IEC PAS 62734:2012

IEC/PAS 62734 ®
Edition 1.0 2012-03
PUBLICLY AVAILABLE
SPECIFICATION
PRE-STANDARD
colour
inside
Industrial communication networks – Fieldbus specifications –
Wireless systems for industrial automation: process control and related
applications
IEC/PAS 62734:2012(E)
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form
or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from
either IEC or IEC's member National Committee in the country of the requester.
If you have any questions about IEC copyright or have an enquiry about obtaining additional rights to this publication,
please contact the address below or your local IEC member National Committee for further information.

IEC Central Office Tel.: +41 22 919 02 11
3, rue de Varembé Fax: +41 22 919 03 00
CH-1211 Geneva 20 info@iec.ch
Switzerland www.iec.ch
About the IEC
The International Electrotechnical Commission (IEC) is the leading global organization that prepares and publishes
International Standards for all electrical, electronic and related technologies.

About IEC publications
The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the
latest edition, a corrigenda or an amendment might have been published.

Useful links:
IEC publications search - www.iec.ch/searchpub Electropedia - www.electropedia.org
The advanced search enables you to find IEC publications The world's leading online dictionary of electronic and
by a variety of criteria (reference number, text, technical electrical terms containing more than 30 000 terms and
committee,…). definitions in English and French, with equivalent terms in
It also gives information on projects, replaced and additional languages. Also known as the International
withdrawn publications. Electrotechnical Vocabulary (IEV) on-line.

IEC Just Published - webstore.iec.ch/justpublished Customer Service Centre - webstore.iec.ch/csc
Stay up to date on all new IEC publications. Just Published If you wish to give us your feedback on this publication
details all new publications released. Available on-line and or need further assistance, please contact the
also once a month by email. Customer Service Centre: csc@iec.ch.

IEC/PAS 62734 ®
Edition 1.0 2012-03
PUBLICLY AVAILABLE
SPECIFICATION
PRE-STANDARD
colour
inside
Industrial communication networks – Fieldbus specifications –

Wireless systems for industrial automation: process control and related

applications
INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
PRICE CODE
XH
ICS 25.040.40; 35.100.05; 35.240.50 ISBN 978-2-8322-0043-8

– 2 – PAS 62734  IEC:2012(E)
CONTENTS
FOREWORD . 24
INTRODUCTION . 26
1 Scope . 28
2 Normative references . 28
3 Terms, definitions, abbreviated terms, acronyms and conventions . 29
3.1 (N)-layer and other terms and definitions from the open systems
interconnection basic reference model . 29
3.2 Other terms and definitions . 34
3.3 Symbols . 49
3.4 Abbreviated terms and acronyms . 50
3.5 IEC service table conventions . 58
4 Overview . 59
4.1 General . 59
4.2 Interoperability . 59
4.3 Quality of service . 59
4.4 Worldwide applicability . 59
4.5 Network architecture . 60
4.6 Network characteristics . 62
5 Systems . 67
5.1 General . 67
5.2 Devices . 67
5.3 Networks . 74
5.4 Protocol suite structure . 84
5.5 Data flow . 85
5.6 Time reference . 90
5.7 Firmware upgrades. 91
5.8 Wireless backbones and other infrastructures . 91
6 System management . 92
6.1 General . 92
6.2 Device management application process . 94
6.3 System manager . 117
7 Security . 164
7.1 General . 164
7.2 Security services . 165
7.3 Frame security . 169
7.4 The join process . 200
7.5 Session establishment . 229
7.6 Key update . 235
7.7 Security manager functionality. 242
7.8 Security policies . 244
7.9 Security functions available to the application layer . 247
7.10 Security statistics collection, threat detection, and reporting . 250
7.11 Device security management object functionality . 250
8 Physical layer . 258
8.1 General . 258

