IEC_TS_62351-6-2007.pdf

TECHNICAL SPECIFICATION IECTS 62351-6 First edition2007-06 Power systems management and associated information exchange Data and communications security Part 6:Security for IEC 61850 Reference number IEC/TS 62351-6:2007(E)LICENSED TO MECON Limited.-RANCHI/BANGALOREFOR INTERNAL USE AT THIS LOCATION ONLY,SUPPLIED BY BOOK SUPPLY BUREAU.THIS PUBLICATION IS COPYRIGHT PROTECTED Copyright 2007 IEC,Geneva,Switzerland All rights reserved.Unless otherwise specified,no part of this publication may be reproduced or utilized in any form or by any means,electronic or mechanical,including photocopying and microfilm,without permission in writing from either IEC or IECs member National Committee in the country of the requester.If you have any questions about IEC copyright or have an enquiry about obtaining additional rights to this publication,please contact the address below or your local IEC member National Committee for further information.IEC Central Office 3,rue de Varemb CH-1211 Geneva 20 Switzerland Email:inmailiec.ch Web:www.iec.ch About the IEC The International Electrotechnical Commission(IEC)is the leading global organization that prepares and publishes International Standards for all electrical,electronic and related technologies.About IEC publications The technical content of IEC publications is kept under constant review by the IEC.Please make sure that you have the latest edition,a corrigenda or an amendment might have been published.?Catalogue of IEC publications:www.iec.ch/searchpub The IEC on-line Catalogue enables you to search by a variety of criteria(reference number,text,technical committee,).It also gives information on projects,withdrawn and replaced publications.?IEC Just Published:www.iec.ch/online_news/justpub Stay up to date on all new IEC publications.Just Published details twice a month all new publications released.Available on-line and also by email.?Customer Service Centre:www.iec.ch/webstore/custserv If you wish to give us your feedback on this publication or need further assistance,please visit the Customer Service Centre FAQ or contact us:Email:csciec.ch Tel.:+41 22 919 02 11 Fax:+41 22 919 03 00 LICENSED TO MECON Limited.-RANCHI/BANGALOREFOR INTERNAL USE AT THIS LOCATION ONLY,SUPPLIED BY BOOK SUPPLY BUREAU.TECHNICAL SPECIFICATION IECTS 62351-6 First edition2007-06 Power systems management and associated information exchange Data and communications security Part 6:Security for IEC 61850 PRICE CODE P For price,see current catalogueCommission Electrotechnique InternationaleInternational Electrotechnical Commission LICENSED TO MECON Limited.-RANCHI/BANGALOREFOR INTERNAL USE AT THIS LOCATION ONLY,SUPPLIED BY BOOK SUPPLY BUREAU.2 TS 62351-6 IEC:2007(E)CONTENTS FOREWORD.3 1 Scope and object.5 1.1 Scope.5 1.2 Object.5 2 Normative references.5 3 Definitions.6 4 Security issues addressed by this specification.6 4.1 Operational issues affecting choice of security options.6 4.2 Security threats countered.7 4.3 Attack methods countered.7 5 Correlation of IEC 61850 parts and IEC 62351 parts.7 5.1 IEC 61850 security for profiles using ISO 9506(MMS).7 5.1.1 General.7 5.1.2 Control centre to substation.7 5.1.3 Substation communications.7 5.2 IEC 61850 security for profiles using VLAN IDs.8 6 IEC 61850 security for SNTP.8 7 IEC 61850 security for profiles using VLAN technologies.8 7.1 Overview of VLAN usage and IEC 61850(informative).8 7.2 Extended PDU.8 7.2.1 General format of extended PDU.8 7.2.2 Format of extension octets.9 7.2.3 Substation configuration language.12 8 Conformance.13 8.1 General conformance.13 8.2 Conformance for implementations claiming ISO 9506 profile security.14 8.3 Conformance for implementations claiming VLAN profile security.14 8.4 Conformance for implementations claiming SNTP profile security.15 Bibliography.16 Figure 1 General format of extended PDU.8 Figure 2 SCL extensions for certificates.12 Figure 3 Extension to AccessPoint SCL definition.13 Table 1 Scope of application to standards.5 Table 2 Extract from IEC 61850-9-2(informative).11 Table 3 Conformance table.14 Table 4 PICS for ISO 9506 profile.14 Table 5 PICS for VLAN profiles.14 Table 6 PICS for SNTP profiles.15 LICENSED TO MECON Limited.-RANCHI/BANGALOREFOR INTERNAL USE AT THIS LOCATION ONLY,SUPPLIED BY BOOK SUPPLY BUREAU.TS 62351-6 IEC:2007(E)3 INTERNATIONAL ELECTROTECHNICAL COMMISSION _ POWER SYSTEMS MANAGEMENT AND ASSOCIATED INFORMATION EXCHANGE DATA AND COMMUNICATIONS SECURITY Part 6:Security for IEC 61850 FOREWORD 1)The International Electrotechnical Commission(IEC)is a worldwide organization for standardization comprising all national electrotechnical committees(IEC National Committees).The object of IEC is to promote international co-operation on all questions concerning standardization in the electrical and electronic fields.To this end and in addition to other activities,IEC publishes International Standards,Technical Specifications,Technical Reports,Publicly Available Specifications(PAS)and Guides(hereafter