​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​This section of the roadmap provides an organized overview of identity management (IdM) activities and documents from ITU-T and other standards development organizations. The information is structured to highlight key activities, the resulting outputs, and various stages of development. The objective is to give users a comprehensive understanding of IdM work by presenting the requirements driving these efforts and by identifying the involved organizations, their relationships, and the status of their work.

​​ITU-T Study Group 17: Security​


The work done in SG17 primarily focuses on identity management architecture and mechanisms. The following work has been completed in Question 10/17:​

• ITU-T X.1095: ​Entity authentication service for pet animals using telebiometrics​
  
• ​​​​​ITU-T X.1250:​ Baseline capabilities for enhanced global identity management and interoperability
• ITU-T X.1251: A framework for user control of digital identity
• ITU-T X.1252: Baseline identity management terms and definitions
• ITU-T X.1253: Security guidelines for identity management systems
• ITU-T X.1254: Entity authentication assurance framework
• ITU-T X.1255: Framework for discovery of identity management information
• ITU-T X.1256: Guidelines and framework for sharing network authentication results with service applications
• ITU-T X.1257: Identity and access management taxonomy
• ITU-T X.1258: Enhanced entity authentication based on aggregated attributes
• ITU-T X.1261*: Policy framework including principles for digital identity infrastructure
  *Dual numbering the D.1140 (SG3) as X.1261 (SG17)
• ITU-T X.1275: Guidelines on protection of personally identifiable information in the application of RFID technology
• ITU-T X.1276: Authentication step-up protocol and metadata Version 1.0
• ITU-T X.1277: Universal authentication framework
• ITU-T X.1277.2: Universal authentication framework (UAF) protocol specification ​​
• ITU-T X.1278: Client to authenticator protocol/Universal 2-factor framework
• ITU-T X.1278.2: Client to authenticator protocol
• ITU-T X.1279: Framework of enhanced authentication using telebiometrics with anti-spoofing detection mechanisms
• ITU-T X.1280: Framework for out-of-band server authentication using mobile devices ​
  
• ITU-T X.1281: APIs for interoperability of identity management systems ​
  
• ITU-T X.1283:​ Threat analysis and guidelines for securing password and password-less authentication solutions
• ITU-T X.1284: Authentication framework based on one-time authentication key using distributed ledger technology ​​
  
• ITU-T X.1365: Security methodology for the use of identity-based cryptography in support of Internet of things (IoT) services over telecommunication networks
  
• ITU-T X.1771: Requirements for data de-identification assurance​​
• ​X.Suppl. 7: ITU-T X.1250 - Supplement on overview of identity management in the context of cybersecurity
• X Suppl. 22: ITU-T X.1144 - Supplement on enhancements and new features in eXtensible Access Control Markup Language (XACML 3.0)
• X Suppl. 35:​ ITU-T X.1254 – Supplement on use cases of entity authentication assurance (EAA) framework
• X Suppl. 41: ​Supplement to ITU-T X.1254: e-KYC use cases in digital financial services ​​
  
• X Suppl. 42:​​ Supplement to ITU-T X.1254: Implementation of secure authentication technologies for digital financial services ​​
  

Work in progress includes:


• TR.divs:​ ​Technical Report: Rationale and initial vision of a decentralized identity verification system (DIVS) based on verifiable data​​
  
• TR.SIMRegBio:​ Technical Report: Guidelines for SIM Identity and Biometrics Registration​​
  
• X.1250rev: Baseline capabilities for enhanced global identity management and interoperability
• X.1254rev:​ Entity authentication assurance framework ​​
  
• X.accsadlt:​ ​Access security authentication based on DLT ​
  
• X.bvm: Requirements for biometric variability management ​
  
• X.oicc:​ OpenID Connect Core 1.0 - Errata Set 2 ​
  
• ​X.oob-pacs: Framework for out-of-band physical access control systems using beacon-initiated mutual authentication ​
  
• X.srdidm​: Security requirements for decentralized identity management systems using distributed ledger technology
• X.tas: Telebiometric authentication using speaker recognition​
  
