EN 13757-7-2018 en Communication systems for meters - Part 7 Transport and security services.pdf

1、BSI Standards PublicationWB11885_BSI_StandardCovs_2013_AW.indd 1 15/05/2013 15:06Communication systems for metersPart 7: Transport and security servicesBS EN 137577:2018EUROPEAN STANDARD NORME EUROPENNE EUROPISCHE NORM EN 13757-7 April 2018 ICS 33.200; 35.100.10; 35.100.20 Supersedes EN 13757-3:2013

2、English Version Communication systems for meters - Part 7: Transport and security services Systmes de communication pour compteurs - Partie 7 : Services de transport et de scurit Kommunikationssysteme fr Zhler - Teil 7: Transport- und Sicherheitsdienste This European Standard was approved by CEN on

3、8 February 2018. CEN members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may

4、 be obtained on application to the CEN-CENELEC Management Centre or to any CEN member. This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibility of a CEN member into its own language and notified t

5、o the CEN-CENELEC Management Centre has the same status as the official versions. CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland,

6、 Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United Kingdom. EUROPEAN COMMITTEE FOR STANDARDIZATION COMIT EUROPEN DE NORMALISATION EUROPISCHES KOMITEE FR NORMUNG CEN-CENELEC M

7、anagement Centre: Rue de la Science 23, B-1040 Brussels 2018 CEN All rights of exploitation in any form and by any means reserved worldwide for CEN national Members. Ref. No. EN 13757-7:2018 ENational forewordThis British Standard is the UK implementation of EN 137577:2018. Together with PD CEN/TR 1

8、7167:2018 and BS EN 137573:2018, it supersedes BS EN 137573:2013, which is withdrawn.The UK participation in its preparation was entrusted to Technical Committee PEL/894, Remote Meter Reading.A list of organizations represented on this committee can be obtained on request to its secretary.This publi

9、cation does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. The British Standards Institution 2018 Published by BSI Standards Limited 2018ISBN 978 0 580 93564 0ICS 33.200; 35.100.10; 35.100.20Compliance with a British Standard can

10、not confer immunity from legal obligations. This British Standard was published under the authority of the Standards Policy and Strategy Committee on 31 May 2018.Amendments/corrigenda issued since publicationDate Text affectedBRITISH STANDARDBS EN 137577:2018EUROPEAN STANDARD NORME EUROPENNE EUROPIS

11、CHE NORM EN 13757-7 April 2018 ICS 33.200; 35.100.10; 35.100.20 Supersedes EN 13757-3:2013English Version Communication systems for meters - Part 7: Transport and security services Systmes de communication pour compteurs - Partie 7 : Services de transport et de scurit Kommunikationssysteme fr Zhler

12、 Teil 7: Transport- und Sicherheitsdienste This European Standard was approved by CEN on 8 February 2018. CEN members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alterati

13、on. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CEN member. This European Standard exists in three official versions (English, French, German). A version in any other language made by

14、 translation under the responsibility of a CEN member into its own language and notified to the CEN-CENELEC Management Centre has the same status as the official versions. CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,

15、Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United Kingdom. EUROPEAN COMMITTEE FOR S

16、TANDARDIZATION COMIT EUROPEN DE NORMALISATION EUROPISCHES KOMITEE FR NORMUNG CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels 2018 CEN All rights of exploitation in any form and by any means reserved worldwide for CEN national Members. Ref. No. EN 13757-7:2018 EBS EN 137577:2018E

17、N 13757-7:2018 (E) 2 Contents Page European foreword . 5 Introduction 7 1 Scope 9 2 Normative references 9 3 Terms and definitions 10 4 Abbreviations and symbols 12 4.1 Abbreviations 12 4.2 Symbols 14 5 Layer model 14 5.1 M-Bus Layers 14 5.2 The CI-field principle 15 6 Authentication and Fragmentati

18、on Sublayer (AFL) 19 6.1 Introduction . 19 6.2 Overview of the AFL-Structure 20 6.3 Components of the AFL. 21 6.3.1 AFL Length Field (AFL.AFLL) 21 6.3.2 AFL Fragmentation Control Field (AFL.FCL) . 21 6.3.3 AFL Message Control Field (AFL.MCL) 22 6.3.4 AFL Key Information-Field (AFL.KI) 23 6.3.5 AFL M

19、essage counter field (AFL.MCR) 23 6.3.6 AFL MAC-field (AFL.MAC) 24 6.3.7 AFL Message Length Field (AFL.ML) 24 7 Transport Layer (TPL) . 24 7.1 Introduction . 24 7.2 Structure of none TPL header 25 7.3 Structure of short TPL header . 25 7.4 Structure of long TPL header . 25 7.5 CI-field dependent ele

