be employed.