IEC 62948:2017

IEC 62948 ®
Edition 1.0 2017-07
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
colour
inside
Industrial networks – Wireless communication network and communication
profiles – WIA-FA
Réseaux industriels – Réseau de communication sans fil et profils de
communication – WIA-FA
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form
or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from
either IEC or IEC's member National Committee in the country of the requester. If you have any questions about IEC
copyright or have an enquiry about obtaining additional rights to this publication, please contact the address below or
your local IEC member National Committee for further information.

Droits de reproduction réservés. Sauf indication contraire, aucune partie de cette publication ne peut être reproduite
ni utilisée sous quelque forme que ce soit et par aucun procédé, électronique ou mécanique, y compris la photocopie
et les microfilms, sans l'accord écrit de l'IEC ou du Comité national de l'IEC du pays du demandeur. Si vous avez des
questions sur le copyright de l'IEC ou si vous désirez obtenir des droits supplémentaires sur cette publication, utilisez
les coordonnées ci-après ou contactez le Comité national de l'IEC de votre pays de résidence.

IEC Central Office Tel.: +41 22 919 02 11
3, rue de Varembé info@iec.ch
CH-1211 Geneva 20 www.iec.ch
Switzerland
About the IEC
The International Electrotechnical Commission (IEC) is the leading global organization that prepares and publishes
International Standards for all electrical, electronic and related technologies.

About IEC publications
The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the
latest edition, a corrigendum or an amendment might have been published.

IEC publications search - webstore.iec.ch/advsearchform IEC online collection - oc.iec.ch
The advanced search enables to find IEC publications by a Discover our powerful search engine and read freely all the
variety of criteria (reference number, text, technical publications previews. With a subscription you will always
committee, …). It also gives information on projects, replaced have access to up to date content tailored to your needs.
and withdrawn publications.
Electropedia - www.electropedia.org
IEC Just Published - webstore.iec.ch/justpublished
The world's leading online dictionary on electrotechnology,
Stay up to date on all new IEC publications. Just Published
containing more than 22 000 terminological entries in English
details all new publications released. Available online and
and French, with equivalent terms in 18 additional languages.
once a month by email.
Also known as the International Electrotechnical Vocabulary

(IEV) online.
IEC Customer Service Centre - webstore.iec.ch/csc
If you wish to give us your feedback on this publication or
need further assistance, please contact the Customer Service
Centre: sales@iec.ch.
A propos de l'IEC
La Commission Electrotechnique Internationale (IEC) est la première organisation mondiale qui élabore et publie des
Normes internationales pour tout ce qui a trait à l'électricité, à l'électronique et aux technologies apparentées.

A propos des publications IEC
Le contenu technique des publications IEC est constamment revu. Veuillez vous assurer que vous possédez l’édition la
plus récente, un corrigendum ou amendement peut avoir été publié.

Recherche de publications IEC - IEC online collection - oc.iec.ch
webstore.iec.ch/advsearchform Découvrez notre puissant moteur de recherche et consultez
La recherche avancée permet de trouver des publications IEC gratuitement tous les aperçus des publications. Avec un
en utilisant différents critères (numéro de référence, texte, abonnement, vous aurez toujours accès à un contenu à jour
comité d’études, …). Elle donne aussi des informations sur adapté à vos besoins.
les projets et les publications remplacées ou retirées.

Electropedia - www.electropedia.org
IEC Just Published - webstore.iec.ch/justpublished
Le premier dictionnaire d'électrotechnologie en ligne au
Restez informé sur les nouvelles publications IEC. Just
monde, avec plus de 22 000 articles terminologiques en
Published détaille les nouvelles publications parues.
anglais et en français, ainsi que les termes équivalents dans
Disponible en ligne et une fois par mois par email.
16 langues additionnelles. Egalement appelé Vocabulaire

Electrotechnique International (IEV) en ligne.
Service Clients - webstore.iec.ch/csc

Si vous désirez nous donner des commentaires sur cette
publication ou si vous avez des questions contactez-nous:
sales@iec.ch.
IEC 62948 ®
Edition 1.0 2017-07
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
colour
inside
Industrial networks – Wireless communication network and communication

profiles – WIA-FA
Réseaux industriels – Réseau de communication sans fil et profils de

communication – WIA-FA
INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
COMMISSION
ELECTROTECHNIQUE
INTERNATIONALE
ICS 25.040.40; 35.110 ISBN 978-2-8322-1017-3