PAS 62734  IEC:2012(E) – 3 –
8.2 Default physical layer . 259
9 Data link layer . 260
9.1 General . 260
9.2 Data link layer data service access point . 326
9.3 Data frames and acknowledgements . 329
9.4 Data link layer management information base . 352
9.5 Data link layer methods . 396
9.6 Data link layer alerts . 398
10 Network layer . 401
10.1 General . 401
10.2 Network layer functionality overview . 401
10.3 Network layer data services . 419
10.4 Network layer management object . 422
10.5 Network layer protocol data unit formats. 430
11 Transport layer . 437
11.1 General . 437
11.2 Transport layer reference model . 438
11.3 Transport security sub-layer . 439
11.4 Transport data entity . 439
11.5 Transport layer protocol data unit encoding . 443
11.6 Transport layer model . 445
12 Application layer . 455
12.1 General . 455
12.2 Energy considerations . 456
12.3 Legacy control system considerations . 456
12.4 Introduction to object-oriented modeling . 457
12.5 Object model . 459
12.6 Object attribute model . 460
12.7 Method model . 462
12.8 Alert model . 463
12.9 Alarm state model . 463
12.10 Event state model . 464
12.11 Alert reporting . 465
12.12 Communication interaction model . 467
12.13 Application layer addressing . 477
12.14 Management objects . 480
12.15 User objects . 480
12.16 Data types . 513
12.17 Application services provided by application sub-layer . 519
12.18 Application layer flow use to lower layer services . 555
12.19 Application layer management . 556
12.20 Process control industry standard data structures . 575
12.21 Additional tables . 578
12.22 Coding . 579
12.23 Syntax . 600
12.24 Detailed coding examples (INFORMATIVE) . 613
13 Gateway . 614
13.1 General . 614

– 4 – PAS 62734  IEC:2012(E)
13.2 Service access point . 618
13.3 Protocol . 661
14 Provisioning . 680
14.1 General . 680
14.2 Terms and definitions . 680
14.3 Provisioning procedures . 682
14.4 Pre-installed symmetric keys . 682
14.5 Provisioning using out-of-band mechanisms . 683
14.6 Provisioning networks . 683
14.7 State transition diagrams . 686
14.8 Device management application protocol objects for provisioning . 691
14.9 Management objects . 692
14.10 Device provisioning service object . 697
14.11 Provisioning functions (INFORMATIVE) . 704
Annex A (informative) Protocol implementation conformance statement proforma . 708
A.1 General . 708
A.2 System . 711
A.3 System management . 714
A.4 Security manager . 718
A.5 Physical layer . 719
A.6 Data link layer . 721
A.7 Network layer . 722
A.8 Transport layer . 724
A.9 Application layer . 725
A.10 Gateway . 733
A.11 Provisioning . 735
Annex B (normative) Role profiles . 737
B.1 General . 737
B.2 System . 738
B.3 System manager . 738
B.4 Security manager . 739
B.5 Physical layer . 740
B.6 Data link layer . 740
B.7 Network layer . 745
B.8 Transport layer . 746
B.9 Application layer . 746
B.10 Gateway . 746
B.11 Provisioning . 747
Annex C (informative) Background information . 748
C.1 Industrial needs . 748
C.2 Usage classes . 748
C.3 Other uploading and downloading- alarms (human or automated action) . 750
C.4 The open systems interconnection basic reference model . 750
Annex D (normative) Configuration defaults . 754
D.1 General . 754
D.2 System management . 754
D.3 Security . 755
D.4 Data link layer . 755

PAS 62734  IEC:2012(E) – 5 –
D.5 Network layer . 756
D.6 Transport layer . 757
D.7 Application layer . 757
D.8 Gateway . 759
D.9 Provisioning . 759
Annex E (informative) Use of backbone networks . 761
E.1 General . 761
E.2 Recommended characteristics . 761
E.3 Internet protocol backbones . 761
Annex F (normative) Basic security concepts – Notation and representation . 764
F.1 Strings and string operations . 764
F.2 Integers, octets, and their representation . 764
F.3 Entities . 764
Annex G (informative) Using certificate chains for over-the-air provisioning . 765
Annex H (normative) Security building blocks . 766
H.1 Symmetric key cryptographic building blocks . 766
H.2 Asymmetric key cryptographic building blocks . 767
H.3 Keying information . 767
H.4 Key agreement schemes . 769
H.5 Keying information schemes . 769
H.6 Challenge domain parameter generation and validation . 770
H.7 Challenge validation primitive . 771
H.8 Secret key generation (SKG) primitive . 771
H.9 Block-cipher-based cryptographic hash function . 772
H.10 Elliptic curve cryptography manual certificate scheme . 773
Annex I (informative) Definition templates . 776
I.1 Object type template . 776
I.2 Standard object attributes template . 776
I.3 Standard object methods . 777
I.4 Standard object alert reporting template . 778
I.5 Data structure definition . 779
Annex J (informative) Operations on attributes. 781
J.1 Operations on attributes . 781
J.2 Synchronized cutover . 784
Annex K (normative) Standard object types . 786
Annex L (informative) Standard data types . 792
Annex M (normative) Protocol identification values . 794
Annex N (informative) Tunneling and native object mapping . 795
N.1 Overview . 795
N.2 Tunneling . 795
N.3 Foreign protocol application communication . 795
N.4 Native object mapping . 796
N.5 Tunneling and native object mapping tradeoffs . 796
Annex O (informative) Generic protocol translation . 797
O.1 Overview . 797
O.2 Publish . 797
O.3 Subscribe . 798

