IEC 61162-460:2015
(Main)Maritime navigation and radiocommunication equipment and systems - Digital interfaces - Part 460: Multiple talkers and multiple listeners - Ethernet interconnection - Safety and security
Maritime navigation and radiocommunication equipment and systems - Digital interfaces - Part 460: Multiple talkers and multiple listeners - Ethernet interconnection - Safety and security
IEC 61162-460:2015(E) is an add-on to the IEC 61162-450 standard where higher safety and security standards are needed, e.g. due to higher exposure to external threats or to improve network integrity. This standard provides requirements and test methods for equipment to be used in an IEC 61162-460 compliant network as well as requirements for the network itself and requirements for interconnection from the network to other networks. This standard also contains requirements for a redundant IEC 61162-460 compliant network. This standard extends the informative guidance given in Annex D of IEC 61162-450:2011. It does not introduce new application level protocol requirements to those that are defined in IEC 61162-450.
General Information
Relations
Overview
IEC 61162-460:2015 is an IEC standard for maritime navigation and radiocommunication equipment that specifies enhanced safety and security requirements for Ethernet-based shipboard digital interfaces. As an add‑on to IEC 61162-450, this standard addresses environments with higher exposure to external threats or where improved network integrity is required. It defines requirements and test methods for compliant equipment, network topology, interconnection to other networks, and redundant network operation - but does not change application‑level protocols already defined in IEC 61162-450.
Key topics and technical requirements
- Network traffic management
- Resource allocation, loop prevention, traffic separation and prioritization to ensure predictable data flows.
- Security requirements
- Threat scenarios (internal and external), denial‑of‑service protection, access control, communication security and firewalling for controlled networks and gateways.
- Redundancy and high availability
- Requirements for interface and device redundancy, redundant network designs and testing of failover behaviour.
- Network monitoring and diagnostics
- Network status monitoring, load monitoring, redundancy and topology monitoring, syslog recording and alert management.
- Component roles and tests
- Defined device types such as 460-Node, 460-Switch, 460-Forwarder, 460-Gateway, and 460-Wireless Gateway with associated functional and test requirements.
- System documentation and secure area
- Mandatory documentation, configuration controls and requirements for segregated/secure network areas.
- Conformance testing
- Detailed test methods for traffic management, security, redundancy and monitoring at component and system levels.
Practical applications and who uses this standard
- Shipboard systems integrators and naval architects - for designing compliant Ethernet networks that interconnect multiple talkers and listeners (e.g., sensors, displays, AIS, ECDIS).
- Maritime equipment manufacturers - to develop 460‑compliant nodes, switches, forwarders and gateways and demonstrate conformance through specified tests.
- Maritime cyber security engineers and operators - to implement access controls, firewall/DMZ strategies, and monitoring to mitigate external/internal threats.
- Test laboratories and flag state authorities - to validate equipment and installations against the standard’s test methods and certification criteria.
- Vendors of maritime network management and monitoring tools - to provide compliant monitoring, syslog aggregation and alerting features.
Related standards
- IEC 61162-450 - baseline for multiple talkers/multiple listeners over Ethernet (IEC 61162-460 extends its guidance).
- Other maritime safety and cybersecurity guidance may be referenced for shipboard application‑level needs.
Keywords: IEC 61162-460, maritime navigation, Ethernet interconnection, multiple talkers multiple listeners, network security, redundancy, network monitoring, IEC 61162-450.
Standards Content (Sample)
IEC 61162-460 ®
Edition 1.0 2015-08
INTERNATIONAL
STANDARD
colour
inside
Maritime navigation and radiocommunication equipment and systems – Digital
interfaces –
Part 460: Multiple talkers and multiple listeners – Ethernet interconnection –
Safety and security
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form
or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from
either IEC or IEC's member National Committee in the country of the requester. If you have any questions about IEC
copyright or have an enquiry about obtaining additional rights to this publication, please contact the address below or
your local IEC member National Committee for further information.
