AAP Recommendation

Y.4808: Digital entity architecture framework to combat counterfeiting in IoT

Study Group
20

Study Period
2017-2020

Consent Date
2020-07-16

Approval Date
2020-08-29

Provisional Name
Y.IoT-DA-Counterfeit

Input used for Consent
TD 1795-R7-GEN

Status
A

IPR
Site

There are challenges related to the use and circulation of counterfeit devices in the market, including adverse consequences for users, governments and the private sector. As documented in the ITU-T Technical Report on Counterfeit ICT equipment [b-ITU-T TR on Counterfeit ICT Equipment], there are a lot of technical solutions which are widely used for combating counterfeit products over the globe. The report indicates that RFID tags are among technologies which are used for combating counterfeiting. While this may be true, there are some difficulties associated with securing these systems with regard to the access control exercised to write on the tags. There are solutions established for combating counterfeit devices for specific technologies and/or industries which may not be applicable to all use cases. On the other hand, there are such solutions which may be applicable to all use cases, these solutions are based on the ITU-T Recommendations such as ITU -T Y.4459 "Digital entity architecture framework for Internet of things interoperability" and ITU-T X.1255 "Framework for discovery of identity management information". Resolution 188 (Busan, 2014) on combating counterfeit telecommunication/information and communication technology devices recognized (in recognizing e) that Recommendation ITU-T X.1255, which is based on the digital entity architecture, provides a framework for discovery of identity management information. A digital entity architecture, as described in ITU-T Y.4459, defines a minimum set of needed architectural components and services to provide a generic information and service interoperability. It will facilitate the interoperability of identification, description, representation, access, storage and security of IoT devices. This architecture framework encourages a common security and management interface across different IoT applications. Digital entity architecture provides additional means of security (e.g. public key infrastructure) features to authenticate the parties involved in the identifiers registration process. Other industry approaches to combat counterfeiting are available. They rely on commonly acknowledged identifiers including, but not limited to MAC, IMEI, RFID, …etc. Systems based on digital entity architecture may be considered as one category of candidate tools which allow vendors/industries (not only ICT industry) to store their products' profile in digital form. Therefore, this Recommendation can be used in different industries such as ICT, pharmaceutical, automotive, avionic.

AAP Current Status
Step # Action
Start / End
Status Announcement Related documents Comments / Resolution logs