SMARTMETER. A technological overview of the German roll-out. Peter Hasse. 28. Dec 2012
|
|
|
- Jewel Davidson
- 6 years ago
- Views:
Transcription
1 SMARTMETER A technological overview of the German roll-out Peter Hasse 28. Dec / 42
2 Outline 1 Motivation German laws Organizations 2 Protection profile Technical guideline Overview Smart Meter 3 Smart Meter Gateway Security Module 4 PKI Encryption 2 / 42
3 About me Motivation German laws Organizations Hochschule Bonn-Rhein-Sieg FrOSCon Fraunhofer Fokus - IT4Energy 3 / 42
4 Research Motivation German laws Organizations Wireless backhaul networks (WiBACK project) Wireless sensor networks Evolved packet core optimization 4 / 42
5 Why? Motivation German laws Organizations Italy and Spain Energy theft Sweden, Norway Automated meter reading Germany Energiewende change from fossil to renewable energy sources Smart Grid the intelligent energy network? Controllable local systems (CLS) General Direct feedback of commodity consumption for the consumer Communication interface for buildings Third party services 5 / 42
6 Smart grid Motivation German laws Organizations Role of the consumer changes to a prosumer Distributed energy production - micro power plants Solar, wind, biomass, etc... Distributed energy storage emobility In house energy storage Change from demand driven production to availability driven consumption CLS - white goods, energy storage Availability orientated contracts / scales Preventing consumption peaks 6 / 42
7 There are rules! Motivation German laws Organizations EnWG Energiewirtschaftsgesetz ( energy industry act ) Deregulation of the German energy market Discrimination free grid access (controlled by the Bundesnetzagentur ) [wpea] EEG Erneuerbare Energiengesetz ( renewable energies law ) Roll-out of smart meters Offer of time/load-variable energy contracts Incentives for feed-in of renewable energies [wpeb] 7 / 42
8 There are rules! Motivation German laws Organizations NABEG Netzausbaubeschleunigungsgesetz ( Increasing grid development law ) [wpn] Speedup the renovation/extension of the German power grid (e.g. connection of off-shore wind parks) BNetzA organizes and approves federal state boarder crossing power grid projects 8 / 42
9 Involved German federal institutions Motivation German laws Organizations BMWi - Federal Ministry of Economics and Technology Technology, Energy, Digital Domain SME, Industry BMU - Federal Ministry for the Environment, Nature Conservation and Nuclear Safety Environment Nature protection Reactor safety 9 / 42
10 Involved German federal institutions Motivation German laws Organizations BMI - Federal Ministry of the Interior Security, Politics, and Society Migration and Integration Public Services and Administration BSI - Federal Office for Information Security E-Government IT base level security Certification, Electronic ID 10 / 42
11 Involved associations Motivation German laws Organizations Energy, telecommunication, IT, housing industry, consumer protection VDI, DKE, Bitkom Research Universities Equipment vendors ISPs / mobile operators 11 / 42
12 Time line Motivation German laws Organizations EU-Directive 2006/32/EG for energy efficiency 2008 renew EnWg to liberate the measurement business 2010 BMWi charges BSI with the development of the Protection Profile and the Technical Guideline Jan 2010 new buildings and buildings after complete renovation need to be equipped with digital meters Jan 2011 BSI presents first draft Renewed EnWg orders usage of the PP Dec 2012 BSI publishes RC of the final version of PP and TR Jan 2013 deadline for comments Dez 2013 deadline for deployment of not conform meters 12 / 42
13 Overview Protection profile Technical guideline [bsi] Protection profile (PP) RC Technical guideline TR (TR) RC Test specifications (TS) Technical guideline TR cryptography Technical guideline TR V elliptic curves 13 / 42
14 Protection profile Protection profile Technical guideline Based on ISO/IEC Defines security functions and requirements Physical implementation (i.e. casing) Security module Interfaces Handling of measurement and status data Data protection Management functions Defines assets and a threat model 14 / 42
15 Technical guideline Protection profile Technical guideline Extends the protection profile with functional aspects Functionality Interoperability Security Also defines testing specifications for compliance testing 15 / 42
16 Overview Protection profile Technical guideline Technical Guideline Smart Energy BSI TR TR Smart Meter Gateway TR Security Module TR Cryptographic Guideline TR PKI TR Communication Adapter TR TS-1 Test specification SMGW TR TS-2 Test specification Security Module TR TS-5 Test specification Communication Adapter 16 / 42
17 Roles Protection profile Technical guideline Consumer Grid Operator Supplier Producer Meter Operator Gateway Operator Meter Administrator Gateway Administrator Gateway Developer Profile Provider External entity / User 17 / 42
18 Overview Overview Smart Meter Smart Meter Gateway Security Module [TR-12] 18 / 42
19 WAN Overview Smart Meter Smart Meter Gateway Security Module GSM / GPRS / UMTS... LAN / DSL / Cable PLC Fiber 19 / 42