IEC Central Office Tel.: +41 22 919 02 11
3, rue de Varembé Fax: +41 22 919 03 00
CH-1211 Geneva 20 info@iec.ch
Switzerland www.iec.ch
About the IEC
The International Electrotechnical Commission (IEC) is the leading global organization that prepares and publishes
International Standards for all electrical, electronic and related technologies.
About IEC publications
The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the
latest edition, a corrigenda or an amendment might have been published.
IEC Catalogue - webstore.iec.ch/catalogue Electropedia - www.electropedia.org
The stand-alone application for consulting the entire The world's leading online dictionary of electronic and
bibliographical information on IEC International Standards, electrical terms containing more than 30 000 terms and
Technical Specifications, Technical Reports and other definitions in English and French, with equivalent terms in 15
documents. Available for PC, Mac OS, Android Tablets and additional languages. Also known as the International
iPad. Electrotechnical Vocabulary (IEV) online.
IEC publications search - www.iec.ch/searchpub IEC Glossary - std.iec.ch/glossary
The advanced search enables to find IEC publications by a More than 60 000 electrotechnical terminology entries in
variety of criteria (reference number, text, technical English and French extracted from the Terms and Definitions
committee,…). It also gives information on projects, replaced clause of IEC publications issued since 2002. Some entries
and withdrawn publications. have been collected from earlier publications of IEC TC 37,
77, 86 and CISPR.
IEC Just Published - webstore.iec.ch/justpublished
Stay up to date on all new IEC publications. Just Published IEC Customer Service Centre - webstore.iec.ch/csc
details all new publications released. Available online and If you wish to give us your feedback on this publication or
also once a month by email. need further assistance, please contact the Customer Service
Centre: csc@iec.ch.
IEC 61162-460 ®
Edition 1.0 2015-08
INTERNATIONAL
STANDARD
colour
inside
Maritime navigation and radiocommunication equipment and systems – Digital
interfaces –
Part 460: Multiple talkers and multiple listeners – Ethernet interconnection –
Safety and security
INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
ICS 47.020.70 ISBN 978-2-8322-2850-0
– 2 – IEC 61162-460:2015 © IEC 2015
CONTENTS
FOREWORD . 6
1 Scope . 8
2 Normative references. 8
3 Terms and definitions . 9
4 High-level requirements . 13
4.1 Overview. 13
4.2 Description. 14
4.3 General requirements . 14
4.3.1 Equipment and system requirements . 14
4.3.2 Physical composition requirements . 15
4.3.3 Logical composition requirements . 15
4.4 Physical component requirements . 15
4.4.1 450-Node . 15
4.4.2 460-Node . 15
4.4.3 460-Switch . 16
4.4.4 460-Forwarder . 16
4.4.5 460-Gateway and 460-Wireless gateway . 16
4.5 Logical component requirements . 16
4.5.1 Network monitoring function . 16
4.5.2 System management function . 16
4.6 System documentation requirements . 17
4.7 Secure area requirements . 17
5 Network traffic management requirements . 17
5.1 460-Node requirements . 17
5.2 460-Switch requirements . 18
5.2.1 Resource allocation . 18
5.2.2 Loop prevention . 18
5.3 460-Forwarder requirements. 18
5.3.1 Traffic separation . 18
5.3.2 Resource allocation . 18
5.3.3 Traffic prioritization . 19
5.4 System design requirements . 20
5.4.1 Documentation . 20
5.4.2 Traffic . 20
6 Security requirements . 20
6.1 Security scenarios . 20
6.1.1 Threat scenarios . 20
6.1.2 Internal threats. 20
6.1.3 External threats . 21
6.2 Internal security requirements . 21
6.2.1 General . 21
6.2.2 Denial of service protection . 21
6.2.3 REDS security . 22
6.2.4 Access control . 22
6.3 External security requirements . 23
6.3.1 Overview . 23
6.3.2 Firewalls . 24
6.3.3 Communication security . 24
6.3.4 460-Node . 24
6.3.5 460-Gateway . 25
6.3.6 460-Wireless gateway . 26
6.4 Additional security issues . 26
7 Redundancy requirements . 26
