Security Profile for Advanced Metering Infrastructure - Open Smart ...

mechanisms must not degrade functionality (including performance) of the AMI
system or impact personnel safety.
3. Failure of a cryptographic mechanism must not create a denial of service or fail to
an unprotected open state. Alternative systems should be in place in case of such
failure. AMI systems generally support the objectives of availability, integrity,
and confidentiality.
DHS-2.8.8.4 Rationale:
The operation of the AMI is dependent on the integrity of electronically communicated
information. The integrity requirements of electronically communicated information can
be violated both intentionally and unintentionally. System components that make
decisions based on compromised information can lead to system instability, malfunction,
and a host of other impacts. When unacceptable impacts can be caused by a violation of
integrity requirements, there is a need to implement integrity controls.
DHS-2.8.9 Communication Confidentiality
DHS-2.8.9.1 Requirement:
The AMI system design and implementation must protect the confidentiality of
electronically communicated information where necessary.
DHS-2.8.9.2 Supplemental Guidance:
The use of a third-party communication service provider instead of organization owned
infrastructure may warrant the use of encryption. The use of cryptographic mechanisms
within an AMI system could introduce communications latency due to the additional time
and computing resources required to encrypt, decrypt, and authenticate each message.
Any latency induced from the use of cryptographic mechanisms must not degrade the
operational performance of the AMI system.
DHS-2.8.9.3 Requirement Enhancements:
None.
DHS-2.8.9.4 Rationale:
Electronically communicated information in an AMI system may have confidentiality
requirements because it ensures the privacy of customer and business information and it
is possible that the confidentiality of electronically communicated information is required
for operational integrity. The confidentiality requirements of electronically
communicated information can be violated both intentionally and unintentionally and can
lead to system instability, malfunction, privacy violation, loss of business advantage, and
a host of other impacts. When unacceptable impacts can be caused by a violation of
confidentiality requirements, there is a need to implement confidentiality controls.
Security Profile for Advanced Metering Infrastructure Version 1.0
UtiliSec Working Group (UCAIug) December 10, 2009
31