scope:

[ITU-T Y.2701], Security requirements for NGN release 1, provides security requirements for next generation networks (NGNs) and its interfaces (e.g., UNIs, NNIs and ANIs), including a trust model. The security mechanisms selected to implement these requirements will contain options, and mismatched options are undesirable because they tend to introduce security vulnerabilities and make it more difficult to achieve interoperability.

This Recommendation therefore highlights some important security mechanisms that can be used to realize the requirements in [ITU-T Y.2701] and specifies the suite of options to be used for each selected mechanism to reduce interoperability and mismatch problems. The list of mechanisms described in this Recommendation is not exhaustive. NGN providers are encouraged to support additional security tools, capabilities and operational measures as needed beyond the mechanisms specified in this Recommendation for NGN security protection.

This Recommendation is intended to be used with [ITU-T Y.2701] to provide a base for NGN security. It should be used with other security-related Recommendations and other specifications as appropriate for specific security areas.

NOTE - The mechanisms described in this Recommendation for identification and authentication are part of the broader topic generally known as IdM ("identity management").