{"id":204688,"date":"2025-06-30T09:12:12","date_gmt":"2025-06-30T07:12:12","guid":{"rendered":"https:\/\/www.rse-web.it\/rapporti\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/"},"modified":"2025-06-30T09:14:00","modified_gmt":"2025-06-30T07:14:00","slug":"design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto","status":"publish","type":"rapporti","link":"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/","title":{"rendered":"Design of an architecture for measuring the impact of centralized PKI-based authentication in telecontrol communications Sotto Tipo RAPPORTO"},"content":{"rendered":"","protected":false},"excerpt":{"rendered":"<p>The IEC 62351 suite of standards specifies solutions that can be applied to systems and communications of the electro-energetic system to counter or mitigate cybersecurity threats. The goal of the three-year work is to develop tools for evaluating the impact of the most recent evolution of industrial standards, in particular IEC 62351-3 Ed. 2.0, to the performance of telecontrol protocols communications. In the reference period feasibility and tool evaluation has been conducted. Device synchronization solutions, an essential prerequisite for calculating KPIs, have been implemented and tested, and laboratory scenarios have been set up for the future testing the developed solutions.<\/p>\n","protected":false},"author":93,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[1378,1344,1311,1425,1305],"targets":[1317],"rapporti_tipologie":[762],"class_list":["post-204688","rapporti","type-rapporti","status-publish","hentry","tag-communication-systems-en","tag-cybersecurity-en","tag-digitalization","tag-electrical-infrastructure","tag-energy-efficiency-en","targets-research","rapporti_tipologie-report-en"],"acf":{"dont_show_hompage":true,"projects":{"ID":188406,"post_author":"93","post_date":"2024-06-13 15:10:14","post_date_gmt":"2024-06-13 13:10:14","post_content":"","post_title":"Integrated Project for Energy System Cybersecurity","post_excerpt":"The project has the threefold goal of developing studies, tools and methodologies aimed at: \n- ensuring the security of communication technologies in energy systems; \n- preserving the resilience of the electricity system in case of cyber attacks; \n- leveraging artificial intelligence for the detection of cyber anomalies in energy infrastructure.\n","post_status":"publish","comment_status":"open","ping_status":"closed","post_password":"","post_name":"integrated-project-for-energy-system-cybersecurity","to_ping":"","pinged":"","post_modified":"2024-07-02 10:30:09","post_modified_gmt":"2024-07-02 08:30:09","post_content_filtered":"","post_parent":0,"guid":"https:\/\/www.rse-web.it\/progetti\/integrated-project-for-energy-system-cybersecurity\/","menu_order":0,"post_type":"progetti","post_mime_type":"","comment_count":"0","filter":"raw"},"order_posts":"","dont_show_search":false,"related_posts":false,"show_on_slider":false,"single_post_data":{"titolo_spot":"","post_content":"<p>Cybersecurity vulnerabilities are a real risk for the telecontrol of energy systems, with important repercussions on utilities regarding the reliability, continuity and efficiency of services and putting end users\u2019 services at risk.<\/p>\n<p>&nbsp;<\/p>\n<p>The work of this three-year research period aims to verify the impact on the performance of telecontrol communications protected by the specifications of IEC 62351-3 Ed 2.0 , also comparing it to the impact of the previous editions. The implementation of the IEC 62351-3 Ed 2.0 requires a greater effort than previous editions as the upgrade mainly concern version 1.3 of TLS v1.3, recently introduced and not yet available in some middleware which support the development of the telecontrol software.<\/p>\n<p>&nbsp;<\/p>\n<p>We investigated the alternatives available for integrating this solution into middleware implementations of the IEC 61850-8-1 (MMS) protocol, verifying support for TLS v1.3 in widely used open source middleware.<\/p>\n<p>&nbsp;<\/p>\n<p>We investigated the alternatives available to integrate this solution into middleware implementations of the IEC 61850-8-1 (MMS) protocol, verifying support for TLS v1.3 in widely used open source middleware ; OpenSSL and GnuTLS tools were identified as appropriate.<\/p>\n<p>&nbsp;<\/p>\n<p>The architecture designed for the performance impact measurement platform and related support services were illustrated, which pertain the management of the life cycle of digital certificates and the management of the logging of events that have occurred.