ASN.1conso

rtium

Registration Registration Authorities for OID Authorities for OID

componentscomponents

Prof John LarmouthLarmouth Training & Protocol

Design Services Ltd

ISO & ITU-T Rapporteur for ASN.1j.larmouth@salford.ac.uk

Note, for best viewing, this presentation needs the Dom Casual, Brush Script, and Tw Cen MT fonts to be on your machine.

ASN.1conso

rtium

Protocols need to carry Protocols need to carry names!names!

Generic carrier protocols need names for Generic carrier protocols need names for their contentstheir contents

Directory (X.500) protocols need names for Directory (X.500) protocols need names for things they are trying to accessthings they are trying to access

E-mail (X.400) protocols need names for E-mail (X.400) protocols need names for originator and recipient namesoriginator and recipient names

ASN.1conso

rtium

Historical contributions Historical contributions to the naming problemto the naming problem

One of the first attempts at a naming standard for One of the first attempts at a naming standard for data communication was X.121, used in X.25.data communication was X.121, used in X.25.

32-bit Ethernet name allocation was another 32-bit Ethernet name allocation was another important piece of standardisation.important piece of standardisation.

Network Service Access Point addresses in OSI Network Service Access Point addresses in OSI (NSAP addresses) made an important contribution.(NSAP addresses) made an important contribution.

ASN.1 definition of the Object Identifier Tree in ASN.1 definition of the Object Identifier Tree in about 1986 was a seminal contribution. about 1986 was a seminal contribution.

UUID naming mechanisms developed in the 1990s UUID naming mechanisms developed in the 1990s introduced new concepts to naming.introduced new concepts to naming.

ASN.1conso

rtium

Hierarchical v CentralHierarchical v Central I'm the Registration Authority, and that's it (the I'm the Registration Authority, and that's it (the

Monolithic Approach).Monolithic Approach). I will do my bit, you can add to itI will do my bit, you can add to it

(the Hierarchical Approach).(the Hierarchical Approach). Let's use as much as possible of existing namingLet's use as much as possible of existing naming

(the Pragmatic Approach).(the Pragmatic Approach). Marriages, marriages, marriages.Marriages, marriages, marriages. For example, ISO Biometrics work uses a centralised For example, ISO Biometrics work uses a centralised

registration authority (Monolithic Approach), but has registration authority (Monolithic Approach), but has an Annex that formally defines its allocations as part an Annex that formally defines its allocations as part of an ASN.1 OID (Hierachical Approach)of an ASN.1 OID (Hierachical Approach)

ASN.1conso

rtium

Character versus binary Character versus binary namingnaming

Character versus binary protocols remains an area Character versus binary protocols remains an area of contention – preferred naming often follows this of contention – preferred naming often follows this decision.decision.

Current work on "Fast Web Services" in ITU-T can Current work on "Fast Web Services" in ITU-T can be stated as "binary encodings for Web Services be stated as "binary encodings for Web Services exchanges"exchanges"

Fast Web Services may or may not gain acceptance Fast Web Services may or may not gain acceptance against XML (character-based) encodings for Web against XML (character-based) encodings for Web Services, but it is a fight worth fighting! Services, but it is a fight worth fighting! Please fight!Please fight!

Historically, ITU-T (CCITT before it) has backed Historically, ITU-T (CCITT before it) has backed both binary *and* character-based naming horses.both binary *and* character-based naming horses.

ASN.1conso

rtium

ASN.1 grasped the ASN.1 grasped the nettlenettle

The easy bit:The easy bit:– Combine the Hierarchical Approach and the Pragmatic

approach The hard bit:The hard bit:

– Long character strings versus obscure binary representations

A lot of blood was spilled in 1985.A lot of blood was spilled in 1985. Went for binary!!!! (In the encoding, characters in Went for binary!!!! (In the encoding, characters in

the value notation – see later)the value notation – see later) OIDs are essentially binary encodings.OIDs are essentially binary encodings. Even when sent with XML they are thingsEven when sent with XML they are things

like 0.2.693.57. etc – encoded in characters, but it like 0.2.693.57. etc – encoded in characters, but it is still binary!is still binary!