20、ments 25 7.5.1 Identification number 25 7.5.2 Manufacturer identification . 26 7.5.3 Version identification . 26 7.5.4 Device type identification . 26 7.5.5 Access number 28 7.5.6 Status byte in meter messages 30 7.5.7 Status byte in partner messages . 31 7.5.8 Configuration field . 32 7.6 Configura

21、tion field dependent structure. 33 7.6.1 General . 33 7.6.2 Configuration field extension 34 7.6.3 Optional TPL-header fields . 34 7.6.4 Optional TPL Trailer fields . 34 7.6.5 Partial encryption 34 BS EN 137577:2018EN 13757-7:2018 (E) 3 7.7 Security mode specific TPL-fields . 34 7.7.1 Shared subfiel

22、ds of configuration field and configuration field extension . 34 7.7.2 Configuration field of Security mode 0 . 37 7.7.3 Configuration field of Security modes 2 and 3 . 38 7.7.4 Configuration field of Security mode 5 . 39 7.7.5 Configuration field of Security mode 7 . 40 7.7.6 Configuration field of

23、 Security mode 8 . 41 7.7.7 Configuration field of Security mode 9 . 44 7.7.8 Configuration field of Security mode 10 . 46 8 Management of lower layers 48 8.1 General . 48 8.2 Switching baud rate for M-Bus Link Layer according to EN 13757-2 48 8.3 Address structure if used together with the wireless

24、 Data Link Layer according to EN 13757-4 48 8.4 Selection and secondary addressing . 48 8.5 Generalized selection procedure 49 8.6 Searching for installed slaves . 50 8.6.1 Primary addresses . 50 8.6.2 Secondary addresses . 50 8.6.3 Wildcard searching procedure 50 9 Security Services . 51 9.1 Genera

25、l . 51 9.2 Message counter 52 9.2.1 Overview 52 9.2.2 Message counter CMtransmitted by the meter 52 9.2.3 Message counter CCPtransmitted by the communication partner 53 9.2.4 Message counter CCPreceived by the meter . 53 9.2.5 Message counter CMand C”Mreceived by the communication partner 53 9.3 Aut

26、hentication methods in the AFL 54 9.3.1 Overview 54 9.3.2 Authentication method AES-CMAC-128 54 9.3.3 Authentication method AES-GMAC-128 . 54 9.4 Encryption and Authentication methods in the TPL 55 9.4.1 Overview about TPL-Security mechanisms. 55 9.4.2 Manufacturer specific Security mechanism (Secur

27、ity mode 1) . 57 9.4.3 Security mechanism DES-CBC (Security mode 2 and 3) 57 9.4.4 Security mechanism AES-CBC-128 (Security mode 5) . 58 9.4.5 Security mechanism AES-CBC-128 (Security mode 7) . 59 9.4.6 Security mechanism AES-CTR-128 (Security mode 8) 59 9.4.7 Security mechanism AES-GCM-128 (Securit

28、y mode 9) . 61 9.4.8 Security mechanism AES-CCM-128 (Security mode 10) . 64 9.5 Reaction to security failure . 66 9.6 Key derivation 67 9.6.1 General . 67 9.6.2 Key derivation function A 67 9.7 Key Exchange 68 Annex A (normative) Security Information Transfer Protocol . 69 A.1 Introduction 69 A.2 SI

29、TP Services 69 A.2.1 Transfer security information . 69 BS EN 137577:2018EN 13757-7:2018 (E) 4 A.2.2 Activate security information 70 A.2.3 Deactivate security information . 70 A.2.4 Destroy security information 70 A.2.5 Combined activation/deactivation of security information . 70 A.2.6 Generate se

30、curity information 70 A.2.7 Get security information . 70 A.2.8 Get list of all key information 70 A.2.9 Get list of active key information . 70 A.2.10 Transfer end to end secured application data . 70 A.3 CI-Fields . 71 A.4 SITP structure 71 A.5 Block Control Field 71 A.6 Block parameters . 72 A.7

31、Overview about Data Structures / Mechanisms 73 A.8 Data structures for Security Information 74 A.8.1 General . 74 A.8.2 Data Structure 00h. 75 A.8.3 Data Structure 01h. 75 A.8.4 Data Structure 02h. 75 A.8.5 Data Structure 03h. 76 A.8.6 Data Structure 20h. 77 A.8.7 Data Structure 21h. 77 A.8.8 Data S