– 6 – PAS 62734  IEC:2012(E)
O.4 Client . 799
O.5 Server . 800
Annex P (informative) Gateway service access point adaptations for this specification . 801
P.1 General . 801
P.2 Parameters . 801
P.3 Session . 801
P.4 Lease . 801
P.5 Device list report . 802
P.6 Topology report . 802
P.7 Schedule report . 802
P.8 Device health report . 802
P.9 Neighbor health report . 802
P.10 Network health report . 802
P.11 Time . 802
P.12 Client/server . 802
P.13 Publish/subscribe . 803
P.14 Bulk transfer . 804
P.15 Alert . 805
P.16 Gateway configuration . 805
P.17 Device configuration . 805 ®
Annex Q (informative) Gateway service access point adaptations for WirelessHART . 806
Q.1 General . 806
Q.2 Parameters . 807
Q.3 Session . 807
Q.4 Lease . 808
Q.5 Device list report . 808
Q.6 Topology report . 809
Q.7 Schedule report . 809
Q.8 Device health report . 809
Q.9 Neighbor health report . 810
Q.10 Network health report . 810
Q.11 Time . 811
Q.12 Client/server . 811
Q.13 Publish/subscribe . 812
Q.14 Bulk transfer . 813
Q.15 Alert . 813
Q.16 Gateway configuration . 814
Q.17 Device configuration . 814
Annex R (informative) Host system interface to standard-compliant devices via a
gateway . 815
R.1 Background . 815
R.2 Device application data integration with host systems . 816
R.3 Host system configuration tool . 816
R.4 Field device / distributed control systems integration . 818
R.5 Gateway . 819
R.6 Asset management application support . 819
Annex S (informative) Symmetric Key Operation Test Vectors . 821
S.1 DPDU samples . 821
S.2 TPDU samples . 822

PAS 62734  IEC:2012(E) – 7 –
Annex T (informative) Data link header and network header for join requests . 824
T.1 Overview . 824
T.2 MAC header (MHR) . 824
T.3 DL header (DHR) . 824
T.4 NL header . 825
Bibliography . 826

Figure 1 – Standard-compliant network . 61
Figure 2 – Single protocol data unit . 62
Figure 3 – Full protocol data unit . 62
Figure 4 – Physical devices versus roles . 69
Figure 5 – Notional representation of device phases . 73
Figure 6 – Simple star topology . 75
Figure 7 – Simple hub-and-spoke topology . 76
Figure 8 – Mesh topology . 77
Figure 9 – Simple star-mesh topology . 78
Figure 10 – Network and DL subnet overlap. 79
Figure 11 – Network and DL subnet differ . 80
Figure 12 – Network with multiple gateways . 81
Figure 13 – Basic network with backup gateway . 82
Figure 14 – Network with backbone . 83
Figure 15 – Network with backbone – device roles . 84
Figure 16 – Reference model . 85
Figure 17 – Basic data flow . 86
Figure 18 – Data flow between I/O devices . 87
Figure 19 – Data flow with legacy I/O device . 88
Figure 20 – Data flow with backbone . 88
Figure 21 – Data flow between I/O devices via backbone . 89
Figure 22 – Data flow to standard-aware control system . 90
Figure 23 – Management architecture . 93
Figure 24 – DMAP . 96
Figure 25 – Example of management SAP flow through standard protocol suite . 98
Figure 26 – System manager architecture concept . 118
Figure 27 – UAP-system manager interaction during contract establishment . 137
Figure 28 – Contract-related interaction between DMO and SCO . 139
Figure 29 – Contract source, destination, and intermediate devices . 149
Figure 30 – Contract establishment example. 157
Figure 31 – Contract ID usage in source . 158
Figure 32 – Contract termination . 161
Figure 33 – Contract modification with immediate effect. 163
Figure 34 – Examples of DPDU and TPDU scope . 165
Figure 37 – DPDU structure . 171
Figure 38 – Outgoing messages – DL and security . 172
Figure 39 – Incoming messages- DL and security . 174

