Informationstechnik - Sicherheitsverfahren - Schlüsselmanagement - Teil 3: Asymmetrische Techniken verwendende Mechanismen Information technology - Security techniques - Key management - Part 3: Mechanisms using asymmetric techniques
Informationstechnik - Sicherheitsverfahren - Schlüsselmanagement - Teil 3: Asymmetrische Techniken verwendende MechanismenInformation technology - Security techniques - Key management - Part 3: Mechanisms using asymmetric techniques |
Shortname | ISO/IEC 11770-3:2015-08 |
---|---|
Dokumentnummer | 11770-3 |
Ausgabedatum | 2015-08-00 |
Erwerb bei | https://www.vde-verlag.de/iec-normen/222017/iso-iec-11770-3-2015.html |
Internationales Gremium | ISO/IEC JTC 1/SC 27 |
Thema | Schlüsselmanagement , Sicherheitsverfahren |
Sektor | Informationstechnik und Telekommunikation |
Branche | Informationstechnik |
Level of Abstraction | 4 |
- Einführungsbeitrag (short) EN:
ISO/IEC 11770-3:2015 defines key management mechanisms based on asymmetric cryptographic techniques. It specifically addresses the use of asymmetric techniques to achieve the following goals: a) establish a shared secret key for use in a symmetric cryptographic technique between two entities A and B by key agreement. In a secret key agreement mechanism, the secret key is computed as the result of a data exchange between the two entities A and B. Neither of them should be able to predetermine the value of the shared secret key; b) establish a shared secret key for use in a symmetric cryptographic technique between two entities A and B via key transport. In a secret key transport mechanism, the secret key is chosen by one entity A and is transferred to another entity B, suitably protected by asymmetric techniques; and c) make an entity's public key available to other entities via key transport. In a public key transport mechanism, the public key of entity A shall be transferred to other entities in an authenticated way, but not requiring secrecy. Some of the mechanisms of ISO/IEC 11770-3:2015 are based on the corresponding authentication mechanisms in ISO/IEC 9798-3. ISO/IEC 11770-3:2015 does not cover certain aspects of key management, such as key lifecycle management, mechanisms to generate or validate asymmetric key pairs, and mechanisms to store, archive, delete, destroy, etc. keys. While ISO/IEC 11770-3:2015 does not explicitly cover the distribution of an entity's private key (of an asymmetric key pair) from a trusted third party to a requesting entity, the key transport mechanisms described can be used to achieve this. A private key can in all cases be distributed with these mechanisms where an existing, non-compromised key already exists. However, in practice the distribution of private keys is usually a manual process that relies on technological means such as smart cards, etc. ISO/IEC 11770-3:2015 does not specify the transformations used in the key management mechanisms.
- Anmerkung:
Eingeschränkter sachlicher Geltungsbereich in Abschnitt 1 (Scope). / Achtung: Vorgesehene Änderung durch ISO/IEC 11770-3 DAM 1 (2017-01). | Geändert durch ISO/IEC 11770-3 AMD 1 (2017-11), ISO/IEC 11770-3 Technical Corrigendum 1 (2016-05)
- ANSI X 9.42 (2001)
- ANSI X 9.63 (2011)
- IEEE 1363 (2000)
- IETF RFC 2246
- IETF RFC 6509
- ISO 7498-2 (1989-02)
- ISO/IEC 10118-1 (2000-06)
- ISO/IEC 10118-2 (2010-10)
- ISO/IEC 10118-2 Technical Corrigendum 1 (2011-12)
- ISO/IEC 10118-3 (2004-03)
- ISO/IEC 10118-3 AMD 1 (2006-02)
- ISO/IEC 10118-3 Technical Corrigendum 1 (2011-12)
- ISO/IEC 10118-4 (1998-12)
- ISO/IEC 10118-4 AMD 1 (2014-11)
- ISO/IEC 10118-4 Technical Corrigendum 1 (2014-07)
- ISO/IEC 10181-1 (1996-08)
- ISO/IEC 11770-1 (2010-12)
- ISO/IEC 11770-6
- ISO/IEC 14888-2 (2008-04)
- ISO/IEC 14888-3 (2006-11)
- ISO/IEC 15946-1 (2008-04)
- ISO/IEC 18031 (2011-11)
- ISO/IEC 29150 (2011-12)
- ISO/IEC 9594-8 (2008-12)
- ISO/IEC 9796-2 (2010-12)
- ISO/IEC 9796-3 (2006-09)
- ISO/IEC 9797 (1994-04)
- ISO/IEC 9798-3 (1998-10)
-
Transnational Branche: Informationstechnik
Ergebnis 6RICHTLINIE (EU) 2016/1148 DES EUROPÄISCHEN PARLAMENTS UND DES RATES vom 6. Juli 2016 über Maßnahmen zur Gewährleistung eines hohen gemeinsamen Sicherheitsniveaus von Netz- und Informationssystemen in der UnionRL 2016/1148/EU - NIS-Richtlinie
Einzelne Vorschriften
Alle, insbes. Art. 14-16
Transnational Branche: Informationstechnik
Ergebnis 7VERORDNUNG (EU) 2016/679 DES EUROPÄISCHEN PARLAMENTS UND DES RATES vom 27. April 2016 zum Schutz natürlicher Personen bei der Verarbeitung personenbezogener Daten, zum freien Datenverkehr und zur Aufhebung der Richtlinie 95/46/EG (Datenschutz-Grundverordnung)DS-GVO
Einzelne Vorschriften
Art. 5; 24; 25; 28; 29; 32; 33; 34; 35; 36; 37; 38; 39; 40; 42; 43; 45; 46; 47; 49; 51; 57; 58
Transnational Branche: Informationstechnik
Ergebnis 8RICHTLINIE 2013/40/EU DES EUROPÄISCHEN PARLAMENTS UND DES RATES vom 12. August 2013 über Angriffe auf Informationssysteme und zur Ersetzung des Rahmenbeschlusses 2005/222/JI des RatesRL 2013/40/EU
Einzelne Vorschriften
Alle
Transnational Branche: Informationstechnik
Ergebnis 9RICHTLINIE 2008/114/EG DES RATES vom 8. Dezember 2008 über die Ermittlung und Ausweisung europäischer kritischer Infrastrukturen und die Bewertung derNotwendigkeit, ihren Schutz zu verbessernRL 2008/114/EG
Einzelne Vorschriften
Alle
Bundesrecht Branche: Informationstechnik
Ergebnis 10AktiengesetzAktG
Einzelne Vorschriften
§§ 91; 93 I