20 LMN / HAN Overview Smart Meter Smart Meter Gateway Security Module LMN MBUS / Wireless MBUS DIN EN Encryption AES+CBC + CMAC IEC Smart Message Language (SML) transport protocol Based on OMS Specification Volume 2 IEC62056 HAN LAN / WiFi PLC 20 / 42
21 Smart Meter Overview Smart Meter Smart Meter Gateway Security Module Back (in/output) MUC Port IEC62056 Wireless M-Bus Smart Meter Logging Memory CPU Firmware Crypto Modul Display Front (output) User Interface IEC62056 Intrusion Dedection Metering Probe Power Connector Front Leagacy Output S0 21 / 42
22 Tasks - Overview Overview Smart Meter Smart Meter Gateway Security Module Records consumption or production of one or more commodities Submits records to the SMGW Signing and encryption for the LMN Needs to be calibrated and sealed 22 / 42
23 Components Overview Smart Meter Smart Meter Gateway Security Module Back (in/output) MUC Port IEC62056 Wireless MBUS Smart Meter Gateway Memory Firmware CPU Front (output) User Interface IEC62056 GPRS / PowerLine / Ethernet Intrusion Dedection Crypto Modul 23 / 42
24 Tasks - Overview Overview Smart Meter Smart Meter Gateway Security Module Handling of meter data Protection of authenticity, integrity and confidentiality Firewall Wake-Up-Service Privacy preservation Handling of profiles Separation of data from different consumer Firmware updates Management of security functionality Encryption and signing via Sec Module 24 / 42
25 Privacy Overview Smart Meter Smart Meter Gateway Security Module Communication concealing Pseudonymisation Removing of meter ID s GW ID s need to be removed by the GW administrator Data level encryption User authentication 25 / 42
26 Logging - What happened? Overview Smart Meter Smart Meter Gateway Security Module System log System events Only visible to the administrator Consumer log Access log to all private data Only visible to the consumer Calibration log Calibration relevant events Only visible to the administrator Kept for the whole lifetime of the Gateway 26 / 42
27 Time Overview Smart Meter Smart Meter Gateway Security Module Over trusted TLS channel Only from trusted external time source no GPS, DCF77,... time source Reject on to high deviation (max 3%) 27 / 42
28 Security features Overview Smart Meter Smart Meter Gateway Security Module Memory encryption PACE based communication with security module Firewall 28 / 42
29 Communication Overview Smart Meter Smart Meter Gateway Security Module Outgoing connections only (except wake up packet) Provides TLS secured channel for all outgoing connections Metering data to gateway administrator Metering data to external party CLS to external party (TLS proxy) Error notification to the administrator Configuration from gateway administrator (via wake up) 29 / 42
30 Service interfaces Overview Smart Meter Smart Meter Gateway Security Module RESTfull COSEM Webservice COSEM interface classes defined in IEC Access via HTTP XML transfer syntax Addressed via tree structure ASN.1 encoding i.e / 42
31 Wake-up-service Overview Smart Meter Smart Meter Gateway Security Module Packet needs to be signed Packet needs to have a recent time stamp No reply on accept or reject Only connection to preconfigured address 31 / 42
32 Firewall Overview Smart Meter Smart Meter Gateway Security Module Separation between LAN, HAN and WAN No services allowed on the WAN interface Except wake up packet HAN LMN WAN HAN X X LMN WAN X 32 / 42
33 Overview Overview Smart Meter Smart Meter Gateway Security Module Cryptographic service provider Storage for certificates and keys Separated from the SMGW SmartCard or soldered module PACE between SM and SMGW 33 / 42
34 Cryptographic Support Overview Smart Meter Smart Meter Gateway Security Module Key generation Cryptographic operation Key destruction Operation for signatures Operation for user data encryption Random number generation 34 / 42
35 TR PKI Encryption ecard-project of the German government Cryptographic guideline for infrastructure of intelligent metering systems Defines the cryptographic mechanisms, primitives and key length Annual update to keep track with the state of development SM-PKI National Root-CA Sub-CA end user certificate assurer End user certificates Signatures based on ECDSA TLS for transport layer security 35 / 42
36 TLS PKI Encryption TLS version >= 1.2 No fall back allowed Max 48h per session Allways mutual authentication Methods ECDSA and ECKA NIST-Domain-Parameter and Brainpool-Domain-parameter Signature generation based on PACE, ECKA-DH, ECKA-EG, ECDSA 36 / 42
37 Random number generator PKI Encryption DRG.3 / 4 PTG.4 NTG.1 37 / 42
38 Initialization PKI Encryption Meter By Vendor or by SMGW Initial exchange on connection to SMGW Gateway Intial key set by vendor Can be changed by operator / administrator Security Module Either by vendor before integration Or after integration via SMGW 38 / 42
39 Hashing functions PKI Encryption Method / Parameter Requirements From To Root-CA Signature ECDSA-With-SHA EC-domain-parameter NIST P Sub-CAs Signature ECDSA-With-SHA EC-domain-parameter NIST P / 42
40 Meter - Gateway PKI Encryption TLS if possible Fallback to preconfigured symmetric cypher for unidirectional meters Data encryption with derived key + MAC AES CBC / AES CMAC Encryption, signing and authentication in the meter Re-keying ever two years AES CMAC 128 bit 40 / 42