7.1 General requirements . 26
7.1.1 General . 26
7.1.2 Interface redundancy . 27
7.1.3 Device redundancy . 27
7.2 460-Node requirements . 27
7.3 460-Switch requirements . 28
7.4 460-Forwarder requirements. 28
7.5 460-Gateway and 460-Wireless gateway requirements . 28
7.6 Network monitoring function requirements . 28
7.7 System design requirements . 28
8 Network monitoring requirements . 28
8.1 Network status monitoring . 28
8.1.1 460-Network . 28
8.1.2 460-Node . 28
8.1.3 460-Switch . 29
8.1.4 460-Forwarder . 29
8.1.5 460-Gateway and 460-Wireless gateway . 29
8.2 Network monitoring function . 29
8.2.1 General . 29
8.2.2 Network load monitoring function . 30
8.2.3 Redundancy monitoring function . 31
8.2.4 Network topology monitoring function . 31
8.2.5 Syslog recording function . 31
8.2.6 Redundancy of network monitoring function . 32
8.2.7 Alert management . 32
9 Controlled network requirements . 32
10 Methods of testing and required test results . 33
10.1 Subject of tests . 33
10.2 Test site . 33
10.3 General requirements . 34
10.4 450-Node . 34
10.5 460-Node . 34
10.5.1 Network traffic management . 34
10.5.2 Security . 35
10.5.3 Redundancy . 37
10.5.4 Monitoring . 37
10.6 460-Switch . 37
10.6.1 Resource allocation . 37
10.6.2 Loop prevention . 37
10.6.3 Security . 38
10.6.4 Monitoring . 39
– 4 – IEC 61162-460:2015 © IEC 2015
10.7 460-Forwarder . 39
10.7.1 Traffic separation . 39
10.7.2 Resource allocation . 39
10.7.3 Traffic prioritisation . 40
10.7.4 Security . 40
10.7.5 Monitoring . 41
10.8 460-Gateway . 42
10.8.1 Denial of service behaviour . 42
10.8.2 Access control to configuration setup . 42
10.8.3 Communication security . 42
10.8.4 Firewall . 42
10.8.5 Application server . 43
10.8.6 Interoperable access to file storage of DMZ . 43
10.8.7 Additional security . 44
10.8.8 Monitoring . 44
10.9 460-Wireless gateway . 44
10.9.1 General . 44
10.9.2 Security . 44
10.9.3 Monitoring . 45
10.10 Controlled network . 45
10.11 Network monitoring function . 45
10.11.1 General . 45
10.11.2 Network load monitoring function . 46
10.11.3 Redundancy monitoring function . 46
10.11.4 Network topology monitoring function . 46
10.11.5 Syslog recording function . 47
10.11.6 Alert management . 47
10.12 System level . 48
10.12.1 General . 48
10.12.2 System management function . 49
10.12.3 System design . 49
10.12.4 Network monitoring function . 51
10.12.5 Network load monitoring function . 51
10.12.6 Redundancy monitoring function . 51
10.12.7 Network topology monitoring function . 51
Annex A (informative) Communication scenarios between an IEC 61162-460 network
and uncontrolled networks . 52
A.1 General . 52
A.2 Routine off-ship . 52
A.3 Routine on-ship . 53
A.4 460-Gateway usage for direct connection with equipment . 53
Annex B (informative) Summary of redundancy protocols in the IEC 62439 series . 54
B.1 Summary of redundancy protocols . 54
B.2 RSTP recovery time . 54
Annex C (informative) Guidance for testing. 56
C.1 Methods of test . 56
C.2 Observation . 56
C.3 Inspection of documented evidence . 56
C.4 Measurement . 56
C.5 Analytical evaluation . 57
Annex D (informative) Some examples to use this standard . 58
Annex E (normative) IEC 61162 interfaces for the network monitoring function . 60
Bibliography . 61
Figure 1 – Functional overview of IEC 61162-460 requirement applications . 14
Figure 2 – 460-Network with 460-Gateway . 23
Figure 3 – An example of redundancy . 27
Figure 4 – Example of network status recording information . 30
Figure A.1 – Usage model for communication between a IEC 61162-450 network and
shore networks . 52
Figure D.1 – 460-Forwarder used between two networks . 58
Figure D.2 – 460-Forwarder used between two networks . 58
Figure D.3 – 460-Gateway used for e-Navigation services . 59
Figure D.4 – 460-Gateway used for remote maintenance . 59
Figure E.1 – Network monitoring function logical interfaces. 60
Table 1 – Traffic prioritization with CoS and DSCP . 19
Table B.1 – Redundancy protocols and recovery times . 54
