Initial draft of Security clause

Thread Links	Date Links
Thread Prev	Thread Next	Thread Index	Date Prev	Date Next	Date Index

Dear colleagues,

For our next meeting, that is coming on June 13^th, I have uploaded a draft of clause 11 (Security-oriented mechanisms). It is available here:

https://www.ieee1904.org/4/meeting_archive/2023/06/tf4_2306_kramer_1_clause11.pdf

This document is mostly an outline with a few sub-clauses filled. Here are the main parts:

11Â Security-oriented mechanismsÂ Â Â Â Â Â Â Â Â

11.1Â Â Â Â Â Â Â Introduction

11.2Â Â Â Â Â Â Â Overview of SIEPON.4 security architecture

11.3Â Â Â Â Â Â Â ONU authentication

11.4Â Â Â Â Â Â Â Data encryption and integrity protection

11.5Â Â Â Â Â Â Â Encryption key management

11.6Â Â Â Â Â Â Â Physical protection of security data in the ONU

11.1 is completed and needs a review

11.2 is mostly completed (one sub-section remains). Needs review, especially the section 11.2.1

11.3 â?? contains the ONU Authentication text copied from DPoE SEC2.0. This section needs to be re-written completely.

11.4 â?? empty, but I have a good idea what to write there. Will work on it for the next meeting

11.5 â?? empty, but I have a good idea what to write for sub-sections 11.5.2 â?? 11.5.7. Somebody needs to take ownership of section 11.5.1 to describe the initial SAK exchange using EAPOL-MKA.

11.6 â?? completed and needs a serious review.

I am sharing this now so that others have a chance to review it and maybe even suggest corrections and improvements before the meeting.

Feel free to start the discussion on this reflector, if needed.

Thank you,

Glen

To unsubscribe from the STDS-1904-4-TF list, click the following link: https://listserv.ieee.org/cgi-bin/wa?SUBED1=STDS-1904-4-TF&A=1