Security Profile for Advanced Metering Infrastructure - Open Smart ...

Table of Contents
1 ACKNOWLEDGEMENTS ............................................................................. 1
2 AUTHORS ..................................................................................................... 2
3 INTRODUCTION ........................................................................................... 3
3.1 PURPOSE ....................................................................................................................................... 4
3.2 SCOPE ........................................................................................................................................... 4
3.3 APPROACH .................................................................................................................................... 4
3.4 AUDIENCE ..................................................................................................................................... 5
3.5 DISCLAIMER/STATUS .................................................................................................................... 5
4 DOMAIN ANALYSIS ..................................................................................... 6
4.1 USE CASE AND SCENARIO ANALYSIS ............................................................................................. 6
4.2 LOGICAL ARCHITECTURE .............................................................................................................. 9
4.3 COMPONENT DEFINITIONS ........................................................................................................... 15
4.3.1 AMI Communications Network Device ................................................................................. 16
4.3.2 AMI Forecasting System ........................................................................................................ 16
4.3.3 AMI Head End ....................................................................................................................... 16
4.3.4 AMI Meter ............................................................................................................................. 16
4.3.5 AMI Meter Management System ............................................................................................ 16
4.3.6 AMI Network Management System ........................................................................................ 16
4.3.7 Demand Response Analysis and Control System (DRAACS) ................................................ 17
4.3.8 Field Tool/Device .................................................................................................................. 17
4.3.9 Grid Control Center .............................................................................................................. 17
4.3.10 Meter Data Management System (MDMS) ....................................................................... 17
4.3.11 Non-Electric Meter ........................................................................................................... 17
4.3.12 Third Party Meter/Submeter ............................................................................................. 17
4.4 AMI SECURITY SERVICE DOMAINS ............................................................................................ 18
4.4.1 Delineation of Domains ......................................................................................................... 18
4.4.2 Domain Characteristics ......................................................................................................... 19
4.4.3 Domain Analysis – Significance, Relevance, and Influence .................................................. 22
5 RECOMMENDED CONTROLS .................................................................. 24
DHS-2.8 SYSTEM AND COMMUNICATION PROTECTION ............................................................................ 24
DHS-2.8.2 Management Port Partitioning .......................................................................................... 25
DHS-2.8.3 Security Function Isolation ................................................................................................ 25
DHS-2.8.4 Information Remnants ........................................................................................................ 26
DHS-2.8.5/ NIST SP 800-53 SC-5 Denial-of-Service Protection ........................................................ 27
DHS-2.8.6 Resource Priority ............................................................................................................... 28
DHS-2.8.7 Boundary Protection .......................................................................................................... 28
DHS-2.8.8 Communication Integrity ................................................................................................... 30
DHS-2.8.9 Communication Confidentiality ......................................................................................... 31
DHS-2.8.10 Trusted Path ..................................................................................................................... 32
DHS-2.8.11 Cryptographic Key Establishment and Management ....................................................... 32
DHS-2.8.12 Use of Validated Cryptography ....................................................................................... 33
DHS-2.8.13 Collaborative Computing N/A ......................................................................................... 34
DHS-2.8.14 Transmission of Security Parameters .............................................................................. 34
Security Profile for Advanced Metering Infrastructure Version 1.0
UtiliSec Working Group (UCAIug) December 10, 2009
iv