IEC 63119-1:2019

Information exchange for electric vehicle charging roaming service - Part 1: General

IEC 63119-1:2019 establishes a basis for the other parts of IEC 63119, specifying the terms and definitions, general description of the system model, classification, information exchange and security mechanisms for roaming between EV charge service providers (CSP), charging station operators (CSOs) and clearing house platforms through roaming endpoints. It provides an overview and describes the general requirements of the EV roaming service system.
IEC 63119 (all parts) is applicable to high-level communication involved in information exchange/interaction between different CSPs, as well as between a CSP and a CSO with or without a clearing house platform through the roaming endpoint.
IEC 63119 (all parts) does not specify the information exchange, either between the charging station (CS) and the charging station operator (CSO), or between the EV and the CS.

Échange d'informations pour le service d'itinérance de la recharge des véhicules électriques - Partie 1: Généralités

L'IEC 63119-1:2019 constitue la base des autres parties de la série IEC 63119. Elle spécifie les termes et définitions, la description générale du modèle de système, la classification, l'échange d'informations et les mécanismes de sécurité pour l'itinérance entre les prestataires de services de recharge de véhicules électriques (CSP), les opérateurs de bornes de charge (CSO) et les plateformes d'échange de données par le biais d'un nœud final d'itinérance. Elle fournit une vue d'ensemble et décrit les exigences générales du système du service d'itinérance des VE.
L'IEC 63119 (toutes les parties) s'applique aux communications de haut niveau dans le cadre des échanges d'informations/interactions entre les différents CSP, mais aussi entre un CSP et un CSO avec ou sans plateforme d'échange de données par le biais du nœud final d'itinérance.
L'IEC 63119 (toutes les parties) ne spécifie pas l'échange d'informations entre la borne de charge (CS) et l'opérateur de bornes de charge (CSO) ni entre le VE et la CS.

General Information

• Status: Published
• Publication Date: 25-Jun-2019
• ICS: 29.130.20 - Low voltage switchgear and controlgear
• ICS: 35.240.01 - Application of information technology in general
• ICS: 43.120 - Electric road vehicles
• Technical Committee: TC 69 - Electrical power/energy transfer systems for electrically propelled road vehicles and industrial trucks
• Drafting Committee: WG 9 - TC 69/WG 9
• Current Stage: PPUB - Publication issued
• Start Date: 26-Jun-2019
• Completion Date: 26-Jul-2019

Relations

• Revised: IEC 63119-1:2025 - Information exchange for electric vehicle charging roaming service - Part 1: General
• Effective Date: 05-Sep-2023

Overview

IEC 63119-1:2019 is an international standard published by the International Electrotechnical Commission (IEC) that establishes the foundational framework for information exchange in electric vehicle (EV) charging roaming services. This part 1 document defines the general requirements, terminology, system models, classification, communication protocols, and essential security mechanisms enabling interoperability and roaming among electric vehicle charge service providers (CSPs), charging station operators (CSOs), and clearing house platforms.

The standard specifically targets high-level communication involved in roaming interactions between different CSPs and between CSPs and CSOs via roaming endpoints. It does not cover the direct communication between charging stations and CSOs or between EVs and charging stations. As the basis for other parts of the IEC 63119 series, IEC 63119-1:2019 sets a cohesive, secure, and interoperable foundation critical to advancing EV charging roaming services worldwide.

Key Topics

• Terms and Definitions
  The standard provides comprehensive definitions essential for common understanding across stakeholders, including EV users, charge service providers (CSP), charging station operators (CSO), roaming endpoints, credentials, and service detail records.

• System Architecture and Models
  It outlines a general system model for EV charging roaming, detailing how charge service providers, charging station operators, and clearing houses interact through roaming endpoints and communication interfaces.

• Classification of Roaming Service Models
  IEC 63119-1 defines and classifies various roaming modes, enabling clear categorization of roaming scenarios to support diverse business models and interoperability requirements.

• Communication Protocol Stack
  The standard specifies network protocols and layered communication stacks ensuring robust, efficient, and standardized data exchange among involved parties.

• Security and Privacy Mechanisms
  Robust security requirements focus on authentication, authorization, data transfer security, and privacy protection tailored for the roaming ecosystem, ensuring trust and data protection in EV roaming services.

Applications

IEC 63119-1:2019 applies extensively in the EV charging ecosystem, enabling seamless roaming services that allow EV users to access multiple charging networks using a single credential and contract. Practical applications include:

• Interoperability Among Charge Service Providers
  Facilitates secure and standardized information exchange and billing among different CSPs, enabling EV users broader access to charging infrastructure.

