ngn and its standardization september 27, 2006 nec corporation itu-t ngn security requirements...

46
NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

Upload: patrick-combs

Post on 27-Mar-2015

239 views

Category:

Documents


3 download

TRANSCRIPT

Page 1: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

NGN and its Standardization

September 27, 2006NEC Corporation

ITU-T NGN security requirements (Y.2701) editorTakashi Egawa

NGN: Next Generation Network

Page 2: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

2

NGN is coming!

Evolution ofenterprise networksDecrease of $/Bit

Evolution ofenterprise networksDecrease of $/Bit

Evolution oftelecommunications

FMC

Evolution oftelecommunications

FMC

Next generation InternetWEB2.0、 RSS

Next generation InternetWEB2.0、 RSS

Telecommunication-broadcast

convergence

Telecommunication-broadcast

convergence

NGN (Next Generation Networks)NGN (Next Generation Networks)(Evolution of architecture and revolutionary services)(Evolution of architecture and revolutionary services)

needs meets seeds

・ Broadband/mobile gets popular・ network is now a part of life

・ Expansion of biz-use net・ Emerges net-based business

・ Opt/IP/mobile technologies・ Intl. standardization

individuals Business Technologies

Needs Seeds

Lifestyle changes New business changes Network business leap

Starting of new evolutionStarting of new evolution

Page 3: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

3

Expectation and changes of NGN

Increase of usabilityFlourish of servicesEasy to use, with easeSimple/cheap

Increase of usabilityFlourish of servicesEasy to use, with easeSimple/cheap

For personal users For enterprise

Rebuilding of businessNew source of profitCAPEX/OPEX decreaseBusiness area expansion

Rebuilding of businessNew source of profitCAPEX/OPEX decreaseBusiness area expansion

For network providers

NGN: enabling technologyNGN: enabling technology

Revolution for layman/enterprise as well as Revolution for layman/enterprise as well as network providersnetwork providers

Infrastructure of bizBiz.expansion baseAdoption to new biz modelsReliable/cheap

Infrastructure of bizBiz.expansion baseAdoption to new biz modelsReliable/cheap

Page 4: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

4

Agenda

1. Why NGN?

2. Standardization process

3. ITU-T NGN

4. NGN standardization in Japan

Page 5: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

1. Why NGN?

Page 6: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

6

Technological necessity of NGN

Does the Internet continue to evolve?

Best-effort QoS: New applications are hard to developCommercial quality real-time communications are difficult to provide

TV conference, streaming, …

Security/Reliability: Not carrier-gradeChildren/elders can’t apply patches everyday

Mobility: the next bonanza will be in mobile gadgetsCurrent (ordinary) IP assumes fixed network

Discussions at Linux Symposium (2006)

The Internet created various applications thanks to the freedom of end-users.Does it apply to IPTV, Web 2.0, or FMC?

Page 7: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

7

Limitation from IP’s principle

• Routing table are updated in local manner; no network-wide, no equipment-wide sync scalable and cheap, but no QoS guarantee becomes possible

• No state in routers; minimize memory access expandable and faster, but traffic engineering becomes unavailable

• Very limited functions in networks interoperable ‘Internet Protocol’, but no security, no QoS-awareness

router

router

router

Packet (header + payload)

TE

TE

Routing table

Principle of IP

The problems tightly linked with IP principle and merits

Page 8: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

8

IP Design Philosophy: Main Goals

• Effective multiplexed utilization of existing networks– Packet switching, not circuit switching

• Continued communication despite network failures– Routers don’t store state about ongoing transfers– End-hosts provide key communication services

• Support for multiple types of communication service– Multiple transport protocols (e.g., TCP and UDP)

• Accommodation of variety of different networks– Simple, best-effort packet delivery service– Packets may be lost, corrupted, or delivered out of order

• Distributed management of network resources– Multiple institutions managing the network– Intradomain and interdomain routing protocols

Grosshauser (2002)

Page 9: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

9

Characteristics of the Internet

• The Internet is– Decentralized (loose confederation of peers)– Self-configuring (no global registry of topology)– Stateless (limited information in the routers)– Connectionless (no fixed connection between

hosts)

• These attributes contribute– To the success of the Internet– To the rapid growth of the Internet– …and the difficulty of controlling the Internet :<

Grosshauser (2002)

Page 10: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

10

Operator Philosophy: Tension with IP

• Accountability of network resources– But, routers don't maintain state about transfer– But, measurement isn’t part of the infrastructure

• Reliability/predictability of services– But, IP doesn’t provide performance guarantees– But, equipment is not very reliable (no ‘five-9s’)

Downtime: IP networks: 471min/year, POTS: <5min/year

• Fine-grained control over the network– But, routers don’t do fine-grain resource allocation– But, network self-configures after failures

• End-to-end control over communication– But, end hosts adapt to congestion– But, traffic may traverse multiple domains

Grosshauser (2002)

Page 11: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

11

But operators cannot rely on PSTN services any more

# of calls in Japan (from MIC’s white paper 2005)(1e8)

(fiscalyear)

PDCmobilefixedTotal

In most developed countries,

2000 or around was the peak of telephone traffic

Page 12: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

12

We must make Operator-friendly IP networks

• NTT: trial starts by the end of fiscal 2006• KDDI: Fixed network becomes all-IP by fiscal 2007• BT: by 2008• Korea: long-distance is by 2007, local by 2010