41 Links PKI Encryption Bundesregierung - energiekonzepte. Technische richtlinie bsi tr smart energy, May Energie wirtschafts gesetzt. Wp - german renewable energy act. Netzausbaubeschleunigungsgesetz. Sorry most links are German. 41 / 42
42 Thanks! PKI Encryption Thank you! Any questions? mail: 42 / 42
Privacy and Security in Smart Grids
Faculty of Computer Science, Institute of Systems Architecture, Chair for Privacy and Data Security Privacy and Security in Smart Grids The German Approach Sebastian Clauß, Stefan Köpsell Dresden, 19.10.2012
josef A Java-Based Open-Source Smart Meter Gateway Experimentation Framework
Kommunikationsnetze josef A Java-Based Open-Source Smart Meter Gateway Experimentation Framework Michael Höfling, Florian Heimgärtner, Daniel Fuchs, Michael Menth http://kn.inf.uni-tuebingen.de Background
Protection Profile for the Gateway of a Smart Metering System Combining privacy protection with security for the grid
Protection Profile for the Gateway of a Smart Metering System Combining privacy protection with security for the grid Dr. Helge (BSI) 12th ICC, 29.9.2011 A Possible Smart Grid 2 Introduction Smart Meter
IDACCS Wireless Integrity protection in a smart grid environment for wireless access of smart meters
IDACCS Wireless 2014 Integrity protection in a smart grid environment for wireless access of smart meters Prof- Dr.-Ing. Kai-Oliver Detken DECOIT GmbH Fahrenheitstraße 9 D-28359 Bremen URL: http://www.decoit.de
Markus Bartsch. German Smart Metering and European Privacy Needs
Markus Bartsch German Smart Metering and European Privacy Needs Smart Grid (and Metering) Customer Satisfaction 3 Years 3 10 Years Identity Management Asset Management Feeder Automation Smart Meters Privacy
Communication Concept for Smart Metering, Smart Grid and Home Automation
Communication Concept for Metering, Grid and Home Automation Thomas Kessler (TKessler@telekom.de), Deutsche Telekom AG ETSI M2M Workshop, 26-27 October 2011, Sophia Antipolis, France 26/10/2011 1 Outline.
Smart Gas Metering in Germany.
Smart Gas Metering in Germany. New OMS Standard for Germany. New security standard. 10 th October 2012, Metering Billing/CRM Europe 2012, Amsterdam Andreas Bolder, Deutsche Telekom Technischer Service
New Security Features in DLMS/COSEM
New Security Features in DLMS/COSEM A comparison to the Smart Meter Gateway Workshop on Power Line Communications 2015 (HRW), Robin Massink (DNV GL), Gerd Bumiller (HRW) 21.09.2015 21.09.2015 1 Initiated
Key Lifecycle Security Requirements. Version 1.0.2
Key Lifecycle Security Requirements Version 1.0.2 Federal Office for Information Security Post Box 20 03 63 D-53133 Bonn Phone: +49 22899 9582-0 E-Mail: eid@bsi.bund.de Internet: https://www.bsi.bund.de
Legal Regulations and Vulnerability Analysis
Legal Regulations and Vulnerability Analysis Bundesamt für Sicherheit in der Informationstechnik (BSI) (Federal Office for Information Security) Germany Introduction of the BSI National Authority for Information
Cryptographic Mechanisms: Recommendations and Key Lengths
Technical Guideline TR-02102-4 Cryptographic Mechanisms: Recommendations and Key Lengths Part 4 Use of Secure Shell (SSH) (Version 2018-01) Federal Office for Information Security P.O.B. 20 03 63 D-53133
Intelligent measuring systems Smart Meter Gateway CONEXA
Intelligent measuring systems Smart Meter Gateway CONEXA CONEXA Smart Meter Gateway for more intelligent networks and greater energy efficiency As a municipal energy supplier or distributor, you are not
Data Sheet. NCP Secure Entry Mac Client. Next Generation Network Access Technology
Universal VPN Client Suite for macos/os X Compatible with VPN Gateways (IPsec Standard) macos 10.13, 10.12, OS X 10.11, OS X 10.10 Import of third party configuration files Integrated, dynamic Personal
Connecting Securely to the Cloud
Connecting Securely to the Cloud Security Primer Presented by Enrico Gregoratto Andrew Marsh Agenda 2 Presentation Speaker Trusting The Connection Transport Layer Security Connecting to the Cloud Enrico
eidas compliant Trust Services with Utimaco HSMs
eidas compliant Trust Services with Utimaco HSMs March 15, 2018 Dieter Bong Product Manager Utimaco HSM Business Unit Aachen, Germany 2018 eidas-compliant Trust Services with Utimaco HSMs Page 1 eidas
Regulatory Issues of Smart Grids
Regulatory Issues of Smart Grids T. Bräuchle, E. Weis EIT ICT Labs Smart Energy Systems Summer School 2012 Institut für Informations- und Wirtschaftsrecht (IIWR) Zentrum für Angewandte Rechtswissenschaft
Cooperative ITS Corridor Joint Deployment
Cooperative ITS Corridor Joint Deployment Secure V2X Communication Glasgow, June 8th 2016 Markus Ullmann Federal Office for Information Security (BSI) Outline Cooperative Intelligent Transport System (C-ITS)
Cisco VPN Internal Service Module for Cisco ISR G2
Data Sheet Cisco VPN Internal Service Module for Cisco ISR G2 Compact Versatile High-Performance VPN Module The Cisco VPN Internal Service Module (VPN ISM) is a module for the Cisco Integrated Services
The German IT Security Certification Scheme. Joachim Weber
The German IT Security Certification Scheme Joachim Weber The German IT Security Certification Scheme 1. The role of the BSI 2. The German IT Certificate Scheme 3. Certification procedures in detail 4.