• Integration with Charging Station Operators
  Standardizes communication and service provision between CSPs and CSOs, whether or not a clearing house platform is involved.

• Clearing House Platform Support
  Defines roles for mobility clearing houses that manage authorization, billing, and settlements between roaming partners.

• Enhanced User Experience
  Through standardized roaming endpoints and credential authentication, EV users benefit from convenient, secure, and widely accepted charging services.

• Security-Driven Roaming
  Protects stakeholders from data breaches and unauthorized access by enforcing stringent security standards within the roaming communication framework.

Related Standards

IEC 63119-1:2019 should be considered alongside other complementary IEC and ISO standards in the electric mobility space, including but not limited to:

• IEC 61851-1 - Electric vehicle conductive charging system fundamentals and definitions.
• IEC TS 62913-2-4 - Terms linked to e-mobility service providers and EV user interactions.
• RFC 5246 - Transport Layer Security (TLS) Protocol Version 1.2, referenced for securing data transfer.
• Other parts of IEC 63119 series - Cover detailed specifications for protocols, security enhancements, and implementation guidelines for EV charging roaming services.

By adhering to IEC 63119-1:2019, stakeholders contribute to a harmonized, secure, and scalable roaming environment that supports the global adoption of electric vehicles through interoperable charging infrastructure and services.

Standards Content (Sample)

IEC 63119-1 ®
Edition 1.0 2019-06
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
Information exchange for electric vehicle charging roaming service –
Part 1: General
Échange d'informations pour le service d'itinérance de la recharge des
véhicules électriques –
Partie 1: Généralités
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form
or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from
either IEC or IEC's member National Committee in the country of the requester. If you have any questions about IEC
copyright or have an enquiry about obtaining additional rights to this publication, please contact the address below or
your local IEC member National Committee for further information.

Droits de reproduction réservés. Sauf indication contraire, aucune partie de cette publication ne peut être reproduite
ni utilisée sous quelque forme que ce soit et par aucun procédé, électronique ou mécanique, y compris la photocopie
et les microfilms, sans l'accord écrit de l'IEC ou du Comité national de l'IEC du pays du demandeur. Si vous avez des
questions sur le copyright de l'IEC ou si vous désirez obtenir des droits supplémentaires sur cette publication, utilisez
les coordonnées ci-après ou contactez le Comité national de l'IEC de votre pays de résidence.

IEC Central Office Tel.: [phone]
3, rue de Varembé [e-mail]
CH-1211 Geneva 20 www.iec.ch
Switzerland
About the IEC
The International Electrotechnical Commission (IEC) is the leading global organization that prepares and publishes
International Standards for all electrical, electronic and related technologies.

About IEC publications
The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the
latest edition, a corrigendum or an amendment might have been published.

IEC publications search - webstore.iec.ch/advsearchform Electropedia - www.electropedia.org
The advanced search enables to find IEC publications by a The world's leading online dictionary on electrotechnology,
variety of criteria (reference number, text, technical containing more than 22 000 terminological entries in English
committee,…). It also gives information on projects, replaced and French, with equivalent terms in 16 additional languages.
and withdrawn publications. Also known as the International Electrotechnical Vocabulary

(IEV) online.
IEC Just Published - webstore.iec.ch/justpublished
Stay up to date on all new IEC publications. Just Published IEC Glossary - std.iec.ch/glossary
details all new publications released. Available online and 67 000 electrotechnical terminology entries in English and
once a month by email. French extracted from the Terms and Definitions clause of
IEC publications issued since 2002. Some entries have been
IEC Customer Service Centre - webstore.iec.ch/csc collected from earlier publications of IEC TC 37, 77, 86 and
If you wish to give us your feedback on this publication or CISPR.

need further assistance, please contact the Customer Service

Centre: [e-mail].
A propos de l'IEC
La Commission Electrotechnique Internationale (IEC) est la première organisation mondiale qui élabore et publie des
Normes internationales pour tout ce qui a trait à l'électricité, à l'électronique et aux technologies apparentées.

A propos des publications IEC
Le contenu technique des publications IEC est constamment revu. Veuillez vous assurer que vous possédez l’édition la
plus récente, un corrigendum ou amendement peut avoir été publié.