– 2 – IEC 62948:2017 © IEC 2017
CONTENTS
FOREWORD . 12
1 Scope . 14
2 Normative references . 14
3 Terms, definitions, abbreviated terms, and conventions . 14
3.1 Terms and definitions . 14
3.2 Abbreviated terms . 17
3.3 Conventions . 19
4 Data coding . 20
4.1 Overview. 20
4.2 Basic data type coding . 21
4.2.1 Integer coding. 21
4.2.2 Unsigned coding . 21
4.2.3 Float coding . 22
4.2.4 Octetstring coding . 23
4.2.5 BitField coding . 23
4.2.6 Bitstring coding . 24
4.2.7 TimeData coding . 24
4.2.8 KeyData coding . 25
4.3 Structured data type coding . 25
4.3.1 Structure type coding . 25
4.3.2 List type coding . 25
5 WIA-FA overview . 25
5.1 Device types . 25
5.1.1 General . 25
5.1.2 Host computer . 25
5.1.3 Gateway device . 25
5.1.4 Access device . 26
5.1.5 Field device . 26
5.1.6 Handheld device . 26
5.2 Network topology . 26
5.3 Protocol architecture . 27
6 System management . 29
6.1 Overview. 29
6.2 Device Management Application Process . 30
6.2.1 General . 30
6.2.2 Network manager . 32
6.2.3 Security manager . 32
6.2.4 Network management module . 32
6.2.5 Security management module . 32
6.2.6 DMAP state machines . 32
6.3 Addressing and address assignment . 44
6.4 Communication resource allocation . 45
6.4.1 General . 45
6.4.2 Communication resource allocation . 45
6.5 Joining and leave process of field device . 46
6.5.1 Join process of a field device . 46

6.5.2 Communication resource allocation to field device . 47
6.5.3 Leaving process of a field device . 48
6.6 Network performance monitoring . 49
6.6.1 Device status report . 49
6.6.2 Channel condition report . 50
6.7 Management information base and services . 50
6.7.1 Management information base . 50
6.7.2 MIB services . 61
7 Physical layer . 64
7.1 General . 64
7.2 General requirements based on IEEE STD 802.11-2012 . 64
7.3 Additional requirements . 65
7.3.1 General . 65
7.3.2 Frequency band . 65
7.3.3 Channel bitmap . 65
7.3.4 Transmit power . 67
7.3.5 Data rate . 67
8 Data Link Layer . 67
8.1 General . 67
8.1.1 DLL functions . 67
8.1.2 Protocol architecture . 67
8.1.3 WIA-FA superframe . 68
8.1.4 Communication based on multiple access devices . 70
8.1.5 Time synchronization . 72
8.1.6 Frame aggregation/disaggregation. 73
8.1.7 Fragmentation and reassembly . 74
8.1.8 Retransmission . 74
8.2 Data link sub-layer data services . 77
8.2.1 General . 77
8.2.2 DLDE-DATA.request primitive . 77
8.2.3 DLDE-DATA.indication primitive . 78
8.2.4 Time sequence of DLL data service . 79
8.3 Data link sub-layer management services . 80
8.3.1 General . 80
8.3.2 Network discovery services . 81
8.3.3 Time synchronization services . 83
8.3.4 Device joining services . 85
8.3.5 Device status report services . 88
8.3.6 Channel condition report services . 90
8.3.7 Remote attribute get services . 92
8.3.8 Remote attribute set services . 96
8.3.9 Device leaving services . 100
8.4 DLL frame formats . 102
8.4.1 General frame format . 102
8.4.2 Date frame format . 103
8.4.3 Aggregation frame format . 104
8.4.4 NACK frame format . 104
8.4.5 GACK frame format . 104
8.4.6 Beacon frame format . 105

– 4 – IEC 62948:2017 © IEC 2017
8.4.7 Join request frame format . 106
8.4.8 Join response frame format . 106
8.4.9 Leave request frame format . 106
8.4.10 Leave response frame format . 106
8.4.11 Device status report frame format . 106
8.4.12 Channel condition report frame format . 107
8.4.13 Time synchronization request frame format . 107
8.4.14 Time synchronization response frame format . 107
8.4.15 Remote attribute get request frame format . 107
8.4.16 Remote attribute get response frame format . 108
8.4.17 Remote attribute set request frame format . 108
8.4.18 Remote attribute set response frame format . 109
8.5 Data link layer state machines . 109
8.5.1 DLL state machine of access device . 109
8.5.2 DLL state machine of field device . 117
8.5.3 Functions used in DLL state machines . 123
9 Wired specifications between GW and AD . 124
9.1 Overview. 124
9.2 Join process of access device . 124
9.3 Frame formats between GW and AD . 124
9.4 Communication based on multiple access device . 127
10 Application Layer . 127
10.1 Overview. 127
10.2 AL protocol stack . 127
10.3 AL functions . 128
10.3.1 Data functions . 128
10.3.2 Management functions . 128
10.3.3 Communication models . 129
10.4 Application data . 129
10.4.1 General . 129
10.4.2 Attribute data . 129
10.4.3 Process data . 129
10.4.4 Event data . 130
10.5 User application process . 131
10.5.1 General . 131
10.5.2 User application object . 132
10.5.3 IO data image on gateway device . 132
10.5.4 Alarm mechanism . 133
10.5.5 Application configuration. 134
10.6 Application services . 140
10.6.1 Confirmed services and unconfirmed services . 140
10.6.2 Read service . 141
10.6.3 Write service . 143
10.6.4 Publish service . 144
10.6.5 Report service . 145
10.6.6 Report ACK service . 146
10.6.7 Start service . 147
10.6.8 Stop service . 148
10.7 Application sub-layer . 149