Acronyms. International Organization for Standardization International Telecommunication Union ITU Telecommunication Standardization Sector
Acronyms 3DES AES AH ANSI CBC CESG CFB CMAC CRT DoS DEA DES DoS DSA DSS ECB ECC ECDSA ESP FIPS IAB IETF IP IPsec ISO ITU ITU-T Triple DES Advanced Encryption Standard Authentication Header American National
Evolving Standards in Security. Michael Garrison Stuber
Evolving Standards in Security Michael Garrison Stuber Sad but true... Cartoon courtesy of xkcd.com Trends & Responses Evolution from unsecure to secure Acceptance of ECC Struggling with certificates Demand
Digitalization in the Energy Market Test Technology for the Electricity Market 2.0
ANALYZING LOGGING testing MEASURING Digitalization in the Energy Market Test Technology for the Electricity Market 2.0 Do you have any questions or wishes? Feel free to contact us. ZERA GmbH Hauptstraße
Smart Grid vs. The NERC CIP
Smart Grid vs. The NERC CIP Tobias Whitney, MBA GE Smart Grid Center of Excellence 1 First The Bottom Line Security & Privacy are paramount Smart Grid concerns of regulators and the public Currently every
Security+ SY0-501 Study Guide Table of Contents
Security+ SY0-501 Study Guide Table of Contents Course Introduction Table of Contents About This Course About CompTIA Certifications Module 1 / Threats, Attacks, and Vulnerabilities Module 1 / Unit 1 Indicators
Getting to Grips with Public Key Infrastructure (PKI)
Getting to Grips with Public Key Infrastructure (PKI) What is a PKI? A Public Key Infrastructure (PKI) is a combination of policies, procedures and technology that forms a trust infrastructure to issue
COOPERATIVE ITS SECURITY STANDARDIZATION AND ACTIVITIES ON EUROPEAN C ITS TRUST MODEL AND POLICY
COOPERATIVE ITS SECURITY STANDARDIZATION AND ACTIVITIES ON EUROPEAN C ITS TRUST MODEL AND POLICY ETSI IoT Security WORKSHOP, 13 15 June 2016 Brigitte LONC, RENAULT ETSI TC ITS WG 5 Chairman ETSI 2016.
Interoperable, flexible, sustainable CONEXA Smart Meter Gateway
Interoperable, flexible, sustainable CONEXA Smart Meter Gateway CONEXA Smart Meter Gateway Advantages at a glance Sustainable interoperability Maximum data security Our CONEXA 3.0 Smart Meter Gateway supports
Cyber security for digital substations. IEC Europe Conference 2017
Cyber security for digital substations IEC 61850 Europe Conference 2017 Unrestricted Siemens 2017 siemens.com/gridsecurity Substation Digitalization process From security via simplicity 1st generation:
Controlled Document Page 1 of 6. Effective Date: 6/19/13. Approved by: CAB/F. Approved on: 6/19/13. Version Supersedes:
Page 1 of 6 I. Common Principles and Approaches to Privacy A. A Modern History of Privacy a. Descriptions, definitions and classes b. Historical and social origins B. Types of Information a. Personal information
Frequently Asked Questions
December 2001 Introduction International Standard ISO/IEC 17799:2000 Information Security Management, Code of Practice for Information Security Management Frequently Asked Questions The National Institute
IEC DLMS/COSEM. How to accommodate new requirements while maintaining interoperability. Győző Kmethy - President DLMS User Association
IEC 62056 DLMS/COSEM How to accommodate new requirements while maintaining interoperability Győző Kmethy - President DLMS User Association 1 Presentation program DLMS/COSEM snapshot The smart metering
Data Sheet. NCP Secure Enterprise Linux Client. Next Generation Network Access Technology
Versatile central manageable VPN Client Suite for Linux Central Management and Network Access Control Compatible with VPN gateways (IPsec Standard) Integrated, dynamic personal firewall FIPS Inside Fallback
The SafeNet Security System Version 3 Overview
The SafeNet Security System Version 3 Overview Version 3 Overview Abstract This document provides a description of Information Resource Engineering s SafeNet version 3 products. SafeNet version 3 products
BSI-CC-PP for
for Protection Profile for the Security Module of a Smart Meter Mini-HSM (Mini-HSM Security Module PP) - Schutzprofil für das Sicherheitsmodul des Smart Meter Mini-HSM, V1.0 developed by Federal Office
Technical Guideline TR eid-server Part 3: eidas-middleware-service for eidas-token
Technical Guideline TR-03130-3 eid-server Part 3: eidas-middleware-service for eidas-token Version 1.0 5. May 2017 Federal Office for Information Security Post Box 20 03 63 D-53133 Bonn Phone: +49 22899
Release Notes. NCP Secure Enterprise Mac Client. 1. New Features and Enhancements. 2. Improvements / Problems Resolved. 3.
