Wholesale: Products & Services

Archived System CR SCR013013-2EX Detail

 
Title: Digital signature of the content of the message
CR Number Current Status
Date
Level of
Effort
Interface/
Release No.
Area
Impacted
Products
Impacted

SCR013013-2EX Completed
9/18/2013
-   0/1 Maintenance and Repair
Originator: Razack, Munsoor
Originator Company Name: Verizon
Owner: Burchett, Lori
Director:
CR PM: Lorence, Susan
Description Of Change
Verizon follows the 2 level security check to determine the requests sent to the web service are from trusted source. We configure the gateway to verify following in the ws – security header of the SOAP request send by the client.

1) The username /password in the ws security header. The username and password are provided by Verizon for test and production environments and they will be included in the header of all SOAP requests sent to the web service.

2) A digital signature of the content of the message. A private /public key pair (X.509 certificate) will be generated. The client uses the private key to digitally sign the content of the message and the public key will be installed on the Verizon side to verify the signature.

2/11/13 UPDATE REMOVE THE FOLLOWING CONTENT : Verizon has implemented a workaround for #1 listed above as CenturyLink does not support.

This CR requests that #2 above be supported by CenturyLink on all messages sent to Verizon. END OF DELETED CR CONTENT AS OF 2/11/13

2/11/13 UPDATE TO ADD: This CR requests that either #1 or #2 or both the above be supported by CenturyLink on all messages sent to Verizon.

Proposed Implementation Date in Production: April 20th 2013 or earlier. END OF 2/11/13 ADD***

NOTE: The full content of the Verizon Example associated with this CR is available on the CenturyLink Wholesale web site at http://wholesalecalendar.centurylinkapps.com/detail/404/2013-02-07.

Status History

Date Action Description
1/30/2013 CR Submitted CR Submitted 
1/31/2013 CR Acknowledged CR Acknowledged. 
2/5/2013 Record Update Exception request Pre-meeting scheduled for 2/7/13. 
2/7/2013 Record Update CR updated to post full content of CR example provided by Verizon to Pre-meeting call. See Description for url. 
2/7/2013 Clarification Meeting Held Clarification call and exception clarification meeting originally scheduled for this date. Call was rescheduled to 2/11/13 at request of the originator. 
2/11/2013 Clarification Meeting Held Clarification call and discussion associated with Exception request held. It was determined what "Yes" and "No" votes would mean in conjunction with the request for handling the CR as an Exception. 
2/11/2013 Record Update CR was revised by Originator. 
2/12/2013 Status Changed Status changed to Evaluation. 
2/13/2013 Info Sent to CLEC Exception request clarification sent to Originator to confirm what a "yes" and "no" were to mean in upcoming CMP vote. 
2/13/2013 Communicator Issued See notice number CMPR.MEET.02.13.13.F.10896.CMP_Exception_Vote_Reqd. 
2/13/2013 Communicator Issued See notice number CMPR.MEET.02.13.13.F.10896.CMP_Exception_Vote_Reqd 
2/20/2013 Status Changed Status changed to Development 
2/20/2013 Discussed at Monthly CMP Meeting Discussed at the February Systems CMP Meeting - See Attachment C in the Distribution Package. 
2/22/2013 Communicator Issued See notice number CMPR.MEET.02.22.13.F.10917.CMPExcptnVoteDisposition. 
2/26/2013 Communicator Issued See notice number SYST.MEDI.02.26.13.F.10916.MTG1.4_DrftTechSpecs. 
3/15/2013 Communicator Issued See Notice number SYST.MEDI.03.15.13.F.10968.MTG1.4_FNL_TechSpecs. 
3/20/2013 Discussed at Monthly CMP Meeting Discussed at the March Systems CMP Meeting - See Attachment I in the Distribution Package. 
4/17/2013 Discussed at Monthly CMP Meeting Discussed at the April Systems CMP Meeting - See Attachment K in the Distribution Package. 
4/20/2013 Status Changed Status changed to CLEC Test. 
5/15/2013 Discussed at Monthly CMP Meeting Discussed at the May Systems CMP Meeting - See Attachment G in the Distribution Package. 
6/19/2013 Discussed at Monthly CMP Meeting Discussed at the June Systems CMP Meeting - See Attachment G in the Distribution Package. 
7/17/2013 Discussed at Monthly CMP Meeting Discussed at the July Systems CMP Meeting - See Attachment G in the Distribution Package. 
8/21/2013 Discussed at Monthly CMP Meeting Discussed at the August Systems CMP Meeting - See Attachment G in the Distribution Package. 
9/18/2013 Status Changed Status changed to Completed. 
9/18/2013 Discussed at Monthly CMP Meeting Discussed in the September System CMP Meeting - See Attachment G in the Distribution Package. 

