IEEE 1609.2.1:2022

Full Description

Scope

This standard specifies certificate management protocols to support provisioning and management of digital certificates, as specified in IEEE Std 1609.2(TM), to end entities, that is, actors that use digital certificates to authorize application activities.

Purpose

IEEE Std 1609.2 specifies services that can be used to protect messages from attacks such as eavesdropping, spoofing, alteration, and replay. These services make use of digital certificates. Standardized interfaces for requesting, obtaining, and managing these certificates significantly assist the deployment of the system. This standard provides those interfaces for use by end entities, that is, entities other than certificate authorities.

Abstract

Revision Standard - Active. Certificate management protocols are specified in this document to support provisioning and management of digital certificates, as specified in IEEE Std 1609.2(TM), to end entities, that is, an actor that uses digital certificates to authorize application activities

Keywords:

authorization, certificate, end entity, enrollment, IEEE Std 1609, IEEE Std 1609.2.1, interface, Security Credential Management System (SCMS)

Multimedia:

N

Subscription Package:

Vehicular Technology

IEEE Normative references:

1609.2-2016, 1609.2a-2017, 1609.2b-2019, 1609.12-2019

Non-IEEE Normative references:

FIPS 180-4, Secure Hash Standard (SHS), Aug. 2015.

FIPS 186-4, Digital Signature Standard (DSS), Jul. 2013.

IETF RFC 4648, The Base16, Base32, and Base64 Data Encodings.

IETF RFC 5246, The Transport Layer Security (TLS) Protocol Version 1.2.

IETF RFC 5280, Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile.

IETF RFC 5289, TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode (GCM).

IETF RFC 5480, Elliptic Curve Cryptography Subject Public Key Information.

IETF RFC 6749, The OAuth 2.0 Authorization Framework.

IETF RFC 6750, The OAuth 2.0 Authorization Framework: Bearer Token Usage.

IETF RFC 6960, X.509 Internet Public Key Infrastructure Online Certificate Status Protocol--OCSP.

IETF RFC 6961, The Transport Layer Security (TLS) Multiple Certificate Status Request Extension.