ETSI releases cybersecurity specification to secure sensitive functions in a virtualized environment

Sophia Antipolis, 6 February 2019

The ETSI Technical Committee on Cybersecurity (TC CYBER) has just released ETSI TS 103 457, that tackles the challenge of secure storage - where organizations want to protect customer data whilst still using a cloud that is not under their direct control.

Many organizations need to protect this data, but when it is held in a virtual network or cloud, the organization often doesn't have control of this storage solution. TS 103 457 solves this problem, by standardizing an interface between a "secure vault" that is trusted and a cloud that could be anywhere, where such sensitive data is stored in the vault. This allows a sensitive function to exist in a lower security environment, with data held securely.

This new specification offers multiple use cases. For instance, this interface can be used with new network function virtualization (NFV) technology to allow secure authentication of users for billing purposes. Virtualization means that processing can happen anywhere and might be untrusted, therefore these secure vaults are needed to protect sensitive functions and data. This is more common than ever as NFV technology becomes widespread. 

The interface can also be used to search databases that hold private data. Another feature defined in the specification is a logging function that allows queries of customer data to be audited, making it easier to detect data breaches, which in turn deters malicious activity.

This standard proposes a new interoperable interface, so that an organization may change "vault" or cloud provider and still achieve the same functionality; vital in a world of evolving technology. 

About ETSI
ETSI provides members with an open and inclusive environment to support the timely development, ratification and testing of globally applicable standards for ICT-enabled systems, applications and services across all sectors of industry and society. We are a not-for-profit body with more than 850 member organizations worldwide, drawn from 66 countries and five continents. Members comprise a diversified pool of large and small private companies, research entities, academia, government and public organizations. ETSI is one of only three bodies officially recognized by the EU as a European Standards Organization (ESO). For more information please visit: www.etsi.org

Contact
Claire Boyer
Mob: +33 (0)6 87 60 84 40
Email: claire.boyer@etsi.org