Vorlage 3b

Area of responsibility of CSP LEMF Site 1 LEMF LI-HP MD F F i Shared access i l l t t e e MD Hosting Facility r r Access provider facility Area of LEMF Site 2 responsibility of access provider Co-location@ LI-HP LEMF MD PTSS‘ premises Access service Supported Interfaces F F i Shared access i l l DN-HP MD t t e e Area of responsibility r r of PTSS MD Hosting Facility Access provider facility

Figure 16 End-to-End view of shared access infrastructure

8.2.3.1 Threat analysis of the IP DN sub-variant B1: Shared access infrastructure

The bilateral connection agreements shall define specific protective measures for the following points:

 Confidentiality (including data protection)

 Authentication

 Authorised access availability (i.e. no refusal of authorised access to network

elements, saved information, information flows, services and applications but not in terms of general availability)

 Data integrity

 Non-repudiation (incontestability of receipt of the data, similar to a registered letter with acknowledgment of receipt)

In the basic concept it is assumed that no service higher than level 1 is implemented between the CSP network and the transport provider network. Otherwise, the functional layers in the bilateral connection agreement shall be amended as appropriate. Higher protocol layers are separated in the upper stratum under the control of a single CSP.

8.2.3.2 Scalability of the IP DN sub-variant B1: Shared access infrastructure

The scalability of this IP DN sub-variant is limited by the technology and the interfaces used. For example, in the case of a shared fibre access infrastructure, different wavelengths can be used for the transmission. The details are addressed in the bilateral connection agreements between the PTSS and the CSPs..