GB/Z 25320.3-2010Power systems management and associated information exchange - Data and communications security - Part 3: Communication network and system security - Profiles including TCP/IP (English PDF)
电力系统管理及其信息交换 数据和通信安全 第3部分:通信网络和系统安全 包含TCP/IP的协议集
This is a limited preview
Buy now to download the full PDF (23 pages)
Need quotation for your management?
Get a formal quotation for GB/Z 25320.3-2010 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
November 10, 2010
Implementation date
November 10, 2010
Scope
GB/Z 25320.3-2010 is the English-translated version of 电力系统管理及其信息交换 数据和通信安全 第3部分:通信网络和系统安全 包含TCP/IP的协议集.
GB/Z 25320.3-2010 is a guiding technical document that explains how to secure telecontrol traffic, such as SCADA, carried over TCP/IP. It sets out the messages, procedures and algorithms of Transport Layer Security as defined in RFC 2246, so that confidentiality, tamper detection and message-level authentication can be added to such protocols.
Its clauses cover the security threats addressed, mandatory provisions, requirements placed on the referencing IEC TC57 standards and conformance. Protection is provided between the end entities at either end of a TCP/IP connection; external devices inserted in the link, such as link-side encryption boxes, fall outside it.
The text is written for the working groups that draft or use these protocols and for developers implementing them, and it is an identical adoption of IEC/TS 62351-3:2007. It was issued on 10 November 2010.
Found what you need?
Document preview — GB/Z 25320.3-2010
National Standard of the People's Republic of China
- ICS
- 29.240.30
- Classification
- F 21
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- Introduction
- 1 Scope and purpose
- 2 Normative references
- 3 Terms and definitions
- 4 This part of the safety issues involved
- 5 Mandatory
- 6 TC57 reference standard requirements
- 7 Consistency
Foreword
International Electrotechnical Commission 57 Technical Committee (IEC TC57) for the management of power systems and the exchange of information developed by IEC 62351 " Force system management and information exchange data and communications security "standard. We use IEC 62351, prepared GB /Z 25320 guidance Technical documents, including the following sections.
--- Part 1. Introduction to communication network and system security and safety issues;
--- Part 2. Terms;
--- Part 3. Communication network and system security Protocol set containing TCP/IP;
--- Part 4. Protocol set containing MMS;
--- Part 5. IEC 60870-5 and its derivatives standards;
--- Part 6. DL/T 860 security;
--- Part 7. Network and system management data object model;
--- Part 8. Role-based access control of power system management.
This section identical with IEC TS62351-3:2007 "Power System Management and Information Exchange Part 3 data and communications security Minutes. Communication Network and System Security Including TCP/IP Protocol Set "(in English).
Introduction
Computer, communications and networking technologies are currently widely used in power systems. There are various kinds of information in communications and computer networks Possible security attacks pose a threat to the security of data and communications in power systems. These potential possible attacks target the power system Security vulnerabilities in communication protocols at various levels of the system and imperfections in the security management of power system information infrastructure.
To this end, we adopted the international standard to develop GB /Z 25320 "Power System Management and its information exchange data and communication security", pass Over the relevant communication protocols and in the information infrastructure management to add specific security measures to improve and enhance the power system data and pass The security of the letter.
1 Scope and purpose
1.1 Scope
This part of GB /Z 25320 specifies how to provide confidentiality for SCADA and TCP/IP as a telecontrol protocol for the messaging layer Sex, tamper detection and message level certification.
Although there are many possible solutions to the security of TCP/IP, the specific scope of this section is within the end-entity At either end of a TCP/IP connection, security between communicating entities is provided. External security devices inserted between them (such as "link-side encryption Box ") is not covered by this standard.
1.2 Purpose
GB /Z 25320 This part of the provisions of the Transport Layer Security Protocol (Transport Layer Security, TLS) (at RFC2246 in the definition) of the message, process and algorithm specifications, based on the TCP/IP protocol for security, so that these agreements can be appropriate For the remote environment of IEC TC57. As other IEC TC57 standards need to provide protection for their TCP/IP-based protocols, Ben Some are expected to be cited as a normative part of these IEC TC57 standards. However, deciding whether or not to invoke this document is a matter of agreement Full protection of the independent choice.
This section reflects the current IEC TC57 protocol security needs. This section may be required if other standards propose new requirements in the future To be revised.
This section of the initial reader is expected to IEC TC57 in the development or use of these protocols working group members. For the purpose of this section description Effective measures for the use of TCP/IP protocol itself, its norms should adopt and cite these measures. This section is to enable it Prepared in this way.
Subsequent readers of this section are expected to be developers of products that implement these protocols. Some parts of this section can also be managers And executive staff to understand the purpose and needs of the job.
2 Normative references
The provisions of the following documents through the GB /Z 25320 of this part of the reference and become the provisions of this section. Any reference to the date of the citation All subsequent amendments (not including errata content) or revisions do not apply to this section, however, encouraged to be reached under this section The parties to the agreement examine whether the latest versions of these documents are available. For undated references, the latest version applies to this book section.
GB /Z 25320.1 Power system management and its exchange of information data and communications security - Part 1. Communication network and system security Introduction to Safety (GB /Z 25320.1-2010, IEC TS62351-1:2007, IDT)
IEC TS62351-2 Power System Management and Information Exchange Data and Communication Security Part 2. Terminology (Powersystems managementandassociatedinformationexchange-Dataandcommunicationssecurity-Part 2: Glossaryof terms
RFC2246 Transport Layer Security Protocol (TLS) (RFC2246.1999, TheTLSProtocolVersion1.01))
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 23 pages — is available in the English PDF.
Referenced standards
Normative references
IEC/TS 62351-2 · RFC 2246 · RFC 2712 · RFC 3268 · RFC 3280
Similar standards
How to Download GB/Z 25320.3-2010
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/Z 25320.1-2010 — Power systems management and associated information exchange - Data and communications security - Part 1: Communication network and system security - Introduction to security issues
GB/Z 25320.4-2010 — Power systems management and associated information exchange -- Data and communications security -- Part 4: Profiles including MMS
GB/Z 25320.2-2013 — Power systems management and associated information exchange - Data and communications security - Part 2: Glossary of terms
Secure payment via Stripe
Payments accepted
GB/Z 25320.3-2010
$145.00