NCP Secure Enterprise Mac Client Service Release 2.05 Build 14711 Date: December 2013 Prerequisites Apple OS X Operating System: The following Apple OS X operating system versions are supported with this
SSL/TSL EV Certificates
SSL/TSL EV Certificates CA/Browser Forum Exploratory seminar on e-signatures for e-business in the South Mediterranean region 11-12 November 2013, Amman, Jordan Moudrick DADASHOW CEO, Skaitmeninio Sertifikavimo
This version of the des Secure Enterprise MAC Client can be used on Mac OS X 10.7 Lion platform.
NCP Secure Enterprise MAC Client Service Release 2.02 Build 11 Date: August 2011 1. New Feature Compatibility to Mac OS X 10.7 Lion This version of the des Secure Enterprise MAC Client can be used on Mac
XenApp 5 Security Standards and Deployment Scenarios
XenApp 5 Security Standards and Deployment Scenarios 2015-03-04 20:22:07 UTC 2015 Citrix Systems, Inc. All rights reserved. Terms of Use Trademarks Privacy Statement Contents XenApp 5 Security Standards
Introducing Hardware Security Modules to Embedded Systems
Introducing Hardware Security Modules to Embedded Systems for Electric Vehicles charging according to ISO/IEC 15118 V1.0 2017-03-17 Agenda Hardware Trust Anchors - General Introduction Hardware Trust Anchors
IT challenges of an integrated system for remote monitoring and control of expenditure and payment of electricity
IT challenges of an integrated system for remote monitoring and control of expenditure and payment of electricity Ljubiša Jovev IRVAS International d.o.o ljubisa.jovev@gmail.com ICT Forum 2010 Niš, November
Data Sheet. NCP Secure Enterprise macos Client. Next Generation Network Access Technology
Universal, centrally managed VPN Client Suite for macos/os X Central Management and Network Access Control Compatible with VPN Gateways (IPsec Standard) Integrated, dynamic Personal Firewall VPN Path Finder
SMart esolutions Information Security
Information Security Agenda What are SMart esolutions? What is Information Security? Definitions SMart esolutions Security Features Frequently Asked Questions 12/6/2004 2 What are SMart esolutions? SMart
Security and Certificates
Encryption, page 1 Voice and Video Encryption, page 6 Federal Information Processing Standards, page 6 Certificate Validation, page 6 Required Certificates for On-Premises Servers, page 7 Certificate Requirements
eidas Interoperability Architecture Version November 2015
eidas Interoperability Architecture Version 1.00 6. November 2015 1 Introduction This document specifies the interoperability components of the eidas-network, i.e. the components necessary to achieve interoperability
Security Architecture of Smart Metering Systems
Security Architecture of Smart Metering Systems Natasa Zivic, Christoph Ruland To cite this version: Natasa Zivic, Christoph Ruland. Security Architecture of Smart Metering Systems. Wojciech Cellary; Elsa
NCP Secure Enterprise macos Client Release Notes
Service Release: 3.10 r40218 Date: July 2018 Prerequisites Apple OS X operating systems: The following Apple macos operating systems are supported with this release: macos High Sierra 10.13 macos Sierra
Release Notes. NCP Secure Enterprise Mac Client. 1. New Features and Enhancements. 2. Improvements / Problems Resolved. 3.
NCP Secure Enterprise Mac Client Service Release 2.05 Rev. 32317 Date: January 2017 Prerequisites Apple OS X Operating System: The following Apple OS X operating system versions are supported with this
Security Architecture of Smart Metering Systems
Security Architecture of Smart Metering Systems Natasa Zivic and Christoph Ruland University of Siegen, Institute for Data Communications Systems, Hoelderlinstrasse 3, 57076 Siegen, Germany {Natasa.Zivic,Christoph.Ruland}@uni-siegen.de
Designing Network Encryption for the Future Emily McAdams Security Engagement Manager, Security & Trust Organization BRKSEC-2015
Designing Network Encryption for the Future Emily McAdams Security Engagement Manager, Security & Trust Organization BRKSEC-2015 What Could It Cost You? Average of $0.58 a record According to the Verizon
OpenWay by Itron Security Overview
Itron White Paper OpenWay by Itron OpenWay by Itron Security Overview Kip Gering / R. Eric Robinson Itron Marketing / Itron Engineering 2009, Itron Inc. All rights reserved. 1 Executive Summary 3 Intent
Digital signatures: How it s done in PDF
Digital signatures: How it s done in PDF Agenda Why do we need digital signatures? Basic concepts applied to PDF Digital signatures and document workflow Long term validation Why do we need digital signatures?