Project Meetings

09/18/13 System CMP Meeting Mark Coyne – CenturyLink said this CR is associated with MTG Release 1.4 which was successfully deployed in April and that the CR has been in CLEC Test since then. Mark said Verizon implemented MTG 1.4 in production in August and that we would like to move the CR to Completed. Mark asked if there were any objections. There were none.

8/21/13 System Monthly Meeting Mark Coyne – CenturyLink said this CR is associated with MTG Release 1.4 which was successfully deployed in April and that the CR has been in CLEC Test since then. Mark said it appears Verizon will implement MTG sometime in August and we will leave CR in CLEC Test until September.

7/17/13 System Monthly Meeting Mark Coyne – CenturyLink said this CR is associated with MTG Release 1.4 that was installed on April 20, 2013. The CR will be left in CLEC Test until Verizon indicates it is OK to close.

6/15/13 System Monthly Meeting Mark Coyne – CenturyLink said this CR is associated with MTG Release 1.4 that was installed on April 20, 2013. The CR has been in CLEC Test since that time and will be left in CLEC test until we get the OK from Verizon to close.

5/15/13 System Monthly Meeting Susan Lorence – CenturyLink said this Verizon CR is associated with MTG Release 1.4 that was installed on April 20, 2013 and the CR has been in CLEC Test since then. Susan said she confirmed that at this point Verizon has tested this CR functionality but they have not yet installed the release. We will leave this CR in CLEC Test another month. Susan asked if there were any questions. There were none.

4/17/13 System Monthly Meeting Mark Coyne – CenturyLink said this CR was associated with the MTG 1.4 Release that is scheduled to go in April 20, 2013. Mark said it will be moved to CLEC Test at that time and reviewed in the May CMP meeting.

3/20/13 System Monthly Meeting Mark Coyne – CenturyLink said this CR was an Exception CR that was voted on last month. The Initial and Final notices have been sent and no CLEC comments were received. Mark said the planned effective date is April 20, 2013 and that release testing with the CLEC will begin this week.

2/20/13 System Monthly Meeting Mark Coyne – CenturyLink provided a background on the Verizon Change Request and the associated exception to CMP submitted by Verizon on January 30, 2013.

NOTE: There was a break to this CR discussion while Munsoor Razack – Verizon joined the call. The CR under Attachment C was reviewed during the interim (see below). Munsoor Razack – Verizon presented the requested system changes to Maintenance Ticketing Gateway (MTG). The CR is requesting that CenturyLink provide an additional security check for Verizon to insure requests sent to the web service are from a trusted source: either option 1) username/password in the ws security header, or 2) digital signature of the content, or both options.

Jeff Sonnier – Sprint asked if this change impacted any other company then Verizon or were other companies impacted.

Munsoor Razack – Verizon said it was OK with Verizon for CenturyLink to implement the CR that way.

Carrie Bousfield – CenturyLink said that is under investigation whether the new configuration would be specific to Verizon.

Frank Behnke – ATT asked what MTG is.

Carrie Bousfield – CenturyLink said Maintenance Ticketing Gateway (MTG) is the new ebonding system for Repair trouble tickets that is a replacement for MEDIACC.

Kim Isaacs – Integra asked how CLECs currently moving to MTG would be impacted if the exception is granted.

Carrie Bousfield – CenturyLink said that is part of the CenturyLink investigation.

Mark Coyne – CenturyLink said that we will not be able to answer that question at this point.

