GB/Z 25320.5-2013Power systems management and associated information exchange - Data and communications security - Part 5: Security for GB/T 18657 and derivatives (English PDF)
电力系统管理及其信息交换 数据和通信安全 第5部分:GB/T 18657等及其衍生标准的安全
This is a limited preview
Buy now to download the full PDF (45 pages)
Need quotation for your management?
Get a formal quotation for GB/Z 25320.5-2013 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
February 7, 2013
Implementation date
February 7, 2013
Scope
GB/Z 25320.5-2013 is the English-translated version of 电力系统管理及其信息交换 数据和通信安全 第5部分:GB/T 18657等及其衍生标准的安全.
GB/Z 25320.5-2013 is a guiding technical document, an identical adoption of IEC/TS 62351-5:2009, dealing with data and communications security for power system telecontrol protocols.
It describes the messages, procedures and algorithms used to authenticate the operation of protocols based on GB/T 18657 (IEC 60870-5), with Table 1 listing IEC 60870-5-101, -102, -103, -104 and DNP3.
Clauses cover the threats addressed, message definitions, state machines, minimum and optional interoperability requirements, use over TCP/IP and redundant channels, and the algorithms to be declared such as HMAC and key encryption.
It treats only application-level authentication and leaves encryption against eavesdropping and man-in-the-middle attacks outside its scope. Protocol drafting working groups, product developers and system managers are the intended readers. Part 5 of the GB/Z 25320 series, it was issued on 7 February 2013.
Found what you need?
Document preview — GB/Z 25320.5-2013
National Standard of the People's Republic of China
- ICS
- 29.240.01
- Classification
- F 21
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- Introduction
- 1 Scope and purpose
- 1.1 Scope
- 1.2 Expected readers and uses
- 1.3 beyond the scope of this section
- 1.4 Used with other standards
- 1.5 File Structure and Research
- 1.6 Consistency
- 2 Normative references
- 3 Terms and definitions
- 4 abbreviation
- 5 Problem Description
- 5.1 Overview
- 5.2 Specific threats to deal with
- 5.3 Design problems faced
- 5.4 General principles
- 6 certification operation theory (informative)
- 6.1 Overview
- 6.3 Message Sequence Example
- 6.4 State Machine Overview
- 7 Formal Specification
- 7.1 Overview
- 7.2 Message Definition
- 7.3 The formal process
- 8.1 Overview
- 8.2 Minimum Requirements
- 8.3 Optional Special applications
- 9.1 Overview
- 9.2 Using TCP/IP
- 9.3 Use of redundant channels
- 9.4 Using an External Link Encryption Machine
- 10 reference to the requirements of this section
- 10.1 Overview
- 10.2 Selected Options
- 10.3 Think Key Operations
- 10.4 Address Information
- 10.5 Information Format Mapping
- 10.6 Reference to Procedures
- 11 Agreement Declaration of Consensus Achieved
- 11.1 Overview
- 11.2 Required Algorithms
- 11.3 HMAC Algorithm
- 11.4 Key Encryption Algorithm
- 11.5 Maximum error count
- 11.6 The Use of Error Messages
- References
Foreword
GB /Z 25320 "power system management and information exchange data and communications security" is divided into the following sections.
--- Part 1. Introduction to communication network and system security and safety issues;
--- Part 2. Terms;
--- Part 3. Communication network and system security including TCP/IP protocol set;
--- Part 4. Protocol set containing MMS;
--- Part 5. GB/T 18657, etc. and their derivatives standards of security;
--- Part 6. Power enterprise automation communication network and system security;
--- Part 7. Network and system management data object model;
--- Part 8. Role-based access control of power system management.
This section GB /Z 25320 Part 5.
This section drafted in accordance with GB/T 1.1-2009 given rules.
This section uses the translation method identical with IEC /T S62351-5.2009 "Power System Management and its information exchange data and communications security Full Part 5. IEC 60870-5 and its derivatives standards of safety. " The documents of our country that are consistent with the corresponding international documents that are normative references in this section are as follows.