ASN.1conso

rtium

Notation for OID values Notation for OID values – human-readable– human-readable

Early notation for OID values (allocations) looked Early notation for OID values (allocations) looked like:like:

{iso standard 8571 etc}{iso standard 8571 etc} SNMP started the rot: use simply a character SNMP started the rot: use simply a character

representation of the encoding: 1.0.8571.etc for representation of the encoding: 1.0.8571.etc for human consumption.human consumption.

The change from "ccitt" to "itu-t" inThe change from "ccitt" to "itu-t" in"joint-iso-ccitt" also caused problems."joint-iso-ccitt" also caused problems.

The numeric form is now accepted as valid notation.The numeric form is now accepted as valid notation. Names are now regarded as not normative.Names are now regarded as not normative.

ASN.1conso

rtium

X.400 and X.500X.400 and X.500 X.500 went for what became called "long-names" – X.500 went for what became called "long-names" –

character-based.character-based. X.400 used both forms! (Differed a bit in the 1984 v X.400 used both forms! (Differed a bit in the 1984 v

1988 versions)1988 versions) Major fight on introduction of "short-names" into Major fight on introduction of "short-names" into

X.500 around 1988ishX.500 around 1988ish Accepted, but never really took off or implemented. Accepted, but never really took off or implemented.

Today, X.500 distinguished names are not Today, X.500 distinguished names are not considered "long" – compared, for example with considered "long" – compared, for example with Certificate Revocation Lists (CRLs). Hoyt is Certificate Revocation Lists (CRLs). Hoyt is justified!justified!

ASN.1conso

rtium

Navigating the treeNavigating the tree

X.500 also added the concept that a sub-arc X.500 also added the concept that a sub-arc might be identified by a pair of values (for might be identified by a pair of values (for example, organisational unit and location), example, organisational unit and location), rather than just by a single value.rather than just by a single value.

This is the principal difference (apart from This is the principal difference (apart from character v binary representation) between character v binary representation) between the X.500 use of the RH-name tree concept the X.500 use of the RH-name tree concept and the ASN.1 use of the RH-name tree and the ASN.1 use of the RH-name tree concept for the Object Identifier tree.concept for the Object Identifier tree.

ASN.1conso

rtium

Moving to the WebMoving to the Web

Publication of naming allocations on the Web is Publication of naming allocations on the Web is increasingly common but adds cost for an RA.increasingly common but adds cost for an RA.

The ITU-T OID allocation database is an excellent The ITU-T OID allocation database is an excellent example, with over 50,000 entries.example, with over 50,000 entries.

A link is on the SG17 Web page – please look at it. A link is on the SG17 Web page – please look at it. (Or go to (Or go to http://http://oidoid..elibelelibel.tm..tm.frfr ) )

Automatic allocations (possibly using Fast? Web Automatic allocations (possibly using Fast? Web Services protocols – is in its infancy) reduces the cost Services protocols – is in its infancy) reduces the cost of running an RA.of running an RA.

First done by IANA for ASN.1 OID components for First done by IANA for ASN.1 OID components for SNMP.SNMP.

ASN.1conso

rtium

ASN.1 Project and ITU-T ASN.1 Project and ITU-T supportsupport

We live in interesting times!We live in interesting times! An immense amount done already on the module An immense amount done already on the module

database and the OID registry.database and the OID registry. Suggestions for automatic machine access to ASN.1 Suggestions for automatic machine access to ASN.1

modules from the database – SUN involvement, tool modules from the database – SUN involvement, tool vendor agreement to provide clients.vendor agreement to provide clients.

Suggestions for automatic registration of UUID Suggestions for automatic registration of UUID values for an OID component (see later).values for an OID component (see later).

ASN.1conso

rtium

Enough of history and Enough of history and futures – what of the futures – what of the

NOW?NOW? The revised X.660 and X.670 series The revised X.660 and X.670 series

Recommendations are just that – Recommendations are just that – revisions.revisions.

Incorporate amendments, update tables Incorporate amendments, update tables and lists, and improve editorial clarity.and lists, and improve editorial clarity.

Don't bother to read them (But I bet Herb Don't bother to read them (But I bet Herb will! And find serious errors in them! will! And find serious errors in them! Added later: He already has!Added later: He already has!))

ASN.1conso

rtium

What are these What are these Recommendations? Recommendations?