Table E.1 – Sentences received by the network monitoring function . 60
Table E.2 – Sentences transmitted by the network monitoring function . 60
– 6 – IEC 61162-460:2015 © IEC 2015
INTERNATIONAL ELECTROTECHNICAL COMMISSION
____________
MARITIME NAVIGATION AND RADIOCOMMUNICATION
EQUIPMENT AND SYSTEMS – DIGITAL INTERFACES –
Part 460: Multiple talkers and multiple listeners –
Ethernet interconnection – Safety and security
FOREWORD
1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising
all national electrotechnical committees (IEC National Committees). The object of IEC is to promote
international co-operation on all questions concerning standardization in the electrical and electronic fields. To
this end and in addition to other activities, IEC publishes International Standards, Technical Specifications,
Technical Reports, Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC
Publication(s)”). Their preparation is entrusted to technical committees; any IEC National Committee interested
in the subject dealt with may participate in this preparatory work. International, governmental and non-
governmental organizations liaising with the IEC also participate in this preparation. IEC collaborates closely
with the International Organization for Standardization (ISO) in accordance with conditions determined by
agreement between the two organizations.
2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international
consensus of opinion on the relevant subjects since each technical committee has representation from all
interested IEC National Committees.
3) IEC Publications have the form of recommendations for international use and are accepted by IEC National
Committees in that sense. While all reasonable efforts are made to ensure that the technical content of IEC
Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any
misinterpretation by any end user.
4) In order to promote international uniformity, IEC National Committees undertake to apply IEC Publications
transparently to the maximum extent possible in their national and regional publications. Any divergence
between any IEC Publication and the corresponding national or regional publication shall be clearly indicated in
the latter.
5) IEC itself does not provide any attestation of conformity. Independent certification bodies provide conformity
assessment services and, in some areas, access to IEC marks of conformity. IEC is not responsible for any
services carried out by independent certification bodies.
6) All users should ensure that they have the latest edition of this publication.
7) No liability shall attach to IEC or its directors, employees, servants or agents including individual experts and
members of its technical committees and IEC National Committees for any personal injury, property damage or
other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees) and
expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC
Publications.
8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is
indispensable for the correct application of this publication.
9) Attention is drawn to the possibility that some of the elements of this IEC Publication may be the subject of
patent rights. IEC shall not be held responsible for identifying any or all such patent rights.
International Standard IEC 61162-460 has been prepared by IEC technical committee 80:
Maritime navigation and radiocommunication equipment and systems.
The text of this standard is based on the following documents:
FDIS Report on voting
80/764/FDIS 80/769/RVD
Full information on the voting for the approval of this standard can be found in the report on
voting indicated in the above table.
This publication has been drafted in accordance with the ISO/IEC Directives, Part 2.
This International Standard is to be used in conjunction with IEC 61162-450:2011.
A list of all parts in the IEC 61162 series, published under the general title Maritime
navigation and radiocommunication equipment and systems – Digital interfaces, can be found
on the IEC website.