10.7.1 Overview . 149
10.7.2 ASL data service . 149
10.7.3 ASL management service . 152
10.7.4 ASL message format . 153
11 Security . 172
11.1 General . 172
11.1.1 Security management architecture . 172
11.1.2 Security functions . 174
11.1.3 Keys . 174
11.2 Security services . 175
11.2.1 General . 175
11.2.2 Key establish service . 175
11.2.3 Key update service . 178
11.2.4 Security alarm service . 180
11.3 Secure join . 181
11.3.1 General . 181
11.3.2 Secure join process of FD. 182
11.4 Key management . 183
11.4.1 General . 183
11.4.2 Key establish process . 183
11.4.3 Key update process . 184
11.5 DLL secure communication . 186
11.6 Security alarm . 187
11.7 Secure frame format . 187
11.7.1 General secure DLL frame format . 187
11.7.2 Secure aggregation frame format . 188
11.7.3 Key establish request frame format . 188
11.7.4 Key establish response frame format . 189
11.7.5 Key update request frame format . 189
11.7.6 Key update response frame format . 189
11.7.7 Security alarm request frame format . 190
Annex A (informative) Security strategy for WIA-FA network . 191
A.1 Risk analysis for WIA-FA network . 191
A.2 Security principles for WIA-FA network . 191
A.3 Security objectives for WIA-FA network . 191
A.4 Security grade of WIA-FA network . 191
Annex B (informative) Regional modification for compliance with ETSI standards . 193
B.1 General . 193
B.2 Compliance with ETSI EN 300 440-2 V1.4.1 . 193
B.3 Compliance with ETSI EN 300 328V1.9.1. 193
Bibliography . 197

Figure 1 – Conventions used for state machines . 19
Figure 2 – Integer coding . 21
Figure 3 – Unsigned coding . 21
Figure 4 – Single float coding . 22
Figure 5 – Double float coding . 23
Figure 6 – WIA-FA redundant star topology . 27

– 6 – IEC 62948:2017 © IEC 2017
Figure 7 – OSI basic reference model mapped to WIA-FA . 27
Figure 8 – Protocol architecture of WIA-FA . 28
Figure 9 – Data flow over WIA-FA network . 29
Figure 10 – System management scheme . 29
Figure 11 – DMAP of management system. 30
Figure 12 – DMAP state machine of gateway device . 33
Figure 13 – DMAP sub-state machine of gateway device for each field device . 33
Figure 14 – DMAP state machine of a field device . 37
Figure 15 – DMAP state machine of an access device . 40
Figure 16 – Long address structure of device . 45
Figure 17 – Join process of field device . 47
Figure 18 – Communication resource allocation process for a field device . 48
Figure 19 – Passive leave process of a field device . 49
Figure 20 – Device status report process of field device . 49
Figure 21 – Channel condition report process of field device . 50
Figure 22 – BitMap format . 66
Figure 23 – WIA-FA DLL protocol architecture . 68
Figure 24 – The template of timeslot . 68
Figure 25 – WIA-FA default superframe . 69
Figure 26 – WIA-FA superframe . 70
Figure 27 – The example of WIA-FA devices multi-channel communication. 70
Figure 28 – An example of beacon communication based on multiple ADs . 71
Figure 29 – Process of one-way time synchronization . 72
Figure 30 – Process of two-way time synchronization . 73
Figure 31 – Aggregation frame payload format . 74
Figure 32 – Example of NACK-based retransmission mode . 75
Figure 33 – Example of multi-unicast retransmission mode . 76
Figure 34 – Example of multi-broadcast retransmission mode . 76
Figure 35 – Example of GACK-based timeslot backoff mode . 77
Figure 36 – Time sequence of period data service from FD to GW . 79
Figure 37 – Time sequence of other data service from FD to GW . 80
Figure 38 – Time sequence of data service from GW to FD . 80
Figure 39 – Network discovery process . 82
Figure 40 – Time synchronization process . 85
Figure 41 – Device join process . 88
Figure 42 – Device status report process . 90
Figure 43 – Channel condition report process . 91
Figure 44 – Remote attribute get process . 96
Figure 45 – Remote attribute set process . 100
Figure 46 – Device leave process . 101
Figure 47 – General frame format . 102
Figure 48 – DLL frame header . 102
Figure 49 – DLL frame control format . 102