IP traffic > telephone trafficFiscal 2004: 34.1Gbps

(in Japan: converted 533k Erlang using 64kbps/call)

> -5%/year

May 2006: 524Gbps(Public Internet in Japan)

> 20%/year

Timeline

IP must be the base of future networks

Page 13: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

13

NGN: best mix of packet and circuit

• "Service Stratum" for per-session control of packet transmission• Data is transmitted with IP packet for interoperability• All necessary functions are in the network (fat network approach)

– Operators can maintain every aspect of functions increase reliability– All the terminals can do is just to call network’s functions increase security– Control interface is open promotes development of applications

NGN transport functions

NGN service control functions

Telephone Services

Data Services (WWW, e-mail, etc)

Video Services (TV, movie, etc)

Internet Protocol(IP)

Anything & Everything

Everything(Any & All Network technologies)

(Any/All Applicationse.g. voice , data , video)

ScopeOf

"Internet"

"Service Stratum"(Session control by using SIP, etc.)

"Transport Stratum"(managed IP network)

ITU-T Y.2011 "General principles and general reference model for Next Generation Networks"

Hourglass model of IP

Page 14: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

2. Standardization process

Page 15: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

15

De jure standards v. De facto standards

• Open and fair process• Results are shared among

all participants (usu. without charge)

• Reflects broader opinions

De jure standards

• Operated by highly motivated volunteers

• Faster standardization• Currently very popular

ITU, ISO, TTA, TTC, .. IETF, TMF, WiMAX, ..

frameworkIndividual components

and technologies

NGN framework includes regulations and policies(e.g., how to standardize emergency services, how to design market regulationsconsidering network architecture)

De jure standards becomes important

In NGN

De facto standards

Page 16: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

16

NGN related standard bodies

ITU-TITU-T

ETSI(EC)

CCSA(China)

TTA(Korea)

APT(Asia Pacific)

ATIS(USA)

TIA(USA)

ISACC(Canada)

3GPP3GPP

TTC(Japan)

ACIF(Aust)

ARIB(Japan)

3GPP23GPP2

Close collaboration

RegionalDe JureSDOs&PartnershipProjects

TISPAN project standardize NGN, esp. VoIP. Release 1 issued in Dec. 2005.

Standardize NGN in NGN-GSI, esp. SG13. Issued first recommendations in July 2006.

De FactoSDOs IETFIETF OMAOMA WiMAXWiMAX TMFTMF

aaa

DSLForumDSL

Forum MSFMSF ….

SDO: Standard Development Organization

InternationalDe JureSDO

Standardize IMS, NGN’s central module. Partnership Project among regional SDOs.

Page 17: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

17

NGN-JCA

Timeline of NGN standardization

Focus Group IPTV

NGN-GSI (Global Standards Initiative)

Study Period 2005-2008

2004 2005 2006 2007Study Period 2000-2004

ITU-T Focus Group NGN

Collaboration among SG13,11,19 and other SGs

Release 1 (architecture, VoIP)

Release 2(IPTV, FMC, etc.)

(European NGN standards)

Integrated in 2003TIPHONSPAN

ETSI(TISPAN)

Release 1 (architecture, VoIP)Release 2(IPTV, FMC, etc.)

IMS based NGN architecture

(3G mobile specs)

3GPPIMS Release6

IMS Release7

Collaboration on IMS

(International NGN standards)

We are here

Page 18: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

18

Organization of ITU

ITU-R

ITU-T: Telecommunications

ITU-D: developing country support

ITU-R: Radio

SG2 (numbering, etc.)

SG4 (management)

SG9 (cable net)

SG15 (transport)

SG17 (security & language)

SG12 (QoS)

SG3 (charging)

SG5 (electromagnetic protection)

SG6 (plant)

SG11 (signaling)

SG13 (NGN)

SG16 (multimedia)

SG19 (mobility)

TSAG(steering)TSB (bureau) Q1 (project mngt)

Q3 (func. architecture)

Q6 (mobility & FMC)

Q10 (satellite)

Q12 (frame relay)

Q8 (service & deployment)

Q2 (requirements & scenarios)

Q4 (QoS architecture)Q5 (net. management)

Q7 (net. & service integration)

Q9 (IPv6)

Q11 (terminology)

Q13 (public data net.)Q14 (multi service net.)

Q15 (security)Q16 (commercial off-the shelf components )

NGN security requirementsNGN authenticationAAACertificate management

ITU

Chair, vice chair Rapporteur, associate rapporteur editorTitle:

Page 19: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

19

SG13 (NGN) 1. Planning and promotion of overall NGN st

andardization process (e.g., roadmap) 2. Development of core technology’s require

ments that are used by other SGs to develop their recommendations (Stage 1)

3. Development of network architectures(Stage 2)

SG13 (NGN) 1. Planning and promotion of overall NGN st

andardization process (e.g., roadmap) 2. Development of core technology’s require

ments that are used by other SGs to develop their recommendations (Stage 1)

3. Development of network architectures(Stage 2)

SG11 Protocol and signaling (stage 3)

SG11 Protocol and signaling (stage 3)