The committee has decided that the contents of this publication will remain unchanged until
the stability date indicated on the IEC web site under "http://webstore.iec.ch" in the data
related to the specific publication. At this date, the publication will be
• reconfirmed,
• withdrawn,
• replaced by a revised edition, or
• amended.
A bilingual version of this publication may be issued at a later date.
IMPORTANT – The 'colour inside' logo on the cover page of this publication indicates
that it contains colours which are considered to be useful for the correct
understanding of its contents. Users should therefore print this document using a
colour printer.
– 8 – IEC 61162-460:2015 © IEC 2015
MARITIME NAVIGATION AND RADIOCOMMUNICATION
EQUIPMENT AND SYSTEMS – DIGITAL INTERFACES –
Part 460: Multiple talkers and multiple listeners –
Ethernet interconnection – Safety and security
1 Scope
This part of IEC 61162 is an add-on to the IEC 61162-450 standard where higher safety and
security standards are needed, e.g. due to higher exposure to external threats or to improve
network integrity. This standard provides requirements and test methods for equipment to be
used in an IEC 61162-460 compliant network as well as requirements for the network itself
and requirements for interconnection from the network to other networks. This standard also
contains requirements for a redundant IEC 61162-460 compliant network.
This standard extends the informative guidance given in Annex D of IEC 61162-450:2011. It
does not introduce new application level protocol requirements to those that are defined in
IEC 61162-450.
2 Normative references
The following documents, in whole or in part, are normatively referenced in this document and
are indispensable for its application. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any
amendments) applies.
IEC 60945, Maritime navigation and radiocommunication equipment and systems – General
requirements – Methods of testing and required test results
IEC 61162-450:2011, Maritime navigation and radiocommunication equipment and systems
– Digital interfaces – Part 450: Multiple talker and multiple listeners – Ethernet
interconnection
IEC 61924-2:2012, Maritime navigation and radiocommunication equipment and systems –
Integrated navigation systems – Part 2: Modular structure for INS – Operational and
performance requirements, methods of testing and required test results
IEC 62288:2014, Maritime navigation and radiocommunication equipment and systems –
Presentation of navigation-related information on shipborne navigational displays – General
requirements, methods of testing and required test results
IEEE 802.1D-2004, IEEE Standards for Local Area Networks: Media Access Control (MAC)
Bridges
IEEE 802.1Q-2005, Virtual Bridged Local Area Networks
ISOC RFC 792, Internet Control Message Protocol (ICMP), Standard STD0005 (and updates)
ISOC RFC 1112, Host Extensions for IP Multicasting
ISOC RFC 2236, Internet Group Management Protocol, Version 2
ISOC RFC 3411, An Architecture for Describing Simple Network Management Protocol
(SNMP) Management Frameworks
ISOC RFC 4604, Using Internet Group Management Protocol Version 3 (IGMPv3) and
Multicast Listener Discovery Protocol Version 2 (MLDv2) for Source-Specific Multicast
ISOC RFC 5424, The Syslog Protocol
3 Terms and definitions
For the purposes of this document, the terms and definitions given in IEC 61162-450, as well
as the following apply.
3.1
450-Node
device compliant with the IEC 61162-450 standard and which satisfies additional
requirements specified in this standard
Note 1 to entry: This also includes nodes only implementing the ONF function block.
