IEC TS 62351-8:2011
Superseded
A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.
View Superseded by
Power systems management and associated information exchange - Data and communications security - Part 8: Role-based access control
Hardcopy , PDF
English
29-09-2011
31-12-2021
FOREWORD
INTRODUCTION
1 Scope
2 Normative references
3 Terms, definitions and abbreviations
4 RBAC process model
5 Definition of roles
6 General architecture for the PUSH model
7 General architecture for the PULL model
8 General application of RBAC access token
9 Definition of access tokens
10 Transport profiles
11 Verification of access tokens
12 Interoperability
Bibliography
IEC/TS 62351-8:2011(E) covers the access control of users and automated agents to data objects in power systems by means of role-based access control. The scope of this specification covers everything that is needed for interoperability between systems from different vendors.
| Committee |
TC 57
|
| DevelopmentNote |
Stability Date: 2017. (09/2017)
|
| DocumentType |
Technical Specification
|
| Pages |
43
|
| PublisherName |
International Electrotechnical Committee
|
| Status |
Superseded
|
| SupersededBy |
| Standards | Relationship |
| DD IEC/TS 62351-8:2011 | Identical |
| NEN NPR IEC/TS 62351-8 : 2011 | Identical |
| I.S. EN 62351-9:2017 | POWER SYSTEMS MANAGEMENT AND ASSOCIATED INFORMATION EXCHANGE - DATA AND COMMUNICATIONS SECURITY - PART 9: CYBER SECURITY KEY MANAGEMENT FOR POWER SYSTEM EQUIPMENT |
| PD IEC/TS 60870-5-7:2013 | Telecontrol equipment and systems Transmission protocols. Security extensions to IEC 60870-5-101 and IEC 60870-5-104 protocols (applying IEC 62351) |
| CEI EN 62351-11 : 1ED 2017 | POWER SYSTEMS MANAGEMENT AND ASSOCIATED INFORMATION EXCHANGE - DATA AND COMMUNICATIONS SECURITY - PART 11: SECURITY FOR XML DOCUMENTS |
| I.S. EN 62351-3:2014 | POWER SYSTEMS MANAGEMENT AND ASSOCIATED INFORMATION EXCHANGE - DATA AND COMMUNICATIONS SECURITY - PART 3: COMMUNICATION NETWORK AND SYSTEM SECURITY - PROFILES INCLUDING TCP/IP |
| SAE J2931/7_201802 | Security for Plug-In Electric Vehicle Communications |
| IEC TR 62351-13:2016 | Power systems management and associated information exchange - Data and communications security - Part 13: Guidelines on security topics to be covered in standards and specifications |
| PD IEC/TR 62351-10:2012 | Power systems management and associated information exchange. Data and communications security Security architecture guidelines |
| 13/30282299 DC : 0 | BS EN 62351-3 - POWER SYSTEMS MANAGEMENT AND ASSOCIATED INFORMATION EXCHANGE - DATA AND COMMUNICATIONS SECURITY - PART 3 : COMMUNICATION NETWORK AND SYSTEM SECURITY - PROFILES INCLUDING TCP/IP |
| BS EN 62351-7:2017 | Power systems management and associated information exchange. Data and communications security Network and System Management (NSM) data object models |
| 17/30355373 DC : 0 | BS ISO/IEC 27019 - INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - INFORMATION SECURITY CONTROLS FOR THE ENERGY UTILITY INDUSTRY |
| IEC 62351-3:2014+AMD1:2018 CSV | Power systems management and associated information exchange - Data and communications security - Part 3: Communication network and system security - Profiles including TCP/IP |
| IEC 62351-9:2017 | Power systems management and associated information exchange - Data and communications security - Part 9: Cyber security key management for power system equipment |
| PD IEC/TS 62351-5:2013 | Power systems management and associated information exchange. Data and communications security Security for IEC 60870-5 and derivatives |
| DD IEC/TS 62351-7:2010 | Power systems management and associated information exchange. Data and communication security Network and system management (NSM) data object models |
| BS EN 62351-9:2017 | Power systems management and associated information exchange. Data and communications security Cyber security key management for power system equipment |
| IEC TR 62351-10:2012 | Power systems management and associated information exchange - Data and communications security - Part 10: Security architecture guidelines |
| IEC 62351-7:2017 | Power systems management and associated information exchange - Data and communications security - Part 7: Network and System Management (NSM) data object models |
| IEC TS 62351-5:2013 | Power systems management and associated information exchange - Data and communications security - Part 5: Security for IEC 60870-5 and derivatives |
| PD IEC/TR 61850-90-12:2015 | Communication networks and systems for power utility automation Wide area network engineering guidelines |
| 17/30358185 DC : 0 | BS EN 61850-8-1+A1 - COMMUNICATION NETWORKS AND SYSTEMS FOR POWER UTILITY AUTOMATION - PART 8-1: SPECIFIC COMMUNICATION SERVICE MAPPING (SCSM) - MAPPINGS TO MMS (ISO 9506-1 AND ISO 9506-2) AND TO ISO/IEC 8802-3 |
