MEETING NERC 1300 SECURITY OBJECTIVES FOR REMOTE IED ACCESS USING TWO-FACTOR AUTHENTICATION

摘要

Remote IED maintenance has proven a real value to utilities, and has saved countless hours in travel time to substations. Modern networking technology has allowed this function to be implemented inexpensively, in many cases sharing a communications channel with other functions. With this ease of access comes increasing concerns over security. Given the rather crude login control mechanisms in most IEDs (single user name & password), IT security groups have become increasingly resistant to providing this access capability. Furthermore, new requirements brought on by NERC 1300 will require utilities to bolster the security for remote access.