HEXING HXE110 - 21.1 Installation Tools

User manual for single-phase meter
46
19 Client management
The meter shall fully support DLMS Security as described in the 8
th
version DLMS/COSEM
Green Book, And it can transmit the data with/without encryption and authentication.
Several authentication mechanisms are used to authenticate communication entities during
AA establishment. Data transportation security is based on a role-based security. Each role has its
own access privileges. And all these authentication and encryption algorithms are limited to
security policy. Here as following is the list with all the roles, their privileges and authentication
mechanism:
Role
Client
ID
Privileges Description
Public client 16
Read limited meter
information, like the
meter serial number,
clock, etc.
Accessible via remote communication and
local interface without any security
Reading
client
2
Read meter data and
parameters
Established with authentication HLS (LLS
backup)
Data transmission with none security, or
authentication and encryption
Management
client
1
Read meter data,
configure meter
parameters and
control meter
Established with authentication HLS (LLS
backup)
Data transmission with none security, or
authentication and encryption
Pre-
established
client
102
Receive broadcast
commands, and push
data
Accessible only via remote communication
Always Established
Data transmission with none security, or
authentication and encryption
The HLS authentication mechanisms which the meter support as below :
Authentication
mechanism
Pass 1:
C →S
Pass 2:
S →C
Pass 3:
C →S f(StoC)
Pass 4:
S→C f(CtoS)
Carried by
AARQ AARE XX.request
reply_to_HLS
authentication
XX.response
reply_to_HLS
authentication
mechanism_id(2
) HLS man. Spec.
CtoS: Random string
8-64 octets
StoC: Random
string 8-64 octets
Man. Spec.
Man. Spec.
mechanism_id(3
) HLS MD5 1
MD5(StoC || HLS
Secret)
MD5(CtoS || HLS
Secret)
mechanism_id(4
)
HLS SHA-1 1
SHA-1(StoC || HLS
Secret)
SHA-1(CtoS || HLS
Secret)