<\/p>\n<p>&nbsp;<\/p>\n<p>Technologies for the time synchronization of devices have been investigated, which are essential for assessing the impact of cybersecurity specifications on telecontrol performance; the most widespread and used technologies in the electro-energetic sector have been taken into consideration. Specific cybersecurity solutions for time synchronization have been analyzed, because of their impact on the security of the devices and on the robustness of energy control applications against cyberattacks. Scenarios have been set up to verify the performance of time synchronization in our laboratory, replicating telecontrol architectures, which have highlighted the dependence on architectural and operational factors.<\/p>\n<p>&nbsp;<\/p>\n<p>Finally, updates have been carried out to the test architecture of telecontrol communications implemented in the PCS-ResTest laboratory of RSE with the introduction of wireless communication solutions, which are expected to show significant variability and peculiarities in terms of performance.<\/p>\n<p>&nbsp;<\/p>\n<p>The availability of this type of test environments constitutes a highly innovative contribution to the deployment of secure communications, in compliance with the operational requirements of the power system applications. The experience which has been gained enables RSE to contribute to the Italian sector normative, by requiring the application of standard cybersecurity solutions for the protection of energy infrastructures.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>The Report is available on the Italian site<\/strong><\/p>\n","link_estreno":false,"scarica_file":false,"button":{"text":"","link":""},"referente_group":false,"data_emissione":"2023-06-30","autori":"M. G. Todeschini (RSE S.p.A.)","rapporto":"","rif_rse":"23006655 "},"satellite_post_url":""},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Design of an architecture for measuring the impact of centralized PKI-based authentication in telecontrol communications Sotto Tipo RAPPORTO - RSE<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Design of an architecture for measuring the impact of centralized PKI-based authentication in telecontrol communications Sotto Tipo RAPPORTO - RSE\" \/>\n<meta property=\"og:description\" content=\"The IEC 62351 suite of standards specifies solutions that can be applied to systems and communications of the electro-energetic system to counter or mitigate cybersecurity threats. The goal of the three-year work is to develop tools for evaluating the impact of the most recent evolution of industrial standards, in particular IEC 62351-3 Ed. 2.0, to the performance of telecontrol protocols communications. In the reference period feasibility and tool evaluation has been conducted. Device synchronization solutions, an essential prerequisite for calculating KPIs, have been implemented and tested, and laboratory scenarios have been set up for the future testing the developed solutions.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/\" \/>\n<meta property=\"og:site_name\" content=\"RSE\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-30T07:14:00+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/\",\"url\":\"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/\",\"name\":\"Design of an architecture for measuring the impact of centralized PKI-based authentication in telecontrol communications Sotto Tipo RAPPORTO - RSE\",\"isPartOf\":{\"@id\":\"https:\/\/www.rse-web.it\/#website\"},\"datePublished\":\"2025-06-30T07:12:12+00:00\",\"dateModified\":\"2025-06-30T07:14:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.rse-web.it\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Design of an architecture for measuring the impact of centralized PKI-based authentication in telecontrol communications Sotto Tipo RAPPORTO\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.rse-web.it\/#website\",\"url\":\"https:\/\/www.rse-web.it\/\",\"name\":\"RSE\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.rse-web.it\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.rse-web.it\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.rse-web.it\/#organization\",\"name\":\"RSE\",\"url\":\"https:\/\/www.rse-web.it\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.rse-web.it\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.rse-web.it\/wp-content\/uploads\/2024\/01\/cropped-logo_rse_2022.png\",\"contentUrl\":\"https:\/\/www.rse-web.it\/wp-content\/uploads\/2024\/01\/cropped-logo_rse_2022.png\",\"width\":734,\"height\":164,\"caption\":\"RSE\"},\"image\":{\"@id\":\"https:\/\/www.rse-web.it\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Design