Military Communications and Information Technology: A Trusted ...

390 Military Communications and Information Technology...
1) Security Management Infrastructure and Information Assurance
Services
The NATO security management infrastructure (SMI) services and information
assurance (IA) services are described in [15] as depicted in Figure 9.
Figure 9. NATO security management infrastructure services and information
assurance services as defined in [15]
Both types of services typically require the use of the other for their own functionality.
A security management service might use an IA service to ensure the secure
handling of its own information, e.g. the Digital Policy Management Service
might use a confidentiality service and an integrity service to secure the renewal
of policy for system-wide access rights (its own function). An IA service might
rely on a security management service for proper continuation of its own function,
e.g. a confidentiality service might use the Crypto Key Management Service
for policy-mandated periodic keying material changes.
The Identity Management and Credential Management Services rely on
the NATO Public Key Infrastructure (NPKI) [16]. The exchange of the relevant
PKI information between NATO and Nations during NATO operations and missions
is discussed in [17].
2) Secure Transport Layer Services
Secure transport layer services might be required in some scenarios to provide
a secure (i.e. cryptographically protected) communication channel between the user
and the HAAG. A typical example of scenario where such channel is required
is remote management of the HAAG. However, also in the case of end-users using
the HAAG for data transfer, a secure communication channel might be required
in order to both protect privacy of the end user and provide additional layer
of confidentiality and integrity protection for the exchanged information. The use