Standards for Smart Grids
Standards for Smart Grids Smart Grids & Cleanpower Conference 24/25 June 2010 http://bit.ly/cleanpower Keith Dickerson Chairman, WP3 of ITU-T Study Group 5 ETSI Board International Telecommunication Union
DIGITALSIGN - CERTIFICADORA DIGITAL, SA.
DIGITALSIGN - CERTIFICADORA DIGITAL, SA. TIMESTAMP POLICY VERSION 1.1 21/12/2017 Page 1 / 18 VERSION HISTORY Date Edition n.º Content 10/04/2013 1.0 Initial drafting 21/12/2017 1.1 Revision AUTHORIZATIONS
German Smart Metering System
German Smart Metering System Smart Systems and Cyber Security Detlef Einacker Detlef.einacker@neuhaus.de www.neuhaus.de Phone: +49 (0) 40 55304 1490 Mobile: +49 (0) 160 367 2324 1.1 / 09.2017 Sagemcom
Satisfying CC Cryptography Requirements through CAVP/CMVP Certifications. International Crypto Module Conference May 19, 2017
Satisfying CC Cryptography Requirements through CAVP/CMVP Certifications International Crypto Module Conference May 19, 2017 Synopsis Background NIAP policy relating to cryptographic requirements NIAP
PKI Knowledge Dissemination Program. PKI Standards. Dr. Balaji Rajendran Centre for Development of Advanced Computing (C-DAC) Bangalore
PKI Standards Dr. Balaji Rajendran Centre for Development of Advanced Computing (C-DAC) Bangalore Under the Aegis of Controller of Certifying Authorities (CCA) Government of India 1 PKCS Why PKCS? Even
Technical Guideline TR eid-server. Part 2: Security Framework for eid-server operations
Technical Guideline TR-03130 eid-server Part 2: Security Framework for eid-server operations Version 2.1.2 October 25, 2017 Document history Version Date Description 0.4 Draft August 20, 2013 Initial External
NCP Secure Entry macos Client Release Notes
Service Release: 3.20 r43098 Date: March 2019 Prerequisites Apple macos operating systems: The following Apple macos operating systems are supported with this release: macos Mojave 10.14 macos High Sierra
Chapter 8 Information Technology
CRIM 2130 Introduction to Critical Infrastructure Protection Spring 2016 Chapter 8 Information Technology School of Criminology and Justice Studies University of Massachusetts Lowell Enterprise systems
Securing the Smart Grid
Corporate Technology Securing the Smart Grid Steffen Fries Siemens AG, CT T, GTF IT Security : +49 89 636 53403 : steffen.fries@siemens.com Keynote Energy 2011, May 2011 Outline Smart Grid What is it all
Digital Certificates Demystified
Digital Certificates Demystified Ross Cooper, CISSP IBM Corporation RACF/PKI Development Poughkeepsie, NY Email: rdc@us.ibm.com August 9 th, 2012 Session 11622 Agenda Cryptography What are Digital Certificates
Smart Meter Security. Martin Klimke, Principle of Technical Marketing Infineon Chip Card and Security
Smart Meter Security Martin Klimke, Principle of Technical Marketing Infineon Chip Card and Security Smart Grids: Advanced power control, intelligence and communications New Business models and Services
About FIPS, NGE, and AnyConnect
About FIPS, NGE, and AnyConnect, on page 1 Configure FIPS for the AnyConnect Core VPN Client, on page 4 Configure FIPS for the Network Access Manager, on page 5 About FIPS, NGE, and AnyConnect AnyConnect
BlackVault Hardware Security Platform SECURE TRUSTED INTUITIVE. Cryptographic Appliances with Integrated Level 3+ Hardware Security Module
BlackVault Hardware Security Platform SECURE TRUSTED INTUITIVE Cryptographic Appliances with Integrated Level 3+ Hardware Security Module The BlackVault hardware security platform keeps cryptographic material
This document is a preview generated by EVS
INTERNATIONAL STANDARD ISO/IEC 18013-3 Second edition 2017-04 Information technology Personal identification ISO-compliant driving licence Part 3: Access control, authentication and integrity validation
An Overview of Secure and Authenticated Remote Access to Central Sites
Workshop on Data Access to Micro-Data (WDA) Nuernberg, August 20-21 An Overview of Secure and Authenticated Remote Access to Central Sites Dr Milan Marković Banca Intesa ad Beograd, Serbia milan.markovic@bancaintesabeograd.com
WAP Security. Helsinki University of Technology S Security of Communication Protocols
WAP Security Helsinki University of Technology S-38.153 Security of Communication Protocols Mikko.Kerava@iki.fi 15.4.2003 Contents 1. Introduction to WAP 2. Wireless Transport Layer Security 3. Other WAP
Internet Engineering Task Force (IETF) Category: Informational ISSN: October 2013
Internet Engineering Task Force (IETF) J. Merkle Request for Comments: 7027 secunet Security Networks Updates: 4492 M. Lochter Category: Informational BSI ISSN: 2070-1721 October 2013 Abstract Elliptic
BCA III Network security and Cryptography Examination-2016 Model Paper 1
Time: 3hrs BCA III Network security and Cryptography Examination-2016 Model Paper 1 M.M:50 The question paper contains 40 multiple choice questions with four choices and student will have to pick the correct
Securing the Smart Grid. Understanding the BIG Picture 11/1/2011. Proprietary Information of Corporate Risk Solutions, Inc. 1.