| EN 62351-3:2014 | Power systems management and associated information exchange - Data and communications security - Part 3: Communication network and system security - Profiles including TCP/IP |
| PD IEC/TR 61850-90-2:2016 | Communication networks and systems for power utility automation Using IEC 61850 for communication between substations and control centres |
| BS EN 62351-3 : 2014 | POWER SYSTEMS MANAGEMENT AND ASSOCIATED INFORMATION EXCHANGE - DATA AND COMMUNICATIONS SECURITY - PART 3: COMMUNICATION NETWORK AND SYSTEM SECURITY - PROFILES INCLUDING TCP/IP |
| IEC TS 62351-7:2010 | Power systems management and associated information exchange - Data and communications security - Part 7: Network and system management (NSM) data object models |
| IEC TR 62351-90-1:2018 | Power systems management and associated information exchange - Data and communications security - Part 90-1: Guidelines for handling role-based access control in power systems |
| IEC 62351-11:2016 | Power systems management and associated information exchange - Data and communications security - Part 11: Security for XML documents |
| 16/30343872 DC : DRAFT JUNE 2016 | BS EN 62351-9 ED1 - POWER SYSTEMS MANAGEMENT AND ASSOCIATED INFORMATION EXCHANGE - DATA ANDCOMMUNICATIONS SECURITY - PART 9: CYBER SECURITY KEY MANAGEMENT FOR POWER SYSTEM EQUIPMENT |
| BS EN 62351-11:2017 | Power systems management and associated information exchange. Data and communications security Security for XML documents |
| EN 62351-7:2017 | Power systems management and associated information exchange - Data and communications security - Part 7: Network and System Management (NSM) data object models |
| I.S. EN 62351-11:2017 | POWER SYSTEMS MANAGEMENT AND ASSOCIATED INFORMATION EXCHANGE - DATA AND COMMUNICATIONS SECURITY - PART 11: SECURITY FOR XML DOCUMENTS |
| IEEE 1815.1-2015 | IEEE Standard for Exchanging Information Between Networks Implementing IEC 61850 and IEEE Std 1815(TM) [Distributed Network Protocol (DNP3)] |
| I.S. EN 62351-7:2017 | POWER SYSTEMS MANAGEMENT AND ASSOCIATED INFORMATION EXCHANGE - DATA AND COMMUNICATIONS SECURITY - PART 7: NETWORK AND SYSTEM MANAGEMENT (NSM) DATA OBJECT MODELS |
| IEEE 1815-2012 REDLINE | IEEE Standard for Electric Power Systems Communications-Distributed Network Protocol (DNP3) |
| IEC TR 61850-90-2:2016 | Communication networks and systems for power utility automation - Part 90-2: Using IEC 61850 for communication between substations and control centres |
| EN 62351-11:2017 | Power systems management and associated information exchange – Data and communications security - Part 11: Security for XML documents |
| EN 62351-9:2017 | Power systems management and associated information exchange - Data and communications security - Part 9: Cyber security key management for power system equipment |
| IEC 61850-7-2:2010 | Communication networks and systems for power utility automation - Part 7-2: Basic information and communication structure - Abstract communication service interface (ACSI) |
| IEC TS 62351-3:2007 | Power systems management and associated information exchange - Data and communications security - Part 3: Communication network and system security - Profiles including TCP/IP |
| IEEE 802.1X-2010 | IEEE Standard for Local and metropolitan area networks--Port-Based Network Access Control |
| IEC TS 62351-4:2007 | Power systems management and associated information exchange - Data and communications security - Part 4: Profiles including MMS |
| ISO/IEC 9798-2:2008 | Information technology — Security techniques — Entity authentication — Part 2: Mechanisms using symmetric encipherment algorithms |
| ISO/IEC 9594-8:2017 | Information technology — Open Systems Interconnection — The Directory — Part 8: Public-key and attribute certificate frameworks |
| IEC TS 62351-5:2013 | Power systems management and associated information exchange - Data and communications security - Part 5: Security for IEC 60870-5 and derivatives |
| ANSI X9.69 : 2017 | FRAMEWORK FOR KEY MANAGEMENT EXTENSIONS |
| ISO/IEC 15946-2:2002 | Information technology — Security techniques — Cryptographic techniques based on elliptic curves — Part 2: Digital signatures |
| IEC TS 62351-1:2007 | Power systems management and associated information exchange - Data and communications security - Part 1: Communication network and system security - Introduction to security issues |
| IEC PAS 62400:2005 | Structuring principles for technical products and technical product documentation - Letter codes - Main classes and subclasses of objects according to their purpose and task |
| IEEE 1815-2012 REDLINE | IEEE Standard for Electric Power Systems Communications-Distributed Network Protocol (DNP3) |
| ANSI INCITS 359 : 2012 | INFORMATION TECHNOLOGY - ROLE BASED ACCESS CONTROL |
| ANSI X9.73 : 2017 | CRYPTOGRAPHIC MESSAGE SYNTAX - ASN.1 AND XML |
Access your standards online with a subscription
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.