SG19 MobilitySG19 Mobility

SG 2 NumberingSG 2 Numbering

SG16 multimediaSG16 multimedia

SG12 QoSSG12 QoS

SG4 ManagementSG4 Management

SG17 Security and Languages

SG17 Security and Languages

ITU-T NGN standardization structure

Requirements

OCAF-FGFG-IPTVFG(Focus Group)Special task forcefor particular areas

NGN-GSI (Global Standards Initiative)

Page 20: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

20

SG11 SG19 OtherSGs

SG13

Control and protocol

Management

Project managementand scope

Architecture

Service Requirements,Capabilities and scenarios

QoS and networkcapabilities

Security

NNAR (including ID)

Charging

Interwork and evolution

ITU-T NGN-GSI structure

Q1(WP1)1WP1/13

Q11(WP1)

Q1(WP1)Q1 Q2

Q5

TopicsCooridnator

2WP2/13

3WP3/13

4WP4/13

5WP2/11

6WP2/4

7WP2/13

8WP3/13

9WP3/13

10WP3/13

NNAR: Numbering, Naming, Addressing and Routing

Q3(WP2) Q6(WP2)

Q9(WP2) Q10(WP2)Q29/16

Q2(WP3) Q8(WP3)

Q4(WP4) Q5(WP2) SG12

Q3(WP2)

Q5(WP4) Q2

Q15(WP2)

SG4NGNMFG

WP2/17

Q2(WP3) Q3 Q1/2

Q2(WP3) SG3

Q7(WP3)

Working party chairman coordinates Question activities in 10 topics

Page 21: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

21

ITU-T NGN Management standardization structure

SG4 (Telecommunication Management) 1. Telecommunication service/networks/equipment man

agement for NGN and other networks 2. Application and evolution of TMN framework 3. Test, measurement and other mngt-related issuesQuestion 8 of SG4Management framework of NGN (e.g., M.3060)

SG4 (Telecommunication Management) 1. Telecommunication service/networks/equipment man

agement for NGN and other networks 2. Application and evolution of TMN framework 3. Test, measurement and other mngt-related issuesQuestion 8 of SG4Management framework of NGN (e.g., M.3060)

SG13 NGN SG13 NGN Requirements

NGN Management Focus Group(Chair: Dave Sidor (Nortel), Vice Chair: Leen Mak (Lucent))1. Specifies NGN (esp. NGN Release 1) managementrelated to FCAPS interfaces2. Currently focusing on development and maintenance of NGN Management Specification Roadmap for Release 1(maps existing/developing standards, analyses gaps, etc.)

NGN-GSI (Global Standards Initiative)

The roadmap of NGN Management FG is available athttp://www.itu.int/ITU-T/studygroups/com04/roadmap.html

Page 22: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

3. Important ITU-T NGN standards

Page 23: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

23

ITU-T NGN Release1 Scope (Y.2000 supplement 1)

Service Types Service description

Multimedia services • Real-time Conversational Voice services • Messaging services• Push to talk over NGN (PoN)• Point-to-Point interactive multimedia services

• Collaborative interactive communication services

• Content delivery services• Push-based services

• Broadcast Services• Hosted and transit services for enterprises

• Information services• Location-based services• Presence and general notification services

• 3GPP Release 6 and 3GPP2 Release A OSA-based services

PSTN/ISDNEmulation services

• Provides PSTN/ISDN equivalent services and interfaces on IP network infrastructure

PSTN/ISDN simulation services

• Provides PSTN/ISDN like services by using session control of IP networks

Data communication services

• Virtual Private Network (VPN) services• Existing data services• Data retrieval services

• Online services• Sensor Network services• Remote control/tele-action services

Public Interest Aspects

• Emergency Communications (including support of Early Warning):

• Support for users with disabilities• Lawful Interception• Service unbundling• Number portability

• Network or Service provider selection• Prevention of unsolicited bulk telecommunications.

• Malicious communication identification

• User identifier presentation & privacy

Defines what is included in NGN Release 1

Page 24: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

24

ITU-T NGN Release1 Requirements (Y.2201) (1/2)

•Transport connectivity•Communication modes•Media resource management•Codecs•Access network and network attachment•User networks•Interconnection, Interoperability and Interworking

–Interconnection–Interoperability–Interworking with non-NGN networks

•Routing•Quality of Service

–General QoS requirements–Network QoS classes–Service/Application Priority–QoS control–QoS Signalling–Performance measurement and management–Processing and traffic overload management

•Accounting and charging

•Numbering, naming and addressing

–General requirements for Numbering, Naming and Addressing–Numbering–Numbering, Naming and Addressing schemes–Name/Address resolution–Numbering, naming and addressing interworking

•Identification, authentication and authorization

–General requirements–Requirements for identification–Requirements for authentication–Requirements for authorization

•Security•Mobility management•OAM

–General OAM requirements•Survivability

–Protection switching requirements–Rerouting requirements–Service resiliency requirements

•Management•Open service environment

–Service coordination–Interworking with service creation environments–Service discovery–Service registration–Development support

•Profile management–User profile–Device profile

•Policy management•Service enablers

–Group management–Personal information management–Message handling–Multicast support–Presence– Location management– Push–Device management–Session handling–Web-based application support–Content processing–Data synchronization

Defines requirements on these aspects (1/2)

Page 25: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

25

ITU-T NGN Release1 Requirements (Y.2201) (2/2)

