iTeh StandardsiTeh Standards
EURUSD
Your shopping cart is empty.
IEC

IEC TS 62351-5:2013

(Main)

Power systems management and associated information exchange - Data and communications security - Part 5: Security for IEC 60870-5 and derivatives

Power systems management and associated information exchange - Data and communications security - Part 5: Security for IEC 60870-5 and derivatives

IEC/TS 62351-5:2013(E) specifies messages, procedures and algorithms for securing the operation of all protocols based on or derived from IEC 60870-5: Telecontrol equipment and systems - Transmission protocols. This Technical Specification applies to at least those protocols listed in IEC 60870-5-101, 5-102, 5-103, 5-104. This new edition includes the following main changes with respect to the previous edition:
- adds the capability to change Update Keys remotely;
- adds security statistics to aid in detecting attacks;
- adds measures to avoid being forced to change session keys too often;
- discards unexpected messages more often as possible attacks;
- adds to the list of permitted security algorithms;
- adds new rules for calculating challenge sequence numbers.

General Information

Status
Replaced
Publication Date
28-Apr-2013
ICS
01 - GENERALITIES. TERMINOLOGY. STANDARDIZATION. DOCUMENTATION
33.200 - Telecontrol. Telemetering
Technical Committee
TC 57 - Power systems management and associated information exchange
Drafting Committee
WG 15 - TC 57/WG 15
Current Stage
DELPUB - Deleted Publication
Start Date
10-Apr-2020
Completion Date
18-Jan-2023
Ref Project

Relations

Replaced By
IEC 62351-5:2023 - Power systems management and associated information exchange - Data and communications security - Part 5: Security for IEC 60870-5 and derivatives
Effective Date
05-Sep-2023

Buy Standard

IEC TS 62351-5:2013 - Power systems management and associated information exchange - Data and communications security - Part 5: Security for IEC 60870-5 and derivativesIEC TS 62351-5:2013 - Power systems management and associated information exchange - Data and communications security - Part 5: Security for IEC 60870-5 and derivatives
PreviousNext
Technical specification
IEC TS 62351-5:2013 - Power systems management and associated information exchange - Data and communications security - Part 5: Security for IEC 60870-5 and derivatives
English language
109 pages
sale 15% off
Preview
sale 15% off
Preview

Standards Content (Sample)

IEC/TS 62351-5
®

Edition 2.0 2013-04
TECHNICAL
SPECIFICATION



Power systems management and associated information exchange – Data and
communications security –
Part 5: Security for IEC 60870-5 and derivatives

IEC/TS 62351-5:2013(E)

---------------------- Page: 1 ----------------------
THIS PUBLICATION IS COPYRIGHT PROTECTED
Copyright © 2013 IEC, Geneva, Switzerland

All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form
or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from
either IEC or IEC's member National Committee in the country of the requester.
If you have any questions about IEC copyright or have an enquiry about obtaining additional rights to this publication,
please contact the address below or your local IEC member National Committee for further information.


IEC Central Office Tel.: +41 22 919 02 11
3, rue de Varembé Fax: +41 22 919 03 00
CH-1211 Geneva 20 info@iec.ch
Switzerland www.iec.ch

About the IEC
The International Electrotechnical Commission (IEC) is the leading global organization that prepares and publishes
International Standards for all electrical, electronic and related technologies.

About IEC publications
The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the
latest edition, a corrigenda or an amendment might have been published.

Useful links:

IEC publications search - www.iec.ch/searchpub Electropedia - www.electropedia.org
The advanced search enables you to find IEC publications The world's leading online dictionary of electronic and
by a variety of criteria (reference number, text, technical electrical terms containing more than 30 000 terms and
committee,…). definitions in English and French, with equivalent terms in
It also gives information on projects, replaced and additional languages. Also known as the International
withdrawn publications. Electrotechnical Vocabulary (IEV) on-line.

IEC Just Published - webstore.iec.ch/justpublished Customer Service Centre - webstore.iec.ch/csc
Stay up to date on all new IEC publications. Just Published If you wish to give us your feedback on this publication
details all new publications released. Available on-line and or need further assistance, please contact the
also once a month by email. Customer Service Centre: csc@iec.ch.

