hi -
this is the reply I just sent to Frances Cleveland regarding the
work in IEC TC57 WG15.
regards,
Bob
From: Griffin, Robert
Sent: Thursday, May 06, 2010 11:41 AM
To: 'Frances Cleveland'; annabelle.lee@nist.gov
Subject: RE: CSCTG - IEC Standard for Key Management
hi Frances -
it's great to hear that key management is being taken up by the
committee! I'll let the rest of the KMIP committee know that this is the case.
If someone is available to join you in Paris (in person or by phone)
to speak about KMIP, would that be useful at this time?
regards,
Bob
From: Frances Cleveland
[mailto:fcleve@xanthus-consulting.com]
Sent: Wednesday, May 05, 2010 3:59 PM
To: Griffin, Robert; annabelle.lee@nist.gov
Subject: RE: CSCTG - IEC Standard for Key Management
Bob -
IEC TC57 WG15 will be holding a meeting next Mon-Tues (May 10-11) in Paris,
with the Key Management at the top of the agenda. We have some ideas and some
very eager people working on this. After next week we will know more about how
we will approach this. I will bring everyone on the liaison list up to speed on
the next steps.
Frances
At 12:42 PM 5/5/2010, robert.griffin@rsa.com wrote:
hi Frances, Annabelle -
have you been able to move forward with this key management work in IEC?
regards,
Bob Griffin
co-chair, OASIS KMIP
From: Frances Cleveland [mailto:fcleve@xanthus-consulting.com]
Sent: Tuesday, October 13, 2009 3:33 PM
To: Griffin, Robert
Subject: RE: CSCTG - IEC Standard for Key Management
Bob -
Great! I've added you to the list. I am sure we will call on your expertise
whatever level of participation you can provide.
Frances
At 12:27 PM 10/13/09, robert.griffin@rsa.com wrote:
Hi Frances,
I received the email below from Annabelle L. at NIST, regarding the
creation of a new key management initiative in IEC TC57 WG15. I am very
interested in this work, from my perspective as a technical director in
key management here at RSA, as the co-chair of the Key Management
Interoperability Protocol technical committee in OASIS and as as
participant as in the P1619.3 key management effort in IEEE. I have also
been involved in technical discussions with several utilities and device
manufacturers regarding SmartGrid security.
I will need to check with our standards office here at RSA to confirm
the level of participation I can provide, but wanted to let you know of
my interest. I will also let other members of the efforts in OASIS and
IEEE know of this effort.
Regards,
Bob Griffin
Technical Director
RSA, the Security Division of EMC
________________________________
From: csctg@nist.gov <csctg@nist.gov>
To: Multiple recipients of list <csctg@nist.gov>
Sent: Tue Oct 13 11:25:48 2009
Subject: CSCTG - IEC Standard for Key Management
To all -
Frances is working on TC57 WG15. Please see her request
below. I know
that there are several CSCTG members who are very knowledgeable in
crypto and key management. This is a critical area to get correct.
If
you are interested, please contact Frances directly. Her email is:
fcleve@xanthus-consulting.com. I have included Frances' contact info
below - if you have any questions.
THANKS...
Annabelle
Annabelle Lee
Senior Cyber Security Strategist
annabelle.lee@nist.gov
phone: 301.975.8897
bb: 240.364.4931
Computer Security Division
National Institute of Standards and Technology
100 Bureau Dr., Stop 8930
Gaithersburg, MD 20899-8930
------------------------------------------------------------------------
---------------------------------------------------
CSCTG and any Key Management Experts -
Last week in the IEC TC57 WG15 (International Electrotechnical
Commission, Technical Committee 57, Working Group 15 on Cyber Security
for Power Systems) meeting, we agreed to start the development of a key
management standard aimed particularly at the millions of field devices
and meters that do not have direct access to any Certificate Authority,
and may be compute-constrained and/or media constrained. What we would
love to have is some experts in the Key Management arena to help in this
effort, ranging from sage advice to rolled up sleeves while tackling the
precise wording.
Our tasks are:
* Develop a scope and purpose statement to
turn into the IEC as
the formal start of the effort
* Develop an annotated outline of the
proposed standard document
* Complete a draft of the document as a
Committee Draft (CD) that
will be circulated to the IEC national committees from all countries for
review and comment
* Review comments from the national
committees, and respond
appropriately
* Issue another draft as a Committee Draft
for Vote (CDV) for
circulation, comment, and vote If it passes the vote, respond to
comments and update the document, first to Draft International Standard,
and then to International Standard (IS)
All told, this is expected to be about a 2 year process, but the heavy
lifting will be in the first months.
If you are interested in becoming involved, let Frances know and she
will add you to the list. Let her know as well if you can help with the
outline and/or what areas you could best support. According to Frances,
you don't need to become a formal member of WG15 to help in the effort,
but they always welcome new members.
Although most of the real work will be done via email, Frances expect
that a few teleconferences will be useful. They will also have a
semi-formal meeting as part of the IEEE Joint Technical Committee
meeting, sometime during the week of January 11-15 in Orlando (see
http://www.pestechnical.org/ <http://www.pestechnical.org/> ), and
a
formal meeting of WG15 in the April/May timeframe (TBD) in Europe.
Frances
******************************************
* Frances M. Cleveland
* Xanthus Consulting International
* 369 Fairview Ave
* Boulder Creek, CA 95006
* Tel: (831) 338-3175
* Cell: (831) 229-1043
* fcleve@xanthus-consulting.com
* fcleve@ix.netcom.com
* www.xanthus-consulting.com
<http://www.xanthus-consulting.com/>
******************************************
******************************************
* Frances M. Cleveland
* Xanthus Consulting International
* 369 Fairview Ave
* Boulder Creek, CA 95006
* Tel: (831) 338-3175
* Cell: (831) 229-1043
* fcleve@xanthus-consulting.com
* fcleve@ix.netcom.com
* www.xanthus-consulting.com
******************************************
******************************************
* Frances M. Cleveland
* Xanthus Consulting
International
* 369 Fairview Ave
* Boulder Creek, CA 95006
* Tel: (831) 338-3175
* Cell: (831) 229-1043
* fcleve@xanthus-consulting.com
* www.xanthus-consulting.com
******************************************