IEC 60870-5-104, Slave

see also protocol(s)

The IEC 60870-5-104, Slave implements the controlled station functionality specified in the IEC 60870-5-104 protocol. The implementation corresponds to the IEC 60870-5-104 second edition 2006-6. It has been exhaustively tested and certified to comply with the standard by KEMA. See below for the testing certificate and and report.

The IEC 60870-5-104, Slave protocol stack offers almost the full functional range of the IEC 60870-5-104 protocol. The supported features:

  • Simultaneous and independent communication with several control stations through the same port
  • Communication with redundant control systems and interruption-free switchover between redundant systems
  • Supports redundant networks
  • Bi-directional data transmission (B marking in the interoperability list), this means that indications, measured values, commands etc. can be transmitted in both directions - from control station (master) to slave and vice versa
  • Supports "select-before-operate" or "direct-execute" command execution modes
  • Largely supports RTUs that do not fully comply with the second edition of the IEC 60870-5-104 standard

The following security enhancements according to the protocol specific standard IEEE 1815-2012 are implemented into the protocol stack IEC 60870-5-104, Slave:

  • IEC 62351-3: encryption of ASDU telegrams using TLS protocol with X.509 certificates to protect the transport layer. The TLS versions 1.0, 1.1 and 1.2 are supported. Version 3 of the X.509 certificates must be available. These certificates may contain RSA, DSA and ECC keys. The configuration enables renegotiation of the cryptographic parameters on a condition (time / data / number of telegrams), data size limitation of the remote station certificate, minimum size of asymmetric keys, several certification authorities to check the remote station certificate and an extendable list of encryption procedures supported.

The standard IEC 60870-5-7 was derived from the norm IEC 62351 that applies to a range of protocols and describes messages and data formats for secure authentication especially for the protocols IEC 60870-5-101, IEC 60870-5-104 and IEC 61850.

Additional Information

KEMA Attestation of Conformity
KEMA Test Report
Interoperability

This protocol stack can be used with following products

  • ipConvLite
    ipConvLite

    Universal protocol converter for small and distributed applications

  • ipConv
    ipConv

    Universal protocol converter for highest degree of flexibility

  • ipConvOPC
    ipConvOPC

    Windows software package for universal conversion between diverse standard protocols

  • ipConvLite/MEC2PBM
    ipConvLite/MEC2PBM

    Universal protocol converter with integrated PROFIBUS-DP, master interface

  • ipConvLite/MEC2PBS
    ipConvLite/MEC2PBS

    Universal protocol converter with integrated PROFIBUS-DP, slave interface

  • ipConvLite/MEC2PNS
    ipConvLite/MEC2PNS

    Universal protocol converter with integrated PROFINET-IO, slave interface

  • ip4Cloud/SEC3PB
    ip4Cloud/SEC3PB

    Capture PROFIBUS data by eavesdropping and transmit it to Cloud/IT or SCADA services

  • ip4Cloud/SEC3IO
    ip4Cloud/SEC3IO

    Switch and monitor digital I/O states to transmit them to IT/Cloud/SCADA services

This protocol stack was used in following projects

  • ELIA
    ELIA, Belgium

    Products: ipConv
    Protocol Stacks: Modbus TCP/IP, Master IEC 60870-5-104, Slave Telegyr 065, Master Telegyr 102, Master Telegyr 809, Master Tracec 32, 62, 92, 92P, 122, 130 & 142 Master

  • Storebælt
    Storebælt, Denmark

    Products: ipConv
    Protocol Stacks: IEC 60870-5-104, Master IEC 60870-5-104, Slave Simatic TDC, Master Modbus TCP/IP, Master

  • SEC SVC
    SEC SVC, Saudi Arabia

    Products: ipConv
    Protocol Stacks: IEC 60870-5-101, Slave IEC 60870-5-104, Slave IEC 61850, Client Simatic TDC, Master

  • BLS Lötschbergtunnel II
    BLS Lötschbergtunnel II, Switzerland

    Products: ipConv ipRoute
    Protocol Stacks: IEC 60870-5-104, Master IEC 60870-5-104, Slave SNMP, Client

  • BLS AlpTransit - Lötschbergtunnel
    BLS AlpTransit - Lötschbergtunnel, Switzerland

    Products: ipConv ipRoute
    Protocol Stacks: OPC DA 3.0, Server IEC 60870-5-104, Slave IEC 60870-5-101, Master IEC 60870-5-104, Master SNMP, Client

  • Mainova Communication Hub
    Mainova Communication Hub, Germany

    Products: ipConv
    Protocol Stacks: OPC DAXML 1.01, Server IEC 60870-5-104, Slave IEC 60870-5-101, Master Modbus, Master SEAB 1F, Master