1 Scope

2 Normative references

3 Terms and definitions

4 Symbols and abbreviated terms

5 Introduction

6 General requirements

6.1 Open specification

6.2 Resource management

6.3 System management

6.3.1 Platform management

6.3.2 Application management

6.3.3 Updates and patches

6.3.4 Traceability

6.4 Security

6.5 Ensure authenticated communications

6.6 Confidential information

6.7 Maintain privacy

6.8 Access controls

6.9 Maintain configuration log

6.10 Maintain activity log

6.11 Respond in timely manner

6.11.1 Response requirement

6.11.2 Response time definition

7 Incoming flow requirements

7.1 Security policy and networking information

7.1.1 Obtain policies

7.1.2 Comply with policies

7.2 Enrollment credentials

7.3 Security credential revocations

7.4 Permission application receipt

7.5 Permission request received

7.6 Device identification

7.7 Permission application

8 Outgoing flow requirements

8.1 Device enrolment information

8.2 Misbehaviour report

8.3 Security credentials

8.4 Device identification

8.5 Permission application

8.6 Permission request

8.7 Permission update request

8.8 Permission application receipt