Securing the Smart Grid Understanding the BIG Picture The Power Grid The electric power system is the most capital-intensive infrastructure in North America. The system is undergoing tremendous change
FIPS Security Policy
FIPS 140-2 Security Policy BlackBerry Cryptographic Library Version 2.0.0.10 Document Version 1.2 BlackBerry Certifications, Research In Motion This document may be freely copied and distributed provided
4 6 May, 2009 Dubai, UAE
How to build an open, real-time Smart Metering and Smart Grid Platform with Broadband Powerline Ingo Schönberg CEO, Power Plus Communication AG, Germany 4 6 May, 2009 Dubai, UAE Content Company and Business
Avygdor Moise, Ph.D. Future DOS Research & Development Inc. Enablers of plug & play AMI solutions that work
Integration of the ANSI standard in the SmartGrid system design Presented by Avygdor Moise, Ph.D. Future DOS Research & Development Inc. Enablers of plug & play AMI solutions that work 303-6707 Elbow Drive
Overview. SSL Cryptography Overview CHAPTER 1
CHAPTER 1 Secure Sockets Layer (SSL) is an application-level protocol that provides encryption technology for the Internet. SSL ensures the secure transmission of data between a client and a server through
Architecture and Development of Secure Communication Solutions for Smart Grid Applications
Architecture and Development of Secure Communication Solutions for Smart Grid Applications Axel Sikora University of Applied Sciences Offenburg, D77652 Offenburg, Germany Email: axel.sikora@hs-offenburg.de
Electronic Signature Policy
Electronic Signature Policy Definitions The following terms are used in this policy. Term Definition Electronic Signature An electronic signature is a paperless method used to authorize or approve documents
WHAT FUTURE FOR CONTACTLESS CARD SECURITY?
WHAT FUTURE FOR CONTACTLESS CARD SECURITY? Alain Vazquez (alain.vazquez@louveciennes.sema.slb.com) 1/27 AV Contents Major contactless features : summary Contactless major constraints Major security issues
C2X Security. Introduction and overview (focus to European standard only) Cryptovision s Mindshare V
C2X Security Introduction and overview (focus to European standard only) Cryptovision s Mindshare 2015-06-24 V1.00 2015-06-24 Agenda What is Car2x Communication? Standards Security concepts C2X-PKI 2/30
About & Beyond PKI. Blockchain and PKI. André Clerc Dipl. Inf.-Ing. FH, CISSP, CAS PM TEMET AG, Zürich. February 9, 2017
About & Beyond PKI Blockchain and PKI André Clerc Dipl. Inf.-Ing. FH, CISSP, CAS PM TEMET AG, Zürich February 9, 2017 1 Agenda Does blockchain secure PKIs in the longterm? Disadvantages of classic PKIs
ISO/IEC INTERNATIONAL STANDARD
INTERNATIONAL STANDARD ISO/IEC 15945 First edition 2002-02-01 Information technology Security techniques Specification of TTP services to support the application of digital signatures Technologies de l'information
Data Sheet. NCP Exclusive Remote Access Mac Client. Next Generation Network Access Technology
Centrally managed VPN Client Suite for macos/os X For Juniper SRX Series Central Management macos 10.13, 10.12, OS X 10.11, OS X 10.10 Dynamic Personal Firewall VPN Path Finder Technology (Fallback IPsec/HTTPS)
Cisco Desktop Collaboration Experience DX650 Security Overview
White Paper Cisco Desktop Collaboration Experience DX650 Security Overview Cisco Desktop Collaboration Experience DX650 Security Overview The Cisco Desktop Collaboration Experience DX650 (Cisco DX650)
THE LEADING IOT INDUSTRY EVENT
THE LEADING IOT INDUSTRY EVENT HOSTED BY IN PARTNERSHIP WITH SUPPORTED BY Barcelona icapital 2015 How to keep Smart Meters and their Data safe and secure Chris Loreskar, Trustonic Jens-Uwe Soehner, nlycs
Security in Power System Automation Status and Application of IEC Steffen Fries, Siemens Corporate Technology, June 13 th, 2017
Security in Power System Automation Status and Application of IEC 62351 Steffen Fries, Siemens Corporate Technology, June 13 th, 2017 Operator Integrator Vendor IEC 62351-10 Power Systems Security Architecture
