Security Profile for Advanced Metering Infrastructure - Open Smart ...

Figure 4: AMI Security Service Domains
Each of the AMI Security Service Domains represents a comprehensive set of concerns
including (but not limited to) ownership, control, physical access, logical access,
information sensitivity, and business functionality. Physical assets are distributed
throughout the drawing and are not presumed to move or change domain. Information
flows across the drawing, passing from one domain to another by crossing the boundaries
between domains and is not presumed to “jump” a domain in its path.
The drawing assumes other utility enterprise applications beyond AMI such as Outage
Management and Customer Information will connect through the Utility Enterprise
domain. Field applications such as the Home Area Network or other utility meters (i.e.,
gas or water) will connect through the Premise Edge or Utility Edge domain,
respectively, as discussed below.
4.4.2 Domain Characteristics
While a thorough examination of each AMI Security Service Domain provides the
security analyst with a strong tool for evaluation of controls, such a discussion is not
captured herein and is not essential to implementation of these recommendations. We do,
however provide a brief description for each of the AMI Security Service Domains
below. In essence, the questions the AMI Security Service Domains are trying to address
are:
• Where does it reside in terms of utility facilities and physical environmental
controls?
Security Profile for Advanced Metering Infrastructure Version 1.0
UtiliSec Working Group (UCAIug) December 10, 2009
19