SIST EN 62056-5-3:2018
(Main)Electricity metering data exchange - The DLMS/COSEM suite - Part 5-3: DLMS/COSEM application layer
Electricity metering data exchange - The DLMS/COSEM suite - Part 5-3: DLMS/COSEM application layer
IEC 62056-5-3:2017(E) specifies the DLMS/COSEM application layer in terms of structure, services and protocols for DLMS/COSEM clients and servers, and defines rules to specify the DLMS/COSEM communication profiles. It defines services for establishing and releasing application associations, and data communication services for accessing the methods and attributes of COSEM interface objects, defined in IEC 62056-6-2 using either logical name (LN) or short name (SN) referencing. This third edition cancels and replaces the second edition of IEC 62056-5-3, published in 2016. It constitutes a technical revision. The significant technical changes with respect to the previous edition are listed in Annex K (Informative).
Datenkommunikation der elektrischen Energiemessung - DLMS/COSEM - Teil 5-3: DLMS/COSEM-Anwendungsschicht
Échange des données de comptage de l'électricité - La suite DLMS/COSEM - Partie 5-3: Couche application DLMS/COSEM
Elle définit les services permettant d'établir et de libérer des associations d'applications, ainsi que les services de communication de données permettant d'accéder aux méthodes et aux attributs des objets d'interface COSEM, définis dans l’IEC 62056-6-2, à l'aide du référencement par nom logique (LN - logical name) ou par nom abrégé (SN - short name).
Les modifications techniques majeures par rapport à l'édition précédente sont énumérées à l'Annexe K (Informative).
Izmenjava podatkov pri merjenju električne energije - Niz DLMS/COSEM - 5-3. del: Aplikacijska plast DLMS/COSEM
Ta del standarda IEC 62056 določa aplikacijsko plast DLMS/COSEM v smislu strukture, storitev in protokolov za odjemalce ter strežnike DLMS/COSEM in opredeljuje pravila za določanje komunikacijskih profilov DLMS/COSEM.
Določa storitve za vzpostavljanje in izdajanje povezav aplikacij in podatkovne komunikacijske storitve za dostop do metod in atributov vmesniških objektov COSEM iz standarda IEC 62056-6-2 z uporabo reference logičnega (LN) ali kratkega imena (SN).
Dodatek A (normativni) opredeljuje, kako se pri različnih komunikacijskih profilih uporablja aplikacijska plast COSEM. Določa, kako so lahko različni komunikacijski profili izdelani za izmenjavo podatkov z opremo za merjenje, ki uporablja vmesniški model COSEM, in kateri so potrebni elementi, ki jih je treba določiti v posameznem komunikacijskem profilu. Dejanski komunikacijski profili, ki se uporabljajo za medije, so opredeljeni v ločenih delih skupine standardov IEC 62056.
Dodatek B (normativni) določa kratko ovojnico za SMS.
Dodatek C (normativni) določa usmerjevalni protokol.
Dodatki D, E in F (informativni) vključujejo primere kodiranja za podatkovne enote aplikacijskega protokola (APDU).
Dodatek G (normativni) podaja eliptične krivulje NSA Suite B in domenske parametre.
Dodatek H (informativni) podaja primer certifikata podpisa končne entitete, ki uporablja krivuljo P-256 in je z njo tudi podpisan.
Dodatek I (normativni) določa uporabo shem za določanje ključa v okviru specifikacije DLMS/COSEM.
Dodatek J (informativni) podaja primere izmenjave zaščitenih podatkovnih enot APDU xDLMS med trejo osebo in strežnikom.
Dodatek K (informativni) navaja glavne tehnične spremembe v tej izdaji standarda.