(Yuck, he's getting serious – time to (Yuck, he's getting serious – time to walk out to my main meeting!)walk out to my main meeting!)

Sorry folks, but one slide per Sorry folks, but one slide per Recommendation (could just be two or Recommendation (could just be two or three for some!).three for some!).

I owe that to the authors that spent a lot of I owe that to the authors that spent a lot of time on the original work.time on the original work.

Walk out if you like, but this is the guts of Walk out if you like, but this is the guts of the presentation.the presentation.

ASN.1conso

rtium

General contentsGeneral contents

(Sometimes) provides information on Registration (Sometimes) provides information on Registration Hierarchical name trees.Hierarchical name trees.

Usually specifies procedures for the operation of a Usually specifies procedures for the operation of a Registration Authority.Registration Authority.

Mainly defines procedures for allocation under a Mainly defines procedures for allocation under a specific ASN.1 Object Identifier arc.specific ASN.1 Object Identifier arc.

Revision makes no real technical changes – Revision makes no real technical changes – incorporates amendments, changes CCITT to ITU-T, incorporates amendments, changes CCITT to ITU-T, clarifies, etc.clarifies, etc.

Makes UPU legitimate!Makes UPU legitimate!

ASN.1conso

rtium

X.660 (ISO/IEC 9834-1)X.660 (ISO/IEC 9834-1)

Title: Title: INFORMATION TECHNOLOGY – OPEN SYSTEMS INFORMATION TECHNOLOGY – OPEN SYSTEMS

INTERCONNECTION – PROCEDURES FOR THE OPERATION OF OSI INTERCONNECTION – PROCEDURES FOR THE OPERATION OF OSI REGISTRATION AUTHORITIES: GENERAL PROCEDURESREGISTRATION AUTHORITIES: GENERAL PROCEDURES

A bad title! A bad title! Still not quite settled!Still not quite settled!

This describes the RH-Name tree, and specifies This describes the RH-Name tree, and specifies general procedures for registration authorities general procedures for registration authorities in this area.in this area.

These procedures are referenced from other These procedures are referenced from other parts of the series.parts of the series.

ASN.1conso

rtium

No X.661 (ISO/IEC 9834-No X.661 (ISO/IEC 9834-2)2)

FTAM Document type registration.FTAM Document type registration. Many registrations within the ISO profiles work.Many registrations within the ISO profiles work. ISO work never supported by ITU-T.ISO work never supported by ITU-T.

Will not be revisedWill not be revised, and not of , and not of interest.interest.

ASN.1conso

rtium

X.662 (ISO/IEC 9834-3)X.662 (ISO/IEC 9834-3)

Title: Title: INFORMATION TECHNOLOGY – OPEN SYSTEMS INFORMATION TECHNOLOGY – OPEN SYSTEMS INTERCONNECTION – PROCEDURES FOR THE OPERATION OF OSI INTERCONNECTION – PROCEDURES FOR THE OPERATION OF OSI REGISTRATION AUTHORITIES: REGISTRATION AUTHORITIES: REGISTRATION OF ASN.1 OBJECT REGISTRATION OF ASN.1 OBJECT IDENTIFIER ARCS FOR JOINT ISO AND ITU-T WORKIDENTIFIER ARCS FOR JOINT ISO AND ITU-T WORK

This is an important RecommendationThis is an important Recommendation Provides the Registration of areas of joint Provides the Registration of areas of joint

work with ITU-T and ISO.work with ITU-T and ISO. About 25 current allocations.About 25 current allocations. ANSI remains the Registration Authority.ANSI remains the Registration Authority. Simple resolution from SG17 and SC6.Simple resolution from SG17 and SC6.

ASN.1conso

rtium

No X.663 (ISO/IEC 9834-No X.663 (ISO/IEC 9834-4)4)

VT profile registration.VT profile registration. Many registrations within the ISO profiles Many registrations within the ISO profiles

work.work. ISO work never supported by ITU-T.ISO work never supported by ITU-T.

Will not be revisedWill not be revised, and not of , and not of interest.interest.

ASN.1conso

rtium

No X.664 (ISO/IEC 9834-No X.664 (ISO/IEC 9834-5)5)

VT control object registration.VT control object registration. Many registrations within the ISO profiles Many registrations within the ISO profiles

work.work. ISO work never supported by ITU-T.ISO work never supported by ITU-T.

