Committed to connecting the world

WTISD

May22-summary

​​​​

Executive Summary

Meeting of ITU-T SG17 'Security', virtual, 10-20 May 2022

Hot topics 

  • 5G security
  • Countering spam
  • QKDN
  • Intelligent transport system security
  • DLT based security services
  • IoT security
  • Security multi-party computation

1        Meeting Output (meeting statistics see Annex E below)

  • SG17 Working Party structure: no change from last Study Period.
  • Default approval procedure for SG17 Questions: no change from last Study Period.
  • SG17 Rapporteurship: same as last Study Period, adding one new Q13/17 associate Rapporteur
  • Output standards (12, see Annex A): 
    • TAP approval (3): Details are in Annex A a).
    • TAP determined (3): 3 new Recommendations. Details are in An​​nex A b).
    • AAP consented (3): 3 new Recommendations for AAP Last Call. Details are in Annex A c).
    • Agreed (3): 3 new Technical Reports. Details are in Annex A d).
  • New work item established (1517, see Annex C).
  • Work items discontinued (1): Detail is in Annex D.
  • New Registry authority for Republic of Korea: {joint-iso-itu-t(2) country(16) kr(410)}
  • Workshop: 1st ITU-T X.509 Day Event​ was held successfully on 9 May 2022.
  • SG17 JCAs, Correspondence Group/task force
    • JCA-IdM: continued
    • 3 Correspondence Groups
      • CG-secapa (Correspondence Group on Security Capability and Architecture): new
      • CG-SG17-meeting (Correspondence Group on effective SG17 meeting): continued
      • CG-FIDO (of Q10/17): new

2        Next SG17 meetings

2.1       2nd SG17 meeting: Geneva, Tuesday 23 August – Friday 2 September 2022 (9 working days, physical meeting with remote participation (as WTSA-20))

  • ITU workshop on security for 5G and beyond, Monday 22 August 2022, 09:30-17:30
  • Open and extended management team meeting on Monday 22 August 2022, 19:00-21:00.
  • 30th JCA-IdM meeting on Friday 26 August 2022, 14:30-16:00
  • 20 Candidate texts planned for action, details see Annex B.

2.2       3rd SG17 meeting: Geneva, Tuesday 21 February - Friday 3 March 2023 (9 working days)

  • Open and extended management team meeting on Monday 20 February 2023, 19:00-21:00.

2.3       Interim RGMs

6 Questions plan to hold 6 RGMs before next ​SG17 meeting

#
QDatePlace/Host​Subject/objective
1.                 2/1730 June 2022e-meeting
  • prepare texts for action in next SG17 meeting: X.5Gsec-ecs and X.5G-ssl
2.                 3/17June-July 2022e-meeting
  • Discuss survey for CDC in Africa
3.                 10/17July 2022e-meeting
  • progress all the work of Q10/17
4.                 11/1727 June – 01 July 2022e-meeting
  • Joint meeting with ISO/IEC/JTC 1/SC6, agenda in TD216
5.                 13/177-8 June 2022e-meeting
  • prepare final texts for X.ipscv, X.edr-sec, X.eivn-sec, X.srcd, X.fistiscv
  • address all work items
6.                 14/1712-13 July 2022e-meeting
  • work on the action items: X.srscm-dlt, X.sa-dsm
  •  review of deliverables from other study groups, focus groups and other SDOs


Annex A
Actions taken on Recommendations, and other texts at SG17 closing plenary on 20 May 2022

a)    TAP Recommendations approved (WTSA-20 Resolution 1)

#QAcronymTitleNew / RevisedEditor(s)Location of textEquivalent
e.g., ISO/IEC
Start of workTiming
1.        2/17X.1812
(X.5Gsec-t)*
Security framework based on trust relationship for IMT-2020 ecosystemNewMinpeng Qi,
Li Su,
Junzhi Yan,
HeungYoul Youm
TD128 2018-092021-09
2.        4/17X.1246Amd.1*
Technologies involved in countering voice spam in telecommunication organizationsNewDmitry Cherkesov,
Yanbin Zhang
TD322 2019-092021-09
3.        4/17X.1247Amd.1*
Technical framework for countering mobile messaging spamNewDmitry Cherkesov,
Yanbin Zhang
TD323 2019-092021-09