Figure 50 – DLL Date frame format . 103
Figure 51 – DLL Aggregation frame format . 104
Figure 52 – NACK frame format . 104
Figure 53 – NACK information . 104
Figure 54 – GACK frame format . 104
Figure 55 – GACK_Struct Structure . 104
Figure 56 – DLL Beacon frame format . 105
Figure 57 – Shared timeslot count . 105
Figure 58 – DLL join request frame format . 106
Figure 59 – DLL join request frame format . 106
Figure 60 – DLL leave request frame format . 106
Figure 61 – DLL leave response frame format . 106
Figure 62 – DLL Device status report frame format . 106
Figure 63 – DLL Channel condition report frame format . 107
Figure 64 – DLL time synchronization request frame format . 107
Figure 65 – DLL time synchronization response frame format . 107
Figure 66 – DLL Remote attribute get request frame format . 108
Figure 67 – DLL remote attribute get response frame format . 108
Figure 68 – DLL Remote attribute set request frame format . 109
Figure 69 – DLL remote attribute set response frame format . 109
Figure 70 – DLL state machine of access device. 110
Figure 71 – DLL state machine of field device . 118
Figure 72 – General frame format between GW and AD . 124
Figure 73 – AL within the protocol architecture of WIA-FA . 128
Figure 74 – The relationships between UAPs and DAPs . 132
Figure 75 – User application objects in a field device . 132
Figure 76 – Example of IO data images on the gateway device . 133
Figure 77 – C/S VCR relationships between GW and FDs . 136
Figure 78 – P/S VCR relationships between GW and FDs . 137
Figure 79 – R/S VCR relationships between GW and FDs . 138
Figure 80 – Application configuration procedure for a field device . 139
Figure 81 – Example of UAO data aggregation and disaggregation process . 140
Figure 82 – Read request message format . 141
Figure 83 – Read positive response message format . 142
Figure 84 – Read negative response message format . 142
Figure 85 – Read service process . 143
Figure 86 – Write request message format . 143
Figure 87 – Write negative response message format . 143
Figure 88 – Write service process . 144
Figure 89 – Publish request message format . 145
Figure 90 – Publish process from FD to GW . 145
Figure 91 – Publish process from GW to FD . 145
Figure 92 – Report request message format . 145

– 8 – IEC 62948:2017 © IEC 2017
Figure 93 – Report service process . 146
Figure 94 – Report ACK request message format . 146
Figure 95 – Report ACK positive response message format . 146
Figure 96 – Report ACK negative response message format . 147
Figure 97 – Report ACK service process . 147
Figure 98 – Start service process . 148
Figure 99 – Stop service process . 149
Figure 100 – ASL general message format . 153
Figure 101 – Format of Message control field . 153
Figure 102 – Confirmed application service primitives among layers . 155
Figure 103 – Unconfirmed application service primitives among layers . 156
Figure 104 – ASL management service primitives between ASL and UAP . 156
Figure 105 – State transition diagram of AMCL . 157
Figure 106 – State transition diagram of AMSV . 159
Figure 107 – State transition diagram of AMPB . 162
Figure 108 – State transitions diagram of AMSB . 165
Figure 109 – State transitions diagram of AMRS . 168
Figure 110 – State transitions diagram of AMRK . 169
Figure 111 – Security management architecture . 173
Figure 112 – Life cycle of keys . 175
Figure 113 – Format of NONCE . 176
Figure 114 – Time sequence of key establishment . 178
Figure 115 – Time sequence of key updating . 180
Figure 116 – SecAlarmt_Struct structure . 180
Figure 117 – Time sequence of security alarm . 181
Figure 118 – Secure join process of field device . 183
Figure 119 – Key establish process for field device . 184
Figure 120 – Key update state machine for FD . 185
Figure 121 – General secure DLL frame format . 187
Figure 122 – Secure aggregation frame format . 188
Figure 123 – Key establish request frame format . 189
Figure 124 – Key establish response frame format . 189
Figure 125 – Key update request frame format . 189
Figure 126 – Key update response frame format . 189
Figure 127 – Security alarm request frame format . 190
Figure B.1 – Timeslot timing template . 194

Table 1 – Conventions used for state transitions . 20
Table 2 – Integer16 coding . 21
Table 3 – Unsigned16 coding . 22
Table 4 – Octetstring coding . 23
Table 5 – Coding of BitField8 data with one octet . 24
Table 6 – Coding of BitField16 data with two octets . 24

Table 7 – Coding of BitField24 data with three octets . 24
Table 8 – Bitstring coding . 24
Table 9 – Network management functions . 31
Table 10 – Security management functions . 31
Table 11 – DMAP state transition of gateway device . 33
Table 12 – DMAP sub-state transitio
...