---------------------- Page: 2 ----------------------
IEC/TS 62351-5

®


Edition 2.0 2013-04




TECHNICAL



SPECIFICATION



















Power systems management and associated information exchange – Data and

communications security –

Part 5: Security for IEC 60870-5 and derivatives


























INTERNATIONAL

ELECTROTECHNICAL

COMMISSION

PRICE CODE
XE


ICS 33.200 ISBN 978-2-83220-732-1



  Warning! Make sure that you obtained this publication from an authorized distributor.


® Registered trademark of the International Electrotechnical Commission

---------------------- Page: 3 ----------------------
– 2 – TS 62351-5 © IEC:2013(E)
CONTENTS
FOREWORD . 6
1 Scope and object . 8
2 Normative references . 9
3 Terms and definitions . 10
4 Abbreviated terms . 11
5 Problem description (informative) . 11
5.1 Overview of clause . 11
5.2 Specific threats addressed . 11
5.3 Design issues . 11
5.3.1 Overview of subclause . 11
5.3.2 Asymmetric communications . 11
5.3.3 Message-oriented . 12
5.3.4 Poor sequence numbers or no sequence numbers . 12
5.3.5 Limited processing power . 12
5.3.6 Limited bandwidth.
...

Questions, Comments and Discussion

Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.

This May Also Interest You

IEC
IEC 61850-7-1:2011/AMD1:2020(Amendment)
Amendment 1 - Communication networks and systems for power utility automation - Part 7-1: Basic communication structure - Principles and models
  • Standard
    209 pages
    English and French language
    sale 15% off
IEC
IEC 61968-5:2020(Main)
Application integration at electric utilities - System interfaces for distribution management - Part 5: Distributed energy optimization

IEC 61968-5:2020 is the description of a set of functions that are needed for enterprise integration of DERMS functions. These exchanges are most likely between a DERMS and a DMS. However, since this is an enterprise integration standard which may leverage IEC 61968-100:2013 for application integration (using web services or JMS) or other loosely-coupled implementations, there are no technical limitations for systems with which a DERMS might exchange information. Also, it should be noted that a DERMS might communicate with individual DER using a variety of standards and protocols such as IEC 61850, IEEE 2030.5, Distribution Network Protocol (DNP), Sunspec Modbus, or perhaps Open Field Message Bus (OpenFMB). One role of the DERMS is to manage this disparity and complexity of communications on the behalf of the system operator. However, the communication to individual DER is out of scope of this standard. Readers should look to those standards to understand communication to individual DER’s smart inverter.
The scope will be limited to the following use case categories:
• DER group creation – a mechanism to manage DER in aggregate
• DER group maintenance – a mechanism to add, remove, or modify the members and/or aggregated capabilities of a given group of DER
• DER group deletion – removing an entire group
• DER group status monitoring – a mechanism for quantifying or ascertaining the current capabilities and/or status of a group of DER
• DER group forecast – a mechanism for predicting the capabilities and/or status of a group of DER for a given time period in the future
• DER group dispatch – a mechanism for requesting that specified capabilities of a group of DER be dispatched to the grid
• DER group voltage ramp rate control – a mechanism for requesting that a DER group following a ramp rate curve
• DER group connect/disconnect – a mechanism to request that DER either isolate themselves, or reconnect to the grid as needed.

  • Standard
    99 pages
    English and French language
    sale 15% off
IEC
IEC TR 61850-90-12:2020(Main)
Communication networks and systems for power utility automation - Part 90-12: Wide area network engineering guidelines

IEC TR 61850-90-12:2020, which is a Technical Report, is intended for an audience familiar with electrical power automation based on IEC 61850 and related power system management, and particularly for data network engineers and system integrators. It is intended to help them to understand the technologies, configure a wide area network, define requirements, write specifications, select components, and conduct tests.
This document provides definitions, guidelines, and recommendations for the engineering of WANs, in particular for protection, control and monitoring based on IEC 61850 and related standards.
This document addresses substation-to-substation communication, substation-to-control centre, and control centre-to-control centre communication. In particular, this document addresses the most critical aspects of IEC 61850 such as protection related data transmission via GOOSE and SMVs, and the multicast transfer of large volumes of synchrophasor data.
The document addresses issues such as topology, redundancy, traffic latency and quality of service, traffic management, clock synchronization, security, and maintenance of the network.
This document contains use cases that show how utilities tackle their WAN engineering. This second edition cancels and replaces the first edition published in 2015. This edition constitutes a technical revision.
This edition includes the following significant technical changes with respect to the previous edition:
a) extension of use case with respect to distribution and customer-side applications;
b) extensions of wireless access technologies as well as power line communication ones applicable to the above-mentioned use case;
c) revisions regarding radio communication technology performance;
d) extension of network migration with respect to packet switched network;
e) a new mapping of multiprotocol label switching technology to teleprotection.

