1. Transport Mapping Security Model D. Harrington

2. Architecture Transport Mapping Dispatcher Message Processing Model ApplicationsAccess Control Model TM portion of TMSM MP portion of TMSM

3. Lower Layer Protocols Many protocols might suffice –TLS –DTLS –SASL –SSH –Others Transport Mapping provides interface between protocols and SNMP engine

4. Lower Layer Protocols Protocols might provide different sets of services, to different degrees –authentication –encryption –timeliness checking –data integrity –others

5. Transport Mapping Security Model TM provides interface between lower layer protocol(s) and SNMP engine TM-SM needs to reliably coordinate and report on the services provided –Which services? (auth, priv, others) –Security Principal (~securityName) –Which mechanisms? (security sub-models)

6. Transport Mapping Security Model TM portion interfaces between transport security protocol and the SNMP engine MP portion exists to insert data into the process at the appropriate points vis-à-vis RFC3411/3412

7. Architecture Transport Mapping Dispatcher Message Processing Model Applications Access Control Model TM portion of TMSM MP portion of TMSM

8. TM portion Gets model-specific/mechanism-specific security principal from protocol Determines services provided by protocol Caches transport and security information needed for responses or reports

9. MP portion Maps model-specific/mechanism-specific security principal to securityName Determines acceptability and mapping of services provided to SNMP requirements (authPriv, etc.) May provide additional analysis of services provided Passes the info to the message processing model (e.g. SNMPv3-message processing model)

10. Questions?