Recherche de publications IEC - Electropedia - www.electropedia.org
webstore.iec.ch/advsearchform Le premier dictionnaire d'électrotechnologie en ligne au
La recherche avancée permet de trouver des publications IEC monde, avec plus de 22 000 articles terminologiques en
en utilisant différents critères (numéro de référence, texte, anglais et en français, ainsi que les termes équivalents dans
comité d’études,…). Elle donne aussi des informations sur les 16 langues additionnelles. Egalement appelé Vocabulaire
projets et les publications remplacées ou retirées. Electrotechnique International (IEV) en ligne.

IEC Just Published - webstore.iec.ch/justpublished Glossaire IEC - std.iec.ch/glossary
Restez informé sur les nouvelles publications IEC. Just 67 000 entrées terminologiques électrotechniques, en anglais
Published détaille les nouvelles publications parues. et en français, extraites des articles Termes et Définitions des
Disponible en ligne et une fois par mois par email. publications IEC parues depuis 2002. Plus certaines entrées
antérieures extraites des publications des CE 37, 77, 86 et
Service Clients - webstore.iec.ch/csc CISPR de l'IEC.

Si vous désirez nous donner des commentaires sur cette
publication ou si vous avez des questions contactez-nous:
[e-mail].
IEC 63119-1 ®
Edition 1.0 2019-06
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
Information exchange for electric vehicle charging roaming service –

Part 1: General
Échange d'informations pour le service d'itinérance de la recharge des

véhicules électriques –
Partie 1: Généralités
INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
COMMISSION
ELECTROTECHNIQUE
INTERNATIONALE
ICS 43.120; 29.130.20; 35.240.01 ISBN 978-2-8322-7102-5

– 2 – IEC 63119-1:2019 © IEC 2019
CONTENTS
FOREWORD . 3
1 Scope . 5
2 Normative references . 5
3 Terms and definitions . 5
4 General description for roaming service models. 8
4.1 General . 8
4.2 System architecture . 9
4.3 Communication interfaces . 10
5 Classification of roaming service models – Roaming modes . 11
6 Communication – Protocol stack . 12
7 Security and privacy . 12
7.1 General requirements . 12
7.2 Authentication and authorization . 13
7.3 Data transfer security . 13
8 Privacy mechanisms . 13
Bibliography . 14

Figure 1 – Overview of roaming and relevant technologies. 9
Figure 2 – Overview of system architecture. 10
Figure 3 – Overview of EV services and communication interfaces . 11
Figure 4 – Overview of EV roaming classification . 12

Table 1 – Network communication protocols . 12

INTERNATIONAL ELECTROTECHNICAL COMMISSION
____________
INFORMATION EXCHANGE FOR ELECTRIC
VEHICLE CHARGING ROAMING SERVICE –

Part 1: General
FOREWORD
1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising
all national electrotechnical committees (IEC National Committees). The object of IEC is to promote
international co-operation on all questions concerning standardization in the electrical and electronic fields. To
this end and in addition to other activities, IEC publishes International Standards, Technical Specifications,
Technical Reports, Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC
Publication(s)”). Their preparation is entrusted to technical committees; any IEC National Committee interested
in the subject dealt with may participate in this preparatory work. International, governmental and non-
governmental organizations liaising with the IEC also participate in this preparation. IEC collaborates closely
with the International Organization for Standardization (ISO) in accordance with conditions determined by
agreement between the two organizations.
2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international
consensus of opinion on the relevant subjects since each technical committee has representation from all
interested IEC National Committees.
3) IEC Publications have the form of recommendations for international use and are accepted by IEC National
Committees in that sense. While all reasonable efforts are made to ensure that the technical content of IEC
Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any
misinterpretation by any end user.
4) In order to promote international uniformity, IEC National Committees undertake to apply IEC Publications
transparently to the maximum extent possible in their national and regional publications. Any divergence
between any IEC Publication and the corresponding national or regional publication shall be clearly indicated in
the latter.
5) IEC itself does not provide any attestation of conformity. Independent certification bodies provide conformity
assessment services and, in some areas, access to IEC marks of conformity. IEC is not responsible for any
services carried out by independent certification bodies.
6) All users should ensure that they have the latest edition of this publication.
7) No liability shall attach to IEC or its directors, employees, servants or agents including individual experts and
members of its technical committees and IEC National Committees for any personal injury, property damage or
other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees) and
expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC
Publications.
8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is
indispensable for the correct application of this publication.
9) Attention is drawn to the possibility that some of the elements of this IEC Publication may be the subject of
patent rights. IEC shall not be held responsible for identifying any or all such patent rights.
International Standard IEC 63119-1 has been prepared by IEC technical committee 69:
Electric road vehicles and electric industrial trucks.
The text of this International Standard is based on the following documents:
FDIS Report on voting
69/654/FDIS 69/659/RVD
Full information on the voting for the approval of this International Standard can be found in
the report on voting indicated in the above table.
This document has been drafted in accordance with the ISO/IEC Directives, Part 2.
A list of all parts in the IEC 63119 series, published under the general title Information
exchange for electric vehicle charging roaming service, can be found on the IEC website.