General Information
Relations
Standards Content (Sample)
SLOVENSKI STANDARD
01-januar-2018
1DGRPHãþD
SIST EN 62056-5-3:2017
,]PHQMDYDSRGDWNRYSULPHUMHQMXHOHNWULþQHHQHUJLMH1L]'/06&26(0GHO
$SOLNDFLMVNDSODVW'/06&26(0
Electricity metering data exchange - The DLMS/COSEM suite - Part 5-3: DLMS/COSEM
application layer
Datenkommunikation der elektrischen Energiemessung - DLMS/COSEM - Teil 5-3:
DLMS/COSEM-Anwendungsschicht
Échange des données de comptage de l'électricité - La suite DLMS/COSEM - Partie 5-3:
Couche application DLMS/COSEM
Ta slovenski standard je istoveten z: EN 62056-5-3:2017
ICS:
17.220.20 0HUMHQMHHOHNWULþQLKLQ Measurement of electrical
PDJQHWQLKYHOLþLQ and magnetic quantities
35.100.70 Uporabniški sloj Application layer
91.140.50 Sistemi za oskrbo z elektriko Electricity supply systems
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
EUROPEAN STANDARD EN 62056-5-3
NORME EUROPÉENNE
EUROPÄISCHE NORM
November 2017
ICS 17.220; 35.110; 91.140.50 Supersedes EN 62056-5-3:2016
English Version
Electricity metering data exchange - The DLMS/COSEM suite -
Part 5-3: DLMS/COSEM application layer
(IEC 62056-5-3:2017)
Échange des données de comptage de l'électricité - La Datenkommunikation der elektrischen Energiemessung -
suite DLMS/COSEM - Partie 5-3: Couche application DLMS/COSEM - Teil 5-3: DLMS/COSEM-
DLMS/COSEM Anwendungsschicht
(IEC 62056-5-3:2017) (IEC 62056-5-3:2017)
This European Standard was approved by CENELEC on 2017-09-14. CENELEC members are bound to comply with the CEN/CENELEC
Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.
Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC
Management Centre or to any CENELEC member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the
same status as the official versions.
CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic,
Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia,
Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden,
Switzerland, Turkey and the United Kingdom.
European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung
CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2017 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members.
Ref. No. EN 62056-5-3:2017 E
European foreword
The text of document 13/1744/FDIS, future edition 3 of IEC 62056-5-3, prepared by IEC/TC 13
"Electrical energy measurement and control" was submitted to the IEC-CENELEC parallel vote and
approved by CENELEC as EN 62056-5-3:2017.
The following dates are fixed:
(dop) 2018-06-14
• latest date by which the document has to be
implemented at national level by
publication of an identical national
standard or by endorsement
• latest date by which the national (dow) 2020-09-14
standards conflicting with the
document have to be withdrawn
This document supersedes EN 62056-5-3:2016.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CENELEC shall not be held responsible for identifying any or all such patent rights.
Endorsement notice
The text of the International Standard IEC 62056-5-3:2017 was approved by CENELEC as a
European Standard without any modification.
In the official version, for Bibliography, the following notes have to be added for the standards
indicated:
IEC 61334-4-32:1996 NOTE Harmonized as EN 61334-4-32:1996.
IEC 61334-4-511:2000 NOTE Harmonized as EN 61334-4-511:2000.
IEC 61334-4-512:2000 NOTE Harmonized as EN 61334-4-512:2001.
IEC 61334-5-1:2001 NOTE Harmonized as EN 61334-5-1:2001.
IEC 62056-1-0 NOTE Harmonized as EN 62056-1-0.
1)
IEC 62056-6-1:2017 NOTE Harmonized as FprEN 62056-6-1:2017.
IEC 62056-7-3:2017 NOTE Harmonized as EN 62056-7-3:2017.
IEC 62056-7-6:2013 NOTE Harmonized as EN 62056-7-6:2013.
IEC 62056-9-7:2013 NOTE Harmonized as EN 62056-9-7:2013.
IEC 62056-8-5 NOTE Harmonized as EN 62056-8-5.
IEC 62056-8-5 NOTE Harmonized as EN 62056-8-5.
1) To be published. At draft stage.
Annex ZA
(normative)
Normative references to international publications
with their corresponding European publications
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments)
applies.
NOTE 1 When an International Publication has been modified by common modifications, indicated by (mod), the relevant
EN/HD applies.
NOTE 2 Up-to-date information on the latest versions of the European Standards listed in this annex is available here:
www.cenelec.eu.
