Garibaldi: IEC 61850 Security Management Tool

Garibaldi Key Support Functions Include:

• IEC 61850 Key Management
• Multi-domain routing
• PKI Management/Certificate Authority(s)
• User Identification
• Logging

Garibaldi Security Key Support Functions

Supports deployments that are:

• Centralized
• Decentralized (Mesh)

Garibaldi provides the perfect mix between resilience and standalone security requirements.

Garibaldi Supports Centralized and De-centralized (Mesh) Deployments

Garibaldi provides security functionality to IEC 61850 as shown in the adjacent table.

IEC 61850 key and policy distribution for GOOSE, R-GOOSE, SV and R-SV via:

• Distribution and management
• Individual keys generated per DataStream (increases security)
• Distribution and management per IEC 62351-9

Security Functions	Messages	Policy
Authentication of peers communicating with each other	GOOSE/SV	Garibaldi
Prevention of message tampering	GOOSE/SV	Garibaldi
Confidentiality (e.g., Encryption)	GOOSE/SV	Garibaldi
System membership	GOOSE/SV	Garibaldi
Determining rights of usage	SCL	Garibaldi
Revocation of membership or rights		Garibaldi

Membership

• Determined by SCL
• Manual entry
• Digital Certifications

Policy Distribution

• Delivery typically 24 hours
• PULL
• PUSH
• Multicast PUSH
• Key Delivery Assurance (KDA)
• Delivers:
• Group Keys
• Encryption algorithm
• Authentication/MAC Algorithm

Garibaldi Member Validation and Policy Delivery