ETSI Security Workshop Welcome to January 2007 Jørgen Friis
advertisement
Welcome to ETSI Security Workshop January 2007 Jørgen Friis Deputy Director General ETSI ETSI Security Workshop January 2007 1 ETSI is A European Standards Organization Setting globally-applicable standards for ¾ Telecommunications ¾ other Electronic Communications networks and services Independent, not-for-profit, created in 1988 The home of GSM A founding partner of 3GPP ISO 9001:2000 certified Offering direct participation We have more than 16 000 publications - freely available! http://www.etsi.org http://portal.etsi.org ETSI Security Workshop January 2007 2 ETSI is not … a REGULATORY body, but… ¾ we provide technical specifications to support regulation a CERTIFICATION body, but… ¾ we provide specifications and other tools to assist certification a FREQUENCY ALLOCATION body, but… ¾ we collect, co-ordinate and contribute frequency requirements for the ICT community part of the European Commission, nor part of CEPT, but… ¾ we work closely with these and many other organisations ETSI Security Workshop January 2007 3 ETSI ESO European Standards Organization GSP SPO Global Standards Producer Service Providing Organization ESO: GSP: SPO: European Standards Organization: standardization for European needs Global Standards Producer: standardization for the global level Service Providing Organization: services such as interoperability testing, forum management etc. ETSI Security Workshop January 2007 4 ETSI – producing global standards! Remember GSM ? ¾ Developed (by ETSI) for Europe ¾ Now a worldwide success story! Just some examples… • More than 1.5 billion users in over 200 countries • One million new users EVERY DAY! ETSI’s Lawful Interception handover standard ¾ Being deployed in Europe… ¾ But also in USA and Australia, where the laws are being developed to comply with the ETSI Standard DVB system specifications ¾ Based on DVB Project proposals ¾ Services available on every continent TETRA ¾ More that 600 contracts in 70 countries Radio microphones and cordless audio equipment ¾ Global agreement on common standards ETSI Security Workshop January 2007 5 …through global membership ! ETSI was established as a European body and retains European responsibilities. But… …many of ETSI’s Members are global players… …so ETSI seeks to have its standards adopted worldwide Over 100 of ETSI’s Members (about 20% of the total) have no established operations in Europe Many of the other 80% are headquartered outside Europe ETSI Security Workshop January 2007 6 ETSI branding The ETSI name is well-respected in the industry, world-wide ETSI’s neutrality is also well-respected ETSI Security Workshop January 2007 7 Some of our latest activities… Next Generation Networks (NGN) Ultra wideband (UWB) Bandsharing Grid RFID Low Power Devices Emergency alerting, e-call GSM on aircraft Communications for Public Safety What’s next? YOU decide! ETSI Security Workshop January 2007 8 Security and Technologies Security is not an additional feature that can be patched on after the adoption of a technology ¾ it must be taken into account from the beginning of the design process Security can be a winning driver that enables the overall success Security failures are not just an embarrassment ¾ they cause substantial financial loss ¾ they directly affect the stock value of companies ETSI Security Workshop January 2007 9 The role of Security Standards Information Security Standards are essential to ensure interoperability Standardisation ensures compliance of products with ¾ Adequate levels of security ¾ Legislative action Information Security Standardisation facilitates economic realization and cost reduction ETSI has 20 years of experience in Security Other European Standards Organisations: ¾ CEN ¾ CENELEC ETSI Security Workshop January 2007 10 Some examples of Security in ETSI ETSI has a unique expertise in cryptographic algorithms and protocols to prevent fraud and unauthorised access to ICT and broadcast networks, and to protect customers’ privacy ETSI is a world leader in Lawful Interception standards ETSI standardised the Subscriber Identity Module (SIM) card for GSM, which is one of the most widely deployed smart cards ever ETSI’s Electronic signatures are supporting the development of a European electronic signature infrastructure ETSI Security Workshop January 2007 11 Objectives of this Workshop Assess what has been done so far Identify the gaps and/or duplication Identify and propose the areas for future work Also: promote collaboration between Standards Developing Organizations involved in Securirty ETSI Security Workshop January 2007 12 For more information... ETSI web site: http://www.etsi.org/ ¾ general public information concerning ETSI ¾ free standards download ¾ promotional aspects ETSI portal: portal.etsi.org ¾ ¾ ¾ ¾ designed primarily for "standards practitioners" easy access to data for each technical body customized information retrieval for each technical body access to; • Working documents • ETSI applications and databases ETSI Security Workshop January 2007 13 Have a successful workshop! jorgen.friis@etsi.org ETSI Security Workshop January 2007 14