•PSTN/ISDN emulation and simulation

–PSTN/ISDN emulation requirements–PSTN/ISDN simulation requirements

•Public interest aspects–Lawful interception–Malicious communication identification–Unsolicited bulk telecommunications–Emergency telecommunications–User identity presentation and privacy–Network or Service Provider selection–Users with disabilities–Number portability–Service unbundling

•Critical infrastructure protection•Non disclosure of information across NNI interfaces•Inter-provider exchange of user-related information

Defines requirements on these aspects (2/2)

NGN management capabilities shall support the aims of the NGN by:

1. Providing the ability to manage, through their complete life cycle, NGN components, both physical and logical. This includes resources in the transport stratum and the service stratum, access transport functions, interconnect components and user networks and terminals;

2. Providing the ability to manage NGN service components independently from the underlying NGN transport components and enabling organizations offering NGN services (potentially from different service providers) to build distinctive service offerings to customers;

3. Providing the management capabilities which enable organizations offering NGN services to offer users the ability to personalize user services and to create new services from NGN capabilities (potentially from different service providers);

(9 more requirements cont.)

Requirements examples; on management 12 requirements are defined. Below are the first 3

Page 26: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

26

NGN functional architecture (Y.2012)

• Transport stratum for managed IP packet transfer, and Service stratum for session control and for additional services, are clearly separated.(Does not align with OSI model; e.g., transport stratum includes session)

• Transport stratum: composed of Transport Function for IP packet transmission, NACF for user attachment (authentication, IP address assignment, etc.), and RACF for QoS

From ITU-T Y.2012 (06/07)

• Service stratum: composed of SCF for IMS and PSTN/ISDN emulation, and support functions for developing applications

• Terminal: for 3G terminals: IPv6, for traditional fixed-network terminals: IPv4

• 3rd Party applications for Open Mobile Alliance (OMA) works on Application Network Interface (ANI)

NGN architecture overviewControlMediaManagement

Transport stratum

Service stratum

Man

agem

ent

Fu

nctio

ns

ANI

Transport Control Functions

Resource and Admission

Control Functions(RACF)

Network AttachmentControl Functions

Network AttachmentControl Functions (NACF)

NNIUNI

Application Support Functions & Service Support Functions

Applications

TransportFunctions

End-User

FunctionsOther

Networks

Service ControlFunctions (SCF)

Service UserService UserProfiles

Transport User Transport User Profiles

Page 27: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

27

Detailed functional architecture (Y.2012)

App

lica

tion

Scope of NGN

Ma

na

gem

en

t fu

ncti

on

s

T-6:Inter-

connection Border

Gateway FE

S-6: S.Authentication & Authorization FE

S-8: Access GWControl FE

NACF RACF

LegacyTerminal

RGW

Customer Network

NGNTerminal

LegacyTerminal

ANIApplications

S-11: User Signaling Interworking FE

End-User Function

S-3: Interrogating Call Session Control FE

S-14: Media Resource Broker FE

T-17: TransportResource Control FE

Access Packet Transport Functions

T-2: AccessNode FE

T-5:AccessBorder

GatewayFE

S-1: Serving Call Session Control FE

T-8:Media

ResourceProcessing

FE

T-12: T. User Profile FE

T-4: AccessRelay FE

S-2: Proxy Call SessionControl FE

T-10:Network Access

Configuration FE

S-4: Subscription Locator FE

S-5: S. User Profile FE

S-4: Subscription Locator FE

S-5: S. User Profile FE

T-16: Policy Decision FE

S-15: General Services Control FE

NGN UNI

Other NGN

RACF

*

T-14: Access Management FE

T-15: Home GateWayConfiguration FE

T-11:T. Authentication

&Authorization FE

Application Support Functions & Service Support Functions(may include own Authentication, Authorization and Accounting)

IPMultimediaNetworks

PSTN/ISDN

Core transport

Access transport

Service control

T-13: T. Locationmanagement FE

T-17: Transport Resource Control FE

T-16: Policy Decision FE

T-3: Edge Node FE

S-7: Interconnection Border Gateway

Control FE

S-13: Media Resource Control FE

S-9: Media GW

Control FE

T-9:SignallingGateway

FE

T-7:Trunking

MediaGateway

FE

S-12: Network Signaling

Interworking FE

S-10: BreakoutGateway Control

FE

T-1: AccessMedia

GatewayFE Core Packet Transport Functions

Page 28: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

28

IMS (IP Multimedia Subsystem) overview

• Provides various SIP-based services– Provides session control, charging, security functions

• Increase end-user’s experience by unifying registration, authentication and charging

– Provides interfaces to control transport functions• QoS, media gateway, alignment of charging on transport functions

and service functions

– Provides interfaces not only to operators, but 3rd party application vendors

• Clearly defined SIP from operator’s point of view– IETF SIP is not enough for network operators

e.g., IETF SIP does not define the start and the end of charging

• ITU-T NGN refers 3GPP Release 7 IMS

Page 29: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

29

I/S-CSCF

ChargingFunctions

« Core IMS»

