SECMP0042 Amendment to SMKI Services to provide DCC Users and/or SMKI Participants with Authorised Responsible Officer (ARO) Statistics and Information

Over time, Authorised Responsible Officer (ARO)-related credentials may become lost, stolen, or misused with malicious intent (for example, creating ‘fraudulent’ (but valid) Smart Metering Key Infrastructure (SMKI) Organisation Certificates or SMKI Device Certificates. A DCC User and/or a SMKI Participant must be able to obtain up-to-date information to maintain an accurate view of the use of credentials granted to an ARO. Understanding ARO activities on SMKI Services and the SMKI Repository Services is crucial for maintaining oversight of security sensitive activities and for taking steps to maintain appropriate ARO entitlements (e.g. identification of unused, unnecessary dormant accounts).

Currently, there is no ‘business as usual’ reporting mechanism that a DCC User can utilise to understand the activity associated with the credentials issued to their AROs.

This Modification Proposal seeks to place an obligation on the DCC to develop a reporting mechanism which can be used by DCC Users and/or SMKI Participants to obtain up-to-date information on the use of ARO credentials on SMKI-related services.

All SEC Parties:

Any SEC Party who is (or wishes to become) either a DCC User and/or a SMKI Participant will be impacted by the implementation of this Modification.
DCC Users and/or SMKI Participants that wish to receive this report will be required to test its interfacing systems to ensure the mechanism proposed can sufficiently and accurately deliver information on ARO-related credentials.