Note: * TAP approval postponed from last SG17 meeting (Jan 2022).​

b)   TAP Recommendations determined (WTSA-20 Resolution 1)

QAcronymTitleNew / RevisedEditor(s)Location of TextEquivalent
e.g., ISO/IEC
Start of workTiming
2/17

X.1813

(X.5G-vs)

Security requirements for operation of vertical services supporting ultra-reliable and low latency communication (URLLC) in IMT-2020 private networkNewJae Eon Oh,
Seongki Shin,
Heung Youl Youm
TD300 2020-092022-05
2/17

X.1814

(X.5Gsec-guide)

Security guideline for 5G communication systemNewMee Yeon Kim,
Keundug Park,
Heung Youl Youm
TD264 2019-012022-05
6/17X.1352
(X.iotsec-4)
Security requirements for IoT device and gatewayNewJiho Bang,
Wonsuk Chung,
Sanggeol Lee,
Hosoek Ryu
TD269 2018-092022-05

c)    AAP Recommendations consented (Recommendation ITU-T A.8)

Q(1)AcronymTitleNew / RevisedEditor(s)Location of TextEquivalent
e.g., ISO/IEC
Start of workTiming
13/17X.1379
(X.rsu-sec)
Security requirements for road-side unit in intelligent transportation systemNewQiguang Fan,
Ye Tian,
Junzhi Yan
TD271 2019-092022-05
14/17X.1409
(X.ss-dlt)
Security services based on distributed ledger technologyNewYue Chen,
Zhaoji Lin,
Min Shu,
Ke Wang,
Kai Wei,
Junjie Xia,
Junzhi Yan
TD222 2017-052022-05
15/17X.1715
(X.sec-QKDN-intrq)
Security requirements and measures for integration of QKDN and secure storage networkNewKaoru KenyoshiTD325 2020-092022-05

d)   Non-normative texts (Technical Report, Supplement, Implementers' Guide, etc) agreed

QAcronymTitleNew / RevisedEditor(s)Location of textEquivalent
e.g., ISO/IEC
Start of workTiming
2/17
XSTP-5Gsec-RMTechnical Report: 5G Security Standardization RoadmapNewYutaka Miyake,
Junzhi Yan,
Gunhee Lee,
Stiepan Kovac
TD312 2021-092022-05
15/17TR.sec-aiTechnical Report: Guidelines for security management of using artificial intelligence technology NewLinlin Zhang,
Liang Wei,
Huiyun Jing,
Junjie Xia
TD232  2022-05
15/17TR.hyb-qkdTechnical Report: Overview of hybrid approaches for key exchange with QKDNewDong-Hi SIMTD301  2022-05


 

Annex B
Recommendations planned for action in SG17 Aug/Sep 2022 meeting

a)       TAP Recommendations planned for TAP approval (WTSA-20 Resolution 1)

QAcronymTitleNew / RevisedEditor(s)Location of TextEquivalent
e.g., ISO/IEC
Start of workTiming
2/17

X.1813
(X.5G-vs)

Security requirements for operation of vertical services supporting ultra-reliable and low latency communication (URLLC) in IMT-2020 private networkNew
Jae Eon Oh,
Seongki Shin,
Heung Youl Youm
R7 2020-092022-05
2/17

X.1814
(X.5Gsec-guide)

Security guideline for 5G communication system
NewMee Yeon Kim,
Keundug Park,
Heung Youl Youm
R8 2019-012022-05
6/17X.1352
(X.iotsec-4)
Security requirements for IoT device and gatewayNewJiho Bang,
Wonsuk Chung,
Sanggeol Lee,
Hosoek Ryu
R9 2018-092022-05

b)       TAP Recommendations planned for TAP determination (WTSA-20 Resolution 1)


