Thisisapreview-clickheretobuythefullpublication JEC IECTS62351-100-1 Edition 1.02018-11 TECHNICAL SPECIFICATION colour inside Power systems management and associated information exchange-Dataand communicationssecurity Part100-1:ConformancetestcasesforIECTS62351-5andIECTS60870-5-7 INTERNATIONAL ELECTROTECHNICAL COMMISSION ICS 33.200 ISBN 978-2-8322-6182-8 Warning!Make sure that you obtained this publication froman authorized distributor. ? Registered trar mmissior This is a preview -click here to buy the full publication - 2 - IECTS62351-100-1:2018@IEC2018 CONTENTS FOREWORD.. .6 INTRODUCTION... 1 Scope... .9 2 Normative references... ..9 3 Terms, definitions and abbreviated terms. .10 3.1 Terms and definitions... 10 3.2 Abbreviated terms..... 4 General ... 4.1 Normatives covered bythis technical specification. 4.2 Conformance testing structure 4.2.1 General..... 4.2.2 Conformancetestingof securityextensionprocedures ..13 4.2.3 Conformancetesting addressed per stationtype 14 4.2.4 Normal proceduretestsand resiliencytests. 14 4.3 Conformance testing requirements..... 14 4.3.1 Testingbaseprotocolswithsecurityextension. 14 4.3.2 Testing of profiles including TCP/IP.. 4.3.3 Requirements for the device under test . 4.3.4 Requirements for the test facility. 4.3.5 Test logging.... 5 Verification of configuration parameters.. .16 5.1 General.... .16 5.2 .16 System definition. 5.3 .18 Application security extension.. 6 Verification of Communication ... 21 6.1 General... 6.2 AsDUsegmentationcontrol. .21 6.3 Verification of ASDUs .. .23 6.3.1 UsermanagementASDUs.. .23 6.3.2 UpdatekeymaintenanceASDUs. 6.3.3 SessionkeymaintenanceAsDUs 6.3.4 Challenge/reply and aggressive mode authentication ASDUs ...35 6.3.5 Security statisticsASDU. ..39 7 Verification ofprocedures .39 7.1 General.. 7.2 User management... 7.2.1 General. ..40 7.2.2 Controlling station.... 7.2.3 Controlled station ..... ...43 7.3 Update key maintenance - Symmetric .... ..48 7.3.1 General ....... 7.3.2 Controlling station... 7.3.3 Controlled station .. .52 7.4 Updatekeymaintenance-Asymmetric 7.4.1 General .54 7.4.2 Controlling station... 55 This is a preview-click here to buy the full publication IECTS62351-100-1:2018IEC2018 - 3 - 7.4.3 Controlled station ..59 7.5 Sessionkeymaintenance .61 7.5.1 General .61 7.5.2 Controlling station.. 7.5.3 Controlled station. 7.6 Challenge/replyauthentication. ...69 7.6.1 General.. 7.6.2 Controlling station..... ...70 7.6.3 Controlled station ... .76 7.7 Aggressive mode authentication ... .80 7.7.1 General .... .80 7.7.2 Controlling station... 7.7.3 Controlled station.. .84 8 Tests results chart.. .87 8.1 Verificationof configuration parameters 8.2 Verification of communication ... ...88 8.2.1 ASDUs segmentation control. 8.2.2 UsermanagementAsDUs. ..89 8.2.3 UpdatekeymaintenanceASDUs ..90 8.2.4 SessionkeymaintenanceASDUs. ..92 8.2.5 Challenge/replyand aggressive modeauthentication AsDUs ..93 8.2.6 Securitystatistics ASDU. 8.3 Verification of procedures .95 8.3.1 Usermanagement. .95 8.3.2 Updatekeymaintenance-Symmetric. 8.3.3 Updatekeymaintenance-Asymmetric .100 8.3.4 Sessionkeymaintenance. 102 8.3.5 Challenge/replyauthentication.. 105 8.3.6 Aggressivemode authentication 109 Figure1-IECTS62351-5Securityextensionprocedures 13 Table1-Configurationparameters:System definition .17 Table2-Configurationparameters:Applicationsecurityextension Table3-ASDUsegmentationcontrol.. .22 Table4-UsermanagementASDUs ...23 Table5-UpdatekeymaintenanceASDUs. Table6-SessionkeymaintenanceASDUs. .32 Table7-Challenge/replyand aggressivemodeauthenticationASDUs ...35 Table 8 -Security statistics ASDU.. Table9-Usermanagement:Controlling station normal proceduretests ....41 ...42 Table 10-User management: Controlling station resiliency tests. Table11-User management:Controlled stationnormal proceduretests. .43 Table12-Usermanagement:Controlled station resiliencytests.. .44 Table 13-Update key maintenance-Symmetric: Controlling station triggering conditions.... 48