ISO/IEC 15045-1:2004

INTERNATIONAL ISO/IEC
STANDARD
15045-1
First edition
2004-01
Information technology –
Home electronic system (HES) gateway –
Part 1:
A residential gateway model for HES
Reference number
INTERNATIONAL ISO/IEC
STANDARD
15045-1
First edition
2004-01
Information technology –
Home electronic system (HES) gateway –
Part 1:
A residential gateway model for HES
 ISO/IEC 2004
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any
means, electronic or mechanical, including photocopying and microfilm, without permission in writing from the publisher.
ISO/IEC Copyright Office Case postale 56 CH-1211 Genève 20 Switzerland
• • •
PRICE CODE
P
For price, see current catalogue

– 2 – 15045-1 © ISO/IEC:2004(E)
CONTENTS
1 Scope.9
1.1 Overview .9
1.2 Functional safety.9
1.3 Privacy and security .9
2 Normative references .9
3 Terms, definitions and abbreviations .10
3.1 Definitions .10
3.2 Abbreviations .13
4 Conformance clauses .13
4.1 Basic functions and requirements.13
4.2 Optional functions and requirements .14
5 Functional requirements of residential gateways.14
5.1 Interfacing requirements.14
5.1.1 General .14
5.1.2 WAN and HAN interfaces.14
5.1.3 Additional physical modular interfaces.15
5.1.4 Application-specific modularity.15
5.2 Co-existence .15
5.3 Address translation requirements .15
5.3.1 General .15
5.3.2 External to internal (WAN to HAN).15
5.3.3 Internal to internal (HAN to HAN).15
5.4 Protocol conversion.16
5.5 Information transfer .16
5.6 Auxiliary RG services .16
5.6.1 Application-specific services.16
6 Functional safety with residential gateways .16
6.1 Introduction .16
6.2 Requirements for safety .16
6.2.1 General .16
6.2.2 Blocking capability.16
6.2.3 Discriminative blocking capability .17
6.2.4 Feedback on blocking.17
7 Specific privacy and security requirements concerning residential gateways .17
7.1 Introduction .17
7.2 Security requirements of a residential gateway.17
7.2.1 General .17
7.2.2 Devices with direct or secure connections to associated hosts .17
7.2.3 Devices on HANs, without inherent security.17
7.3 Information security.18
7.4 External attack on the RG .18
7.5 Security requirements for a residential gateway.18
7.6 Security requirements for IP connected residential gateways .18
Annex A (informative) Architecture of residential gateways .19

15045-1  ISO/IEC:2004(E) – 3 –
A.1 Overview of architecture.19
A.2 Architectural domains.19
A.2.1 General .19
A.2.2 Domain of the RG.20
A.2.3 Basic residential gateway architecture.20
A.2.4 Interfaces and processes.21
A.2.5 Details of component parts .22
A.2.6 Structural implementations of the RG .25
Annex B (informative) Functional safety considerations .29
B.1 Introduction .29
B.1.1 General .29
B.1.2 Commands to potentially hazardous objects .29
B.1.3 Commands to relocatable programmable objects.29
B.1.4 Commands to automatic objects .29
B.1.5 Command translation.30
B.1.6 Linked changed state.30
B.1.7 Addressing .30
B.1.8 Broadcast messages, variables and commands.30
Annex C (informative) Specific privacy and security of residential gateways .31
C.1 Introduction .31
C.2 Threats.31
C.2.1 General .31
C.2.2 Masquerade and replay .31
C.2.3 Interception: eavesdropping and modification .31
C.2.4 Denial-of-service and resource-exhaustion attack.32
C.2.5 Software and configuration security: trojan horses, worms, viruses.32
C.2.6 Spyware/data leakage .33
C.2.7 Repudiation .33
C.2.8 Signal intelligence .33
C.2.9 Unintentional domain to domain interconnect.33
C.2.10 Secure purchase and payment .34
C.3 Defence measures .34
C.3.1 Introduction .34
C.3.2 Authentication .34
C.3.3 Access control.35
C.3.4 Integrity and confidentiality.35
C.3.5 Message authentication code (MAC) .35
C.3.6 Hash functions and digital signatures .36
C.3.7 Logging .36
C.3.8 Resource management.36
C.3.9 Host resistance.37
C.3.10 Social engineering.37
C.3.11 Intrusion detection .37
C.3.12 Repudiation .37
Figure 1 – Typical service provision for home network .7
Figure 2 – Diagram of possible RG connections and interfaces.7
Figure A.1 – Domain of the residential gateway .20

– 4 – 15045-1 © ISO/IEC:2004(E)
Figure A.2 – Unit architecture .21
Figure A.3 – Modular architecture .21
Figure A.4 – WAN Gateway gateway interface .22
Figure A.5 – HAN Gateway gateway interface.23
Figure A.6 – RG internal processes and interfaces .24
Figure A.7 – Simple 1:1 implementation of RG.25
Figure A.8 – Complex integral RG implementation .26
Figure A.9 – Complex modular RG implementation .27
Figure A.10 – Distributed RGs linked via HAN.28
Figure A.11 – Distributed RGs directly linked .28
Figure A.12 – Distributed RGs linked via WAN.28

15045-1  ISO/IEC:2004(E) – 5 –
INFORMATION TECHNOLOGY –
HOME ELECTRONIC SYSTEM (HES) GATEWAY –
Part 1: A residential gateway model for HES
FOREWORD
1) ISO (International Organization for Standardization) and IEC (International Electrotechnical Commission) form the
specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in
the development of International Standards through technical committees established by the respective
organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in
fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with
ISO and IEC, also take part in the work.
2) In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1.
Draft International Standards adopted by the joint technical committee are circulated to national bodies for voting.
Publication as an International Standard requires approval by at least 75 % of the national bodies casting a vote.
3) All users should ensure that they have the latest edition of this publication.
4) No liability shall attach to IEC or ISO or its directors, employees, servants or agents including individual experts
and members of their technical committees and IEC or ISO member bodies for any personal injury, property
damage or other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees)
and expenses arising out of the publication of, use of, or reliance upon, this ISO/IEC publication or any other IEC,
ISO or ISO/IEC publications.
5) Attention is drawn to the normative references cited in this publication. Use of the referenced publications is
indispensable for the correct application of this publication.
6) Attention is drawn to the possibility that some of the elements of this International Standard may be the subject of
patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights.
International Standard ISO/IEC 15045-1 was prepared by subcommittee 25: Interconnection
of information technology equipment, of ISO/IEC joint technical committee 1: Information
technology.
This publication has been dra
...