– 8 – PAS 62734  IEC:2012(E)
Figure 40 – TPDU structure and protected coverage . 185
Figure 41 – TMIC parameters . 186
Figure 42 – Transport layer and security sub-layer interaction, outgoing TPDU . 187
Figure 43 – Transport layer and security sub-layer interaction, incoming TPDU . 188
Figure 44 – Example: Overview of the symmetric key join process . 205
Figure 45 – Example: Overview of the symmetric key join process of backbone device . 205
Figure 46 – Asymmetric key-authenticated key agreement scheme . 215
Figure 47 – Example: Overview of the asymmetric key join process for a device with a
data link layer . 218
Figure 48 – Example: Overview of the asymmetric key join process of a backbone
device . 219
Figure 49 – Device state transitions for join process and device lifetime . 228
Figure 50 – High-level example of session establishment . 229
Figure 51 – Key update protocol overview. 235
Figure 52 – Device session establishment and key update state transition . 242
Figure 53 – DL protocol suite and PPDU/DPDU structure . 262
Figure 54 – Graph routing example . 264
Figure 55 – Inbound and outbound graphs . 266
Figure 56 – Slotted hopping . 270
Figure 57 – Slow hopping . 270
Figure 58 – Hybrid operation . 271
Figure 59 – Radio spectrum usage . 272
Figure 60 – Default hopping pattern 1 . 274
Figure 61 – Two groups of devices with different hopping pattern offsets . 274
Figure 62 – Interleaved hopping pattern 1 with 16 different hopping pattern offsets . 275
Figure 63 – Slotted hopping . 276
Figure 64 – Slow hopping . 277
Figure 65 – Hybrid mode with slotted and slow hopping . 278
Figure 66 – Combining slotted hopping and slow hopping . 278
Figure 67 – Example of a three-timeslot superframe . 279
Figure 68 – Superframes and links . 279
Figure 69 – Multiple superframes, with timeslots aligned . 280
Figure 70 – Slotted hopping . 284
Figure 71 – Slow hopping . 285
Figure 72 – Components of a slow hop . 285
Figure 73 – Avoiding collisions among routers . 286
Figure 74 – Hybrid configuration . 287
Figure 75 – Timeslot allocation and the message queue . 289
Figure 76 – 250 ms alignment intervals . 292
Figure 77 – Timeslot durations and timing . 293
Figure 78 – Clock source acknowledges receipt of DPDU . 298
Figure 79 – Transaction timing attributes . 300
Figure 80 – Dedicated and shared transaction timeslots . 301
Figure 81 – Unicast transaction . 302

PAS 62734  IEC:2012(E) – 9 –
Figure 82 – PDU wait time (PWT) . 304
Figure 83 – Duocast support in the standard . 305
Figure 84 – Duocast transaction . 306
Figure 85 – Shared timeslots with CSMA-CA . 307
Figure 86 – Transaction during slow-hopping periods . 308
Figure 87 – DL management SAP flow through standard protocol suite . 311
Figure 88 – PPDU and DPDU structure . 329
Figure 89 – Typical acknowledgement frame layout . 337
Figure 90 – Relationship among DLMO indexed attributes . 370
Figure 91 – Address translation process . 404
Figure 92 – Fragmentation process . 406
Figure 93 – Reassembly process . 407
Figure 94 – Processing of a NSDU received from the transport layer . 409
Figure 95 – Processing of an incoming NPDU . 410
Figure 96 – Processing of a NPDU received from the backbone . 411
Figure 97 – Delivery of an incoming NPDU at its final destination . 412
Figure 98
...