Will not be revisedWill not be revised, and not of , and not of interest.interest.

ASN.1conso

rtium

X.665 (ISO/IEC 9834-6)X.665 (ISO/IEC 9834-6)

Title: Title: INFORMATION TECHNOLOGY – OPEN SYSTEMS INFORMATION TECHNOLOGY – OPEN SYSTEMS

INTERCONNECTION – PROCEDURES FOR THE OPERATION OF OSI INTERCONNECTION – PROCEDURES FOR THE OPERATION OF OSI REGISTRATION AUTHORITIES: REGISTRATION AUTHORITIES: APPLICATION PROCESSES AND APPLICATION PROCESSES AND APPLICATION ENTITIESAPPLICATION ENTITIES

Joint with ISO.Joint with ISO. Will be formally revised, but defunct and not Will be formally revised, but defunct and not

of interest.of interest.

ASN.1conso

rtium

X.666 (ISO/IEC 9834-7)X.666 (ISO/IEC 9834-7) Title: Title: INFORMATION TECHNOLOGY – OPEN SYSTEMS INFORMATION TECHNOLOGY – OPEN SYSTEMS

INTERCONNECTION – PROCEDURES FOR THE OPERATION OF OSI INTERCONNECTION – PROCEDURES FOR THE OPERATION OF OSI REGISTRATION AUTHORITIES: REGISTRATION AUTHORITIES: JOINT ISO AND ITU-T REGISTRATION OF JOINT ISO AND ITU-T REGISTRATION OF INTERNATIONAL ORGANIZATIONSINTERNATIONAL ORGANIZATIONS

This is one of two Recommendations for registration This is one of two Recommendations for registration of International Organizations (see X.669 later).of International Organizations (see X.669 later).

Registers international organisations under the Registers international organisations under the ASN.1 joint ITU-T and ISO "international-ASN.1 joint ITU-T and ISO "international-organisation" arcs, but also defines X.500 and X.400 organisation" arcs, but also defines X.500 and X.400 naming of International Organisationsnaming of International Organisations

For X.400 it defines the PRMD and ADMD concepts.For X.400 it defines the PRMD and ADMD concepts.

ASN.1conso

rtium

X.667 (ISO/IEC 9834-8)X.667 (ISO/IEC 9834-8) Title: Title: INFORMATION TECHNOLOGY – OPEN SYSTEMS INFORMATION TECHNOLOGY – OPEN SYSTEMS

INTERCONNECTION – PROCEDURES FOR THE OPERATION OF OSI INTERCONNECTION – PROCEDURES FOR THE OPERATION OF OSI REGISTRATION AUTHORITIES: GENERATION AND REGISTRATION REGISTRATION AUTHORITIES: GENERATION AND REGISTRATION OF UNIVERSALLY UNIQUE IDENTIFIERSOF UNIVERSALLY UNIQUE IDENTIFIERS (UUIDS) (UUIDS)

This is an important new Recommendation, This is an important new Recommendation, for approval at the March 2004 meeting of for approval at the March 2004 meeting of SG17.SG17.

The history of UUID (GUID) work is worth The history of UUID (GUID) work is worth several slides on its own!several slides on its own!

It involves Microsoft, IETF Draft RFCs and It involves Microsoft, IETF Draft RFCs and the Open Group.the Open Group.

ASN.1conso

rtium

Wow! A second slide!Wow! A second slide!

UUIDs are extremely widely used, but with UUIDs are extremely widely used, but with no standard specifying them!no standard specifying them!

They are used in Bluetooth specifications They are used in Bluetooth specifications and in ISO/IEC/JTC1/SC37 BioAPI and and in ISO/IEC/JTC1/SC37 BioAPI and CBEFF specifications (probably many CBEFF specifications (probably many others).others).

References in the ISO work rely on this References in the ISO work rely on this Recommendation | International StandardRecommendation | International Standard

ASN.1conso

rtium

And a third!And a third!

UUIDs are quite big – 16 octets.UUIDs are quite big – 16 octets. They can be self-allocated on a transient basis that They can be self-allocated on a transient basis that

guarantees uniqueness up to AD 3400, with allocations guarantees uniqueness up to AD 3400, with allocations of up to 10 million per second.of up to 10 million per second.