  • Technical report
    259 pages
    English language
    sale 15% off
IEC
IEC 61970-301:2020(Main)
Energy management system application program interface (EMS-API) - Part 301: Common information model (CIM) base

IEC 61970-301:2020 lays down the common information model (CIM), which is an abstract model that represents all the major objects in an electric utility enterprise typically involved in utility operations. By providing a standard way of representing power system resources as object classes and attributes, along with their relationships, the CIM facilitates the integration of network applications developed independently by different vendors, between entire systems running network applications developed independently, or between a system running network applications and other systems concerned with different aspects of power system operations, such as generation or distribution management. SCADA is modeled to the extent necessary to support power system simulation and inter-control centre communication. The CIM facilitates integration by defining a common language (i.e. semantics) based on the CIM to enable these applications or systems to access public data and exchange information independent of how such information is represented internally.
This edition reflects the model content version ‘IEC61970CIM17v38’, dated ‘2020-01-21’, and includes the following significant technical changes with respect to the previous edition:
a) Added Feeder modelling;
b) Added ICCP configuration modelling;
c) Correction of issues found in interoperability testing or use of the standard;
d) Improved documentation;
e) Updated Annex A with custom extensions;
f) Added Annex B Examples of PST transformer modelling;
g) Added Annex C HVDC use cases.

  • Standard
    554 pages
    English language
    sale 15% off
  • Standard
    1158 pages
    English and French language
    sale 15% off
  • Standard
    2320 pages
    English and French language
    sale 15% off
IEC
IEC TS 61850-1-2:2020(Main)
Communication networks and systems for power utility automation - Part 1-2: Guideline on extending IEC 61850

IEC TS 61850-1-2:2020, which is a technical specification, is intended for any users but primarily for standardization bodies that are considering using IEC 61850 as a base standard within the scope of their work and are willing to extend it as allowed by the IEC 61850 standards. This document identifies the required steps and high-level requirements in achieving such extensions of IEC 61850 and provides guidelines for the individual steps.
Within that scope, this document addresses the following cases:
• The management of product-level standards for products that have an interface based on IEC 61850
• The management of domain-level standards based on IEC 61850
• The management of transitional standards based on IEC 61850
• The management of private namespaces based on IEC 61850
• The development of standards offering the mapping of IEC 61850 data model at CDC level
• The development and management of IEC 61850 profiles for domains (underlying the role of IEC TR 62361-103 and IEC TR 61850-7-6)
This document includes both technical and process aspects:
On the technical side, this document:
• Reminds the main basic requirements (mostly referring to the appropriate parts of the series which host the requirements or recommendations)
• Lists all possible flexibilities offered by the standards
• Defines which flexibilities are allowed/possible per type of extension cases
On the process side, the document covers:
• The initial analysis of how the existing IEC 61850 object models and/or communication services may be applied and what allowed extensions may be required for utilizing them in new or specific domains (including private ones). The results of that step are expected to be documented
• The extension of the IEC 61850 object models for new domains. The typical associated work is to identify existing logical nodes which can be reused "as is", to determine if existing logical nodes can be extended, or to define new logical nodes
• The purpose and process to use transitional namespaces, which are expected to be merged eventually into an existing standard namespace
• The management of standard namespaces
• The development of private namespaces

  • Technical specification
    45 pages
    English language
    sale 15% off
  • Technical specification
    49 pages
    English language
    sale 15% off
IEC
IEC 61968-1:2020(Main)
Application integration at electric utilities - System interfaces for distribution management - Part 1: Interface architecture and general recommendations