Publication Year Title EN/HD Year
IEC 61334-4-41 1996 Distribution automation using distribution EN 61334-4-41 1996
line carrier systems -- Part 4: Data
communication protocols -- Section 41:
Application protocols - Distribution line
message specification
IEC 61334-6 2000 Distribution automation using distribution EN 61334-6 2000
line carrier systems -- Part 6: A-XDR
encoding rule
IEC 62056-6-2 2017 Electricity metering data exchange - The FprEN 62056-6-2 2017
DLMS/COSEM suite - Part 6-2: COSEM
interface classes
IEC 62056-8-3 2013 Electricity metering data exchange - The EN 62056-8-3 2013
DLMS/COSEM suite -- Part 8-3:
Communication profile for PLC S-FSK
neighbourhood networks
IEC/TR 62051 1999 Electricity metering - Glossary of terms - -
IEC/TR 62051-1 2004 Electricity metering - Data exchange for - -
meter reading, tariff and load control -
Glossary of terms -- Part 1: Terms related
to data exchange with metering equipment
using DLMS/COSEM
ISO/IEC 8824-1 - Information technology - Abstract Syntax - -
Notation One (ASN.1): Specification of
basic notation
ISO/IEC 8825-1 2015 Information technology - ASN.1 encoding - -
rules: Specification of Basic Encoding
Rules (BER), Canonical Encoding Rules
(CER) and Distinguished Encoding Rules
(DER)
ISO/IEC 15953 1999 Information technology - Open Systems - -
Interconnection - Service definition for the
application service object association
control service element
ISO/IEC 15954 1999 Information technology - Open Systems - -
Interconnection - Connection-mode
protocol for the application service object
association control service element
FIPS PUB 180-4 2012 Secure Hash Standard (SHS) - -
FIPS PUB 186-4 2013 Digital Signature Standard (DSS) - -
FIPS PUB 197 2001 Advanced Encryption Standard (AES) - -
ITU-T V.44 2000 Series V: Data Communication over the - -
telephone network - Error control - Data
compression procedure
ITU-T X.509 2008 Information technology - Open systems - -
interconnection - The Directory: Public-key
and attribute certificate frameworks
ITU-T X.693 - Information technology - ASN.1 encoding - -
rules: XML Encoding rules (XER)
ITU-T X.693 - Information technology - ASN.1 encoding - -
Corrigendum 1 rules: XML Encoding Rules (XER)
Technical Corrigendum 1
ITU-T X.694 - Information technology - ASN.1 encoding - -
rules: Mapping W3C XML schema
definitions into ASN.1
ITU-T X.694 - Information technology - ASN.1 encoding - -
Corrigendum rules: Mapping W3C XML schema
definitions into ASN.1 Technical
corrigendum 1
NIST SP 800-21 2005 Guideline for Implementing Cryptography - -
in the Federal Government
NIST SP 800-32 2001 Introduction to Public Key Technology and - -
the Federal PKI Infrastructure
NIST SP 800-38D - Recommendation for Block Cipher Modes - -
of Operation: Galois/Counter Mode (GCM)
and GMAC
NIST SP 800-56A - Recommendation for Pair-Wise Key - -
rev2 Establishment Schemes Using Discrete
Logarithm Cryptography
NIST SP 800-57 - Recommendation for Key Management, - -
Part 1: General (Revision 3)
NSA1 - Suite B Implementer's Guide to FIPS 186-3 - -
(ECDSA)
NSA2 - Suite B Implementer's guide to NIST - -
SP800-56A
NSA3 - NSA Suite B Base Certificate and CRL - -
Profile
RFC 3394 - Internet Engineering Task Force (IETF). - -
Advanced Encryption Standard (AES) Key
Wrap Algorithm. Edited by J. Schaad
(Soaring Hawk Consulting) and R. Housley
(RSA Laboratories)
RFC 5280 - Internet X.509 Public Key Infrastructure - -
Certificate and Certificate Revocation List
(CRL) Profile
IEC 62056-5-3 ®
Edition 3.0 2017-08
INTERNATIONAL
STANDARD
colour
inside
Electricity metering data exchange – The DLMS/COSEM suite –
Part 5-3: DLMS/COSEM application layer
INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
ICS 17.220; 35.110; 91.140.50 ISBN 978-2-8322-4599-6
– 2 – IEC 62056-5-3:2017 © IEC 2017
CONTENTS
FOREWORD . 11
INTRODUCTION . 13
1 Scope . 14
