US: NTCIP Generic Device - SNMPv3/TLS
Description
This solution is used within the U.S.. It combines standards associated with US: NTCIP Generic Device with those for I–F: SNMPv3/TLS. The US: NTCIP Generic Device standards include upper–layer standards required to implement center–to–field communications for any device functionality. The I–F: SNMPv3/TLS standards include lower–layer standards that support secure center–to–field and field–to–field communications using simple network management protocol (SNMPv3); implementations are strongly encouraged to use the TLS for SNMP security option for this solution to ensure adequate security.
Includes Standards
| Level | DocNum | FullName | Description |
|---|
| Mgmt | NTCIP 1201 | NTCIP Global Object (GO) Definitions | This standard defines SNMP objects (data elements) used by a wide range of field devices like time and versioning information. |
|---|
| Security | IETF RFC 6353 | Transport Layer Security (TLS) Transport Model for the Simple Network Management Protocol (SNMP) | This standard (RFC) defines how to use the TLS authentication service to provide authentication within the access control mechanism of SNMP. |
|---|
Readiness: High–Moderate
Readiness Description
One significant or possibly a couple minor issues. For existing deployments, the chosen solution likely has identified security or management issues not addressed by the communications solution. Deployers should consider additional security measures, such as communications link and physical security as part of these solutions. They should also review the management issues to see if they are relevant to their deployment and would require mitigation. For new deployments, the deployment efforts should consider a path to addressing these issues as a part of their design activities. The solution does not by itself provide a fully secure implementation without additional work.
Issues
| Issue | Severity | Description | Associated Standard | Associated Triple |
|---|
| Out of date (medium) | Medium | The standard includes normative references to other standards that have been subject to significant changes that can impact interoperability or security of systems and the industry has not specified if and how these updates should be implemented for deployments of this standard. | IETF RFC 6353 TLS for SNMP | (All) |
|---|
| Update data to SNMPv3 | Low | Data has been defined for SNMPv1, but needs to be updated to SNMPv3 format. | (None) | (All) |
|---|
| Use TLS for SNMP Option | Low | The standard allows for multiple security mechanisms. The only defined mechanism that meets the requirements for C–ITS is the one based on TLS. | (None) | (All) |
|---|
Supports Interfaces
| Source | Destination | Flow |
|---|
| Cincinnati Dynamic Message Signs | Cincinnati Maintenance Garage | field equipment status |
|---|
| Cincinnati Dynamic Message Signs | Cincinnati Public Services Department | field equipment status |
|---|
| Cincinnati Field Equipment | Cincinnati Maintenance Garage | field equipment status |
|---|
| Cincinnati Field Equipment | Cincinnati Public Services Department | field equipment status |
|---|
| Cincinnati Police Cameras | Cincinnati Maintenance Garage | field equipment status |
|---|
| City and County Cameras | City and County Maintenance Operations | field equipment status |
|---|
| City and County Field Equipment | City and County Maintenance Operations | field equipment status |
|---|
| Hamilton County Field Equipment | Hamilton County Maintenance Division | field equipment status |
|---|
| INDOT Cameras | INDOT Seymour District Maintenance Garages | field equipment status |
|---|
| INDOT Dynamic Message Signs | INDOT Seymour District Maintenance Garages | field equipment status |
|---|
| INDOT Field Equipment | INDOT Seymour District Maintenance Garages | field equipment status |
|---|
| INDOT Ramp Meters | INDOT Seymour District Maintenance Garages | field equipment status |
|---|
| INDOT RWIS Stations | INDOT Seymour District Maintenance Garages | field equipment status |
|---|
| INDOT Traffic Signal Roadway Equipment | INDOT Seymour District Maintenance Garages | field equipment status |
|---|
| INDOT Variable Speed Limit Signs | INDOT Seymour District Maintenance Garages | field equipment status |
|---|
| KYTC District 6 Field Equipment | KYTC District 6 Maintenance Operations | field equipment status |
|---|
| KYTC Dynamic Message Signs | KYTC District 6 Maintenance Garages | field equipment status |
|---|
| KYTC Dynamic Message Signs | KYTC District 6 Maintenance Operations | field equipment status |
|---|
| KYTC Ramp Meters | KYTC District 6 Maintenance Operations | field equipment status |
|---|
| KYTC RWIS Stations | KYTC District 6 Maintenance Operations | field equipment status |
|---|
| KYTC Traffic Signal Roadway Equipment | KYTC District 6 Maintenance Operations | field equipment status |
|---|
| KYTC Variable Speed Limit Signs | KYTC District 6 Maintenance Operations | field equipment status |
|---|
| ODOT / KYTC Cameras | KYTC District 6 Maintenance Operations | field equipment status |
|---|
| ODOT / KYTC Cameras | ODOT District 8 Maintenance Garages | field equipment status |
|---|
| ODOT / KYTC HAR | KYTC District 6 Maintenance Operations | field equipment status |
|---|
| ODOT / KYTC HAR | ODOT District 8 Maintenance Garages | field equipment status |
|---|
| ODOT / KYTC Traffic Counters | KYTC District 6 Maintenance Operations | field equipment status |
|---|
| ODOT / KYTC Traffic Counters | ODOT District 8 Maintenance Garages | field equipment status |
|---|
| ODOT / KYTC Traffic Sensors | KYTC District 6 Maintenance Operations | field equipment status |
|---|
| ODOT / KYTC Traffic Sensors | ODOT District 8 Maintenance Garages | field equipment status |
|---|
| ODOT District 8 Field Equipment | ODOT District 8 Maintenance Garages | field equipment status |
|---|
| ODOT Dynamic Message Signs | ODOT District 8 Maintenance Garages | field equipment status |
|---|
| ODOT Lane Control Devices | ODOT District 8 Maintenance Garages | field equipment status |
|---|
| ODOT Ramp Meters | ODOT District 8 Maintenance Garages | field equipment status |
|---|
| ODOT RWIS Stations | ODOT District 8 Maintenance Garages | field equipment status |
|---|
| ODOT Traffic Signal Roadway Equipment | ODOT District 8 Maintenance Garages | field equipment status |
|---|