British Standards Institution

Source:: IEC
Committee:: PEL/57 - Power systems management and associated information exchange
Categories:: Information management | Standardization. General rules | Engineering | ICT | Telecommunications. Audio and video engineering | Telecontrol. Telemetering

Scope

This TS addresses the issues and alternatives for Deep Packet Inspection (DPI) of encrypted communications, primarily for specific communication profiles including IEC 61850 (security provided by IEC 62351 Part 6, which references IEC 62351 Part 4, and Part 3), IEC 60870-5-101/104 (security provided by IEC 60870-5-7, which references IEC 62351 Part 5 and Part 3), and IEC 62056 (DLMS). Other communication profiles may also be considered. Use Cases address the differing DPI issues in varying environments, including communications within an organization (e.g. between utility SCADA and substations) and communications with external organizations (e.g. between utilities and Distributed Energy Resources (DER) facilities and plants).

IEC 62351 Part 8 and Part 9 are referenced to ensure that the DPI entity includes authentication and authorization.

Not in scope for these specifications: how to securely store cryptographic material, key update policies, local implementation issues on key exposure

Purpose

This is a self-contained work that complements the adoption of several parts of the 62351 series (such as Part 3, 4, 5, 8, 9) with methods to carry out monitoring also in presence of secure communication profiles, including encryption. It also extends the work previously shown in 62351-90-2, transforming the presented informative guidelines into normative concepts.

The market relevance touches every network owner utilizing IEC protocols who wants to apply the mentioned security profiles, without waiving to network monitoring, which relevance is outlined in 62351 Part 7

Comment on proposal

Required form fields are indicated by an asterisk (*) character.

How important do you think standardization is in this area? *

Do you agree that a standard on this subject is feasible?: *

Please give reasons for your selections above: *

Would you or your organization use the standard? *

Would you or your organization be prepared to participate in the development of the standard or to comment on the draft when it is available? *

Are you aware of any regulation, existing standards and other good practice information in this area in the UK (e.g. Industry codes of practice; company specifications, international or European Standards)? *

Would the development of a standard(s) in this area have a particular impact/relevance to SME, consumer, environmental or societal interests? *

Are you aware of any other organizations to which this proposal may be relevant? If so please provide details below. *

Additional comments on the scope or proposal:

Although BSI will not usually enter into correspondence regarding individual comments or suggestions we may wish to contact you to seek further clarification. Please indicate whether this will be acceptable: *

Discard

Please email further comments to: debbie.stead@bsigroup.com

Standard timeline

1. Proposal

Proposal start date:

05/04/2023

Proposal end date:

03/05/2023

2. Draft

3. Public Comments

4. Comment Resolution

5. Approval

6. Publication

Learn more about the standards development process

Standards Development

IEC 57/2586/NP Power systems management and associated information exchange - Data and communications security - Part 15: Deep Packet Inspection (DPI) of encrypted communications

Scope

Purpose

Comment on proposal

Discard changes?

Submit comment

Submit comment

Follow standard

Unfollow standard

Error