Kim Isaacs – Integra and Al Finnell – Windstream both said it is important to have that information prior to the exception vote. Kim said if the exception is only impacting Verizon or if it is going to impact all customers makes a difference.

Carrie Bousfield – CenturyLink said that she is sure this issue has been discussed already and she was trying to track down the answer.

Mark Coyne – CenturyLink said that while Carrie does that CenturyLink would review the vote process.

Susan Lorence – CenturyLink then relayed how the CMP exception and voting process worked and that for a system exception to be granted, a unanimous vote was required. Susan said the CMP vote notice was distributed on 2/13/13 following discussion in the CR Clarification call to determine what a “Yes” and “No” would mean in regard to this CR. She described who was eligible to vote on the exception request and also briefly described how quorum must be reached per Section 17.4.1 of the CMP document. In order to take the exception vote today, Susan said a quorum of six CLECs and CenturyLink was required which had been met.

Carrie Bousfield – CenturyLink said the CLEC question of how this would impact other CLECs had been discussed already. This CR was associated with a Verizon CR last year which was subsequently withdrawn. Carrie said this configuration requested by Verizon would be an option which would be available to all customers using MTG but would not be a requirement.

Mark Coyne – CenturyLink said it sounded like the exception vote could occur.

Susan Lorence – CenturyLink read what a vote of “Yes” and “No” would mean in regard to this CR. Susan said the normal CMP system release cycle was a 73 day cycle but that if CenturyLink was able to distribute the system release notification on Friday, 2/22/13, this notice would instead follow a 57 day cycle. The CLEC comment cycle would be shortened somewhat, the CenturyLink comment response cycle would be shortened but that the plan was to leave the testing cycle as a 30 day cycle. Susan asked if there were any questions about the change or the vote process. There were none.

Each Voting Carrier and their vote is listed in the table below: Voting Carrier Voting Participant VOTE Verizon Munsoor Razack (by phone) Yes Windstream Al Finnell (by phone) Yes Midcontinent Communications Emily Davis (by phone) Yes Comcast Linda Birchem (by phone) Abstain Integra Kim Isaacs (by phone) Yes dishNet Wireline Shawn Stickle (by phone) Yes Sprint Jeff Sonnier (by phone) Yes Granite Telecommunications Lisa Lynn (by phone) Yes CenturyLink Mark Coyne (by phone) Yes Val Ed Joint Venture Jim Walter (by email) Yes AT&T Frank Behnke (by phone) Abstain

Susan Lorence – CenturyLink relayed that the Verizon request for the exception was granted and said that the tentative plan was for a release notice to be sent on February 22, 2013 with a Production date of April 20, 2013. CenturyLink would also be sending the CMP notice to relay the results of the vote. Susan asked if there were any other questions. There were none.

2/11/13 Clarification Call Attendees: Munsoor Razack – Verizon Vinitha Ramachandran – Verizon Steph Prull – Integra Denise Martinez – CenturyLink Lori Burchett – CenturyLink Carrie Bousfield – CenturyLink Cecilia Tank – CenturyLink Mark Coyne – CenturyLink John Hansen – CenturyLink Susan Lorence – CenturyLink

Susan Lorence – CenturyLink recapped the purpose of the call which was to clarify what was being requested in the description of the Verizon CR and also to clarify which Change Management process was to be considered as needing an exception to the normal change process or timelines. Susan said the CR would be presented to the CMP community on February 20 to determine if it would move forward as an exception and the good cause for requesting the exception. This call was to clearly capture what a vote of “Yes” and “No” would mean for the CMP vote. For a system CR, the CMP document requires a unanimous vote to treat the CR as an exception.

Munsoor Razack – Verizon said the CR is associated with the security check process which is not specific to CenturyLink. Munsoor said that Verizon is requesting the change since they are not able to modify their security requirements without impacting their other partners.

Vinitha Ramachandran – Verizon presented the CR which identifies that Verizon requires two security checks: username/password and digital signature. Verizon developed a workaround on the first check since CenturyLink was not sending the username/password. Vinitha said that Verizon requires a second security checks and that the digital certificate check was being requested as the second level of security.

Carrie Bousfield – CenturyLink said the CR identifies that Verizon needs two levels of security and asked whether either of the two options listed on the CR would suffice or whether only the digital certificate option was being requested.

