SECMP0042 Amendment to SMKI Services to provide DCC Users and/or SMKI Participants with Authorised Responsible Officer (ARO) Statistics and Information
Proposer
Fabien Cavenne
Lead Analyst
SEC Change
Date raised
01/09/2017
Stage
Withdrawn
Implementation date
Unknown
Latest update
The Proposer elected to withdraw this modification on 23 January 2019.
What is the issue?
Over time, Authorised Responsible Officer (ARO)-related credentials may become lost, stolen, or misused with malicious intent (for example, creating ‘fraudulent’ (but valid) Smart Metering Key Infrastructure (SMKI) Organisation Certificates or SMKI Device Certificates. A DCC User and/or a SMKI Participant must be able to obtain up-to-date information to maintain an accurate view of the use of credentials granted to an ARO. Understanding ARO activities on SMKI Services and the SMKI Repository Services is crucial for maintaining oversight of security sensitive activities and for taking steps to maintain appropriate ARO entitlements (e.g. identification of unused, unnecessary dormant accounts).
Currently, there is no ‘business as usual’ reporting mechanism that a DCC User can utilise to understand the activity associated with the credentials issued to their AROs.
What is the solution?
This Modification Proposal seeks to place an obligation on the DCC to develop a reporting mechanism which can be used by DCC Users and/or SMKI Participants to obtain up-to-date information on the use of ARO credentials on SMKI-related services.
Who is impacted?
All SEC Parties:
Any SEC Party who is (or wishes to become) either a DCC User and/or a SMKI Participant will be impacted by the implementation of this Modification.
DCC Users and/or SMKI Participants that wish to receive this report will be required to test its interfacing systems to ensure the mechanism proposed can sufficiently and accurately deliver information on ARO-related credentials.
Timeline
01Sep2017
Modification Proposal raised
15Sep2017
Panel considers Initial Modification Report
01Dec2017
to
22May2018
DCC Preliminary Assessment
19Jun2018
Working Group meeting
16Oct2018
Update provided to the SMKI PMA
15Jan2019
Update provided to the SMKI PMA
23Jan2019
Modification withdrawn
Modification documents
SECMP0042 Extract of Minutes of SMKI PMA Meeting 53
This is the April 2024 SEC Modifications Working Group meeting, where we will be discussing: MP085B ‘Synchronisation of Smart Meter voltage measurement periods (meters currently installed)’ MP244 ‘Device Alerts
This is the April 2024 SEC Issues Group meeting, where we discussed: PPM continuity plan Please see the meeting summary here: SEC Issues Group Meeting Summary - April 2024 (CLEAR)
This is the May 2024 SEC Modifications Working Group meeting, where we will be discussing: MP235 'Enhanced Meter Data Access for Other Users' Please see the meeting documentation here:
By subscribing you consent to receiving the SECAS newsletter.
Manage Cookie Consent
This website uses cookies. Please choose which categories of cookies you would like to enable.
Functional cookies
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.