3.2
460-Forwarder
network infrastructure device that can safely exchange data streams between a 460-Network
and other controlled networks including other 460-Networks
3.3
460-Gateway
network infrastructure device that connects 460-Networks and uncontrolled networks and
which satisfies the safety and security requirements as specified in this standard
3.4
460-Network
network which consists of only 460-Nodes, 460-Switches, 460-Forwarder, 460-Gateway and
460-Wireless gateway as well as 450-Nodes
3.5
460-Node
device compliant with the requirement of a 450-Node and which satisfies the safety and
security requirements as specified in this standard
3.6
460-Switch
network infrastructure device used to interconnect nodes on a 460-Network and which
satisfies the safety and security requirements as specified in this standard
3.7
460-Wireless gateway
network infrastructure device that connects a 460-Network and wireless networks and which
satisfies the safety and security requirements as specified in this standard
3.8
advanced encryption standard
AES
symmetric-key block cipher algorithm which is based on a substitution-permutation network
(SPN) and does not use the data encryption standard (DES) feistel network
– 10 – IEC 61162-460:2015 © IEC 2015
3.9
alarm
highest priority of an alert, announcing a situation or condition requiring immediate attention,
decision and, if necessary, action by the bridge team, to maintain the safe navigation of the
ship
3.10
application level gateway
network infrastructure device that connects 460-Networks with other networks and which
satisfies the safety and security requirements as specified in this standard
3.11
backdoor
installed program allowing remote access to a computer by providing a method of bypassing
normal authentication
3.12
controlled network
any network that has been designed to operate such that authorities are satisfied by
documented evidence that it does not pose any security risks to any connected network nodes
Note 1 to entry: For example any IEC 61162-450 compliant network that is approved by classification society, flag
state or recognized organization (RO).
3.13
category B alerts
alerts where no additional information for decision support is necessary besides the
information which can be presented at the central alert management HMI
3.14
caution
lowest priority of an alert
Note 1 to entry: Caution raises a bridge team’s awareness of a condition which does not warrant an alarm or
warning condition, but still requires attention out of the ordinary consideration of the situation or of given
information.
3.15
demilitarized zone
DMZ
physical or logical sub-network that contains and exposes an organization’s external-facing
services to a larger and un-trusted network, usually Internet
3.16
denial of service
DoS
attempt to prevent legitimate users from accessing a machine or network resource
3.17
flow
combination of the following information: source and destination MAC address, source and
destination IP address, protocol, source and destination UDP/TCP port number
3.18
failure mode and effects analysis
FMEA
failure mode, effects and criticality analysis
FMECA
analytic method as specified in IEC 60812
Note 1 to entry: FMECA extends FMEA by including a criticality analysis, which is used to chart the probability of
failure modes against the severity of their consequences.
3.19
internet control message protocol
ICMP
protocol according to ISOC RFC 792
3.20
internet group management protocol
IGMP
protocol according to ISOC RFC 1112 (version 1), ISOC RFC 2236 (version 2) and
ISOC RFC 4604 (version 3)
3.21
loss rate
amount of lost data by the receiving device of a flow as lost packets per total amount of
packets, measured at the input port of a device
Note 1 to entry: The loss rate is expressed in percent.
3.22
malware
malicious code
software used or created to disrupt computer operation
3.23
maximum network load
cumulative maximum amount of all traffic from all network nodes and network infrastructure
components of a single 460-Network
Note 1 to entry: The maximum network load is measured in bytes per second (B/s).
3.24
maximum transmission rate
maximum number of bytes per second that can be transmitted by a network node or network
infrastructure equipment
3.25
neighbour MAC address
MAC (media access control) address of connected 450-Node or 460-Node as seen by 460-
Switch and as reported by SNMP (simple network management protocol)
3.26
network infrastructure components
devices that connect at least two nodes in a 460-Network and two different networks such as
460-Switch, 460-Forwarder, 460-Gateway and 460-Wireless gateway
3.27
nominal network capacity
network capacity as a bit rate which is based on the configuration
Note 1 to entry: The capacity is the lowest capacity of any switch in the network to route all traffic.
Note 2 to entry: This is used for specifying capabilities of equipment.
3.28
other network function
ONF
function block that interfaces to the network as specified in IEC 61162-450
– 12 – IEC 61162-460:2015 © IEC 2015
Note 1 to entry: The ONF represents a function that is allowed to share the infrastructure of an IEC 61162-450
network but does not use the protocols defined in IEC 61162-450.