of an architecture for measuring the impact of centralized PKI-based authentication in telecontrol communications Sotto Tipo RAPPORTO - RSE","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/","og_locale":"en_US","og_type":"article","og_title":"Design of an architecture for measuring the impact of centralized PKI-based authentication in telecontrol communications Sotto Tipo RAPPORTO - RSE","og_description":"The IEC 62351 suite of standards specifies solutions that can be applied to systems and communications of the electro-energetic system to counter or mitigate cybersecurity threats. The goal of the three-year work is to develop tools for evaluating the impact of the most recent evolution of industrial standards, in particular IEC 62351-3 Ed. 2.0, to the performance of telecontrol protocols communications. In the reference period feasibility and tool evaluation has been conducted. Device synchronization solutions, an essential prerequisite for calculating KPIs, have been implemented and tested, and laboratory scenarios have been set up for the future testing the developed solutions.","og_url":"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/","og_site_name":"RSE","article_modified_time":"2025-06-30T07:14:00+00:00","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/","url":"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/","name":"Design of an architecture for measuring the impact of centralized PKI-based authentication in telecontrol communications Sotto Tipo RAPPORTO - RSE","isPartOf":{"@id":"https:\/\/www.rse-web.it\/#website"},"datePublished":"2025-06-30T07:12:12+00:00","dateModified":"2025-06-30T07:14:00+00:00","breadcrumb":{"@id":"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.rse-web.it\/en\/reports\/design-of-an-architecture-for-measuring-the-impact-of-centralized-pki-based-authentication-in-telecontrol-communications-sotto-tipo-rapporto\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.rse-web.it\/en\/"},{"@type":"ListItem","position":2,"name":"Design of an architecture for measuring the impact of centralized PKI-based authentication in telecontrol communications Sotto Tipo RAPPORTO"}]},{"@type":"WebSite","@id":"https:\/\/www.rse-web.it\/#website","url":"https:\/\/www.rse-web.it\/","name":"RSE","description":"","publisher":{"@id":"https:\/\/www.rse-web.it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rse-web.it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.rse-web.it\/#organization","name":"RSE","url":"https:\/\/www.rse-web.it\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rse-web.it\/#\/schema\/logo\/image\/","url":"https:\/\/www.rse-web.it\/wp-content\/uploads\/2024\/01\/cropped-logo_rse_2022.png","contentUrl":"https:\/\/www.rse-web.it\/wp-content\/uploads\/2024\/01\/cropped-logo_rse_2022.png","width":734,"height":164,"caption":"RSE"},"image":{"@id":"https:\/\/www.rse-web.it\/#\/schema\/logo\/image\/"}}]}},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.rse-web.it\/en\/wp-json\/wp\/v2\/rapporti\/204688","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rse-web.it\/en\/wp-json\/wp\/v2\/rapporti"}],"about":[{"href":"https:\/\/www.rse-web.it\/en\/wp-json\/wp\/v2\/types\/rapporti"}],"author":[{"embeddable":true,"href":"https:\/\/www.rse-web.it\/en\/wp-json\/wp\/v2\/users\/93"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rse-web.it\/en\/wp-json\/wp\/v2\/comments?post=204688"}],"version-history":[{"count":2,"href":"https:\/\/www.rse-web.it\/en\/wp-json\/wp\/v2\/rapporti\/204688\/revisions"}],"predecessor-version":[{"id":204691,"href":"https:\/\/www.rse-web.it\/en\/wp-json\/wp\/v2\/rapporti\/204688\/revisions\/204691"}],"wp:attachment":[{"href":"https:\/\/www.rse-web.it\/en\/wp-json\/wp\/v2\/media?parent=204688"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rse-web.it\/en\/wp-json\/wp\/v2\/tags?post=204688"},{"taxonomy":"targets","embeddable":true,"href":"https:\/\/www.rse-web.it\/en\/wp-json\/wp\/v2\/targets?post=204688"},{"taxonomy":"rapporti_tipologie","embeddable":true,"href":"https:\/\/www.rse-web.it\/en\/wp-json\/wp\/v2\/rapporti_tipologie?post=204688"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}