WG 3 - TC 57/WG 3

IEC TS 60870-5-7:2025, which is a technical specification, describes messages and data formats for implementing IEC 62351-5:2023 for secure communication as an extension to IEC 60870-5-101 and IEC 60870-5-104.
The purpose of this document is to permit the receiver of any IEC 60870-5-101/-104 Application Protocol Data Unit (APDU) to verify that the APDU was transmitted by an authorized user and that the APDU was not modified in transit.
This document is also intended to be used, together with the definitions of IEC 62351-3:2023, in conjunction with the IEC 60870-5-104 companion standard.
The state machines, message sequences, and procedures for exchanging these messages are defined in IEC 62351-5:2023. This document describes only the message formats, selected options, critical operations, addressing considerations and other adaptations required to implement IEC 62351 in the IEC 60870-5-101 and IEC 60870-5-104 protocols.
In addition to the previous edition, this new edition of this document also addresses role-based access control, by utilizing the IEC 62351-8 RBAC approach and the already defined role to permission mapping from IEC 62351-5:2023.
The scope of this document does not include security for IEC 60870-5-102 or IEC 60870-5-103. IEC 60870-5-102 is in limited use only and will therefore not be addressed. Users of IEC 60870-5-103 desiring a secure solution need to implement IEC 61850 using the security measures from in IEC 62351 referenced in IEC 61850.
Management of keys, certificates or other cryptographic credentials within devices or on communication links other than IEC 60870-5-101/104 is out of the scope of this document and might be addressed by other IEC 62351 publications in the future.
This second edition cancels and replaces the first edition published in 2013. This edition constitutes a technical revision.
This edition includes the following significant technical changes with respect to the previous edition:
a) This edition has been completely revised with respect to the previous edition;
b) Alignment with updated versions of IEC 62351-3:2023 and IEC 62351-5:2023;
c) Definition of specific profiles for application layer and transport layer;
d) Introduction of Session Initiation Request to handle situations in which the called station reestablishes a connection;
e) Inclusion of multicast security for the unbalanced mode of IEC 60870-5-101 including key management;
f) Consideration of RBAC based on IEC 62351-8.
This Technical Specification is to be used in conjunction with IEC 62351-5:2023 and IEC 60870-5-104:2016.

IEC TS 60870-5-604:2016(E) describes test cases for conformance testing of telecontrol equipment, Substation Automation Systems (SAS) and telecontrol systems, including front-end functions of SCADA, using the IEC 60870-5-104 companion standard and IEC 60870-5-6, Guidelines for conformance testing for the IEC 60870-5 companion standards. The use of this part of IEC 60870 facilitates interoperability by providing a standard method of testing protocol implementations. This new edition includes the following significant technical changes with respect to the previous edition:
- resolution of ambiguities;
- refinement of some test cases to enhance operability between tested devices;
- addition of some test cases (mainly negative test cases).

The contents of the corrigendum of August 2023 have been included in this copy.

Describes a test method which can provide preliminary differentiation between similar insulating materials, with respect to their resistance to damage when exposed to high-voltage, low-current arc discharges, occurring close to their surfaces.  Due to its convenience and the short time required for testing, the test method is applicable for preliminary screening of test materials, for detecting the effects of changes in formulation and for quality control testing.

IEC TS 60870-5-601:2015(E) describes test cases for conformance testing of telecontrol equipment, Substation Automation Systems (SAS) and telecontrol systems, including front-end functions of SCADA. The use of this part of IEC 60870 facilitates interoperability by providing a standard method of testing protocol implementations, but it does not guarantee interoperability of devices. It is expected that using this part of IEC 60870 during testing will minimize the risk of non-interoperability. The goal of this part of IEC 60870 is to enable unambiguous and standardised evaluation of IEC 60870-5 companion standard protocol implementations. The guidelines and conditions for the testing environment are described in IEC 60870-5-6. This new edition includes the following significant technical changes with respect to the previous edition:
- resolving ambiguities and inconsistencies between IEC 0870-5-101:2003 and IEC TS 60870-5-601:2006;
- enhancements and optimisation of test cases which are needed to prove conformance with IEC 60870-5-101:2003.
This publication is to be read in conjunction with IEC 60870-5-101:2003

IEC/TS 60870-5-7:2013(E) describes messages and data formats for implementing IEC/TS 62351-5 for secure authentication as an extension to IEC 60870-5-101 and IEC 60870-5-104. The purpose of this base standard is to permit the receiver of any IEC 60870-5-101/104 Application Protocol Data Unit (APDU) to verify that the APDU was transmitted by an authorized user and that the APDU was not modified in transit. It provides methods to authenticate not only the device which originated the APDU but also the individual human user if that capability is supported by the rest of the telecontrol system. This specification is also intended to be used, together with the definitions of IEC/TS 62351-3, in conjunction with the IEC 60870-5-104 companion standard.

Describes test cases for conformance testing of telecontrol equipment, substation automation systems and telecontrol systems, including front-end functions of SCADA. Will facilitate interoperability by providing a standard method of testing protocol implementations. Using this specification during testing is expected to minimize the risk of non-interoperability.

Describes test cases for conformance testing of telecontrol equipment, Substation Automation Systems (SAS) and telecontrol systems, including front-end functions of SCADA. Will facilitate interoperability by providing a standard method of testing protocol implementations.

Defines a telecontrol companion standard that enables interoperability among compatible telecontrol equipment. Applies to telecontrol equipment and systems with coded bit serial data transmission for monitoring and controlling geographically widespread processes.
This publication is of high relevance for Smart Grid.

IEC 60870-5-6:2006 Specifies methods for conformance testing of telecontrol equipment, amongst substation automation systems and telecontrol systems, including front-end functions of SCADA. Facilitates interoperability by providing a standard method of testing protocol implementations. Is expected to minimize the risk of non-interoperability.

Applies to telecontrol equipment and systems with coded bit serial data transmission for monitoring and controlling geographically widespread processes. Defines a telecontrol companion standard that enables interoperability among compatible telecontrol equipment. The defined telecontrol companion standard utilizes standards of the IEC 60870-5 series of documents.
This publication is of high relevance for Smart Grid.

Applies to telecontrol equipment and systems with coded bit serial data transmission for monitoring and controlling geographically widespread processes. Defines a telecontrol companion standard that enables interoperability among compatible telecontrol equipment.

Is a technical report which describes the influence of modem transmission procedures on the data integrity of transmission systems using the protocol IEC 60870-5.

Covers terms which are specifically relevant to telecontrol techniques as well as other terms which are necessary for the understanding of telecontrol standards. Is a technical report of type 3.

Standardizes the transmission of integrated totals representing the amount of electrical energy transferred between power utilities, or between a power utility and independent producers on a high voltage or medium voltage network.
This publication is of high relevance for Smart Grid.

Applies to telecontrol equipment and systems with coded bit serial data transmission for monitoring and controlling geographically widespread processes. Defines a telecontrol companion standard that enables interoperability among compatible telecontrol equipment.

Specifies classes for environmental conditions under which telecontrol equipment has to operate. Gives an overall view of the functional elements contributing to basic structures and to the choice of telecontrol system configurations. It deals with functions which are typical for any process to be monitored and controlled but emphasizes the specific problems which characterize geographically widespread processes, such as the dominant influence of telecommunications links with restricted bandwidth and often low signal-to-noise ratio. However, this report serves only as an introduction to the detailed standards and recommendations laid down in Parts 2-5 of IEC 60870.