– 4 – IEC 63119-1:2019 © IEC 2019
The committee has decided that the contents of this document will remain unchanged until the
stability date indicated on the IEC website under "http://webstore.iec.ch" in the data related to
the specific document. At this date, the document will be
• reconfirmed,
• withdrawn,
• replaced by a revised edition, or
• amended.
INFORMATION EXCHANGE FOR ELECTRIC
VEHICLE CHARGING ROAMING SERVICE –

Part 1: General
1 Scope
This part of IEC 63119 establishes a basis for the other parts of IEC 63119, specifying the
terms and definitions, general description of the system model, classification, information
exchange and security mechanisms for roaming between EV charge service providers (CSPs),
charging station operators (CSOs) and clearing house platforms through roaming endpoints. It
provides an overview and describes the general requirements of the EV roaming service
system.
IEC 63119 (all parts) is applicable to high-level communication involved in information
exchange/interaction between different CSPs, as well as between a CSP and a CSO with or
without a clearing house platform through the roaming endpoint.
IEC 63119 (all parts) does not specify the information exchange, either between the charging
station (CS) and the charging station operator (CSO), or between the EV and the CS.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their
content constitutes requirements of this document. For dated references, only the edition
cited applies. For undated references, the latest edition of the referenced document (including
any amendments) applies.
RFC 5246, The Transport Layer Security (TLS) Protocol Version 1.2
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
ISO and IEC maintain terminological databases for use in standardization at the following
addresses:
• IEC Electropedia: available at http://www.electropedia.org/
• ISO Online browsing platform: available at http://www.iso.org/obp
3.1
electric vehicle
EV
electric road vehicle
vehicle propelled by an electric motor drawing current from a rechargeable storage battery or
from other portable energy storage devices (rechargeable, using energy from a source off the
vehicle such as a residential or public electric service), which is manufactured primarily for
use on public streets, roads or highways
[SOURCE: IEC 61851-1:2017, 3.4.1, modified – The definition has been expanded.]

– 6 – IEC 63119-1:2019 © IEC 2019
3.2
electric vehicle user
EV user
person or legal entity using the vehicle and providing information about its needs
[SOURCE: IEC TS 62913-2-4:2019, Table 3]
3.3
electric vehicle supply equipment
EVSE
equipment or a combination of equipment that provides dedicated functions to supply electric
energy from a fixed electrical installation or supply network to an EV for the purpose of
charging and discharging
Note 1 to entry: This note applies to the French language only.
3.4
charge service provider
CSP
role that manages and authenticates EV user’s credentials and provides the billing and other
value-added services to the customer
Note 1 to entry: A CSP is a specialized type of EMSP.
Note 2 to entry: This note applies to the French language only.
3.5
charging station operator
CSO
party responsible for the provisioning and operation of the charging infrastructure (including
charging sites), and managing electricity to provide requested energy transfer services
Note 1 to entry: The party shall operate a roaming endpoint to achieve a roaming service.
Note 2 to entry: This note applies to the French language only.
3.6
EMSP
e-mobility service provider
party responsible for providing high-value service related to the use of an EV (renting an EV,
reservation of parking service, navigation services, energy services which include charging
station provider in relation with CSO…)
Note 1 to entry: This note applies to the French language only.
[SOURCE: IEC TS 62913-2-4:2019, Table 3]
3.7
roaming
information exchanges and related provisions between CSPs, which allow EV users to use a
single credential and contract to access services on multiple e-mobility networks and contract
to access the charging services provided by multiple CSPs or CSOs through roaming
endpoints
3.8
clearing house
CH
mobility clearing house
MCH
roaming platform
e-mobility clearing house
E_MOCH
optional intermediate actor that facilitates authorization, billing and settling procedure for EV
charging service roaming, between two clearing partners
Note 1 to entry: The terms "MCH" (mobility clearing house), "roaming platform" and "E_MOCH" (E-mobility
clearing house) in different regions.
Note 2 to entry: This note applies to the French language only.
3.9
credential
physical or digital asset that carries the roaming service user's identity or contract ID, which is
used for authentication and security purposes
EXAMPLES
• static or dynamic QR code;
• username/password;
• RFID card;
• digital certificate transferred through the plug and charge process.
3.10
service detail record
SDR
data package containing all necessary information within one unique identification which is
needed for billing or informing of/about a service session of a specific customer
Note 1 to entry: This note applies to the French language only.
3.11
charging session
collection of charging transactions at a charge point related only to the charging of an electric
car assigned to a specific customer in a specific timeframe with a unique identifier
Note 1 to entry: The charging session is a subset of the service session.
3.12
service session
collection of services around a charge point mainly related to the charging of an electric car
assigned to a specific customer in a specific timeframe with a unique identifier
3.13
charging transaction
smallest billable part of a charging session representing the transfer of energy in a specific
timeframe
3.14
roaming endpoint
RE
entity containing all the related roaming functions
Note 1 to entry: This note applies to the French language only.

