|
Non-Critical Operations DAC Data Acquisition Environment - #6
 Non-Critical
Operations Data Acquisition and Control environment represents the set
of requirements for gathering less-vital data to the control center,
usually for the purposes of optimizing the power network rather than
for safety, legality or reliability reasons.
Typical applications: Monitoring
non-power system equipment, power quality monitoring, primary
equipment monitoring, some kinds of customer metering.
Characteristics: Since this environment
does not involve critical information exchanges, impacts from security
breaches are minimal, and therefore extensive security measures are
not mandatory. Data may be required in hours or days rather than
seconds.
Similar Environments: Unlike
Inter-Field Equipment, this information goes directly to and from the
control center, similar to High-Security DAC but not as critical.
Definition: This environment is defined
by the following requirements:
Communication and Information Requirements that Define this Environment
Configuration Requirements
- Support interactions between a few "clients" and many "servers"
- Support interactions across widely distributed sites
- Support compute-constrained and/or media constrained communications
Quality of Service Requirements
- Provide medium speed messaging on the order of 10 seconds
- Support high availability of information flows of 99.9+ (~9 hours)
Security Requirements
- Provide Authorization Service for Access Control (resolving a policy-based access control decision to ensure authorized entities have appropriate access rights and authorized access is not denied)
- Provide Audit Service (responsible for producing records, which track security relevant events)
- Provide Security Policy Service (concerned with the management of security policies)
Network and System Management Requirements
- Provide Network Management (management of media, transport, and communication nodes)
- Provide System Management (management of end devices and applications)
Data Management Requirements
- Support keeping the data up-to-date
- Support specific standardized or de facto object models of data
- Provide discovery service (discovering available services and their characteristics)
- Provide conversion and protocol mapping
Recommended Technologies
Energy Industry-Specific Technologies
Utility Field Device Related Data Exchange Technologies
- ISO 9506 MMS - Manufacturing Messaging Specification
- Configuration, Quality of Service,
- IEC61850 Part 7-2 - GSE (GOOSE and GSSE
- Configuration,
- IEC61850 Part 7-2 - Abstract Common Services Interface (ACSI)
- Configuration, Quality of Service, Data Management
- IEC61850 Parts 7-3 and 7-4 - Substation Object Modeling
- Network Management, Data Management
- IEC61850 Part 6 - Substation Configuration Language
- Network Management, Data Management
- IEC61850 Power Quality Object Models
- Data Management
- IEC62350 - Object Models for Distributed Energy Resources (DER)
- Network Management, Data Management
- IEC62349 - Hydro Power Plant Object Models
- Network Management, Data Management
- IEC61400-25 for Wind Power Object Models
- Network Management, Data Management
Utility Control Center Related Data Management TechnologiesCommunications Industry Technologies
Access Technologies Networking Technologies IP-based Transport Protocols Link Layer and Physical Technologies Computer Systems Related Technologies General Internet and De Facto Data Management TechnologiesSecurity Technologies
Policy and Framework Related Technologies General Security Technologies Media and Network Layer Technologies Transport Layer Security Technologies Application Layer Security Technologies XML Related TechnologiesNetwork and Enterprise Management Technologies
Network Management Technologies Web-based Network ManagementSecurity Services
Common Security ServicesNetwork and System Management Services
Enterprise Management Services
- Inventory Management
- Network Management,
- Communication System/Network Discovery
- Network Management,
- Routing Management
- Network Management,
- Traffic Management
- Network Management,
- Traffic Engineering
- Network Management,
- System/Network Health-Check Analysis
- Network Management,
- System/Network Fault Diagnosis
- Network Management,
- System/Network Fault Correcting
- Network Management,
- Service Level Agreement (SLA) Determination and Maintenance
- Network Management,
- System/Network Performance Analysis
- Network Management,
- System/Network Performance Diagnosis
- Network Management,
- Performance Tuning/Correction
- Network Management,
- Accounting and/or Billing
- Network Management,
Data Management Common Services
Data Management Common ServicesCommon Platform Services
Common Platform ServicesData Management Best Practices
Data Management Security Best Practices
Security Frameworks and Policy Documents
- ISO/IEC Security Best Practices
- Security,
- ISO/IEC 18014-3:2004 Information technology -- Security techniques -- Time-stamping services -- Part 3: Mechanisms producing linked tokens
- Security,
- Federal Security Best Practices
- Security,