Mw

Mx

Mr

MgMj

Mi

Mp MnGm

Rs

ISC/Ma

Cx Dx

DhSh

Ic

Rf/Ro

Rf/RoIb

Iw

Rs

PS

TN

/ISD

N

MRFC MGCF

e2

Ie

Mw

MxMk

UE

Ut

BGCF

MxP-CSCF

NetworkAttachementControlFunction

Resource and Admission Control Function

IP Transport (Access and Core)

NSIW-FE

SUP-FE

SAA-FE

IBG-FE

TMG-FEMRP-FE

IBC-FE

SG-FE

SL-FE

AS-FE

IP N

etwo

rks

IMS for NGN (Y.2021)

• CSCF (Call Session Control Function): SIP server, the core of this architecture. P-CSCF (Proxy CSCF) is a sip server that communicate with user terminals

• Various functions are defined as the gateway to other networks

Page 30: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

30

Per-session Resource and Admission Control Functions (Y.2111)

• End-user (terminal) requests SCF a session establishment

• RACF manages the current network resources, and grant/reject the request to achieve QoS guarantee

– Relative QoS (e.g., diffserv’s CoS) is acceptable– Various message flow and protocols are defined, operators will choose

• ETSI NGN Release 1 defines RACF for access network onlyITU-T defines core network RACF as well

SCF

SCF : Service Control Functions (IMS and PSTN/ISDN emulation function on IMS)RACF : Resource Admission Control Functions

APserver

SIPserver

Access-RACF

Resourcecontrolserver

PDF

Core-RACF

Resourcecontrolserver

PDF

Access network(e.g, metro ethernet)

Core networks(e.g., MPLS)

Other N

GN

networks

Session establishRequest by SIP

DIAMETER, etc.

Page 31: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

31

Security Requirements (Y.2701)

CPE

CPE-BE(home GW) Media

BE

SignalingBE

NGNBE

The InternetBE

SIP server

VariousNEs

OpS

Othernetworks

Trusted zone an NGN operator can trust

• Border element on the edge protects inside NEs– Security requirements are defined for outside NEs, inside NEs and Border

Elements

• Does not define requirements on SIM

Trust model

Page 32: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

32

Session Border Controller (Y.2012 supplement 1)

• Defines S/BC functions for media path and signaling path

• S/BC can be placed between any networks

• This document is a supplement --- not mandatory

ServiceProvider C

ApplicationProviderNetwork

EnterpriseNetwork

OrAccessNetwork

OrTransit

Network

CCSP: Call Control Signalling Path MP: Media Path

Logical Interfaces

ServiceProvider

A

CCSP

MP MP

CCSP

MP

CCSP CCSP

MP

CCSP

MP

CCSP MP

CCSP

MP

Logical Interfaces

Logical Interfaces

CCSP MPCCSP MP

CCSP MP

Logical Interfaces

ServiceProvider

B

CCSP MP

CCSP MP

ApplicationProvider Network

CCSP MP

CCSP MP

CCSP MP

CCSP MP

EnterpriseOr Home Network

EnterpriseOr Home Network

Media path func. Signaling path func.

•VPN bridging or mediation•Opening and closing of a pinhole (Firewall)•Policing and marking•Detection of inactivity•NAT and NAPT•Assisting remote NAT/NAPT traversal•Resource and admission control•IP payload processing•Performance measurement•Denial of service (DoS) detection and protection•Media encryption and decryption•Support for Emergency Telecommunications Service/Telecommunication for Disaster Relief (ETS/TDR)•Support for emergency calls

•Traffic control for signalling messages•Authentication, Authorization, and Accounting (AAA)•Signalling protocol translation•Signalling protocol interworking•Session-based routing•DSP service control•End-user information hiding•Topology and infrastructure hiding•DoS protection•Signalling encryption and decryption•Support for ETS/TDR•Support for emergency calls

Page 33: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

33

New services/capabilities discussed in ITU-T (1/2)

Service Stratum

Transport stratum

End-user fun

c.

Other

networks

Management

Applications

UNI

NGN

Application• IPTV(-)•Multi-play by DSLAM (Poland)•UPT (C)• IMS based real-time conversation voice service (C)

•Telematics (for ITS support) (K)

Service stratum related capabilities•Charging(K)• ID based applications (RFID support, etc.) (K)•Open service environment capabilities (K)•Web service based Convergence service (K)•Convergence terminals (K)

Transport stratum related capabilities•FMC(C)•VPN(K)•Multicast with MPLS-based QoS support (K)

•Contents Conversion Service Scenario (K)•MPLS-based mobility and QoS (K)

ANI

(proposed country,K: KoreaC: China)

Page 34: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

34

New services/capabilities discussed in ITU-T (2/2)

• Service stratum related capabilities– RFID; Describes RFID applications. Requirements for NGN will be added in

the future– Open Service Environment Capabilities: Describes integrated ANI

(application network interface) including 3GPP OSA. Requirements for NGN will be added in the future

• Transport stratum related capabilities– FMC; documents on requirements, IMS-based architecture, Service scenario

for NGN with PSTN-based access networks are under discussion– Multicast with MPLS-based QoS support: Requirements, architecture

overview, information flow are under discussion

• Application related services– IPTV discussion is moved to Focus Group on IPTV (~2006/07)

