Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
PD IEC TS 60870 — Telecontrol Equipment and Systems Technical Specifications
Telecontrol Equipment and Systems — IEC/TS 60870-5-601 / 5-604 / 5-7 (BSI UK implementation)
📡 PD IEC TS 60870 is the UK implementation, published by BSI, of several technical specifications in the IEC 60870 series, prepared by UK Technical Committee PEL/57 (Power systems management and associated information exchange) and focused on transmission protocols and security for telecontrol equipment and systems. The three parts in this batch are: Part 5-601, conformance test cases for the IEC 60870-5-101 companion standard; Part 5-604, conformance test cases for the IEC 60870-5-104 companion standard; and Part 5-7, security extensions applying IEC 62351. Together they support the verifiability and security of power telecontrol protocols, forming an important technical basis for interoperability and protection of grid dispatch automation and substation automation systems.
💡 A telecontrol system is the “nervous system” between grid dispatch and substation automation: it carries telemetry, tele-indication, telecommand, and tele-adjustment data. Whether protocols conform to standards and whether communications are secure directly affect the reliability and safety of grid operation.
1. Series Overview 📌
IEC 60870 is the comprehensive series for power-system telecontrol equipment and systems; the 60870-5 sub-series specifies transmission protocols. IEC 60870-5-101 is the companion standard widely used for serial communication (point-to-point, multi-point), while IEC 60870-5-104 is the companion standard for TCP/IP networks — both are extremely common in grid dispatch automation and substation automation. BSI adopts the relevant technical specifications as “PD IEC/TS 60870-xxx”.
In this batch, 5-601 and 5-604 provide conformance test cases for the 5-101 and 5-104 protocols respectively, verifying that device implementations conform to the standard; 5-7 introduces IEC 62351 security extensions at the protocol layer to achieve message authentication and encryption, defending against network attacks and data tampering.
2. Series Structure and Part Highlights 📋
| Part | Document Title | IEC Edition | Core Content |
|---|---|---|---|
| Part 5-601 | Conformance test cases for the IEC 60870-5-101 companion standard | IEC TS 60870-5-601:2015 (Ed. 2.0) | 5-101 configuration parameters, physical/link/application layer verification, conformance test procedures, and test result charts |
| Part 5-604 | Conformance test cases for the IEC 60870-5-104 companion standard | IEC TS 60870-5-604:2016 (Ed. 2.0) | 5-104 configuration parameters, communication verification, conformance test procedures, and command transmission test results |
| Part 5-7 | Security extensions to IEC 60870-5-101 and IEC 60870-5-104 protocols (applying IEC 62351) | IEC/TS 60870-5-7:2013 (Ed. 1.0) | MAC/encryption algorithm selection, definition of critical operations, message implementation and addressing information security extensions |
All three parts are classified under ICS 33.200; 5-601 and 5-604 are Edition 2.0 (superseding earlier DD IEC/TS versions), and 5-7 is Edition 1.0. They work together: conformance testing ensures “conformity to standard”, while the security extension ensures “communication security”.
⚠️ This series comprises technical specifications (TS). The test cases verify device implementation conformity and are not mandatory requirements for equipment. However, in practice, grid dispatch automation system interconnection often requires devices to provide conformance test reports as a condition of grid connection.
3. Key Technical Requirements 🔧
1. IEC 60870-5-101 Conformance Testing (Part 5-601)
Part 5-601 provides a systematic conformance testing method for the 5-101 protocol, mainly including:
- Configuration parameters: key 5-101 configuration parameters set as test preconditions;
- Communication verification: layer-by-layer verification of the physical level, link level, and data unit identifier;
- Conformance test procedures: complete test steps and acceptance criteria;
- Test results chart: result-recording charts for test results and command transmission, enabling traceable test reports.
2. IEC 60870-5-104 Conformance Testing (Part 5-604)
Part 5-604 provides similar structured conformance testing for the 5-104 (TCP/IP-based) protocol, including configuration parameters, communication verification, conformance test procedures, and test result charts for command transmission such as single commands, double commands, regulating step commands, and setpoint commands. Because 5-104 uses network transport, testing also addresses connection management, message sequence numbers, timeouts, and retransmission network characteristics.
3. Communication Protocol Security Extensions (Part 5-7)
Part 5-7 brings IEC 62351 security mechanisms into the 5-101 and 5-104 protocols, mainly covering:
- Algorithm selection: the message authentication code (MAC) and encryption algorithms;
- Critical operations and addressing information: defining which operations are treated as critical and specifying secure handling of addressing information;
- Message implementation: data definitions and implementation of messages under the security extension, ensuring authentication and encryption do not break protocol compatibility.
🚨 In the smart-grid environment, telecontrol messages can be eavesdropped, tampered with, or replayed. Applying the 5-7 security extension for message authentication and encryption is an important measure against malicious attacks that could cause mis-operation, failure-to-operate, or data distortion.
4. Engineering Practice Applications 🛠️
- 🔍 Grid-connection testing: before grid connection, dispatch automation and substation automation devices (e.g., RTUs, measurement-and-control units, communication gateways) should undergo protocol conformance testing per 5-601/5-604 to ensure interoperability between master station and plant/substation.
- 🔐 Security retrofitting: for existing systems using 5-101/5-104, assess and implement the 5-7 security extension for message authentication and encryption, enhancing resistance to cyber attack.
- 📋 Project acceptance: in project acceptance, use conformance test reports and security-extension implementation as deliverables, forming complete testing and acceptance archives.
- 🛡️ Integrated protection: combine this series with IEC 62351 and IEC 62443 to build a defence-in-depth architecture from the protocol layer to the network layer.
5. Frequently Asked Questions ❓
❓ Q: What is the difference between IEC 60870-5-101 and 5-104?
A: 5-101 is for serial communication (point-to-point, multi-point), suitable for narrowband links; 5-104 is for TCP/IP network transport, suitable for broadband networks such as Ethernet, supporting more nodes and higher data volume. Their application-layer data models are similar, but the transport layer implementation differs.
A: 5-101 is for serial communication (point-to-point, multi-point), suitable for narrowband links; 5-104 is for TCP/IP network transport, suitable for broadband networks such as Ethernet, supporting more nodes and higher data volume. Their application-layer data models are similar, but the transport layer implementation differs.
❓ Q: Is conformance testing mandatory?
A: The specification itself is not mandatory, but many grids and utilities require telecontrol and automation devices to provide conformance test reports as a condition for grid connection and acceptance — in practice it has become a de facto necessary step.
A: The specification itself is not mandatory, but many grids and utilities require telecontrol and automation devices to provide conformance test reports as a condition for grid connection and acceptance — in practice it has become a de facto necessary step.
❓ Q: Does the 5-7 security extension break protocol compatibility?
A: Compatibility was considered in the design: the security extension is implemented through specific message data definitions and authentication fields, so nodes not enabling security can still communicate. For overall security, however, it is recommended to enable it uniformly within the same network.
A: Compatibility was considered in the design: the security extension is implemented through specific message data definitions and authentication fields, so nodes not enabling security can still communicate. For overall security, however, it is recommended to enable it uniformly within the same network.
🔍 Q: What is the purpose of a conformance test report?
A: It demonstrates that a device implementation conforms to the standard and supports master-station/plant interoperability. It can serve as a reference for procurement, acceptance, grid connection, and fault diagnosis, and also supports interoperability verification between devices from different vendors.
A: It demonstrates that a device implementation conforms to the standard and supports master-station/plant interoperability. It can serve as a reference for procurement, acceptance, grid connection, and fault diagnosis, and also supports interoperability verification between devices from different vendors.