Privacy and Security for the HES Gateway Presentation and discussion for SC25 WG1 By: Ludo Bertsch and Tim Schoechle Arlington, USA April 24, 2013 SC25/WG1-N1620

Tasks for Privacy and Security for the HES Gateway Review existing SC25 WG1 gateway documents Review recent SC25 WG1 document submissions relating to privacy and security Propose initial introduction Propose table of contents Gather input from WG1 on items above, and request further submissions for consideration Ludo Bertsch, Horizon Technologies Inc. 2

Series of documents Home Electronic System (HES) Gateway (IS) A residential gateway model for HES [2004] (IS) Modularity and protocol [2012] (Proposed) Privacy and security (this document) HES Gateway Documents

Ludo Bertsch, Horizon Technologies Inc Introduction Section 1.3: Scope - Privacy and security Section 4.2: Conformance - Optional functions and requirements Sections 5.1.4, , 5.6.1: Functional requirements of residential gateways Section 6: Functional safety with residential gateways Section 7: Specific privacy and security requirements concerning residential gateways Annexes A, B, C Introduction Section 5.1: Architectural model Section 7.4.2: Control plane Privacy and Security in existing WG1 RG documents

Privacy and Security related Documents presented to SC25 WG1 Recent* SC25 WG 1 Documents (with country of origin) N HES Gateway - Part 2 (SC25 WG1) N Privacy in the Smart Grid (USA) N Smart Grid Standards for Residential Customers (SC25 WG1) N1522 – Canadian Smart Grid Standards Roadmap (Canada) N1523 – Companion Paper to N1522 (Canada) N1532 – Protection Profile for the Gateway of a Smart Metering System (Germany) N1533 – Identification of privacy protection requirements as external constraints on business transactions (ISO/IEC FDIS ) N1534 – Technical Security in Smart Metering Devices: A German Perspective (Germany) N1537 – Privacy on the information superhighway (Schoechle) N1538 – Privacy and Security of the Advanced Metering Infrastructure (Netherlands) N1539 – Guidelines for Smart Grid Cyber Security: Vol 2, Privacy and the Smart Grid (USA) * Note: documents from last 3 years are included in the list Ludo Bertsch, Horizon Technologies Inc. 5

6 This standard defines the mechanism and tools for the Home Electronic System (HES) Gateway to ensure privacy and security from potential threats created by providing interconnections between the home area network (HAN) and the wide area network (WAN). Proposed Introduction for Privacy and Security for HES Gateway

Proposed HES Gateway Privacy and Security Table of Contents ● Foreword ● Introduction ● Scope ● Normative references ● Terms, definitions and abbreviations ● Conformance ● Considerations, architecture and requirements ● Annexes Ludo Bertsch, Horizon Technologies Inc. 7

Input? Feedback? Review existing SC25 WG1 HES Gateway documents Review recent SC25 WG1 document submissions relating to privacy and security Propose initial introduction for Privacy and Security standard Propose table of contents Gather input from WG1 on items above, and request further submissions for consideration Next steps Ludo Bertsch, Horizon Technologies Inc. 8