IS0/IEC INTERNATIONAL STANDARD 15045-1 First edition 2004-01 Information technology - Home electronic system (HES) gateway : Part 1: A residential gateway model for HES TEC ISO Reference number ISO/IEC 15045-1:2004(E) ISO/IEC INTERNATIONAL STANDARD 15045-1 First edition 2004-01 Information technology - Home electronic system (HEs) gateway Part 1: A residential gateway model for HES ISO/IEC2004 Allrights reserved.Unless otherwisespecified, no part ofthis publicationmay bereproduced orutlized in any form or by any ans, electronic or mechanical, including photo copying and microfilm, without permission in writing from the publisher. PRICE CODE P TEO ISO For price, see curentcatalogue 15045-1@ISO/IEC:2004(E) -2 CONTENTS Scope 1.1 Overview. .9 1.2 Functional safety .. 1.3 Privacy and security . 9 2 Normative references 3 Terms, definitions and abbreviations. 10 3.1 Definitions 10 3.2 Abbreviations . 13 Conformance clauses . 13 4.1 Basic functions and requirements 13 4.2 Optional functions and requirements. 14 5 Functional requirements of residential gateways 14 5.1 Interfacing requirements. 5.1.1 General . 5.1.2 WAN and HAN interfaces 5.1.3 Additional physical modular interfaces 15 5.1.4 Application-specific modularity 15 5.2 Co-existence .. 15 5.3 Address translation requirements. 5.3.1 General.. 5.3.2 External to internal (WAN to HAN) ... 15 5.3.3 Internal to internal (HAN to HAN). 15 5.4 Protocol conversion 16 5.5 Information transfer.. 16 5.6 Auxiliary RG services . 16 5.6.1 Application-specific services . 16 6 Functional safety with residential gateways.. 6.1 Introduction 16 6.2 Requirements for safety. 6.2.1 General . 6.2.2 Blocking capability 6.2.3 Discriminative blocking capability 17 6.2.4 Feedback on blocking. .17 7 Specific privacy and security requirements concerning residentiai gateways 17 7.1 Introduction 17 7.2 Security requirements of a residential gateway.. 17 7.2.1 General.. 17 7.2.2 Devices with direct or secure connections to associated hosts..... 7.2.3 Devices on HANs, without inherent security . 7.3 Information security ..... 7.4 External attack on the RG ... 18 7.5 Security requirements for a residential gateway... 18 7.6 Security requirements for IP connected residential gateways... 18 Annex A (informative) Architecture of residential gateways 19 - 3 15045-1 ISO/IEC:2004(E) A.1 Overview of architecture 19 A.2 Architectural domains 19 A.2.1 General A.2.2 Domain of the RG .. ..20 A.2.3 Basic residential gateway architecture .20 A.2.4 Interfaces and processes A.2.5 Details of component parts.. A.2.6 Structural implementations of the RG .. ...25 Annex B (informative) Functional safety considerations. .29 B.1 Introduction 29 B.1.1 General. .29 B.1.2 Commandstopotentiallyhazardousobjects .29 B.1.3 Commands to relocatable programmable objects . .29 B.1.4 Commands to automatic objects . 29 B.1.5 Command translation.... .30 B.1.6 Linked changed state .. B.1.7 Addressing ....... B.1.8 Broadcast messages, variables and commands . Annex C (informative) Specific privacy and security of residential gateways. .31 C.1 Introduction C.2 Threats. ...31 C.2.1 General .31 C.2.2 Masquerade and replay .31 C.2.3 Interception: eavesdropping and modification .31 C.2.4 Denial-of-service and resource-exhaustion attack. .32 C.2.5 Software and configuration security: trojan horses, worms, viruses. ....32 C.2.6 Spyware/data leakage .. C.2.7 Repudiation .... C.2.8 Signal intelligence... ...33 C.2.9 Unintentional domain to domain interconnect. .33 C.2.10 Secure purchase and payment ... ..34 C.3 Defence measures.. .34 C.3.1 Introduction ... .34 C.3.2 Authentication.. C.3.3 Access control ..... C.3.4 Integrity and confidentiality.. C.3.5 Message authentication code (MAC).. ..35 C.3.6 Hash functions and digital signatures .36 C.3.7 Logging... ..36 C.3.8 Resource management. .36 C.3.9 Host resistance. 37 C.3.10 Social engineering ... C.3.11 Intrusiondetection C.3.12 Repudiation Figure 1 - Typical service provision for home network Figure 2 -