Cookies
Wir benötigen Ihre Einwilligung zur Verwendung der einzelnen Daten, damit Sie unter anderem Informationen zu Ihren Interessen einsehen können. Klicken Sie auf "OK", um Ihre Zustimmung zu erteilen.
ČSN EN IEC 62351-9-ed.2 (335011)
Power systems management and associated information exchange - Data and communications security - Part 9: Cyber security key management for power system equipment
Name übersetzen
NORM herausgegeben am 1.12.2023
Informationen über die Norm:
Bezeichnung normen: ČSN EN IEC 62351-9-ed.2
Zeichen: 335011
Katalog-Nummer: 518046
Ausgabedatum normen: 1.12.2023
SKU: NS-1159521
Zahl der Seiten: 152
Gewicht ca.: 487 g (1.07 Pfund)
Land: Tschechische technische Norm
Kategorie: Technische Normen ČSN
Kategorie - ähnliche Normen:
Die Annotation des Normtextes ČSN EN IEC 62351-9-ed.2 (335011):
This part of IEC 62351 specifies cryptographic key management, primarily focused on the management of long-term keys, which are most often asymmetric key pairs, such as public-key certificates and corresponding private keys. As certificates build the base this document builds a foundation for many IEC 62351 services (see also Annex A). Symmetric key management is also considered but only with respect to session keys for group-based communication as applied in IEC 62351-6. The objective of this document is to define requirements and technologies to achieve interoperability of key management by specifying or limiting key management options to be used. This document assumes that an organization (or group of organizations) has defined a security policy to select the type of keys and cryptographic algorithms that will be utilized, which may have to align with other standards or regulatory requirements. This document therefore specifies only the management techniques for these selected key and cryptography infrastructures. This document assumes that the reader has a basic understanding of cryptography and key management principles. The requirements for the management of pairwise symmetric (session) keys in the context of communication protocols is specified in the parts of IEC 62351 utilizing or specifying pairwise communication such as: - IEC 62351-3 for TLS by profiling the TLS options - IEC 62351-4 for the application layer end-to-end security - IEC TS 62351-5 for the application layer security mechanism for IEC 60870-5-101/104 and IEEE 1815 (DNP3) The requirements for the management of symmetric group keys in the context of power system communication protocols is specified in IEC 62351-6 for utilizing group security to protect GOOSE and SV communication. IEC 62351-9 utilizes GDOI as already IETF specified group-based key management protocol to manage the group security parameter and enhances this protocol to carry the security parameter for GOOSE, SV, and PTP. This document also defines security events for specific conditions which could identify issues which might require error handling. However, the actions of the organisation in response to these error conditions are beyond the scope of this document and are expected to be defined by the organizations security policy. In the future, as public-key cryptography becomes endangered by the evolution of quantum computers, this document will also consider post-quantum cryptography to a certain extent. Note that at this time being no specific measures are provided
Normansicht ČSN EN IEC 62351-9-ed.2 (335011)
Empfehlungen:
Aktualisierung der technischen Normen
Wollen Sie sich sicher sein, dass Sie nur die gültigen technischen Normen verwenden?
Wir bieten Ihnen eine Lösung, die Ihnen eine Monatsübersicht über die Aktualität der von Ihnen angewandten Normen sicher stellt.
Brauchen Sie mehr Informationen? Sehen Sie sich diese Seite an.