#Q(1)AcronymTitleNew / RevisedEditor(s)Location of TextStart of workTiming
1.       2/17X.5Gsec-ecsSecurity guidelines for 5G edge computing servicesNewFeng Gao,
Jae Hoon Nah,
Junjie Xia,
Bo Yu,
Xiaojun Zhuang
TD3112019-012022-09
2.       2/17X.5Gsec-sslGuidelines for classifying security capabilities in 5G network sliceNewZhiyuan Hu,
Li Su,
Ke Wang,
Bo Yang
TD2452020-092022-09
3.       6/17X.sc-iotSecurity Controls for Internet of Things (IoT) systemNew

Koji Nakao,

Liu Lijun

TD40912018-092022-09
4.       6/17X.ztd-iotSecurity methodology for zero-touch deployment in massive IoT based on blockchainNewXin Kang,
Haiguang Wang,
Weidong Wang
TD2432020-092022-09
5.       7/17X.slesSecurity measures for location enabled smart office serviceNewHao Dong,
Lijun Liu,
Jae Hoon Nah, Wenxin Wang
TD2952019-092022-09
6.       8/17,
(14/17)
X.BaaS-secGuidelines on blockchain as a service (BaaS) securityNewNan Meng,
Kyeong Hee Oh
TD2312019-092022-09
7.       8/17X.sgdcSecurity guidelines for distributed cloudNewJinfeng Kou,
Mark McFadden,
Ye Tao,
Laifu Wang,
Lei Xu
TD2522019-012022-09
8.       13/17X.srcdSecurity requirements for categorized data in V2X communicationNew

Yaping Sun,

Huirong Tian,

Nan Meng,

Takamasa Isohara

TD2852018-032022-09
9.       13/17X.edr-secSecurity guidelines for cloud-based event data recorders in automotive environmentNewSang-Woo Lee,
Seungwook Park
TD2812018-092022-09
10.    13/17X.eivn-secSecurity guidelines for Ethernet-based In-Vehicle networkNewSang-Woo Lee,
You-Sik Lee
TD2792018-092022-09
11.    13/17X.fstiscvGuidelines for sharing security threat information on connected vehiclesNewMin Shu,
Wenlei Wang,
Yunwei Zhao,
Xiaochun Yun
TD2822018-092022-09
12.    14/17X.sa-dsmSecurity architecture of data sharing management based on the distributed ledger technologyNewMin Shu,
Yunei Zhao,
Feng Gao,
Zhiyuan Hu
TD293 2022-09

Notes:

(1)     In case of joint Question activity, the lead Question is given without parentheses and other Questions are shown in parentheses; such entries are only shown in the table against the lead Question.

c)       AAP Recommendations planned for AAP consent (Recommendation ITU-T A.8)


Q(1)AcronymTitleNew / RevisedEditor(s)Location of TextStart of work​Timing
1/17X.arch-designDesign principles and best practices for security architecturesNewArnaud TaddeiTD3386 
2019-09
2022-09
13/17X.ipscvGuidelines for an intrusion prevention system for connected vehiclesNew

Seonghoon Jeong, HuyKang Kim, Sang-Woo Lee, Seungwook Park

TD2772019-092022-09
14/17X.srscm-dltSecurity Requirements for Smart Contract Management based on distributed ledger technologyNewTietao Guo,
Li Li,
Kyeong Hee Oh,
Min Shu,
Yang Wu
TD2362020-092022-09

d)       Non-normative texts (Technical Report, Supplement, Implementers' Guide, etc) planned for agreement


