IEC_TS_62351-4-2007.pdf

TECHNICAL SPECIFICATION IECTS 62351-4 First edition2007-06 Power systems management and associated information exchange Data and communications security Part 4:Profiles including MMS Reference number IEC/TS 62351-4:2007(E)LICENSED TO MECON Limited.-RANCHI/BANGALOREFOR INTERNAL USE AT THIS LOCATION ONLY,SUPPLIED BY BOOK SUPPLY BUREAU.THIS PUBLICATION IS COPYRIGHT PROTECTED Copyright 2007 IEC,Geneva,Switzerland All rights reserved.Unless otherwise specified,no part of this publication may be reproduced or utilized in any form or by any means,electronic or mechanical,including photocopying and microfilm,without permission in writing from either IEC or IECs member National Committee in the country of the requester.If you have any questions about IEC copyright or have an enquiry about obtaining additional rights to this publication,please contact the address below or your local IEC member National Committee for further information.IEC Central Office 3,rue de Varemb CH-1211 Geneva 20 Switzerland Email:inmailiec.ch Web:www.iec.ch About the IEC The International Electrotechnical Commission(IEC)is the leading global organization that prepares and publishes International Standards for all electrical,electronic and related technologies.About IEC publications The technical content of IEC publications is kept under constant review by the IEC.Please make sure that you have the latest edition,a corrigenda or an amendment might have been published.?Catalogue of IEC publications:www.iec.ch/searchpub The IEC on-line Catalogue enables you to search by a variety of criteria(reference number,text,technical committee,).It also gives information on projects,withdrawn and replaced publications.?IEC Just Published:www.iec.ch/online_news/justpub Stay up to date on all new IEC publications.Just Published details twice a month all new publications released.Available on-line and also by email.?Customer Service Centre:www.iec.ch/webstore/custserv If you wish to give us your feedback on this publication or need further assistance,please visit the Customer Service Centre FAQ or contact us:Email:csciec.ch Tel.:+41 22 919 02 11 Fax:+41 22 919 03 00 LICENSED TO MECON Limited.-RANCHI/BANGALOREFOR INTERNAL USE AT THIS LOCATION ONLY,SUPPLIED BY BOOK SUPPLY BUREAU.TECHNICAL SPECIFICATION IECTS 62351-4 First edition2007-06 Power systems management and associated information exchange Data and communications security Part 4:Profiles including MMS PRICE CODE P For price,see current catalogueCommission Electrotechnique InternationaleInternational Electrotechnical Commission LICENSED TO MECON Limited.-RANCHI/BANGALOREFOR INTERNAL USE AT THIS LOCATION ONLY,SUPPLIED BY BOOK SUPPLY BUREAU.2 TS 62351-4 IEC:2007(E)CONTENTS FOREWORD.3 1 Scope and object.5 1.1 Scope.5 1.2 Object.5 2 Normative References.5 3 Terms and definitions.6 4 Security issues addressed by this technical specification.6 4.1 Security for application and transport profiles.6 4.2 Security threats countered.7 4.3 Attack methods countered.7 5 A-Profile security.7 5.1 MMS.8 5.2 Logging.8 5.3 ACSE.8 5.3.1 Peer entity authentication.8 5.3.2 AARQ.11 5.3.3 AARE.11 6 T-Profile security.11 6.1 TCP T-Profiles.11 6.1.1 Conformance to this technical specification.11 6.1.2 Use of TLS in TCP T-Profiles.11 6.1.3 TP0.12 6.1.4 RFC 1006.13 6.1.5 TLS requirements.13 6.1.6 Use of TLS.13 6.2 OSI T-Profiles.14 6.3 Certificate authority support.15 7 Conformance.15 7.1 General conformance.15 7.2 Conformance of IEC 60870-6 TASE.2 security.15 Bibliography.16 Figure 1 Application and transport profiles.7 Figure 2 Non-secure and secure TCP T-Profiles IEC 62351.12 Table 1 TP0 maximum sizes.12 Table 2 Recommended cipher suite combinations.14 Table 3 Supported cipher suites.15 LICENSED TO MECON Limited.-RANCHI/BANGALOREFOR INTERNAL USE AT THIS LOCATION ONLY,SUPPLIED BY BOOK SUPPLY BUREAU.TS 62351-4 IEC:2007(E)3 INTERNATIONAL ELECTROTECHNICAL COMMISSION _ POWER SYSTEMS MANAGEMENT AND ASSOCIATED INFORMATION EXCHANGE DATA AND COMMUNICATIONS SECURITY Part 4:Profiles including MMS FOREWORD 1)The International Electrotechnical Commission(IEC)is a worldwide organization for standardization comprising all national electrotechnical committees(IEC National Committees).The object of IEC is to promote international co-operation on all questions concerning standardization in the electrical and electronic fields.To this end and in addition to other activities,IEC publishes International Standards,Technical Specifications,Technical Reports,Publicly Available Specifications(PAS)and Guides(hereafter referred to as“IEC Publication(s)”).Their preparation is entrusted to technical committees;any IEC National Committee interested in the subject dealt with may participate in this preparatory work.International,governmental and non-governmental organizations liaising with the IEC also participate in this preparation.IEC collaborates closely with the International Organization for Standardization(ISO)in accordance with conditions determined b