Saturday, February 7, 2015

Standard IEC 62351-3 “Communication network and system security - Profiles including TCP/IP” published

IEC TC 57 has published the crucial standard for security:

Standard IEC 62351-3
Power systems management and associated information exchange - Data and communications security -
Part 3: Communication network and system security - Profiles including TCP/IP

Partie 3: Sécurité des réseaux et des systèmes de communication – Profils comprenant TCP/IP

image

This part of IEC 62351 specifies how to secure TCP/IP-based protocols through constraints on the specification of the messages, procedures, and algorithms of Transport Layer Security (TLS) (defined in RFC 5246) so that they are applicable to the telecontrol environment of the IEC. TLS is applied to protect the TCP communication. It is intended that this standard be referenced as a normative part of other IEC standards (e.g., IEC 60870-5, IEC 60870-6, IEC 61850, IEC 61400-25, …) that have the need for providing security for their TCP/IP-based protocol.

Now it is up to the vendors and users to implement this standard or require it, respectively.

There is no accuse anymore that IEC 61850 has no security measures defined in form of a standard that can officially be referenced.

Click HERE for the preview of the new standard.

No comments: