Group Domain of Interpretation (GDOI) Protocol Support for IEC 62351 Security Services

Seewald, Maik; Weis, Brian; Falk, Herb

doi:10.17487/rfc8052

Cited by 6 publications

(6 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The GDOI implementation was based on RFC 6407, 38 and supported by several other documents, such as RFC 2407 39 and RFC 8052. 11 In the scope of this work, a Group Member and GCKS applications were developed. Both of them used a set of functions and configurations that were implemented in a general-purpose library.…”

Section: Experimental Evaluationmentioning

confidence: 99%

“…We integrated the custom GDOI with our blockchain authentication solution. The GDOI implementation was based on RFC 6407, 38 and supported by several other documents, such as RFC 2407 39 and RFC 8052 11 . In the scope of this work, a Group Member and GCKS applications were developed.…”

Section: Experimental Evaluationmentioning

confidence: 99%

“…10 Nevertheless, there are adequate guidelines and security solutions in the power distribution arena. In terms of establishing device Security Associations (SA) and secure update and distribution of secret keys, the Group Domain Of Interpretation 11 (GDOI) protocol is recommended by the official power utility standards. 12 The main focus of GDOI is to ensure secure communications during distribution and update of security policies.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Enhanced authentication and device integrity protection for GDOI using blockchain

Mukhandi,

Andrade,

Granjal

et al. 2024

Trans Emerging Tel Tech

View full text Add to dashboard Cite

Recent device‐level cyber‐attacks have targeted IoT critical applications in power distribution systems integrated with the Internet communications infrastructure. These systems utilize group domain of interpretation (GDOI) as designated by International Electrotechnical Commission (IEC) power utility standards IEC 61850 and IEC 62351. However, GDOI cannot protect against novel threats, such as IoT device‐level attacks that can modify device firmware and configuration files to create command and control malicious communication. As a consequence, the attacks can compromise substations with potentially catastrophic consequences. With this in mind, this article proposes a permissioned/private blockchain‐based authentication framework that provides a solution to current security threats such as the IoT device‐level attacks. Our work improves the GDOI protocol applied in critical IoT applications by achieving decentralized and distributed device authentication. The security of our proposal is demonstrated against known attacks as well as through formal mechanisms via the joint use of the AVISPA and SPAN tools. The proposed approach adds negligible authentication latency, thus ensuring appropriate scalability as the number of nodes increases.

show abstract

Section: Experimental Evaluationmentioning

confidence: 99%

Section: Experimental Evaluationmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Enhanced authentication and device integrity protection for GDOI using blockchain

Mukhandi,

Andrade,

Granjal

et al. 2024

Trans Emerging Tel Tech

View full text Add to dashboard Cite

show abstract

“…We evaluated scalability of our approach by assessing the delays and throughput for increasing number of simultaneously nodes (20,25,30,35,40) in our Ethereum system.…”

Section: Blockchain Authentication Layermentioning

confidence: 99%

Enhanced Authentication and Device Integrity Protection for GDOI using Blockchain

Mukhandi,

Andrade,

Granjal

et al. 2023

Preprint

View full text Add to dashboard Cite

The new wave of device-level cyber-attacks has targeted IoT critical applications, such as in power distribution systems integrated with the Internet communications infrastructure. These systems utilise Group Domain of Interpretation (GDOI) as designated by International Electrotechnical Commission (IEC) power utility standards IEC 61850 and IEC 62351. However, GDOI cannot protect against novel threats, such as IoT device-level attacks that can modify device firmware and configuration files to create command and control malicious communication. As a consequence, the attacks can compromise substations with potentially catastrophic consequences. With this in mind, this article proposes a permissioned/private blockchain-based authentication framework that provides a solution to current security threats such as the IoT device-level attacks. Our work improves the GDOI protocol applied in critical IoT applications by achieving decentralized and distributed device authentication. The security of our proposal is demonstrated against against known attacks as well as through formal mechanisms via the joint use of the AVISPA and SPAN tools. The proposed approach adds negligible authentication latency, thus ensuring appropriate scalability as the number of nodes increases.

show abstract

“…The ID payload contains an ID Type of ID_IPV4_ADDR, ID_IPV6_ADDR, or ID_OID as defined in [RFC8052] for GDOI exchanges. The Protocol ID and Port fields MUST be set to 0.…”

Section: Idmentioning

confidence: 99%

Group Domain of Interpretation (GDOI) GROUPKEY-PUSH Acknowledgement Message

Mangla¹,

Karl²,

Weis³

et al. 2017

Self Cite

View full text Add to dashboard Cite

Group Domain of Interpretation (GDOI) Protocol Support for IEC 62351 Security Services

Cited by 6 publications

References 2 publications

Enhanced authentication and device integrity protection for GDOI using blockchain

Enhanced authentication and device integrity protection for GDOI using blockchain

Enhanced Authentication and Device Integrity Protection for GDOI using Blockchain

Group Domain of Interpretation (GDOI) GROUPKEY-PUSH Acknowledgement Message

Contact Info

Product

Resources

About