Description

BS PD IEC TR 62351-90-1 – Power systems management and associated information exchange. Data and communications security

BS PD IEC TR 62351-90-1:2018, which is a technical report, addresses the handling of access controlof users and automated agents to data objects in power systems by means of role-basedaccess control (RBAC) as defined in IEC TS 62351-8. IEC TS 62351-8 defines three differentprofiles to distribute role information and also defines a set of mandatory roles to besupported. Adoption of RBAC has shown that the defined mandatory roles are not alwayssufficient and it is recommended that the method for defining custom roles be standardized toensure interoperability. Hence, the main focus of this document lies in developing astandardized method for defining and engineering custom roles, their role-to-right mappingsand the corresponding infrastructure support needed to utilize these custom roles in powersystems. This is achieved by defining categories and sub level categories, which provide adistinction of actions, connected with dedicated rights as well as a proposal for a format todistribute the custom role-to-right mappings. Moreover, a format is being proposed todistribute the information on custom defined roles and associated rights by utilizing XACML asan established standard for access control.

Cross References:
ISO 9594-8
IEC 61850-6
IEC 62351-7
ITU-T Recommendation X .509:2005
IEC TS 62351-4
IEC TS 62351-6
IEC TS 62351-8
IEC TS 62351-1
IEC 62351-9
IEC 62443-3-3
IEC TS 62351-5
IEC 62351-3
IEC 62351-9
IEEE P1689
IEEE 1686
RFC5878
ANSI INCITS 359-2004
RFC5280
ANSI X.9.73-2002
IEC 62443 (all parts)
BSI TR 03109
IEC 60870-5-104
IEEE 1518:2010
IEC TS 60870-5-7
ANSI X.9 .69-2006
IEC/ISO 9798-2
ISO 27019
IEC 61850-7-3
NIST: SP 800-82