CONTENTS. vii. Chapter 1 TCP/IP Overview 1. Chapter 2 Symmetric-Key Cryptography 33. Acknowledgements
CONTENTS Preface Acknowledgements xiii xvii Chapter 1 TCP/IP Overview 1 1.1 Some History 2 1.2 TCP/IP Protocol Architecture 4 1.2.1 Data-link Layer 4 1.2.2 Network Layer 5 1.2.2.1 Internet Protocol 5 IPv4
IOS Common Cryptographic Module (IC2M)
IOS Common Cryptographic Module (IC2M) FIPS 140-2 Non Proprietary Security Policy Level 1 Validation Version 0.3 April 18, 2013 Table of Contents 1 INTRODUCTION... 3 1.1 PURPOSE... 3 1.2 MODULE VALIDATION
Trust Services for Electronic Transactions
Trust Services for Electronic Transactions ROUMEN TRIFONOV Faculty of Computer Systems and Control Technical University of Sofia 8 st. Kliment Ohridski bul., 1000 Sofia BULGARIA r_trifonov@tu-sofia.bg
Technical Guideline TR eid-client Part 2: Conformance Test Specification. Version 1.3
Technical Guideline TR-03124-2 e-client Part 2: Conformance Test Specification Version 1.3 12. June 2017 Federal Office for Information Security Post Box 20 03 63 D-53133 Bonn Phone: +49 22899 9582-0 E-Mail:
Inventory List of computer based systems
(Sep 2018) Inventory List of computer based systems 1. Introduction 1.1 General The Inventory List of computer based systems includes a set of documents as mentioned in para 2 of this recommendation. 1.2
UPDATE ON CEN & ETSI STANDARDISATION ON SIGNATURES
UPDATE ON CEN & ETSI STANDARDISATION ON SIGNATURES Workshop eidas Trust Services: 6 months on after the switch-over 19 December 2016 Riccardo Genghini, TC ESI chairman Topics eidas Standards Status ETSI
SmartCards as electronic signature devices Progress of standardization. Helmut Scherzer, CEN TC224/WG16 (Editor) IBM Germany
SmartCards as electronic signature devices Progress of standardization Helmut Scherzer, CEN TC224/WG16 (Editor) IBM Germany scherzer@de.ibm.com Active CEN working groups(today) TC224 : "Machine readable
Security and Privacy in Car2Car Adhoc Networks
Security and Privacy in Car2Car Adhoc Networks Antonio Kung Trialog www.trialog.com 15/06/2016 1 Introduction French SME Involved since 2002 in security and privacy for connected vehicles 15/06/2016 2
Certicom Security for Government Suppliers developing products to meet the US Government FIPS security requirement
certicom application notes Certicom Security for Government Suppliers developing products to meet the US Government FIPS 140-2 security requirement THE PROBLEM How can vendors take advantage of the lucrative
Applications using ECC. Matthew Campagna Director Certicom Research
1 Applications using ECC Matthew Campagna Director Certicom Research 2 Agenda About Certicom Pitney Bowes PC Smart Meter BlackBerry Smartcard Reader New techniques for financial applications and bandwidth
The Mobile Finnish Identity Certificate
The Mobile Finnish Identity Certificate Dr.Tech. Göran Pulkkis and BSc (Eng.) Jonny Karlsson ARCADA Polytechnic Helsinki Finland PRESENTATION OUTLINE Finnish Electronic Identity (FINEID) as a Smartcard
Chapter 6: Security of higher layers. (network security)
Chapter 6: Security of higher layers (network security) Outline TLS SET 1. TLS History of TLS SSL = Secure Socket Layer defined by Netscape normalized as TLS TLS = Transport Layer Security between TCP
ДОБРО ПОЖАЛОВАТЬ SIEMENS AG ENERGY MANAGEMENT
ДОБРО ПОЖАЛОВАТЬ SIEMENS AG ENERGY MANAGEMENT ENERGY AUTOMATION - SMART GRID Restricted Siemens AG 20XX All rights reserved. siemens.com/answers Frederic Buchi, Energy Management Division, Siemens AG Cyber
Public Key Cryptography Options for Trusted Host Identities in HIP
Public Key Cryptography Options for Trusted Host Identities in HIP Harri Forsgren and Timo Karvi University of Helsinki, Department of Computer Science Kaj Grahn and Göran Pulkkis Arcada University of
ISO INTERNATIONAL STANDARD. Road vehicles Extended data link security. Véhicules routiers Sécurité étendue de liaison de données
INTERNATIONAL STANDARD ISO 15764 First edition 2004-08-15 Road vehicles Extended data link security Véhicules routiers Sécurité étendue de liaison de données Reference number ISO 15764:2004(E) ISO 2004