– 8 – IEC 63119-1:2019 © IEC 2019
3.15
charging station
CS
physical equipment consisting one or more EVSEs managing the energy transfer to and from
EVs
Note 1 to entry: This note applies to the French language only.
3.16
energy transfer service
unit of continuous energy transfer between EVSE and EV battery
3.17
distribution system operator
DSO
party operating a distribution system.
Note 1 to entry: This note applies to the French language only.
[SOURCE: IEC 60050-617:2009, 617-02-10, modified – The terms "distribution network
operator" and "distributor" have been deleted, and Note 1 to entry has been added.]
4 General description for roaming service models
4.1 General
The IEC 63119 series covers roaming-related communication exchange. Clause 4 specifies
the general relationship of roaming with the relevant technologies.
Figure 1 shows an overview of roaming, grid and transportation technology. There could be
other related technologies which are not presented in this chart. And not all interface
reference points are plotted.
The information exchange of roaming focuses on actors between different CSPs, as well as
between a CSP and CSO with or without clearing house platform through the roaming
endpoint. The clearing house is an optional actor to complete the roaming functions, which
can be completely or partially executed directly between different service providers.
For connections between grid and roaming technologies, there is a connection between the
CSO and charging station. To implement the smart grid function, there could be other optional
communication connections. For example, the distribution system operator may send the
smart charging profile directly to the CSP.
For connections between roaming, grid and transportation technologies, it is also possible to
have information exchange between the intelligent transportation system (ITS) and the
roaming systems.
Figure 1 – Overview of roaming and relevant technologies
4.2 System architecture
Figure 2 shows an overview of the system architecture for EV roaming services. The basic
actors and their related controllers and systems are as follows:
• Electric vehicle (EV): this normally includes a controller for external information flow,
which negotiates and manages energy transfer between the EV and EVSE, exchanges EV
and EVSE ID info, etc.
• EV supply equipment (EVSE): for networked EVSE, this normally includes a controller for
charging communication, which negotiates and manages energy transfer between the EV
and EVSE, exchanges EV and EVSE ID info, etc.
• Charging station operator (CSO): the CSO system manages the charging process of the
EVSE and forwards charging session information to the charge service provider or
roaming endpoint. A single entity can have both CSO and CSP roles.
• Charge service provider (CSP): for roaming services, both CSP and CSO may be involved
through a roaming endpoint. For roaming between CSPs, the visited CSP collects
metering data and charging session information from visited CSO, then creates a service
detail record (SDR), and forwards the SDR to a home CSP through either a clearing house
or directly.
• Clearing house (CH): the intermediate actor to facilitate EV charge roaming services. This
role is not required, but can provide centralized service efficiency when there are many
service providers. Each clearing house may have its own system for facilitating information
exchange, billing and settlements.