2 Normative references . 14
3 Terms, definitions, abbreviated terms and symbols . 16
3.1 General DLMS/COSEM definitions . 16
3.2 Definitions related to cryptographic security . 19
3.3 Definitions and abbreviated terms related to the Galois/Counter Mode . 29
3.4 General abbreviated terms . 30
3.5 Symbols related to the Galois/Counter Mode . 34
3.6 Symbols related the ECDSA algorithm . 35
3.7 Symbols related to the key agreement algorithms . 35
4 Overview of DLMS/COSEM . 35
4.1 Information exchange in DLMS/COSEM . 35
4.1.1 General . 35
4.1.2 Communication model . 36
4.1.3 Naming and addressing . 37
4.1.4 Connection oriented operation . 40
4.1.5 Application associations . 41
4.1.6 Messaging patterns . 42
4.1.7 Data exchange between third parties and DLMS/COSEM servers . 43
4.1.8 Communication profiles . 43
4.1.9 Model of a DLMS/COSEM metering system . 45
4.1.10 Model of DLMS/COSEM servers . 45
4.1.11 Model of a DLMS/COSEM client . 47
4.1.12 Interoperability and interconnectivity in DLMS/COSEM . 48
4.1.13 Ensuring interconnectivity: the protocol identification service . 48
4.1.14 System integration and meter installation . 49
4.2 DLMS/COSEM application layer main features . 49
4.2.1 General . 49
4.2.2 DLMS/COSEM application layer structure . 49
4.2.3 The Association Control Service Element, ACSE . 51
4.2.4 The xDLMS application service element . 52
4.2.5 Layer management services . 59
4.2.6 Summary of DLMS/COSEM application layer services . 59
4.2.7 DLMS/COSEM application layer protocols . 60
5 Information security in DLMS/COSEM . 60
5.1 Overview. 60
5.2 The DLMS/COSEM security concept . 61
5.2.1 Overview . 61
5.2.2 Identification and authentication . 61
5.2.3 Security context . 64
5.2.4 Access rights . 64
5.2.5 Application layer message security . 64
5.2.6 COSEM data security . 66
5.3 Cryptographic algorithms . 67
IEC 62056-5-3:2017 © IEC 2017 – 3 –
5.3.1 Overview . 67
5.3.2 Hash function . 67
5.3.3 Symmetric key algorithms . 68
5.3.4 Public key algorithms . 74
5.3.5 Random number generation . 85
5.3.6 Compression . 86
5.3.7 Security suite . 86
5.4 Cryptographic keys – overview . 87
5.5 Key used with symmetric key algorithms . 87
5.5.1 Symmetric keys types . 87
5.5.2 Key information with general-ciphering APDU and data protection . 88
5.5.3 Key identification . 89
5.5.4 Key wrapping . 89
5.5.5 Key agreement . 90
5.5.6 Symmetric key cryptoperiods . 90
5.6 Keys used with public key algorithms . 91
5.6.1 Overview . 91
5.6.2 Key pair generation . 91
5.6.3 Public key certificates and infrastructure . 92
5.6.4 Certificate and certificate extension profile . 95
5.6.5 Suite B end entity certificate types to be supported by DLMS/COSEM
servers . 103
5.6.6 Management of certificates . 103
5.7 Applying cryptographic protection . 108
5.7.1 Overview . 108
5.7.2 Protecting xDLMS APDUs . 108
5.7.3 Multi-layer protection by multiple parties . 121
5.7.4 HLS authentication mechanisms . 122
5.7.5 Protecting COSEM data . 125
6 DLMS/COSEM application layer service specification . 126
6.1 Service primitives and parameters . 126
6.2 The COSEM-OPEN service . 128
6.3 The COSEM-RELEASE service . 133
6.4 COSEM-ABORT service . 136
6.5 Protection and general block transfer parameters . 136
6.6 The GET service . 141
6.7 The SET service . 144
6.8 The ACTION service . 148
6.9 The ACCESS service . 151
6.9.1 Overview – Main features . 151
6.9.2 Service specification . 153
6.10 The DataNotification service . 158
6.11 The EventNotification service . 159
6.12 The TriggerEventNotificationSending service . 160
6.13 Variable access specification . 161
6.14 The Read service . 161
6.15 The Write service . 165
6.16 The UnconfirmedWrite service . 168
6.17 The InformationReport service . 170
– 4 – IEC 62056-5-3:2017 © IEC 2017
6.18 Client side layer management services: the SetMapperTable.request . 171
