IEC 62541-12:2020

Overview

IEC 62541-12:2020 is a pivotal international standard published by the International Electrotechnical Commission (IEC) that defines the discovery and global services for OPC Unified Architecture (OPC UA). This part of the OPC UA framework specifically addresses how OPC UA Clients and Servers interact with DiscoveryServers in various deployment scenarios. It lays down the requirements and specifications for LocalDiscoveryServer, LocalDiscoveryServer-ME, and GlobalDiscoveryServer, along with comprehensive information models related to Certificate management, KeyCredential management, and Authorization Services.

With an increasing emphasis on secure and efficient industrial automation communication, IEC 62541-12:2020 facilitates seamless OPC UA application discovery, security credential handling, and authorization, thus enabling robust device interoperability and enhanced network visibility within industrial environments.

Key Topics

• Discovery Process
  Defines mechanisms for Clients to discover Servers through Local and Global Discovery Servers, including MulticastSubnet and Direct Discovery strategies. Covers application registration, announcement, and effective discovery communication.

• Local Discovery Server (LDS)
  Specifies the operation and security considerations for an LDS on a host, managing registration of local OPC UA applications and enabling Clients to find Servers on the local network efficiently.

• Global Discovery Server (GDS)
  Describes the architecture and operation of GDSs deployed in complex network topologies, enabling discovery across multiple subnets and network domains. Includes detailed information models for application registration, querying directories, and audit events.

• Certificate Management
  Details the information models and methods for managing OPC UA certificates, including pull and push certificate management approaches. Ensures secure authentication by handling certificate provisioning, revocation, trust lists, and updates.

• KeyCredential Management
  Defines management protocols and data models for secure handling of cryptographic keys and credentials with support for pull and push management architectures.

• Authorization Services
  Illustrates implicit, explicit, and chained authorization mechanisms to control access and permissions within OPC UA applications, enhancing cybersecurity frameworks.

Applications

• Industrial Automation Networks
  Enables automatic discovery of OPC UA Servers and Clients, improving network management and reducing manual configuration efforts across manufacturing plants and process control systems.

• Security Credential Handling
  Provides standardized methods for the management of security certificates and keys, critical for maintaining trust and identity verification in industrial IoT deployments.

• Cross-Domain Discovery Services
  Facilitates discovery and registration across different network environments and subnets utilizing GDS, supporting large-scale system integrations.

• Access Control in OPC UA Applications
  Ensures granular and flexible authorization of users and devices, securing sensitive automation processes and data flows according to defined policies.

• Certificate Lifecycle Management
  Supports lifecycle activities such as certificate issuance, renewal, revocation, and trust list updates, essential for maintaining long-term secure OPC UA operations.

Related Standards

• IEC 62541-1: OPC Unified Architecture - Part 1: Overview and Concepts
  Foundational OPC UA framework standard providing the basic concepts and architecture.

• IEC 62541-3: OPC Unified Architecture - Part 3: Address Space Model
  Details the information modeling aspects key to OPC UA application interoperability.

• IEC 62541-4: OPC Unified Architecture - Part 4: Services
  Defines core service interfaces for OPC UA clients and servers, including session and subscription management.

• IEC 62541-5: OPC Unified Architecture - Part 5: Information Model
  Specifies the standard OPC UA information model containing nodes, references, and attributes.

• IEC 62541-6: OPC Unified Architecture - Part 6: Mappings
  Describes mappings of OPC UA services and information models to communication protocols.

• IEC 62541-7: OPC Unified Architecture - Part 7: Profiles
  Defines standard profiles covering different OPC UA features and functional sets for product compliance.

By aligning with IEC 62541-12:2020, organizations can enhance the interoperability, security, and discoverability of OPC UA-based systems, advancing digital transformation and automation reliability across diversified industrial domains.