• Most new services are proposed by Korea and China in ITU-T• # of experts are ITU-T is not enough, and most recommendations on

these issues are not very mature

Page 35: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

4. NGN standardization in Japan

Page 36: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

36

Structure of NGN Study/Standardization in Japan

Next Generation IP Network Promotion Forum• Combines strength of operators, vendors, academies, domestic fora and application vendors to promote all-IP networks • Established in December 2005, 211 members (March 2006)• Promotes interoperability tests, demonstration experiment, information exchange as well as standardization based on R&D• Technological focus: QoS and function, dependability (security and safety), interoperability and interconnectivity

TTC (Telecommunication Technology Committee)• Develops NGN-related technical standards as a committee to establish telecommunication related standards and protocols• Created NGN architecture WG and NGN upstream SWG in April 2005• Collaborates and contributes to ITU-T and various foreign fora such as 3GPP and 3GPP2 MIC

(Ministry of InternalAffairs and

Communications)

Page 37: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

37

MIC-TTC coordination

ITU-T Sectional Meeting

NGN committee(SG11, SG13)

NGN WG

Leader: Prof. Koichi Asatani

Leader: Naotaka Morita (NTT)Sub-leader: Hideaki Yamada (KDDI)Sub-leader: Takashi Egawa (NEC)

1. Ministry of Internal Affairsand Communications(Information and communicationTechnology Sub-counsil)

Technical Assembly Strategy Committee

2. TTC

NGN Architecture WG

NGN upstreamSub-WG (SG13)

Signaling WG

Signaling upstreamSub-WG (SG11)

Technical Study AG

Global Collaboration AG

NGN AG

Leader: Naotaka Morita (NTT)

Leader: Takuya Sawada (KDDI)

Advisory Groups (AGs)

CJK NGN-WG/w CCSA, TTA

Integraloperation

Network ManagementCommittee (SG4)

Net. Management WG

Page 38: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

38

Structure of Next Generation IP Network Promotion Forum

ForumChair: Tadao Saito (Prof. Emeritus, U-Tokyo)

Vice-Chair: Ryuji Yamada (NTT) 、 Yasuhiko Ito (KDDI)

Bureau(NiCT)

TechnologyGroup

Chairman: Shigeki Goto (Waseda-U)

R&D/StandardizationGroup

Chair: Koichi Asatani (U-Kogakuin)

Planning & PromotionGroup

Chair: Yuichi Matsushima (NiCT)

• Interconnectivity test planning, promotion and coordination, including the coordination with relevant fora• Studies regulatory issues of IP telephony, in particular QoS and functionality, safety and security, interconnectivity and interoperability as well as regulatory issues of other advanced services. Practices proving test, if necessary.

• Promotes R&D and the standardization of its results by establishing basic strategies and promotion methods, and by practicing proving tests. R&D focuses not only on NGN R1&R2, but beyond R2.

• Promotes deployment and information exchange of next generation IP networks. Publicize appropriate information through publications, symposiums and market promotions. Surveys domestic and international R&D trends.

Page 39: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network
Page 40: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

Backup slides

Page 41: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

41

ITU-T document listITU-T Rec. No. Title Lead SG Expected

Approval

Approval

Process

Supplement 1 to Y.2000-series NGN release 1 scope 13 -- Approved

Y.2201 NGN release 1 requirements 13 Apr. 2007 TAP

Y.2012 Functional requirements and architecture of the NGN 13 Oct. 2006 AAP

Supplement 1 to Y.2012 Session/border control (S/BC) functions 13 -- Approved

Y.2021 IMS for Next Generation Networks 13 Oct. 2006 AAP

Y.2031 PSTN/ISDN emulation architecture 13 Oct. 2006 AAP

Y.2091 Terms and definitions for Next Generation Networks 13 Oct. 2006 AAP

Y.2111 Resource and admission control functions in Next

Generation Networks

13 Oct. 2006 AAP

Y.2171 Admission control priority levels in Next Generation

Networks

13 Oct. 2006 AAP

Y.2261 PSTN/ISDN evolution to NGN 13 Oct. 2006 AAP

Y.2271 Call server based PSTN/ISDN emulation 13 Oct. 2006 AAP

Y.2701 Security requirements for NGN release 1 13 Apr. 2007 TAP

Q.1706 Mobility management requirements for NGN 19 Oct. 2006 AAP

Experts agree that the document is mature

Approved as ITU-T recommendation by Governments' voting

TAP: 6~9 month for policy and regulation related recommendations

AAP: 2 month for technical recommendations

ITU-T recommendation approval process

Page 42: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

42

ETSI TISPAN document list (1/5)Deliverable Reference/Short Title Status Q.x/SG

Services aspects and general requirements (stage 1)

TS 181 010 V1.1.1 (2005-06) Service requirements for end-to-endsession control in multimedia networks (Release 1)

Pub Q.2/13

TS 102 424 V1.1.1 (2005-09) Requirements of the NGN network tosupport Emergency Communication from Citizen to Authority

Pub Q.2/13

TS 181 001 (WI DTS-01001) NGN Videotelephony, Stage 1 Servicedescription

App Q.2/13

TS 181 005 (WI DTS-01025) NGN Release 1 Service and Capabilitiesrequirements

App Q.2/13

TR 180 000 (WI DTR-00004) NGN Terminology AbC Q.11/13TS 181 002 (WI DTS-01002) Requirements for Multimedia Telephonywith PSTN/ISDN Simulation Services