6.19 Summary of services and LN/SN data transfer service mapping . 171
7 DLMS/COSEM application layer protocol specification . 173
7.1 The control function . 173
7.1.1 State definitions of the client side control function . 173
7.1.2 State definitions of the server side control function . 174
7.2 The ACSE services and APDUs . 175
7.2.1 ACSE functional units, services and service parameters . 175
7.2.2 Registered COSEM names . 179
7.2.3 APDU encoding rules . 182
7.2.4 Protocol for application association establishment . 182
7.2.5 Protocol for application association release . 187
7.3 Protocol for the data transfer services . 191
7.3.1 Negotiation of services and options – the conformance block . 191
7.3.2 Confirmed and unconfirmed service invocations . 192
7.3.3 Protocol for the GET service . 193
7.3.4 Protocol for the SET service . 197
7.3.5 Protocol for the ACTION service . 200
7.3.6 Protocol for the ACCESS service . 202
7.3.7 Protocol of the DataNotification service . 204
7.3.8 Protocol for the EventNotification service . 204
7.3.9 Protocol for the Read service . 204
7.3.10 Protocol for the Write service . 208
7.3.11 Protocol for the UnconfirmedWrite service . 213
7.3.12 Protocol for the InformationReport service . 214
7.3.13 Protocol of general block transfer mechanism . 215
8 Abstract syntax of ACSE and COSEM APDUs . 226
9 COSEM APDU XML schema . 239
9.1 General . 239
9.2 XML Schema . 240
Annex A (normative) Using the DLMS/COSEM application layer in various
communications profiles . 261
A.1 General . 261
A.2 Targeted communication environments . 261
A.3 The structure of the profile . 261
A.4 Identification and addressing schemes . 261
A.5 Supporting layer services and service mapping . 262
A.6 Communication profile specific parameters of the COSEM AL services . 262
A.7 Specific considerations / constraints using certain services within a given
profile . 262
A.8 The 3-layer, connection-oriented, HDLC based communication profile . 262
A.9 The TCP-UDP/IP based communication profiles (COSEM_on_IP) . 262
A.10 The wired and wireless M-Bus communication profiles . 262
A.11 The S-FSK PLC profile . 262
Annex B (normative) SMS short wrapper. 263
Annex C (normative) Gateway protocol . 264
C.1 General . 264
C.2 The gateway protocol . 265
C.3 HES in the WAN/NN acting as Initiator (Pull operation) . 266
IEC 62056-5-3:2017 © IEC 2017 – 5 –
C.4 End devices in the LAN acting as Initiators (Push operation) . 267
C.4.1 General . 267
C.4.2 End device with WAN/NN knowledge . 267
C.4.3 End devices without WAN/NN knowledge . 268
C.5 Security . 268
Annex D (informative) AARQ and AARE encoding examples . 269
D.1 General . 269
D.2 Encoding of the xDLMS InitiateRequest / InitiateResponse APDU . 269
D.3 Specification of the AARQ and AARE APDUs . 272
D.4 Data for the examples . 273
D.5 Encoding of the AARQ APDU . 274
D.6 Encoding of the AARE APDU . 277
Annex E (informative) Encoding examples: AARQ and AARE APDUs using a ciphered
application context . 283
E.1 A-XDR encoding of the xDLMS InitiateRequest APDU, carrying a dedicated
key. 283
E.2 Authenticated encryption of the xDLMS InitiateRequest APDU . 284
E.3 The AARQ APDU . 285
E.4 A-XDR encoding of the xDLMS InitiateResponse APDU . 287
E.5 Authenticated encryption of the xDLMS InitiateResponse APDU . 288
E.6 The AARE APDU . 289
E.7 The RLRQ APDU (carrying a ciphered xDLMS InitiateRequest APDU) . 291
E.8 The RLRE APDU (carrying a ciphered xDLMS InitiateResponse APDU) . 292
Annex F (informative) Data transfer service examples . 293
F.1 GET / Read, SET / Write examples . 293
F.2 ACCESS service example . 310
F.3 Compact array encoding example . 311
F.3.1 General . 311
F.3.2 The specification of compact-array . 311
F.3.3 Example 1: Compact array encoding an array of five long-unsigned
values . 313
F.3.4 Example 2: Compact-array encoding of five octet-string values . 314
