Інформаційні технології. Методи захисту. Керування ключами. Частина 1. Загальні положення

1 2

1 2 З? 4 4 1 4 1 1 4 1 2 4 1 3 4 1 4 4 2 4 2 1 4 2 2 5 5 1 5 1 1 5 1 2 5 1 3 5 1 4 5 1 5 5 1 6 5 1 7 5 1 8 5 1 9 5 110 5 111 5 2 5 2 1 5 2 2 6 6 1 6 2 6 3 7 D 1 D 2 D 3 D 4 D 5

—? —? —? —?

INFORMATION TECHNOLOGY

SECURITY TECHNIQUES. KEY MANAGEMENT

Part 1. Framework
1 1) 2) 3) 4) 5) 6) 7) 2 ISO 7498-2:1989 Information processing systems — Open Systems Interconnection — Basic Reference Model — Part 2: Security Architecture
ISO/IEC 9798-1:1991 Information technology — Security techniques — Entity authentification mechanisms — Part 1: General model
ISO 10181-1:1996 Information Technology— Open Systems Interconnection — Security frameworks for open systems: Overview.

ISO 7498-2:1989 ISO/IEC 9798-1:1991 ISO 10181-1:1996 З? 3.1 3.2 I 3.3 3.4 (

3.5 3.6 3.7 3.8 3.9 3.10 3.11 3.12 3.13 3.14 3.15 3.16 3.17 3.18 3.19

3.20 3.21 3.22 4 4.1 4.1.1 4.1.2 4.1.3 — —? —? 4.1.4 4.2 —? —? —?

4.2.1 —? —? —? —? —?

4.2.2 5 5 1

5.1.1 5.1.2 5.1.3 5.1.4 ISO/IEC 11770-2 5.1.5 5,1.6 —? —? —? 5.1.7 5.1.8 5.1.9 5.1.10 5.1.11 5.2 5.2.1 —? —? —? —? —? 5.2.2 6 6.1

6.2 —? —? —? 1) 2)

6.3 —? —?

7 —? —? —? ( —? —? —? —? —? ( —? —? —? —? —? —? —? —? —? —? Key PROTECTED KeyCoetecTs, pratectmTypey,
KeyContents ::= SEQUENCE
key ID [0] Keyjdentity, keyValue (

—? " —? " —? " —? " —? —? —? —? —?

( D.1 1) 2) 3) 4) 5) 6) 7) 8) 9) D.1.1 D.2 D.2.1 1) 2) 3) 4) 5)

D.2.1.1 D.2.2 D .2.2.1 D.2.2.2 1) 2) 3) D.2.3 1) 2) D.2.4 1) 2) 3) 4) 5) D.2.5 D.3 D.3.1 D.3.2 D 4 D.5 1) 2) 3) 4) 5) 6) 7) 1) 2) 3) D.5.1 1) 2)

1) 2) 3) 1) 2) 3) ( ISO 8732 1988 Banking — Key management (wholesale)
ISO/I EC 9594-8 1990 Information technology — Open Systems Interconnection — The Directory — Part 8 Authentication framework
ISO/IEC 10116 1991 Information technology — Modes of operation for an n-bit block cipher algorithm
ISO 11166-1 1994 Banking — Key management by means of asymmetric algorithms — Part 1 Principles, procedures and formats
ISO 11568-1 1994 Banking — Key management (retail) — Part 1 Introduction to key management
ISO 11568-2 1994 Banking — Key management (retail) — Part 2 Key management techniques for symmetric ciphers
ISO 11568-3 1994 Banking — Key management (retail) — Part 3 Key life cycle for symmetric ciphers
ISO 11568-4 1) Banking — Key management (retail) — Part 4 Key management techniques for public key cryptosystems
(SO 11568-5 1) Banking — Key management (retail) — Part 5 Key life cycle for public key cryptosystems
ISO/IEC 11770-2 1996 Information technology — Security techniques — Key management — Part 2 Mechanisms using symmetric techniques
ISO/IEC 11770-3 1) Information technology — Security techniques — Key management — Part 3 Mechanisms using asymmetric techniques
ISO/IEC 13888 1) Information technology— Security requirements — Non-repudiation (all parts)
ISO 8732 1988 ISO/IEC 9594-8 1990 ISO/IEC 10116 1991 ISO 11166-1 1994 ISO 11568-1 1994 ISO 11568-2'1994 ISO 11568-3'1994 ISO 11568-4:1994 ISO 11568-3'1994 ISO/IEC 11770-2.1996 ISO/IEC 11770-3 ISO/IEC 13888