• X.tis: Telebiometric authentication based on information splitting ​
  
• X.vctp:​ Verifiable credential-based trust propagation framework in the decentralized identity ​
  

​​ITU-T Study Group 2: Operational aspects​


Published work includes:​

• ITU-T E.217: Maritime communications - Ship station identity
  
• ITU-T M.3411: User identity and access management requirements for telecommunication management network ​
  

Work in progress includes:


• TR.OTTnum: Current use of E.164 numbers as identifiers for OTTs
• E.IoT-NNAI: Internet of Things naming numbering addressing and identifiers
• ​M.uiamr-ir​: User identity and access management interface for telecommunications management network - Protocol neutral requirements

​​ITU-T Study Group 3: Economic and policy issues​​


Published work includes:​

• ITU-T ​D.1140 (D.DigID) | X.1261*: Policy framework including principles for digital identity infrastructure
  *Dual numbering of the D.1140(SG3) as X.1261 (SG17)

Work in progress includes:


• D.princip_bigdata: Policy framework and principles for data protection in the context of big data relating to international telecommunication services
• Study_bigdata: Technical Paper on economic and policy aspects of Big Data in international telecommunication services and networks

​​ITU-T Study Group 11: Protocols and test specifications​​​


In SG11, identity management related work is undertaken by Question 2, Question 12, and Question 15 as follows: a) Q2/11: Identity management on telecommunication equipment (such as trustable interconnection between network entities) and service (such as calling party line identity); b) Q12/11: Identity management related to test of internet of things; c) Q15/11: Identity management on combating counterfeit and stolen telecommunication/ICT devices.

• ITU-T Q.763: Signalling System No. 7 – ISDN User Part formats and codes ​​Amendment 7:​ Extensions for the support for the calling line identification authentication​
  
• ITU-T Q.931: ISDN user-network interface layer 3 specification for basic call control Amendment 2: Extensions for the support for the calling line identification authentication.​
  
• ITU-T Q.1902.3: Bearer Independent Call Control protocol (Capability Set 2) and Signalling System No.7 ISDN User Part: Formats and codes ​Amendment 6: Extensions for the support for the calling line identification authentication​
  
• ITU-T Q.3062: Signalling procedures and protocols for enabling interconnection between trustable network entities in support of existing and emerging networks 
• ITU-T Q.3063: Signalling procedures of calling line identification authentication
• ITU-T Q.5052: Addressing mobile devices with duplicate unique identifier
• ITU-T Q.5054: Consumer centric framework for combating counterfeit and stolen information and communication technology mobile devices ​​
  
• Q Suppl. 76: ​​​Common approaches and interfaces for data exchange between the central equipment identity register and the equipment identity register ​
  

Work in progress includes:


• Q.5055:​ Technical requirement, interfaces and generic functions of CEIR ​​​
  
• Q.cpi: Signalling requirements for computing power identification in computing power network ​​
  
• Q.GIR: Technical requirement and implementation strategy for Global International Mobile Equipment Identity Registry ​​
  
• Q.SI-SAN: Signalling requirements for service identification in service aware network ​​
  
• Q.Sup.CFS-AFR: Guidelines on combating counterfeit and stolen mobile devices in African region ​​
  
• Q.Supplement.75-Rev: Use cases on the combat of counterfeit ICT and stolen mobile devices ​
  

​​ITU-T Study Group 13: Future networks​​


In SG 13, identity management related work is undertaken by Question 22 (Networks beyond IMT2020: Emerging network technologies). The following work has been completed:​

• ITU-T Y.2720: NGN identity management framework
• ITU-T Y.2721: NGN identity management requirements and use cases
• ITU-T Y.2722: NGN identity management mechanisms
• ITU-T Y.3081: Self-Controlled Identity based on Blockchain: Requirements and Framework​
  

Work in progress includes:


​Y.3087 (ex Y.SCid-fra):​ ​Self-controlled identity based on blockchain - Functional requirements and architecture ​

​Y.TRUST-TLA:​ ​Framework of Trust Level Assessment for Trustworthy Networking ​​