Regional ITS Architecture Dec2022-Update

ITS Security Support Functional Area

Description

'ITS Security Support' provides communications and system security functions to the ITS Object, including privacy protection functions. It may include firewall, intrusion management, authentication, authorization, profile management, identity management, cryptographic key management. It may include a hardware security module and security management information base.

Included In

511DFW

Functional Requirements

ID	Requirement
1	The ITS Object shall obtain security policy information from the Cooperative Intelligent Transportation System Credentials Management System (CCMS).
10	The ITS Object shall maintain cryptographic secret information so that those secrets are accessible only to ITS Security Support, and not to any other Functional Object.
11	The ITS Object shall request pseudonymous credentials from the CCMS.
12	The ITS Object shall provide messages (that it receives) that indicate potential misbehavior/malfunction to the CCMS.
13	The ITS Object shall request permissions from the Center that manages permissions requests.
2	The ITS Object shall request enrollment credentials from the CCMS.
3	The ITS Object shall obtain the CCMS' trust credentials.
4	The ITS Object shall provide a mechanism for on–board applications to digitally sign messages using keys secured by the CCMS' trust authority.
5	The ITS Object shall provide a mechanism for on–board applications to authenticate messages secured by the CCMS' trust authority.
6	The ITS Object shall provide a mechanism for on–board applications to encrypt messages using keys secured by the CCMS' trust authority.
7	The ITS Object shall provide a mechanism for on–board applications to decrypt messages using keys secured by the CCMS' trust authority.
8	The ITS Object shall obtain a list of revoked credentials from the CCMS.
9	The ITS Object shall make the list of revoked credentials available to on–board applications.