AbC Q.2/13

TR 181 004 (WI DTR-01024) Generic Capabilities and their Use toDevelop Services Requirements Analysis

AbC Q.2/13, SG19

DTR-01023 NGN Services capabilities, requirements and strategicdirection for NGN services

Plen Q.2/13, SG19

DTS-01030 FMMS IP-based Short Message Service (SMS); Servicedescription

Plen Q.2/13

DTS-01036 FMMS IP-based Multimedia Messaging Service (MMS);Service description

Plen Q.2/13

- Status -          Pub: Published (before December 2005)-          App: Approved at TISPAN#9 (December 2005)-          AbC: Approval by correspondence after TISPAN#9 (deadline 20 January 2006)-          Plen: Approval expected at TISPAN#10 (February 2006)- Deliverable/Type of Document-          TR: ETSI Technical Report (enters the Publication process immediately after TISPAN approval)-          TS: ETSI Technical Specification (goes to Publication process immediately after TISPAN approval)-          ES: ETSI Standard (has to pass the Membership Approval Procedure before Publication)- Q.x/SG: identifies the Question in the SG Note: the "Short title" given is based on the Work Item title and is not the exact title of the ETSI TISPAN approved document.

Page 43: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

43

ETSI TISPAN document list (2/5)

Functional architecture and detailed requirements (stage 2)

ES 282 001 v1.1.1 (2005-08) NGN Functional Architecture Release 1 Pub Q.3/13, Q.1/11,SG19

ES 282 002 (WI DES-02019) Functional architecture for PSTN/ISDNemulation

App Q.3/13, Q.7/13,Q.1/11

ES 282 004 (WI DES-02021) Network Attachment Subsystem (NASS) App Q.3/13, Q.1/11,Q.7/11

TS 182 008 (WI DTS-02031) Presence Service; Architecture andFunctional Description : 3GPP TS 23.141, modified and OMA-AD-Presence_SIMPLE- V1_0, modified

App Q.2/11

TS 182 011 (WI DTS-02033) XML document management:Endorsement of OMA-AD-XDM-V1_0

App Q.2/11

ES 282 003 (WI DES-02020) Resource Admission Control subsystem(RACS) Functional Architecture

AbC Q.4/13, Q.1/11,Q.5/11

TR 182 013 (WI DTR-02024) Functional Architecture and informationflows for bearer control

AbC Q.4/13, Q.4/11

TR 182 005 (WI DTR-02027) Organization of NGN User data AbC Q.3/13, Q.1/11,SG19

TS 182 006 (WI DTS-02028) NGN-IMS Stage 2 definition(endorsement of TS.23.228)

AbC Q.3/11

ES 282 007 (WI DES-02029) IP Multimedia Subsystem (IMS)Functional Architecture

AbC Q.3/13, Q.1/11,Q.3/11, SG 19

TS 182 012 (WI DTS-02030) PSTN/ISDN Emulation Subsystem; IMS-based Functional Architecture

AbC Q.3/13, Q.1/11,Q.3/11

ES 282 010 (WI DES-02032) Charging (Endorsement of 3GPP TS32.240 v6.3.0, TS 32.260 v6.3.0, 3GPP TS 32.297 v6.1.0, TS 32.298v6.1.0 and TS 32.299 v6.4.0)

AbC Q.3/11, Q.1/3

Page 44: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

44

ETSI TISPAN document list (3/5)Protocols (stage 3)

ES 283 002 V1.1.1 (2005-08) PSTN/ISDN Emulation Subsystem(PES); NGN Release 1 H.248 Profile for controlling Access andResidential Gateways

Pub Q.3/11

TS 183 010 V1.1.1 (2005-08) PSTN/ISDN simulation servicesCommunication Hold (HOLD)

Pub Q.3/11

TS 183 021 V1.1.1 (2005-09) Interworking between the IMS IPMultimedia Networks

Pub Q.3/11

TS 183 022 V1.1.1 (2005-06) MGC Information Package Pub Q.3/11TS 183 023 V1.1.1 (2005-09) NGN Release 1; PSTN/ISDN simulationservices; Extensible Markup Language (XML) Configuration AccessProtocol (XCAP) over the Ut interface for Manipulating NGNPSTN/ISDN Simulation Services

Pub Q.2/11

TS 183 007 (WI DTS-03025) PSTN/ISDN simulation services; OIP/OIR App Q.3/11TS 183 008 (WI DTS-03026) PSTN/ISDN simulation services; TIP/TIR App Q.3/11TS 183 019 (WI DTS-03041) Interface protocol definitions for networkaccess through xDSL and WLAN access networks

App Q.7/11

TR 183 014 (WI DTR-03033) Verification of ETSI, IETF and ITUSpecifications to prove the availability of Carrier class services forPSTN/ISDN Emulation

App Q.1/11

TS 183 006 (WI DTS-03024) PSTN/ISDN simulation services;Message Waiting Indication (MWI)

App Q.3/11

ES 283 039-3 (WI DES-03034) NGN Congestion & Overload ControlPart 3 - H.248 RGW

App Q.3/11

TS 183 020 (WI DTS-03042) Roaming interface protocol definitions forTISPAN NGN network access

App Q.7/11, SG 19

TS 183 003 (WI DTS-03022) PSTN/ISDN simulation services; CallDiversion (CDiv)

