Home // SECURWARE 2019, The Thirteenth International Conference on Emerging Security Information, Systems and Technologies // View article

End-to-End Application Security over Intermediaries on the Example of Power System Communication

Authors:
Steffen Fries
Rainer Falk

Keywords: security; device authentication; end-to-end security; multi-hop security; IEC 62351 Publish/Subscribe

Abstract:
Connecting client and server applications directly via a transport connection allows the application of existing security protocols directly as known from classical web applications. Typically, Transport Layer Security (TLS) is applied to protect the communication link end-2-end. This approach is utilized in substation automation to protect the TCP-based communication between a substation controller and a protection relay applying mutual authentication of the end-points. If a direct communication link is not available, communication is realized over an intermediary system. Providing end-to-end security over multiple communication hops, including mutual endpoint authentication (client and a target application service) as well as integrity and confidentiality of communicated data deserves specific attention, even if the communication hops with the intermediary are protected hop-by-hop by security protocols like TLS. In power system automation, this kind of communication involving an intermediary is used with publish subscribe protocols, e.g., when integrating Decentralized Energy Resources (DER) or when integrating into the German Smart Meter Gateway architecture. This paper investigates existing solutions and specifically analyses the end-to-end security approach defined for power system automation within the International Electrotechnical Commission (IEC) and motivates broader application in session-based communication scenarios.

Pages: 22 to 27

Copyright: Copyright (c) IARIA, 2019

Publication date: October 27, 2019

Published in: conference

ISSN: 2162-2116

ISBN: 978-1-61208-746-7

Location: Nice, France

Dates: from October 27, 2019 to October 31, 2019