1 Scope
2 References
3 Definitions
3.1 Terms defined elsewhere
3.2 Terms defined in this Recommendation
3.3 Abbreviations and acronyms
3.4 Symbols
4 Conventions
5 Security architecture
5.1 Overview
5.2 Security layers
5.3 Integration within overall oneM2M architecture
6 Security services and interactions
6.1 Security integration in oneM2M flow of events
6.2 Security functions layer
6.3 Secure environment and secure environment abstraction
7 Authorization
7.1 Access control mechanism
7.2 AE impersonation prevention
7.3 Dynamic authorization
7.4 Role based access control
8 Security frameworks
8.1 General introductions to the security frameworks
8.2 Security association establishment frameworks
8.3 Remote security provisioning frameworks
8.4 End-to-end security of primitives (ESPrim)
8.5 End-to-end security of data (ESData)
8.6 Remote security frameworks for end-to-end security
8.7 End-to-end certificate-based key establishment (ESCertKE)
8.8 MAF security framework details
9 Security framework procedures and parameters
9.0 Introduction
9.1 Security association establishment framework procedures and
parameters
9.2 Remote security provisioning framework procedures and
parameters
10 Protocol and algorithm details
10.1 Certificate-based security framework details
10.2 TLS and DTLS details
10.3 Key export and key derivation details
10.4 Credential-ID details
10.5 KpsaID
10.6 KmID format
10.7 Enrolment expiry
11 Privacy protection architecture using privacy policy manager（PPM)
11.1 Introduction
11.2 Relationship between components of PPM and oneM2M
11.3 Privacy policy management in oneM2M architecture
11.4 Privacy policy manager implementation models
12 Security-specific oneM2M data type definitions
12.1 Introduction
12.2 Simple security-specific oneM2M data types
12.3 Enumerated security-specific oneM2M data types
12.4 Complex security-specific oneM2M data types
Annex A – Blank annex
Annex B – Blank annex
Annex C – Security protocols associated to specific SE technologies
C.0 Introduction
C.1 UICC
C.2 Other secure element and embedded secure element with ISO 7816
interface
C.3 Trusted execution environment
C.4 SE to CSE binding
Annex D – UICC security framework to support oneM2M services
D.0 Introduction
D.1 Access network UICC-based oneM2M service framework
D.2 oneM2M service module application for symmetric credentials on
UICC (1M2MSM)
Annex E – Blank annex
Annex F – Acquisition of location information for location based access
control
F.0 Introduction
F.1 Description of region
F.2 Acquisition of location information
Annex G – Blank annex
Annex H – Blank annex
Annex I – Blank annex
Annex J – List of privacy attributes
Page
Appendix I – Mapping of 3GPP GBA terminology
Appendix II – General mutual authentication mechanism
II.0 Introduction
II.1 Group authentication
Appendix III – Blank appendix
Appendix IV – Blank appendix
Appendix V – Precisions for the UICC framework to support M2M services
V.0 Introduction
V.1 Suggested content of the EFs at pre-personalization
V.2 EF changes via data download or CAT applications
V.3 List of SFI values at the ADFM2MSM or DFM2M
level
V.4 UICC related tags defined in annex J
Appendix VI – Access control decision request
Appendix VII – Implementation guidance and index of solutions
Appendix VIII – Blank appendix
Appendix IX – Blank appendix
Appendix X – Terms and conditions markup language implementation rules
Appendix XI – Example SCEP implementation
XI.1 Introduction
XI.2 Certificate provisioning procedures using SCEP
Bibliography