- CICSI 6731.01 Global Command and Control System Security Policy
- Security,
- IETF Security Best Practices Internet Requests for Comments (RFCs)
- Network Management,
- RFC 1102 Policy routing in Internet protocols
- Network Management,
- RFC 1322 A Unified Approach to Inter-Domain Routing
- Network Management,
- RFC 1351 SNMP Administrative Model
- Network Management,
- RFC 2008 Implications of Various Address Allocation Policies for Internet Routing
- Network Management,
- RFC 2196 Site Security Handbook
- Network Management,
- RFC 2276 Architectural Principles of Uniform Resource Name Resolution
- Security,
- RFC 2386 A Framework for QoS-based Routing in the Internet
- Network Management,
- RFC 2518 HTTP Extensions for Distributed Authoring - WEBDAV
- Network Management,
- RFC 2527 Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework
- Network Management,
Security Technology Documents
Alternative Technologies
Utility Field Device Related Data Exchange Technologies Utility Control Center Related Data Management Technologies
Access Technologies Networking Technologies Link Layer and Physical Technologies Wireless Technologies
Network Management Technologies Web-based Network Management
Alternative Best Practices
Data Management
ISO/IEC Documents on Security Technologies
- ISO/IEC 7816-9:2000 Identification cards -- Integrated circuit(s) cards with contacts -- Part 9: Additional
- Security,
- ISO 9735-5:2002 Electronic data interchange for administration, commerce and transport (EDIFACT) -- Application level syntax rules (Syntax version number: 4, Syntax release number: 1) -- Part 5: Security rul
- Security,
- ISO/IEC 10164-9:1995 Information technology -- Open Systems Interconnection -- Systems Management: Objects and attributes for access control
- Security,
- ISO/IEC 10181-1:1996 Information technology -- Open Systems Interconnection -- Security frameworks for open systems: Overview
- Security,
- ISO/IEC 10181-3:1996 Information technology -- Open Systems Interconnection -- Security frameworks for open systems: Access control framework
- Security,
- ISO/IEC TR 13335-1:1996 Information technology -- Guidelines for the management of IT Security -- Part 1: Concepts and models for IT Security
- Security,
- ISO/IEC TR 13335-2:1997 Information technology -- Guidelines for the management of IT Security -- Part 2: Managing and planning IT Security
- Security,
- ISO/IEC TR 13335-5 Information technology - Guidelines for the management of IT Security - Part 5: Management guidance on network security
- Security,
- ISO/IEC 15408-1:1999 Information technology -- Security techniques -- Evaluation criteria for IT security -- Part 1: Introduction and general mode
- Security,
- ISO/IEC 15408-2:1999 Information technology -- Security techniques -- Evaluation criteria for IT security -- Part 2: Security functional requirements
- Security,
- ISO/IEC 17799:2000 Information technology -- Code of practice for information security management
- Security,
IETF Internet Requests for Comments (RFCs) on Security Technologies
- RFC 1352 SNMP Security Protocols
- Network Management,
- RFC 1940 Source Demand Routing: Packet Format and Forwarding Specification (Version 1)
- Network Management,
- RFC 2086 IMAP4 ACL extension
- Security,
- RFC 2093 Group Key Management Protocol (GKMP) Specification
- Security,
- RFC 2230 Key Exchange Delegation Record for the DNS
- Security,
- RFC 2244 ACAP -- Application Configuration Access Protocol
- Security,
- RFC 2246 The TLS Protocol Version 1.0
- Security,
- RFC 2547 BGP/MPLS VPNs
- Network Management,
- RFC 2764 A Framework for IP Based Virtual Private Networks
- Network Management,
- RFC 2753 A Framework for Policy-based Admission Control
- Security,
- RFC 2797 Certificate Management Messages over CMS
- Security,
- RFC 2898 PKCS #5: Password-Based Cryptography Specification Version 2.0
- Security,
- RFC 2977 Mobile IP Authentication, Authorization, and Accounting Requirements
- Security,
- RFC 3053 IPv6 Tunnel Broker
- Network Management,
- RFC 3280 Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
- Security,
- RFC 3414 User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)
- Network Management,
- RFC 3647 Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework
- Security,
Other Security Technolog
- IEEE 802.11b Web Encryption Protocol
- Security,
- IEEE 802.11i Security for Wireless Networks
- Security,
- RSA PKCS #12 Personal Information Exchange Syntax Standard, version 1.0.
- Security,
- OASIS Documents on Security Technologies
- Security,
- WC3 XML Key Management Specification (XKMS 2.0) Bindings
- Security,
- ANSI INCITS 359-2004 Role Based Access Control (RBAC)
- Security,
- EPRI 1002596 ICCP TASE.2 Security Enhancements
- Security,
- NERC Certificate Policy for the Energy Market Access and Reliability Certificate (e MARC) Program Version 2.4
- Security,
- WebDAV Access Control Extensions to WebDAV
- Security,
- WPA WI-FI Protected Access
- Security,
- WPA2 WI-FI Protected Access Version 2
- Security,
Possible Technologies
Utility Field Device Related Data Exchange Technologies
Access Technologies Networking Technologies Wireless Technologies
|
