IEC 62351 - Power Systems Communication Security 6:5: Part 6, clause 5: correlation of IEC 61850 and IEC 62351 parts (MMS security profiles, VLAN profiles, IEC 61850-8-2, OriginatorID binding)

The part secures profiles within and between electronic security perimeters: for IEC 61850-8-1 client-server communication it defines the non-secure, TLS-only (out of scope), TLS with ACSE authentication (mandatory) and end-to-end (optional, intended to become mandatory) MMS security profiles for control centre to substation and within the substation; VLAN-based profiles and IEC 61850-8-2 have their security correlated; and for client-server services the OriginatorID is bound to the authenticated peer through the certIssuer and originatorID data attributes (issuer name concatenated with backslash, truncated at 255, serial number copied as the identifier, NULL where not authenticated).