F.3.5 Example 3: Encoding of the buffer of a Profile generic object . 314
Annex G (normative) NSA Suite B elliptic curves and domain parameters . 317
Annex H (informative) Example of an End entity signature certificate using P-256
signed with P-256 . 319
Annex I (normative) Use of key agreement schemes in DLMS/COSEM . 321
I.1 Ephemeral Unified Model C(2e, 0s, ECC CDH) scheme . 321
I.2 One-Pass Diffie-Hellman C(1e, 1s, ECC CDH) scheme . 324
I.3 Static Unified Model C(0e, 2s, ECC CDH) scheme . 329
Annex J (informative) Exchanging protected xDLMS APDUs between TP and server . 333
J.1 General . 333
J.2 Example 1: Protection is the same in the two directions . 333
J.3 Example 2: Protection is different in the two directions . 334
Annex K (informative) Significant technical changes with respect to IEC 62056-5-
3:2016 . 336
Bibliography . 339
Index . 343
– 6 – IEC 62056-5-3:2017 © IEC 2017
Figure 1 – Client–server model and communication protocols . 37
Figure 2 – Naming and addressing in DLMS/COSEM . 38
Figure 3 – A complete communication session in the CO environment . 40
Figure 4 – DLMS/COSEM messaging patterns . 43
Figure 5 – DLMS/COSEM generic communication profile . 44
Figure 6 – Model of a DLMS/COSEM metering system . 45
Figure 7 – DLMS/COSEM server model . 46
Figure 8 – Model of a DLMS/COSEM client using multiple protocol stacks . 47
Figure 9 – The structure of the DLMS/COSEM application layers . 50
Figure 10 – The concept of composable xDLMS messages . 57
Figure 11 – Summary of DLMS/COSEM AL services . 60
Figure 12 – Authentication mechanisms . 62
Figure 13 – Client – server message security concept . 65
Figure 14 – End-to-end message security concept . 66
Figure 15 – Hash function . 68
Figure 16 – Encryption and decryption . 69
Figure 17 – Message Authentication Codes (MACs) . 70
Figure 18 – GCM functions . 71
Figure 19 – Digital signatures . 78
Figure 20 – C(2e, 0s) scheme: each party contributes only an ephemeral key pair . 79
Figure 21 – C(1e, 1s) schemes: party U contributes an ephemeral key pair, and party
V contributes a static key pair . 81
Figure 22 – C(0e, 2s) scheme: each party contributes only< a static key pair. 83
Figure 23 – Architecture of a Public Key Infrastructure (example) . 94
Figure 24 – MSC for provisioning the server with CA certificates . 104
Figure 25 – MSC for security personalisation of the server . 105
Figure 26 – Provisioning the server with the certificate of the client . 106
Figure 27 – Provisioning the client / third party with a certificate of the server. 107
Figure 28 – Remove certificate from the server . 107
Figure 29 – Cryptographic protection of information using AES-GCM . 111
Figure 30 – Structure of service-specific global / dedicated ciphering xDLMS APDUs . 113
Figure 31 – Structure of general-glo-ciphering and general-ded-ciphering xDLMS
APDUs . 114
Figure 32 – Structure of general-ciphering xDLMS APDUs . 115
Figure 33 – Structure of general-signing APDUs . 121
Figure 34 – Service primitives . 126
Figure 35 – Time sequence diagrams . 127
Figure 36 – Additional service parameters to control cryptographic protection and GBT . 137
Figure 37 – Partial state machine for the client side control function . 173
Figure 38 – Partial state machine for the server side control function . 174
Figure 39 – MSC for successful AA establishment preceded by a successful lower
layer connection establishment . 184
Figure 40 – Graceful AA release using the A-RELEASE service . 189
Figure 41 – Graceful AA release by disconnecting the supporting layer . 190
IEC 62056-5-3:2017 © IEC 2017 – 7 –
Figure 42 – Aborting an AA following a PH-ABORT.indication . 191
Figure 43 – MSC of the GET service . 194
Figure 44 – MSC of the GET service with block transfer. 195
Figure 45 – MSC of the GET service with block transfer, long GET aborted . 197
Figure 46 – MSC of the SET service . 198
