ABB RELION REX615 - Secure Authentication Settings; Security Parameters

3.7.4 Secure authentication settings
3.7.4.1 Predefined behavior
Part of the secure authentication behavior is predefined in the relay.
Association Id
The relay supports up to five IEC 60870-5-104 protocol instances simultaneously.
The Association Id for each instance corresponds to the protocol instance number in
the menu structure and in Application Configuration.
Critical messages
The recommended listed (IEC 60870-5-7: 2003) mandatory Type Id (ASDU type)
requests are critical commands for the relay. This list includes all control operations
and time synch commands. A more comprehensive list can be found in the Protocol
Implementation Conformance statement. These commands require additional
authentication handshake (challenge-response) as defined by the standard.
User role
The relay supports only user Common, with OPERATOR rights providing access to all
supported IEC 60870-5-104 requests.
Some IEC104 masters can use commands with time tags in secure
mode. If time-tagged commands are used, check the relay and master
time synchronization (for example, UTC/local settings). The time stamp
difference that the relay accepts can be adjusted by the Command delay
(ms) setting.
3.7.4.2 Security parameters
Various Secure Authentication parameters are configurable in the relay. The
behavior of these parameters follows the IEC 62351-5 standard. The parameters
and short descriptions are listed at the end of this manual. Here are explained some
of the most relevant settings. Refer to the standard for more detailed information
about these parameters.
Session Key Change Interval
This defines how often the master is expected to renew Session Keys. The
interval is defined as number of messages or as time in seconds, whichever
occurs first. Setting Exp Sesn key Chg Intv must be defined via Configuration>
Communication> Protocols> Secure IEC104 (n)> General and setting Exp Sesn
key Chg Cnt via Configuration> Communication> Protocols> Secure IEC104 (n)>
General.
Reply Timeout
This setting defines the time the relay waits for responses to the authentication
messages before reporting a timeout error. It is configured in milliseconds via
Configuration> Communication> Protocols> Secure IEC104 (n)> General.
Vendor-specific implementation
2NGA001859 A
24 REX615
IEC 60870-5-104 Communication Protocol Manual