ITU-T Work Programme

[2025-2028] : [SG20] : [Q6/20]

[Declared patent(s)] - [Associated work]

Work item:

Y.IoT-dce-sec

Subject/title:

Security capabilities and guideline for IoT device capability exposure

Status:

Under study

Approval process:

AAP

Type of work item:

Recommendation

Version:

New

Equivalent number:

Timing:

2027-Q4 (Medium priority)

Liaison:

ITU-T SG17

Supporting members:

State Grid Corporation of China; China Unicom; CICT China; ZTE Corporation

Summary:

With the rapid development and application of artificial intelligence (AI) and Internet of Things (IoT) technologies, IoT devices and applications are becoming increasingly powerful and feature-rich. The growing interdependence between these devices and their associated applications has also intensified. As a result, both IoT devices and applications are now exposed to more sophisticated and escalating cybersecurity risks and threats. The IoT DCE [ITU-T Y.4115] — which serves as a service layer for integrating, coordinating, and managing IoT device capabilities, and acts as a connector between IoT devices and applications — has also become a critical target for such threats. This makes it imperative for the IoT DCE to possess enhanced security management and service capabilities. While [ITU-T Y.4115] defines general functions and a basic set of security services for the IoT DCE, more robust and comprehensive security capabilities are required to effectively address emerging threats and meet evolving security demands. In addition, the development of clear and practical security implementation guidelines for IoT DCE is both important and necessary. This draft Recommendation identifies security risks and threats and security requirements for IoT DCE, and provides relevant security-enhanced architecture and security capabilities, as well as guideline for secure implementation of IoT DCE.

Comment:

Reference(s):

[SG20-TD1341-R1/GEN (2026-05) (A.1 TD)

]