IEC 62351 - Power Systems Communication Security 8:9: Part 8, clause 9: verification of access tokens (multiple tokens, subject authentication, availability, validity period, integrity, issuer, role ID, revision, area of responsibility, role definition, revocation state, operation, sequence number, revocation methods)

The target system verifies a presented access token before granting the role: handles multiple tokens, authenticates the subject, checks availability, validity period and integrity, trusts the issuer, reads the role identifier, revision, area of responsibility and role definition, checks revocation state through the supported methods, and checks the operation and sequence number, with security events on failure.