--- GB /Z 25320.1-2010 Power system management and information exchange - Data and communications security - Part 1. Communication networks And system safety and security issues (IEC /T S62351-1.2007, IDT)
--- GB /Z 25320.2-2013 Power system management and its exchange of information data and communications security Part 2. Terminology (IEC /T S62351-2.2008, IDT)
--- GB /Z 25320.3-2010 Power system management and its exchange of information data and communications security Part 3. Communication network And System Security Including TCP/IP Protocol Set (IEC /T S62351-3.2007, IDT)
--- DL/T 634.5101-2002 Telecontrol equipment and systems Part 5-101. Transmission protocol Basic Telecontrol tasks supporting standard Standard (IEC 60870-5-101:2002, IDT)
--- DL/T 719-2000 Telecontrol equipment and systems Part 5. Transmission protocol Article 102. Accumulation of electric energy in electric power system Transmission standards (IEC 60870-5-102:1996, IDT)
--- DL/T 667-1999 Telecontrol equipment and systems Part 5. Transmission protocol Part 103. Relay equipment information access Mouth supporting standards (IEC 60870-5-103:1997, IDT)
--- DL/T 634.5104-2009 Telecontrol equipment and systems Section 5-104. Transmission protocol using standard transmission protocol set
IEC 60870-5-101 Network Access (IEC 60870-5-104:2006, IDT)
Introduction
Computer, communications and networking technologies are currently widely used in power systems. There are various kinds of information in communications and computer networks Possible security attacks pose a threat to the security of data and communications in power systems. These potential possible attacks target the power system Security vulnerabilities in communication protocols at various levels of the system and imperfections in the security management of power system information infrastructure.
To this end, we adopted the international standard to develop GB /Z 25320 "Power System Management and its information exchange data and communication security", pass Over the relevant communication protocols and in the information infrastructure management to add specific security measures to enhance and enhance the power system data and Communication security.
1 Scope and purpose
1.1 Scope
For the purpose of any and every application that is based on or derived from IEC 60870-5 (GB/T 18657 "Telecontrol Equipment and Systems Part 5. Transmission Specifications")
Agreement for the operation of security, GB /Z 25320 provisions of this section used by the message, process and algorithm. This section applies at least
1.2 Prospective readers and purposes
This section of the initial reader is expected to develop the agreement listed in Table 1 working group staff. In order for the measures described in this section to take effect, The protocol specification itself must adopt and cite these measures. This section is written to enable this process.
Subsequent readers of this section are expected to be product developers implementing these protocols.
Portions of this section are also useful for managers and administrators to understand the purpose and needs of the job.
1.3 Beyond the scope of this section
According to the directives of Working Party 3 of IEC 57, this part of IEC 62351 focuses only on application-level certification and the resulting certification Health and safety issues. Other issues involved in security protection, especially through the use of encryption to prevent eavesdropping and man-in-the-middle attacks To exceed the scope of this section. Through the use of this standard in conjunction with other specifications, you can add encryption.
1.4 Used with other standards
Working groups that develop the protocols listed in Table 1 may publish standards that are used in conjunction with this section. Requirements These standards should describe the certification machine The mapping of messages and procedures for each particular protocol.
These documents should not disregard any of the mandatory and prescriptive safety measures described in this section.
When used in IEC 60870-5-104, this section should be used in conjunction with IEC /T S62351-3.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 45 pages — is available in the English PDF.
Referenced standards
Normative references
IEC 60870-5-101 · IEC 60870-5-102 · IEC 60870-5-103 · IEC 60870-5-104 · IEC/TS 62351-1 · IEC/TS 62351-2 · IEC/TS 62351-3 · ISO/IEC 9798-4 · FIPS 186-2 · FIPS 197 · FIPS 198-1 · RFC 2104 · RFC 3174 · RFC 3394 · RFC 3629
Similar standards
How to Download GB/Z 25320.5-2013
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/Z 25320.6-2011 — Power systems management and associated information exchange - Data and communications security - Part 6: Security for IEC 61850
GB/Z 25320.4-2010 — Power systems management and associated information exchange -- Data and communications security -- Part 4: Profiles including MMS
GB/Z 25320.7-2015 — Power systems management and associated information exchange - Data and communications security - Part 7: Network and system management (NSM) data object models
Secure payment via Stripe
Payments accepted
GB/Z 25320.5-2013
$620.00