– 10 – IEC 63119-1:2019 © IEC 2019

Figure 2 – Overview of system architecture
4.3 Communication interfaces
Figure 3 shows the primary actors, systems and communication interface reference points
involved in the EV service.
• I1: Interface between EVSE and EV. The main functions include power supply
management and charging session management.
• I2: Interface between EVSE and CSO. The functions supported by this interface can
include credential authentication, EVSE charging status exchange, and charging session
management.
• I3: Interface between roaming endpoint and clearing house. It specifies the EV roaming
process through a centralized clearing house mode. The roaming functions can include
credential authentication, EVSE charging status exchange, charging session remote
control and management, and charging transaction billing and settlement.
• I4: Interface between two roaming endpoints. It specifies the EV roaming process through
peer-to-peer direct mode. The roaming functions can include credential authentication,
EVSE charging status exchange, charging session remote control and management, and
charging transaction billing and settlement.
• I5: Interface for the transfer of user credentials through EVSE. Example credentials
include RFID cards, credit cards or user/password inputs from station displays or a QR
code displayed on a user device.
• I6: Interface for user credentials sent through a mobile app or other method to the CSP.
Supported credentials include static or dynamic QR code, and username/password.
• I7: Interface between CSP and CSO. This can be an internal interface within one entity or
an external interface between two entities.

Figure 3 – Overview of EV services and communication interfaces
5 Classification of roaming service models – Roaming modes
In Figure 4, roaming types are classified according to three basic modes: peer-to-peer or
direct mode, clearing house mode, and mixed mode, depending on whether there is an
intermediary to facilitate the roaming process as regards different types of roaming functions.
The difference between the clearing house mode and the mixed mode is determined by the
charging service module. To allow for a quicker response and an improved user experience,
the mixed mode allows for direct communication between different roaming endpoints to
initiate and control charging sessions. Other service modules are processed in same way.
Both clearing house mode and mixed mode are divided into two sub-types based on the
authorization mechanism. The user credentials to authorize EV charging services can be
issued either by the clearing house, or by individual CSPs.
The choice of the mode can be determined based on business and technical considerations.

– 12 – IEC 63119-1:2019 © IEC 2019

Figure 4 – Overview of EV roaming classification
6 Communication – Protocol stack
Recommendations for communication protocols used in I3, I4 include, but are not restricted to,
those in Table 1.
Table 1 – Network communication protocols
OSI model Protocol Function
Application (layer 7) I3/I4 interface (HTTP) Define the service interfaces involved.
Presentation (layer 6) Protocol Define the message structure and encoding rules.
SOAP/XML JSON
buffer
Session (layer 5) Provide communications' security over the network.
TLS
Transport (layer 4) Enable Internet connectivity and process data from
TCP
applications.
7 Security and privacy
7.1 General requirements
All servers offering roaming service functions shall provide secure interfaces, as described in
Clause 6. The servers shall be protected by security software with anti-virus detection, attack
detection, network firewall, and other functions.
The information system shall have authentication mechanisms to identify the source of
messages (e.g. HMAC), in order to determine if the message is from a trustworthy source.
Recommendations for specific security mechanisms in HTTP/HTTPS will often be taken from
existing works, including:
– [RFC 5246] The Transport Layer Security (TLS) Protocol Version 1.2;
– [AES] Advanced Encryption Standard;
– [DES] Data Encryption Standard

7.2 Authentication and authorization
The combination of a username and password is adopted in identity authentication. Secure,
reliable and general cryptographic algorithms shall be applied to provide encryption of the
password sent over the network.
After successful identity authentication, an authorized session is created to transmit data.
A token shall be generated for the session in progress, and users can access data within the
scope of their authorizations using the token.
A certain validity period (e.g. 20 min) is assigned to tokens. Authorizations are valid within
that period, after which a re-delegation of authority is required.
7.3 Data transfer security
Secure, reliable and general cryptographic algorithms shall be applied to provide for the
encryption of data sent over the network. Recommendations for cryptographic algorithms
include but are not restricted to the following: RSA, MD5, AES128, 3DES, etc.
8 Privacy mechanisms
The protection of personal or personal-related data is a crucial principle in setting up reliable
business in a connected world, where different parties are involved. Therefore, data privacy is
regulated in many countries worldwide. As a basic principle, privacy by design should be used.
Privacy by design means you collect and process only the data which you need directly for
fulfilling the needed use cases or which is mandatory through regulations. Data should also
be stored only as long as needed and not longer. Another principle which needs to be
followed is transparency to the user; the user should be informed as to which data is collected
and for which purposes, and how long the data is kept. Also, an important factor is that the
systems should be built such that all user-relevant data can be deleted permanently on the
request of the user, because the user has the right to be forgotten. Additionally, a strong
separation of concerns should be followed.
The following principles are recommended by this document:
• privacy by design;
• transparency to the user;
• the right to be forgotten;
• separation of concerns;
• anonymization, wherever possible.

– 14 – IEC 63119-1:2019 © IEC 2019
Bibliography
IEC 61851-1:2017, E
...