3.29
rapid spanning tree protocol
RSTP
protocol according to IEEE 802.1D
3.30
removable external data source
REDS
user removable non-network data source, including, but not limited to compact discs, memory
sticks and Bluetooth devices
3.31
ring topology
topology where each node is connected in series to two other nodes
3.32
RSA
public-key cryptosystem as described in IEEE 1363
3.33
safety
protection of networks from un-intentional threats such as system mal-functioning, mis-
configuration and mis-operation
3.34
secure area
area with defined physical perimeters and barriers, with physical entry controls or access
point protection or access point observation
Note 1 to entry: A ship’s navigation bridge with closed consoles and access observation by the Master or Officer
of the watch is an example of a secure area.
3.35
security
protection of networks from intentional threats such as virus, worm, denial-of-service attacks,
illicit access, etc.
3.36
simple network management protocol
SNMP
protocol according to ISOC RFC 3411
3.37
shipborne network
data network infrastructure on board a ship to exchange data between equipment on board
Note 1 to entry: This may or may not be connected to shore by satellites or other means
3.38
sniffing
monitoring and analysis of the network traffic
______________
Bluetooth is the trademark of a product supplied by Bluetooth Special Interest Group.
This information is given for the convenience of users of this standard and does not constitute an endorsement
by IEC of the product named. Equivalent products may be used if they can be shown to lead to the same results.
3.39
stream
combination of all flows from a device which use same protocol
3.40
syslog
protocol according to ISOC RFC 5424 which is used for an external logging in IEC 61162-450
3.41
system integrator
person or organisation responsible for the functionality of the integrated 460-network
3.42
threat
potential cause of an incident in computer security that may result in harm to the system
3.43
traffic
combination of all streams from a device
3.44
uncontrolled network
data network that is not an IEC 61162-450 compliant, IEC 61162-460 compliant or a
controlled network
EXAMPLE: Wireless networks.
3.45
virtual local area network
VLAN
network according to IEEE 802.1Q
3.46
virtual private network
VPN
extension of a private network through encapsulated, encrypted, and authenticated links
across shared or public networks
3.47
warning
announcing a situation or condition requiring attention but no immediate attention or action by
the bridge team
Note 1 to entry: Warnings are presented for precautionary reasons to make the bridge team aware of changed
conditions which are not immediately hazardous, but may become so, if no forward-looking decision is made or
action is taken.
3.48
wireless access point
wireless AP
device that connects wireless devices to wired devices through various wireless technologies
such as Wi-Fi, Bluetooth
4 High-level requirements
4.1 Overview
This standard is based on IEC 61162-450 which is indispensable for this standard. This
standard specifies more stringent requirements for equipment, system design and operation.
– 14 – IEC 61162-460:2015 © IEC 2015
Compliance with this standard will provide additional protection from threats both from
external connections to a network and connections within a network. When a network is solely
physically enclosed in a secure area such as the bridge of a ship where access can be
controlled, the larger threat will be from the external connections. Requirements applicable to
secure areas are given in 4.7.
4.2 Description
Figure 1 shows a network implementing the requirements of this standard on different parts
and components of the network. The grey symbols represent equipment specified in this
standard. The pentagons represent logical software functions specified in this standard.
IEC
Figure 1 – Functional overview of IEC 61162-460 requirement applications
Some examples of the use of a 460-Gateway are given in Annex A and some examples of the
use of the standard are given in Annex D.
4.3 General requirements
4.3.1 Equipment and system requirements
(See 10.3)
The requirements of this subclause apply to all equipment and systems intended to be
compliant with any part of this standard. Subclauses 4.4 to 4.6 summarize requirements for
one type of capability that may be implemented alone, without requiring compliance with other
parts of the standard.
All equipment forming the 460-Network shall satisfy the general requirements for navigation
and radiocommunication equipment as specified in IEC 60945.
NOTE IEC 60945 includes the requirement that equipment be so designed that maintenance of software can be
readily carried out on board ship, for example to support periodic update of firmware of network infrastructure
equipment to improve encryption algorithms and security features.
