Projects - DNP Secure Authentication

EnerNex is the editor and primary author of
a specification to provide cyber security to
the most popular utility communications
protocol in North America, the Distributed
Network Protocol (DNP3). This addition to DNP3 provides an open, standardized method for a master station, remote terminal unit, sensor or intelligent electronic device (IED) to verify that any given message was transmitted by an authorized user, and that the message was not tampered with in transit. This specification is an important step forward in securing critical infrastructure in North America, Australia, the UK and elsewhere in the world.

EnerNex has been working with the DNP Users Group Technical Committee and the International Electrotechnical Commission (IEC) to develop this specification since 2005. Version 1.0 of the specification was released in March of 2007. Based on comments from implementers, version 2.0 was released in August 2008 and source code is already available from suppliers. The specification is now in a testing phase sponsored by the Electrical Power Research Institute (EPRI), which will include:

Analysis of the specification by cryptographic experts at U.S. National Laboratories
Security evaluation of the protocol running on desktop computers
Update of the protocol to include a method for online distribution of new keys
Mapping of the mechanism to the IEC 60870-5-101 and -104 protocols popular in Europe and elsewhere in the world
Development of standard RFP language for specifying this feature of DNP3

In 2009, it is intended that this EPRI program will be expanded to include a full pilot test hosted at the U.S. National SCADA Testbed using commercially available DNP3 devices. For further information on participating in this program, click here or refer to the same notice posted on

The DNP Secure Authentication mechanism is based on approved protocols, methods and algorithms from the International Standards Organization (ISO), U.S. National Institute for Standards and Technology (NIST) and the IEC. EnerNex has spearheaded its development in parallel with, and as a compliant implementation of, the IEC 62351-5 technical specification for utility data communications security in telecontrol networks. DNP Secure Authentication has also been adopted by the Water Industry Telemetry Standards (WITS) group in the UK.

The DNP specification is available to DNP Users Group members on the DNP Users Group web site, www.dnp.org.

A PDF is attached to provide more information on the EPRI sponsored project.

DNP Project Summary