QAcronymTitleNew / RevisedEditor(s)Location of textStart of work​Timing
4/17X.Sup-cs-ml Supplement to X.1231: Countering spam based on machine learningNewElizabeth Essl, Wei Liu,
Weidong Wang,
Lei Xu,
Yanbin Zhang
TD2392019-082022-09
7/17TR.ctaTechnical Report: Use cases for contact tracing technologies to prevent spread of infectious diseasesNewMee Yeon Kim,
Heung Youl Youm
TD2942020-092022-09



Annex C
New work items

The following new work items were agreed to be added to the SG17 Work Programme:

#QNWIApproval TDTitleC
1.       2/17TR.cpn-col-secAgreementTD248Technical Report: Security considerations of collaboration of multiple computing power networks
C009
2.       2/17TR.5Gsec-bsfAgreementTD255Technical Report: Guidelines of built-in security framework for telecommunications networkC056
3.       2/17X.5Gsec-srocvsTAPTD268Security Requirements for the Operation of IMT-2020 Core Network to Support Vertical ServicesC073
4.       4/17X.sr-cteaAAPTD244Security requirements and countermeasures for targeted email attacksC021
5.       4/17X.spmohAAPTD241Security framework for storage protection against malware attacks on hostsC042
6.       4/17X.sgc_rcsTAPTD286Guidelines for countering spam over rich communication service (RCS) messagingC087
7.       6/17TR.ba-iotAgreementTD321Technical Report: Broadcast authentication scheme for IoT systemC074
8.       7/17X.suppl.uc-dccAgreementTD266Supplement to X.1152 on use cases for digital COVID-19 certificatesC031
9.       7/17X.smdtfAAPTD258Security measures for digital twin federation in smart cities and communitiesC061
10.    7/17X.srmpcAAPTD259Security requirements for monitoring physical city assetsC062
11.    7/17X.tc-ifdTAPTD253Technical capabilities of interactive fraud detectionC093
12.    8/17X.soar-cc
TAPTD272Framework of security orchestration, automation and response for cloud computingC067
13.    
8/17

X.gdsml
TAPTD229Guidelines for data security using machine learning in big data infrastructure
C088
​14.​

​10/17
​X.ctap21
​AAP
​TD214
​FIDO Client to Authenticator Protocol 2.1
​TD214
​15.
​10/17
​X.uaf12
​AAP
​TD214
​FIDO Universal Authentication Framework Protocol Specification 1.2
​TD214
16.    15/17X.secadefAAPTD288Security capabilities definitionsC013
17.    15/17TR.smpaAgreementTD319Technical Report: Security middle platform architectureC099



Annex D
Work items discontinued

QuestionAcronymTitle
10/17X.tec-idms
Management and protection techniques for user data protection in distributed identity systems


Annex E
SG17 meeting Statistics

 participantscountriesMember StatesSector MembersSG17 AssociatesAcademiaInvited Experts
Announced276393632166
Final281393532166
  • Meeting input and organization

Table of SG17 statistics of this and some past meetings

 

2022-05*

2021-09*

2021-04*

2020-09*

2020-03*

2019-09

2019-01

2018-09

2018-03

2017-09

2017-03

2016-09

2016-03

2015-09

2015-04

C

101

98

104

110

121

151

118

144

113

106

78

81

66

74

80

LS/i

72

46

57

58

49

67

58

47

40

45

43

38

47

56

60

LS/o

20

26

17

28

29

40

39

37

38

46

38

23

32

42

42

TD

331

336

307

434

438

508

380

420

395

426

368

391

418

371

386

Note * - fully virtual meeting

  • Contribution: 101 – stable, DDP: 97%.
    • APT 93 (93%) [China 44 + Korea 39 + Japan 9 + Singapore 1]
    • Americas 4 (4%) [US 4]
    • RCC 2 (2%) [Russia 2]
    • EUR 1 (1%) [UK 1]
    • AFR (0), ARAB (0), LAM (0)      
  • Liaison Statement: matrix in TD23
    • ​incoming 72 - increased due to longer interval since last SG17 meeting
    • Outgoing 20 - stable
  • TDs: 331 - stable