All network nodes, network infrastructure components and cables shall satisfy the
requirements in Clauses 4 and 5 of IEC 61162-450:2011.
Manufacturers of network nodes and network infrastructure components shall provide a list of
all MAC addresses to be used in a 460-Network.
4.3.2 Physical composition requirements
(See 10.12.3.1)
A 460-Network shall only be composed of the following physical network nodes or network
infrastructure components:
• 450-Node, i.e., network nodes compliant with IEC 61162-450 and which fulfil the
requirements in 4.4.1;
• 460-Node, network nodes compliant with IEC 61162-450 and which fulfil the additional
requirements in 4.4.2;
• network infrastructure components compliant with the requirements for a 460-Switch or
460-Forwarder in 4.4.3 and 4.4.4;
• application level gateways compliant with the requirements of a 460-Gateway or 460-
Wireless gateway in 4.4.5.
4.3.3 Logical composition requirements
(See 10.12.3.1)
A 460-Network shall also include the following logical system function components which are
located at all nodes in a 460-Network:
• network monitoring function, a SF (system function block, see IEC 61162-450) or an ONF
(other network function block, see IEC 61162-450) compliant with the requirements in
4.5.1;
• system management function, a SF or an ONF compliant with the requirements in 4.5.2.
4.4 Physical component requirements
4.4.1 450-Node
(See 10.4)
Network nodes that fulfil the requirements of IEC 61162-450 shall also fulfil the following
requirements in order to be used in a 460-Network:
• no connection to external networks or REDS;
• syslog implemented as defined IEC 61162-450:2011, 4.3.3.2;
• data output bandwidth documented by the manufacturer as described in 6.2.2.1;
• implemented ONF services if provided specified by the manufacturer including the
necessary protocol parameters, for instance for IP address and UDP/TCP port number.
4.4.2 460-Node
The following functions shall be implemented in a 460-Node:
•
...
Frequently Asked Questions
IEC 61162-460:2015 is a standard published by the International Electrotechnical Commission (IEC). Its full title is "Maritime navigation and radiocommunication equipment and systems - Digital interfaces - Part 460: Multiple talkers and multiple listeners - Ethernet interconnection - Safety and security". This standard covers: IEC 61162-460:2015(E) is an add-on to the IEC 61162-450 standard where higher safety and security standards are needed, e.g. due to higher exposure to external threats or to improve network integrity. This standard provides requirements and test methods for equipment to be used in an IEC 61162-460 compliant network as well as requirements for the network itself and requirements for interconnection from the network to other networks. This standard also contains requirements for a redundant IEC 61162-460 compliant network. This standard extends the informative guidance given in Annex D of IEC 61162-450:2011. It does not introduce new application level protocol requirements to those that are defined in IEC 61162-450.
IEC 61162-460:2015(E) is an add-on to the IEC 61162-450 standard where higher safety and security standards are needed, e.g. due to higher exposure to external threats or to improve network integrity. This standard provides requirements and test methods for equipment to be used in an IEC 61162-460 compliant network as well as requirements for the network itself and requirements for interconnection from the network to other networks. This standard also contains requirements for a redundant IEC 61162-460 compliant network. This standard extends the informative guidance given in Annex D of IEC 61162-450:2011. It does not introduce new application level protocol requirements to those that are defined in IEC 61162-450.
IEC 61162-460:2015 is classified under the following ICS (International Classification for Standards) categories: 47.020.70 - Navigation and control equipment. The ICS classification helps identify the subject area and facilitates finding related standards.
IEC 61162-460:2015 has the following relationships with other standards: It is inter standard links to IEC 61162-460:2018. Understanding these relationships helps ensure you are using the most current and applicable version of the standard.
You can purchase IEC 61162-460:2015 directly from iTeh Standards. The document is available in PDF format and is delivered instantly after payment. Add the standard to your cart and complete the secure checkout process. iTeh Standards is an authorized distributor of IEC standards.








Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.
Loading comments...