32、tructure 22h. 78 A.9 Data structures for secured application data 79 A.9.1 General . 79 A.9.2 Data Structure 30h AES Key-Wrap 80 A.9.3 Data Structure 31h HMAC-SHA256 81 A.9.4 Data Structure 32hand 33h CMAC . 82 A.9.5 Data Structure 34h AES-GCM . 82 A.9.6 Data Structure 35h AES-GMAC 84 A.9.7 Data Str

33、ucture 36hand 37h AES-CCM . 85 Annex B (informative) Message counter example. 87 Bibliography . 91 BS EN 137577:2018EN 13757-7:2018 (E) 5 European foreword This document (EN 13757-7:2018) has been prepared by Technical Committee CEN/TC 294 “Communication systems for meters”, the secretariat of which

34、 is held by DIN. This European Standard shall be given the status of a national standard, either by publication of an identical text or by endorsement, at the latest by October 2018, and conflicting national standards shall be withdrawn at the latest by October 2018. Attention is drawn to the possib

35、ility that some of the elements of this document may be the subject of patent rights. CEN shall not be held responsible for identifying any or all such patent rights. This document together with EN 13757-3:2018 and CEN/TR 17167:2018 supersedes EN 13757-3:2013. This document has been prepared under a

36、 mandate given to CEN by the European Commission and the European Free Trade Association. The following significant technical changes have been incorporated in the new edition of this European Standard: new security modes (formerly “encryption mode”) 7, 8, 9 and 10 supporting encrypted and authentic

37、ated messages have been added; support of Key Derivation Function for the generation of ephemeral keys; new Authentication and Fragmentation Layer has been introduced. EN 13757 is currently composed with the following parts: Communication systems for meters Part 1: Data exchange; Communication syste

38、ms for meters Part 2: Wired M-Bus communication; Communication systems for meters Part 3: Application protocols; Communication systems for meters and remote reading of meters Part 4: Wireless meter readout (Radio meter reading for operation in SRD bands); Communication systems for meters Part 5: Wir

39、eless M-Bus relaying; Communication systems for meters Part 6: Local Bus; Communication systems for meters Part 7: Transport and security services; CEN/TR 17167:2018, Communication systems for meters Accompanying TR to EN 13757-2, 3 and 7, Examples and supplementary information. This document falls

40、under the Mandate EU M/441 “Standardisation mandate to CEN, CENELEC and ETSI in the field of measuring instruments for the development of an open architecture for utility meters involving communication protocols enabling interoperability” by providing the relevant definitions and BS EN 137577:2018EN

41、 13757-7:2018 (E) 6 methods for meter data transmission on application layer level. The M/441 Mandate is driving significant development of standards in smart metering. This document is in accordance with CEN/CLC/ETSI/TR 50572 4. According to the CEN-CENELEC Internal Regulations, the national standa

42、rds organisations of the following countries are bound to implement this European Standard: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Lux

43、embourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom. BS EN 137577:2018EN 13757-7:2018 (E) 7 Introduction This European Standard belongs to the EN 13757 series, which covers communication systems for met

44、ers. EN 13757-1 contains generic descriptions and a communication protocol. EN 13757-2 contains a physical and a Link Layer for twisted pair based Meter-Bus (M-Bus). EN 13757-3 contains detailed description of the application protocols especially the M-Bus Protocol. EN 13757-4 describes wireless com

45、munication (often called wireless M-Bus or wM-Bus). EN 13757-5 describes the wireless network used for repeating, relaying and routing for the different modes of EN 13757-4. EN 13757-6 describes a twisted pair local bus for short distance (Lo-Bus). EN 13757-7 describes transport mechanism and securi

46、ty methods for data. The Technical Report CEN/TR 17167 contains informative annexes from EN 13757-2, EN 13757-3 and EN 13757-7. These upper M-Bus protocol layers can be used with various Physical Layers and with Data Link Layers and Network Layers, which support the transmission of variable length b

47、inary transparent messages. Frequently, the Physical and Link Layers of EN 13757-2 (twisted pair) and EN 13757-4 (wireless) as well as EN 13757-5 (wireless with routing function) or the alternatives described in EN 13757-1 are used. These upper M-Bus protocol layers have been optimized for minimum b

48、attery consumption of meters, especially for the case of wireless communication, to ensure long battery lifetimes of the meters. Secondly, it is optimized for minimum message length to minimize the wireless channel occupancy and hence the collision rate. Thirdly, it is optimized for minimum requirem

49、ents towards the meter processor regarding requirements of RAM size, code length and computational power. An overview of communication systems for meters is given in EN 13757-1, which also contains further definitions. This standard concentrates on the meter communication. The meter communicates with one (or occasionally several) fixed or mobile communication partners which again might be part of a private or public network. These further communication systems might use the same or other application layer