 |
Work Item Reference | ETSI Doc. Number |
STF | Technical Body in Charge |
Standard Not Ready For Download |
||
| RGR/CIM-007v1.2 | GR CIM 007 | CIM | |||||
| Current Status (Click to View Full Schedule) |
Latest Version |
Cover Date | Standstill | Creation Date | |||
|
|
1.1.4 Draft | View Standstill Information | 2022-03-22 | ||||
| Rapporteur | Technical Officer | Harmonised Standard | |||||
Martin Bauer
|
Laure Pourcin
|
No | |||||
| Title |
Context Information Management (CIM); Security and Privacy CIM Security and Privacy (SEC) |
||||||
|
Scope and Field of Application |
This document provides an assessment of security and privacy issues associated with ISG CIM specifications, in particular related to the NGSI-LD API, for Data Publishing Platforms and Data Models. Recommendations are accompanied by pro/con information with the intent to reference as much as possible existing widely supported concepts. Issues addressed include, but are not limited to, identity management, authorization and access control, assuring integrity and provenance of data, assuring privacy and security between stakeholders, assuring trust, understanding how to ensure the aggregation of data without increasing the attack space or compromising privacy. The scope of this work is strictly limited to the CIM scope of work, e.g. device security is excluded. Where appropriate, it references existing work, specifications and standards. Safety and reliability issues for systems relying on NGSI-LD APIs and architecture are out of scope of this document. | ||||||
|
Supporting Organizations |
Orange, NEC Europe Ltd, CNIT, Fiware Foundation, KETI, EGM, Deakin University, Sfera s.r.l. | ||||||
