IEC 62351-5:2023

Overview

IEC 62351-5:2023 is an international standard developed by the International Electrotechnical Commission (IEC) that addresses data and communications security for power systems management. Specifically, it focuses on securing protocols based on or derived from IEC 60870-5, which are widely used in telecontrol equipment and systems for transmission protocols. The standard defines a secure communication mechanism, known as the application profile (A-profile), detailing messages, procedures, and cryptographic algorithms to protect these control systems against cybersecurity threats.

This technical revision (replacing IEC TS 62351-5 from 2013) enhances security features by introducing advanced encryption methods, refined key management, and updated message sequencing rules, ensuring secure and reliable communications in power system operations.

Key Topics

• Scope and Purpose: Establishes secure communication mechanisms for protocols derived from IEC 60870-5, supporting product developers and informing management on cybersecurity requirements.
• Security Challenges Addressed:
  • Limited bandwidth and processing power in remote and legacy systems
  • Asymmetric communication issues
  • Unreliable media and network infrastructures, including radio and dial-up systems
  • Compatibility with varied data link layers and long upgrade intervals
• Mechanisms Defined:
  • Per controlling station/controlled station association security
  • Removal of outdated concepts like aggressive mode and challenge/reply procedures
  • Incorporation of authenticated encryption for application data
  • Updated lists of permitted cryptographic algorithms and procedures
• Key Management:
  • Reviewed asymmetric key update procedures
  • Elimination of symmetric methods for updating keys
  • Role-Based Access Control (RBAC) integration for secure access
• Message Sequencing and Interoperability:
  • Revised rules for calculating message sequence numbers to improve integrity and order
  • Defined interoperability requirements for consistent implementation by various vendors
• Event Monitoring and Logging:
  • Added mechanisms for security event detection, monitoring, and audit logging to support incident response aligned with organizational security policies

Applications

IEC 62351-5:2023 plays a critical role in enhancing cybersecurity for electric power utilities, grid operators, and manufacturers of telecontrol equipment. Key application areas include:

• Power System Telecontrol: Securing data exchange in control and monitoring protocols used for dispatch and operation of power transmission grids.
• Smart Grid Communications: Protecting communication links within modern power management systems integrating renewable energy sources and distributed automation.
• SCADA Systems: Improving the resilience of supervisory control and data acquisition systems against cyberattacks by ensuring message authentication and integrity.
• Legacy System Security Upgrades: Enabling secure communication over existing IEC 60870-5 based infrastructures without significant hardware changes, facilitating gradual cybersecurity improvements.
• Vendor Product Development: Guiding manufacturers in implementing robust cryptographic procedures and interoperability compliance within their IEC 60870-5 protocol-based products.
• Security Policy Implementation: Assisting managers and executives in understanding operational security measures and compliance requirements relevant to critical infrastructure protection.

Related Standards

IEC 62351-5:2023 is part of the broader IEC 62351 series, which focuses on cybersecurity for power system management and information exchange:

• IEC 62351-3: Specifies security for profiles including MMS, handling authentication and authorization.
• IEC 62351-4: Addresses security for network and system management in power systems.
• IEC 62351-6: Covers security for IEC 61850 communications.
• IEC 62351-7: Defines network and system management data models for secure communications.
• IEC 60870-5 series: The foundational telecontrol protocol that IEC 62351-5 secures.

Together, these standards provide a comprehensive framework safeguarding critical power infrastructure communication against cyber threats with interoperable and scalable security solutions.

Keywords: IEC 62351-5:2023, data and communications security, IEC 60870-5 security, power system telecontrol, cryptographic key management, secure communication protocols, power grid cybersecurity, IEC standards, SCADA security, telecontrol equipment security.