Vinitha Ramachandran – Verizon said that either option on the CR would work since Verizon had already put in a check on the IP address.

Carrie Bousfield – CenturyLink asked that if it was easier for CenturyLink to implement the username/password vs. the digital certificate, would that work for Verizon.

Vinitha Ramachandran – Verizon said yes.

Susan Lorence – CenturyLink said that option 1, username/password, had been requested on a CMP CR last August (SCR080612-1) but that in September, that CR had been withdrawn. Susan requested confirmation that on this call, Verizon is indicating either option 1 or option 2 will now work as the required second security check.

Munsoor Razack – Verizon said yes either option will work. Munsoor said the 2012 CR was originally submitted but Verizon had developed the work around because of how long it might take for CenturyLink to implement the CR. Verizon had assumed option 2 would be supported and found during their testing that option 2 was also an issue which is why the current CR was issued.

Susan Lorence – CenturyLink asked if there were any other questions on the requested system change. There were none. Susan then relayed the normal CMP timeline and process that a system CR would follow and said that included a 73 day system release notice. Susan said that the CenturyLink assumption is that Verizon is requesting a shorter interval for implementation since the requested implementation date on the submitted CR is February 15.

Munsoor Razack – Verizon said yes but that based on additional discussion, the February 15 date was now April 20. Munsoor said there was already testing occurring between Verizon and CenturyLink. Once their testing completes, this security check appears to be the only roadblock to Verizon going live. Munsoor said he would update the requested date to April and is requesting the exception.

Susan Lorence – CenturyLink said the request was to shorten the 73 day timeline to something shorter to allow the April 20 production date to be met.

Munsoor Razack – Verizon said yes.

Susan Lorence – CenturyLink asked if there were any questions. There were none.

Steph Prull – Integra said even though Verizon has already implemented a workaround, Verizon is asking for either option 1 or 2 but not both options or not specifically option 2.

Vinitha Ramachandran – Verizon said yes either of the two options listed will work for the second security check for Verizon.

Steph Prull – Integra suggested that the CR be updated to indicate that vs. how it currently reads. Munsoor Razack – Verizon said he would update the CR.

Susan Lorence – CenturyLink said if there is agreement to handle the CR on a shortened timeline, was there a specific timeline being requested or was the exception request allowing CenturyLink leeway on the timeline. There was no response. Susan said the vote would be “yes” or “no” on a shortened timeline but that CenturyLink would be willing to develop a proposal for the abbreviated notification timeline.

Munsoor Razack – Verizon said yes as long as the timeline would have an April 20 deployment and give time to complete test on the solution, specific milestones were not as critical.

Susan Lorence – CenturyLink asked if there were no other questions, the call would conclude. Susan said a notice would go out identifying that an exception vote would be taken in the CMP monthly meeting.

Steph Prull – Integra said she was thinking through all of the scenarios. She asked if the exception request was not granted, what was the normal release schedule.

Susan Lorence – CenturyLink said there was a March 4 release where the system release notifications had been sent but no other MTG releases were currently planned.

Mark Coyne – CenturyLink said if the exception was not granted then the release would follow a 73 day timeline.

Susan Lorence – CenturyLink said that was correct. If the exception was not unanimously approved, the production date would then be 73 days from whenever the initial system release notice was sent.

Steph Prull – Integra said she was asking if the exception request was not granted, was there another MTG release that this CR would be placed into that was closer than the 73 day notice timeline.

Susan Lorence – CenturyLink said there were no other releases planned at this time and asked if there were any other questions. There were none. Susan said that the plan was for Munsoor to send in the revised CR and she would then send Munsoor a proposal of what the CR exception vote of “yes” or “no” would mean. The CMP vote notice would then be sent to the CMP community identifying that a CMP exception vote was to occur.

The clarification call concluded at 1:25 PM MT.

CenturyLink Response

2/20/13 Monthly CMP meeting The Verizon request for the exception was granted. The tentative plan is for a release notice to be sent on February 22, 2013 with a Production date of April 20, 2013.

Information Current as of 1/11/2021