They can also be allocated for permanent They can also be allocated for permanent identification.identification.

Registration is not required, but reduces probable Registration is not required, but reduces probable uniqueness from 99% certain to 100% certain.uniqueness from 99% certain to 100% certain.

Can be used as ASN.1 OID components.Can be used as ASN.1 OID components.

ASN.1conso

rtium

Not X.668 (Not ISO/IEC Not X.668 (Not ISO/IEC 9834-9)9834-9)

The one that got away.The one that got away. Proposed as the RA Standard for Biometric Proposed as the RA Standard for Biometric

Registration.Registration. X.600 series had a lot to offer, and much text X.600 series had a lot to offer, and much text

from that series is being used.from that series is being used. But decided to proceed with pure ISO/SC37 But decided to proceed with pure ISO/SC37

Standard, as a second part of CBEFF.Standard, as a second part of CBEFF. Pity, but we tried!Pity, but we tried!

ASN.1conso

rtium

X.669X.669 Title: Title: INFORMATION TECHNOLOGY – OPEN SYSTEMS INTERCONNECTION INFORMATION TECHNOLOGY – OPEN SYSTEMS INTERCONNECTION

– PROCEDURES FOR THE OPERATION OF OSI REGISTRATION AUTHORITIES: – PROCEDURES FOR THE OPERATION OF OSI REGISTRATION AUTHORITIES: ITU-T REGISTRATION OF INTERNATIONAL ORGANIZATIONSITU-T REGISTRATION OF INTERNATIONAL ORGANIZATIONS REGISTRATION REGISTRATION

This is one of two Recommendations for registration This is one of two Recommendations for registration of International Organizations.of International Organizations.

This registers under the ITU-T arc to ITU-T This registers under the ITU-T arc to ITU-T Members.Members.

The other (X.666) registers organisations under the The other (X.666) registers organisations under the joint ISO/ITU-T arc.joint ISO/ITU-T arc.

For totally historic isal reasons, this is quite different For totally historic isal reasons, this is quite different from X.666 text. X.666 is probably the more from X.666 text. X.666 is probably the more important and better text.important and better text.

ASN.1conso

rtium

X.670X.670

Title: Title: PROCEDURES FOR REGISTRATION AGENTS OPERATING PROCEDURES FOR REGISTRATION AGENTS OPERATING ON BEHALF OF ORGANIZATIONS TO REGISTER ORGANIZATION ON BEHALF OF ORGANIZATIONS TO REGISTER ORGANIZATION NAMES SUBORDINATE TO COUNTRY NAMES.NAMES SUBORDINATE TO COUNTRY NAMES.

This is a Recommendation for software to This is a Recommendation for software to register International Organizations under register International Organizations under multiple countries (see X.671).multiple countries (see X.671).

It is believed that neither this It is believed that neither this Recommendation nor X.671 has been Recommendation nor X.671 has been implemented, and revision is a formality to implemented, and revision is a formality to ensure coherence of the series.ensure coherence of the series.

ASN.1conso

rtium

X.671X.671 Title: Title: PROCEDURES FOR A REGISTRATION AUTHORITY OPERATING ON PROCEDURES FOR A REGISTRATION AUTHORITY OPERATING ON

BEHALF OF COUNTRIES TO REGISTER ORGANIZATION NAMES SUBORDINATE BEHALF OF COUNTRIES TO REGISTER ORGANIZATION NAMES SUBORDINATE TO COUNTRY NAMES.TO COUNTRY NAMES.

This is a Recommendation for the operation of a This is a Recommendation for the operation of a Registration Authority in a country to register Registration Authority in a country to register International Organization names under that International Organization names under that country name (see also X.670).country name (see also X.670).

It is believed that neither this Recommendation nor It is believed that neither this Recommendation nor X.670 has been implemented, and revision is a X.670 has been implemented, and revision is a formality to ensure coherence of the series.formality to ensure coherence of the series.

ASN.1conso

rtium

If you have lasted this If you have lasted this far, you have been very far, you have been very

patientpatient

Now get on with Now get on with real work! Good-real work! Good-

bye!bye!

The The EndEnd