BS PD IEC TR 62351-90-1:2018

BS PD IEC TR 62351-90-1:2018, which is a technical report, addresses the handling of access controlof users and automated agents to data objects in power systems by means of role-basedaccess control (RBAC) as defined in IEC TS 62351-8. IEC TS 62351-8 defines three differentprofiles to distribute role information and also defines a set of mandatory roles to besupported. Adoption of RBAC has shown that the defined mandatory roles are not alwayssufficient and it is recommended that the method for defining custom roles be standardized toensure interoperability. Hence, the main focus of this document lies in developing astandardized method for defining and engineering custom roles, their role-to-right mappingsand the corresponding infrastructure support needed to utilize these custom roles in powersystems. This is achieved by defining categories and sub level categories, which provide adistinction of actions, connected with dedicated rights as well as a proposal for a format todistribute the custom role-to-right mappings. Moreover, a format is being proposed todistribute the information on custom defined roles and associated rights by utilizing XACML asan established standard for access control.Cross References:ISO 9594-8IEC 61850-6IEC 62351-7ITU-T Recommendation X .509:2005IEC TS 62351-4IEC TS 62351-6IEC TS 62351-8IEC TS 62351-1IEC 62351-9IEC 62443-3-3IEC TS 62351-5IEC 62351-3 IEC 62351-9IEEE P1689IEEE 1686RFC5878ANSI INCITS 359-2004RFC5280ANSI X.9.73-2002IEC 62443 (all parts)BSI TR 03109IEC 60870-5-104IEEE 1518:2010IEC TS 60870-5-7ANSI X.9 .69-2006IEC/ISO 9798-2ISO 27019IEC 61850-7-3NIST: SP 800-82