Welcome to
ETSI Security Workshop
January 2007
Jørgen Friis
Deputy Director General
ETSI
ETSI Security Workshop
January 2007
1
ETSI is
A European Standards Organization
Setting globally-applicable standards for
¾ Telecommunications
¾ other Electronic Communications networks and services
Independent, not-for-profit, created in 1988
The home of GSM
A founding partner of 3GPP
ISO 9001:2000 certified
Offering direct participation
We have more than 16 000 publications - freely available!
http://www.etsi.org
http://portal.etsi.org
ETSI Security Workshop
January 2007
2
ETSI is not …
a REGULATORY body, but…
¾ we provide technical specifications to support regulation
a CERTIFICATION body, but…
¾ we provide specifications and other tools to assist
certification
a FREQUENCY ALLOCATION body, but…
¾ we collect, co-ordinate and contribute frequency
requirements for the ICT community
part of the European Commission, nor part of CEPT, but…
¾ we work closely with these and many other organisations
ETSI Security Workshop
January 2007
3
ETSI
ESO
European
Standards
Organization
GSP
SPO
Global
Standards
Producer
Service
Providing
Organization
ESO:
GSP:
SPO:
European Standards Organization: standardization for
European needs
Global Standards Producer: standardization for the
global level
Service Providing Organization: services such as
interoperability testing, forum management etc.
ETSI Security Workshop
January 2007
4
ETSI – producing global standards!
Remember GSM ?
¾ Developed (by ETSI) for Europe
¾ Now a worldwide success story!
Just some
examples…
• More than 1.5 billion users in over 200 countries
• One million new users EVERY DAY!
ETSI’s Lawful Interception handover standard
¾ Being deployed in Europe…
¾ But also in USA and Australia, where the laws are being
developed to comply with the ETSI Standard
DVB system specifications
¾ Based on DVB Project proposals
¾ Services available on every continent
TETRA
¾ More that 600 contracts in 70 countries
Radio microphones and cordless audio equipment
¾ Global agreement on common standards
ETSI Security Workshop
January 2007
5
…through global membership !
ETSI was established as a European body and retains
European responsibilities. But…
…many of ETSI’s Members are global players…
…so ETSI seeks to have its standards adopted worldwide
Over 100 of ETSI’s Members (about 20% of the total)
have no established operations in Europe
Many of the other 80% are headquartered outside Europe
ETSI Security Workshop
January 2007
6
ETSI branding
The ETSI name is well-respected in the industry,
world-wide
ETSI’s neutrality is also well-respected
ETSI Security Workshop
January 2007
7
Some of our latest activities…
Next Generation Networks (NGN)
Ultra wideband (UWB)
Bandsharing
Grid
RFID
Low Power Devices
Emergency alerting, e-call
GSM on aircraft
Communications for Public Safety
What’s next?
YOU decide!
ETSI Security Workshop
January 2007
8
Security and Technologies
Security is not an additional feature that can be
patched on after the adoption of a technology
¾ it must be taken into account from the beginning of the
design process
Security can be a winning driver that enables the
overall success
Security failures are not just an embarrassment
¾ they cause substantial financial loss
¾ they directly affect the stock value of companies
ETSI Security Workshop
January 2007
9
The role of Security Standards
Information Security Standards are essential to ensure
interoperability
Standardisation ensures compliance of products with
¾ Adequate levels of security
¾ Legislative action
Information Security Standardisation facilitates
economic realization and cost reduction
ETSI has 20 years of experience in Security
Other European Standards Organisations:
¾ CEN
¾ CENELEC
ETSI Security Workshop
January 2007
10
Some examples of Security in ETSI
ETSI has a unique expertise in cryptographic
algorithms and protocols to prevent fraud and
unauthorised access to ICT and broadcast networks,
and to protect customers’ privacy
ETSI is a world leader in Lawful Interception
standards
ETSI standardised the Subscriber Identity Module
(SIM) card for GSM, which is one of the most widely
deployed smart cards ever
ETSI’s Electronic signatures are supporting the
development of a European electronic signature
infrastructure
ETSI Security Workshop
January 2007
11
Objectives of this Workshop
Assess what has been done so far
Identify the gaps and/or duplication
Identify and propose the areas for future work
Also: promote collaboration between
Standards Developing Organizations involved in
Securirty
ETSI Security Workshop
January 2007
12
For more information...
ETSI web site: http://www.etsi.org/
¾ general public information concerning ETSI
¾ free standards download
¾ promotional aspects
ETSI portal: portal.etsi.org
¾
¾
¾
¾
designed primarily for "standards practitioners"
easy access to data for each technical body
customized information retrieval for each technical body
access to;
• Working documents
• ETSI applications and databases
ETSI Security Workshop
January 2007
13
Have a successful workshop!
jorgen.friis@etsi.org
ETSI Security Workshop
January 2007
14
0