AbC Q.3/11

TS 183 005 (WI DTS-03023) PSTN/ISDN simulation services;Conference (CONF)

AbC Q.3/11

TS 183 011 (WI DTS-03029) PSTN/ISDN simulation services;Anonymous Call Rejection and Communication Barring (ACR-CB)

AbC Q.3/11

TS 183 016 (WI DTS-03036) PSTN/ISDN simulation services;Malicious Call Identification (MCID)

AbC Q.3/11

Page 45: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

45

ETSI TISPAN document list (4/5)TS 183 017 (WI DTS-03038) Gq' interface based on Diameter Protocol AbC Q.5/11ES 183 018 (WI DES-03039) Ia interface based on H.248 AbC Q.5/11ES 283 012 (WI DES-03040) Trunking Gateway Control Protocol(TGCP) stage 2

AbC Q.5/11

ES 283 024 (WI DES-03047) Trunking Gateway (TGW) Stage 3 AbC Q.5/11ES 283 026 (WI DES-03052) Rq interface based on Diameter Protocol AbC Q.5/11TS 183 028 (WI DTS-03054) Common Basic Communicationprocedures

AbC Q.3/11

TS 183 029 (WI DTS-03055) PSTN/ISDN simulation services; ExplicitCommunication Transfer (ECT)

AbC Q.3/11

ES 283 030 (WI DES-03057) Protocol support for Presence service AbC Q.2/11ES 283 031 (WI DES-03058) H.248 Profile for controlling MediaResource Function Processors

AbC Q.5/11

TS 183 033 (WI DTS-03060) Endorsement of TS 29.228 & 29.229 (Cxand Dx interfaces based on the Diameter protocol)

AbC Q.5/11, Q.7/11

ES 283 034 (WI DES-03063) e4 interface based on the DiameterProtocol

AbC Q.5/11, Q.7/11

ES 283 035 (WI DES-03064) e2 interface based on the DiameterProtocol

AbC Q.3/11, Q.7/11

TS 183 038 (WI DTS-03067) XML Document Management AbC Q.2/11TS 183 023 (WI DTS-03068) XCAP security corrections/alignment AbC Q.2/11TS 183 010 (WI DTS-03069) NGN Hold corrections/alignment AbC Q.3/11DTR-03032 (will be TR 183 013) NGN & IMS (NGN dependencies &endorsements)

Plen Q.3/11

DES-03019 (will be ES 283 003) IP Multimedia Call Control Protocolbased on Session Initiation Protocol (SIP) and Session DescriptionProtocol (SDP); 3GPP TS. 24.229 (Release 7) , modified;

Plen Q.3/11

DES-03053 (will be ES 283 027) Endorsement of the SIP-ISUPInterworking between the IP Multimedia (IM) Core Network (CN)subsystem and Circuit Switched (CS) networks Stage 3

Plen Q.3/11

DES-03044 (will be ES xxx xxx) IMS-based PSTN/ISDN EmulationStage 3 specification

Plen Q.3/11

DES-03059 (will be TR 183 032) Feasibility study on ISUPencapsulation over IMS

Plen Q.3/11

DTS-03070 (will be TS 183 041) Messaging service using the IPMultimedia (IM) Core Network (CN) subsystem; Stage 3

Plen Q.3/11

Page 46: NGN and its Standardization September 27, 2006 NEC Corporation ITU-T NGN security requirements (Y.2701) editor Takashi Egawa NGN: Next Generation Network

46

ETSI TISPAN document list (5/5)Quality of Service

TS 185 001 V1.1.1 (2005-11) Next Generation Network (NGN);Qualityof Service (QoS) Framework and Requirements

Pub Q.4/13, Q.15/12

TR 185 xxx (WI DTR-05006) Review of material available on QoSrequirements of Multimedia Services

AbC Q.4/13, Q.13/12

Security

TS 187 001 (WI DTS-07014) NGN Release 1 Security Requirements App Q.15/13, Q.4,5/17

TR 187 002 (WI DTR-07016) Threat and Risk Analysis AbC Q.15/13, Q.4,5/17

TS 187 003 (WI DTS-07017) Security Architecture AbC Q.15/13, Q.4,5/17

Addressing & Routing

TR 102 055 ENUM scenarios for user and infrastructure ENUM Pub SG 2TS 102 172 Minimum requirements for interoperability of ENUMimplementations

Pub SG 2

Management

TR 102 647 V1.1.1 (2004-10) NGN Management standards; Overviewand gap analysis

Pub SG 4

TR 102 449 (WI DTR-08009) Overview of Radio FrequencyIdentification (RFID) Tag in the Telecommunications Industry

App SG 4

TR 102 450 (WI DTR-08009) Telecommunications Equipment Lifecycle App SG 4ETSI TS 188 001 V1.1.1 (2005-09) NGN management; OSSArchitecture Release 1

Pub SG 4

TS 188 001 V.1.2.1 (WI DTS-08014) NGN Management; OSSArchitecture, Release 1, revised

AbC SG 4

TS 188 003 V1.1.1 (2005-09) OSS requirements ; OSS definition ofrequirements and priorities for further network managementspecifications for NGN

Pub SG 4

TR 188 004 V1.1.1 (2005-05) NGN Management; OSS vision Pub SG 4