Figure 47 – MSC of the SET service with block transfer . 198
Figure 48 – MSC of the ACTION service . 200
Figure 49 – MSC of the ACTION service with block transfer . 202
Figure 50 – ACCESS Service with long response . 203
Figure 51 – ACCESS Service with long request and response . 203
Figure 52 – MSC of the Read service used for reading an attribute . 207
Figure 53 – MSC of the Read service used for invoking a method . 207
Figure 54 – MSC of the Read service used for reading an attribute, with block transfer . 208
Figure 55 – MSC of the Write service used for writing an attribute . 211
Figure 56 – MSC of the Write service used for invoking a method . 212
Figure 57 – MSC of the Write service used for writing an attribute, with block transfer . 213
Figure 58 – MSC of the UnconfirmedWrite service used for writing an attribute . 214
Figure 59 – Partial service invocations and GBT APDUs . 217
Figure 60 – GET service with GBT, switching to streaming . 219
th
Figure 61 – GET service with partial invocations, GBT and streaming, recovery of 4
block sent in the 2nd stream . 220
th
Figure 62 – GET service with partial invocations, GBT and streaming, recovery of 4
th
and 5 block . 221
Figure 63 – GET service with partial invocations, GBT and streaming, recovery of last
block . 222
Figure 64 – SET service with GBT, with server not supporting streaming, recovery of
3rd block . 223
Figure 65 – ACTION-WITH-LIST service with bi-directional GBT and block recovery . 224
Figure 66 – DataNotification service with GBT with partial invocation . 225
Figure B.1 – Short wrapper . 263
Figure C.1 – General architecture with gateway . 264
Figure C.2 – The fields used for pre-fixing the COSEM APDUs . 265
Figure C.3 – Pull message sequence chart . 266
Figure C.4 – Push message sequence chart . 267
Figure I.1 – MSC for key agreement using the Ephemeral Unified Model C(2e, 0s,
ECC CDH) scheme . 321
Figure I.2 – Ciphered xDLMS APDU protected by an ephemeral key established using
the One-pass Diffie-Hellman (1e, 1s, ECC CDH) scheme . 325
Figure I.3 – Ciphered xDLMS APDU protected by an ephemeral key established using
the Static Unified Model C(0e, 2s, ECC CDH) scheme . 330
Figure J.1 – Exchanging protected xDLMS APDUs between TP and server: example 1 . 334
Figure J.2 – Exchanging protected xDLMS APDUs between TP and server: example 2 . 335
Table 1 – Client and server SAPs . 39
Table 2 – Clarification of the meaning of PDU size for DLMS/COSEM. 58
– 8 – IEC 62056-5-3:2017 © IEC 2017
Table 3 – Elliptic curves in DLMS/COSEM security suites . 76
Table 4 – Ephemeral Unified Model key agreement scheme summary . 80
Table 5 – One-pass Diffie-Hellman key agreement scheme summary . 82
Table 6 – Static Unified Model key agreement scheme summary . 84
Table 7 – OtherInfo subfields and substrings . 85
Table 8 – Cryptographic algorithm ID-s . 85
Table 9 – DLMS/COSEM security suites . 86
Table 10 – Symmetric keys types . 88
Table 11 – Key information with general-ciphering APDU and data protection . 89
Table 12 – Asymmetric keys types and their use . 91
Table 13 – X.509 v3 Certificate structure . 95
Table 14 – X.509 v3 tbsCertificate fields . 96
Table 15 – Naming scheme for the Root-CA instance (informative) . 97
Table 16 – Naming scheme for the Sub-CA instance (informative) . 97
Table 17 – Naming scheme for the end entity instance . 98
Table 18 – X.509 v3 Certificate extensions . 100
Table 19 – Key Usage extensions . 101
Table 20 – Subject Alternative Name values . 101
Table 21 – Issuer Alternative Name values . 102
Table 22 – Basic constraints extension values . 102
Table 23 – Certificates handled by DLMS/COSEM end entities . 103
Table 24 – Security policy values (“Security setup” version 1) . 108
Table 25 – Access rights values (“Association LN” ver 3 “Association SN” ver 4) .
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.
Loading comments...