MP104 Security Improvements

Proposer Gordon Hextall
Lead Analyst SEC Change
Date raised 18/12/2019
StageImplemented
Implementation date 30/06/2022 (June 2022 SEC Release)
Latest update This modification was implemented in the June 2022 SEC Release. As this modification is classified as GREEN you will only be able to download the documentation if you are logged into the website. If you do not have a login please contact SECAS at SECAS@gemserv.com or the Change Team at sec.change@gemserv.com.

What is the issue?

Data Communications Company (DCC) Users are required to Digitally Sign XML format Service Requests and Signed Pre-Commands with a User Role Signing Private Key. That Key must be a separate dedicated Key that must not be used for communication with Devices. The SSC is concerned that Keys could be used incorrectly. However, without the means to validate the use of separate Keys there is no way to monitor if or how frequently this occurs and no way to advise Users to enable them to ensure they are compliant with the Smart Energy Code (SEC).

What is the solution?

To implement a DCC validation check to identify if this is occurring and if necessary work with DCC Users to ensure compliance.

Who is impacted?

All DCC Users

What SEC documents are affected?

Section A 'Definitions and Interpretations'
Appendix AB 'Service Request Processing Document' (SRPD)
Appendix AD 'DCC User Interface Specification' (DUIS) v4.x

Timeline

18 Dec 2019
Draft Proposal raised
28 Jan 2020
CSC recommends to convert to Modification Proposal
14 Feb 2020
Converted to Modification Proposal
16 Mar 2020
Solution development
13 Apr 2021
to
04 May 2021
Refinement Consultation
05 May 2021
to
24 Jun 2021
DCC Impact Assessment
01 Jul 2021
Review by TABASC
14 Jul 2021
Review by SSC
27 Jul 2021
Present to CSC
28 Jul 2021
to
16 Aug 2021
Modification Report Consultation
25 Aug 2021
Change Board vote

Modification documents

MP104 - FIA - Security Improvements v1.0
15/12/2021
MP104 - PIA - Security Improvements v1.0 (GREEN)
15/12/2021
MP104 Modification Report Consultation (GREEN)
28/07/2021
MP104 Modification Report v1.0 (GREEN)
28/07/2021
MP104 Legal Text v1.0 (GREEN)
28/07/2021
MP104 Refinement Consultation (GREEN)
13/04/2021
No files
No files
No files
No files
No files

If you believe there is a problem with this modification, please let us know HERE.