IEC TS 62351-100-6:2022

Overview

IEC TS 62351-100-6:2022 is a technical specification developed by the International Electrotechnical Commission (IEC) and is part of the IEC 62351 suite of standards. This document focuses on cybersecurity conformance testing for IEC 61850-8-1 and IEC 61850-9-2, which are extensively used in Substation Automation Systems (SAS) and telecontrol systems. The primary goal of this specification is to provide standardized test cases for verifying interoperability and conformance of data and communication security implementations based on IEC TS 62351-6.

It is important to note that this standard outlines test cases to evaluate interoperability in security-related communication protocols, but does not assess or guarantee the security level of a device or system. Citing conformance with IEC TS 62351-100-6:2022 means only that the implementation follows prescribed testing procedures – not that it achieves any particular cybersecurity assurance.

Key Topics

• Scope of Testing:

  • Focuses on interoperability and conformance testing for the security mechanisms as specified in IEC TS 62351-6.
  • Covers communication profiles:
    • IEC 61850-8-1 (GOOSE, MMS)
    • IEC 61850-9-2 (Sampled Values)
    • Related profiles using TCP/IP (IEC 62351-3) and MMS (IEC 62351-4).
  • Excludes safety and electromagnetic compatibility (EMC), which are addressed by other standards.

• Testing Methodologies:

  • Test cases are designed for both publisher and subscriber devices (Device Under Test or DUT).
  • Requires use of specific testing tools and environments simulating real-world operational conditions.
  • Supports both normal operation and resilience (fault) scenarios.

• Documentation & Reporting:

  • Requires detailed documentation, including Protocol Implementation Conformance Statements (PICS) and Protocol Implementation eXtra Information for Testing (PIXIT).
  • Testing facilities must maintain comprehensive, reproducible test records and version documentation for all involved devices, software, and test plans.

• Limitations:

  • Passing these tests does not ensure full interoperability or guarantee the implementation of all required security functions.
  • Full security assurance must be complemented by other tests and standards, such as IEC 62443.

Applications

IEC TS 62351-100-6:2022 is applicable to organizations and professionals involved in:

• Substation Automation Systems (SAS):
  Implementers and integrators using IEC 61850-8-1/9-2 in substation environments can utilize these test cases to assess and document the secure interoperability of devices before system commissioning.

• Vendor and Laboratory Conformance Testing:
  Vendors and independent testing labs use these test cases as a reference to validate that their products conform to IEC 62351-6 protocol security extensions for GOOSE, Sampled Values (SV), and related protocols.

• Acceptance Testing:
  Assists utilities and grid operators in minimizing the risk of integration issues during Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT), ensuring that devices have met baseline interoperability regardless of their individual security implementation.

• Product Documentation and Certification:
  Forms the basis of transparent reporting and documentation when a device is evaluated for compliance, aiding stakeholders in demonstrating due diligence in cybersecurity for critical infrastructure.

Related Standards

The effective implementation of IEC TS 62351-100-6:2022 is best achieved in conjunction with the following standards:

• IEC 61850 Series - Communication networks and systems for power utility automation.
• IEC 62351-3: Communication network and system security – Profiles including TCP/IP.
• IEC 62351-4: Communication network and system security – Profiles including MMS.
• IEC 62351-6: Security for IEC 61850.
• IEC 62443 Series: Industrial communication networks – Network and system security, providing further guidance on security assurance measures across the lifecycle.

Conclusion

IEC TS 62351-100-6:2022 delivers a standardized approach for cybersecurity conformance and interoperability testing for secure data and communication protocols in modern power systems. By adhering to these test cases, the energy industry can promote improved cross-vendor compatibility and foundational cybersecurity preparedness in substation automation and telecontrol networks, supporting global efforts to enhance electric grid resilience.