IEC 61968-1:2020 is the first in a series that, taken as a whole, defines interfaces for the major elements of an interface architecture for power system management and associated information exchange.
This document identifies and establishes recommendations for standard interfaces based on an Interface Reference Model (IRM). Subsequent clauses of this document are based on each interface identified in the IRM. This set of standards is limited to the definition of interfaces. They provide for interoperability among different computer systems, platforms, and languages. IEC 61968-100 gives recommendations for methods and technologies to be used to implement functionality conforming to these interfaces.
As used in IEC 61968, distribution management consists of various distributed application components for the utility to manage electrical distribution networks. These capabilities include monitoring and control of equipment for power delivery, management processes to ensure system reliability, voltage management, demand-side management, outage management, work management, network model management, facilities management, and metering. The IRM is specified in Clause 3. The IRM defines the high-level view of the TC 57 reference architecture and the detailed in the relevant 61968 series, 61970 series or 62325 series. The goal of the IRM is to provide a common relevant context view for TC 57 that covers domains like transmission, distribution, market, generation, consumer, regional reliability operators, and regulators.
This third edition cancels and replaces the second edition published in 2012. This edition constitutes a technical revision.
This edition includes the following significant technical changes with respect to the previous edition:
a) update of IRM section, which has been out of date since the 2nd edition;
b) update to IRM model using ArchiMate modelling language;
c) addition of missing business functions and business objects;
d) alignment with newly released documents from the technical committee;
e) alignment with IEC 61968-100;
f) update of annexes.

  • Standard
    214 pages
    English and French language
    sale 15% off
IEC
IEC 62351-3:2014/AMD2:2020(Amendment)
Amendment 2 - Power systems management and associated information exchange - Data and communications security - Part 3: Communication network and system security - Profiles including TCP/IP
  • Standard
    21 pages
    English and French language
    sale 15% off
IEC
IEC 61850-9-2:2011/AMD1:2020(Amendment)
Amendment 1 - Communication networks and systems for power utility automation - Part 9-2: Specific communication service mapping (SCSM) - Sampled values over ISO/IEC 8802-3
  • Standard
    45 pages
    English and French language
    sale 15% off
IEC
IEC 61850-7-4:2010(Main)
Communication networks and systems for power utility automation - Part 7-4: Basic communication structure - Compatible logical node classes and data object classes

IEC 61850-7-4:2010 specifies the information model of devices and functions generally related to common use regarding applications in systems for power utility automation. It also contains the information model of devices and function-related applications in substations. In particular, it specifies the compatible logical node names and data object names for communication between intelligent electronic devices (IED). This includes the relationship between logical nodes and data objects. Major technical changes with regard to the previous edition are as follows:
- corrections and clarifications according to technical issues raised by the users' community; extensions for new logical nodes for the power quality domain;
- extensions for the model for statistical and historical statistical data;
- extensions regarding IEC 61850-90-1;
- extensions for new logical nodes for monitoring functions according to IEC 62271;
- new logical nodes from IEC 61850-7-410 and IEC 61850-7-420 of general interest.
This publication is of core relevance for Smart Grid.

  • Standard
    421 pages
    English and French language
    sale 15% off
IEC
IEC TS 62351-100-3:2020(Main)
Power systems management and associated information exchange - Data and communications security - Part 100-3: Conformance test cases for the IEC 62351-3, the secure communication extension for profiles including TCP/IP

IEC 62351-100-3:2020, which is a technical specification, describes test cases of data and communication security for telecontrol equipment, Substation Automation Systems [SAS] and telecontrol systems, including front-end functions of SCADA.
The goal of this document is to enable interoperability by providing a standard method of testing protocol implementations to verify that a device fulfils the requirement of IEC 62351-3. Note that conformity to IEC 62351-3 does not guarantee interoperability between devices using different implementations. It is expected that using this specification during testing will minimize the risk of non-interoperability. A basic condition for this interoperability is a passed conformance test of both devices.
The scope of this document is the specification of common available procedures and definitions for conformance and/or interoperability testing to ensure conformity to IEC 62351-3. The conformance test cases defined here are focused to verify the conformant integration of the underlying authentication/encryption protocol (TLS), as specified in IEC 62351-3, to protect TCP/IP based communications.
This document is not intended to test the underlying authentication/encryption protocol required by IEC 62351-3 to be implemented over TCP/IP (TLS). The conformance testing of the authentication/encryption protocol over TCP/IP is outside the scope of this document.
This document deals with data and communication security conformance testing; therefore, other requirements, such as safety or EMC are not covered. These requirements are covered by other standards (if applicable) and the proof of compliance for these topics is done according to these standards.

  • Technical specification
    29 pages
    English language
    sale 15% off