Security framework and requirements for open capabilities of telecommunication services
Currently, due to the boom in over-the-top (OTT) services in the information communication technology (ICT) domain, operators need to explore innovative ways to cooperate with third party service providers and especially with information technology (IT) service providers in order to avoid the traffic growth associated with such services without the commensurate income increases. Open capabilities of telecommunication services can bridge the operators' telecommunication services capabilities and the third party service providers' customized service requirements, thus becoming a win-win cooperation paradigm.
As the core asset for operators, capabilities of telecommunication services should be opened in a secure way and be fully protected, as both operators' business security and users' information security are implicated. Without a comprehensive security mechanism, an unsecure/spiteful application/service from a third party service provider using the capabilities of telecommunication services may harm the operators' transmission network, business system and even users' personally identifiable information (PII). Consequently, in order to offer secure telecommunication service capabilities to cooperative service providers, the security requirements for open capabilities of telecommunication services need to be analysed exhaustively and an overall security framework needs to be established.
Recommendation ITU-T X.1145 focuses on an analysis of the security requirements of open capabilities of telecommunication services and provides a security framework.
Provisional name: X.websec-6
X Suppl. 36 (09/2021) ITU-T X.1051 – Supplement on critical security controls for information and network security management by telecommunication organizations In force