ISO/IEC TR 16166:2010
Information technology - Telecommunications and information exchange between systems - Next Generation Corporate Networks (NGCN) - Security of session-based communications
ISO/IEC TR 16166:2010 discusses the security of session-based communications within Next Generation Corporate Networks. It uses terminology and concepts developed in ISO/IEC TR 12860. It identifies a number of requirements impacting Next Generation Network standardization and makes a number of recommendations concerning deployment of enterprise networks. In addition, a number of standardization gaps are identified. Both signalling security and media security are considered. The scope of ISO/IEC TR 16166:2010 is limited to communications with a real-time element, including but not limited to voice, video, real-time text, instant messaging and combinations of these (multi-media).
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$0.00 NZD
|
|
| HardCopy |
$50.00 NZD
|
|
| Networkable PDF |
Price varies
|
1 Scope
2 References
3 Terms and definitions
3.1 External definitions
3.2 Other definitions
4 Abbreviations
5 Background
6 General principles
6.1 Threats and counter-measures
6.2 Threats to session level security
6.3 Authorisation
6.4 Security and mobile users
6.5 Security and NGN
6.6 Security and software status
6.7 Call recording and audit
7 Signalling security
7.1 Security of access to session level services
7.2 Securing a SIP signalling hop
7.2.1 TLS for securing SIP signalling
7.2.2 IPsec for security SIP signalling
7.2.3 The role of SIP digest authentication
7.3 Ensuring that all SIP signalling hops are secured
7.4 End-to-end signalling security
7.4.1 End-to-end security using S/MIME
7.4.2 Near end-to-end security using SIP Identity
7.5 Authenticated identity delivery
7.5.1 P-Asserted-Identity (PAI)
7.5.2 Authenticated Identity Body (AIB)
7.5.3 SIP Identity
7.5.4 Authenticated response identity
7.6 NGN considerations
7.7 Public Switched Telephony Network (PSTN) interworking
8 Media security
8.1 SRTP
8.2 Key management for SRTP
8.2.1 Key management on the signalling path
8.2.1.1 MIKEY
8.2.1.2 Security descriptions
8.2.1.3 Common aspects of MIKEY and security descriptions
8.2.2 Key management on the media path
8.2.2.1 DTLS-SRTP
8.2.2.2 ZRTP
8.3 Authentication
8.3.1 Authentication with key management on the signalling path
8.3.2 Authentication with DTLS-SRTP
8.3.3 Authentication with ZRTP
8.4 Media recording
8.5 NGN considerations
9 Use of certificates
10 User interface considerations
11 Summary of requirements, recommendations and standardisation gaps
11.1 Requirements on NGNs
11.2 Recommendations on enterprise networks
11.3 Standardisation gaps
Keep me up-to-date
Sign up to receive updates when there are changes to this standard
Related Information
Similar Standards
-
BS EN 50173-20:2022
Information technology. Generic cabling systems, Alternative cabling configurations
-
BS EN 50173-3:2018
Information technology. Generic cabling systems, Industrial spaces
-
BS EN 50173-3:2018 - TC
Tracked Changes. Information technology. Generic cabling systems, Industrial spaces
-
BS EN 50173-6:2018
Information technology. Generic cabling systems, Distributed building services
1 Scope
2 References
3 Terms and definitions
3.1 External definitions
3.2 Other definitions
4 Abbreviations
5 Background
6 General principles
6.1 Threats and counter-measures
6.2 Threats to session level security
6.3 Authorisation
6.4 Security and mobile users
6.5 Security and NGN
6.6 Security and software status
6.7 Call recording and audit
7 Signalling security
7.1 Security of access to session level services
7.2 Securing a SIP signalling hop
7.2.1 TLS for securing SIP signalling
7.2.2 IPsec for security SIP signalling
7.2.3 The role of SIP digest authentication
7.3 Ensuring that all SIP signalling hops are secured
7.4 End-to-end signalling security
7.4.1 End-to-end security using S/MIME
7.4.2 Near end-to-end security using SIP Identity
7.5 Authenticated identity delivery
7.5.1 P-Asserted-Identity (PAI)
7.5.2 Authenticated Identity Body (AIB)
7.5.3 SIP Identity
7.5.4 Authenticated response identity
7.6 NGN considerations
7.7 Public Switched Telephony Network (PSTN) interworking
8 Media security
8.1 SRTP
8.2 Key management for SRTP
8.2.1 Key management on the signalling path
8.2.1.1 MIKEY
8.2.1.2 Security descriptions
8.2.1.3 Common aspects of MIKEY and security descriptions
8.2.2 Key management on the media path
8.2.2.1 DTLS-SRTP
8.2.2.2 ZRTP
8.3 Authentication
8.3.1 Authentication with key management on the signalling path
8.3.2 Authentication with DTLS-SRTP
8.3.3 Authentication with ZRTP
8.4 Media recording
8.5 NGN considerations
9 Use of certificates
10 User interface considerations
11 Summary of requirements, recommendations and standardisation gaps
11.1 Requirements on NGNs
11.2 Recommendations on enterprise networks
11.3 Standardisation gaps