1

International Conference on ASEAN-JAPAN Cybersecurity Community

October 2023
Project Leader, Systems Committee on Smart Energy, IEC
Keio University, Japan

Masaki Umejima, Ph.D
Director, National Advanced IPv6 Center (NAv6)
Universiti Sains Malaysia

Selvakumar Manickam, Ph.D2

IEC System Committee Smart Energy• The International Electrotechnical Commission（IEC） is a global non-profit organization thatprovides 10,000+ international standards,
gathering 20,000 experts in more than 170
countries.

 System Committee Smart Energy（SyC SE） in IEC
provides systems-level standardization for smart
energy and smart grids.

3

3

Cyber Civilization Research Center（CCRC）, Keio University• CCRC is addressing the security design ofcyber and physical space with the leadership by
the Internet giants in U.S. and Japan.
• Trust design of Cyber-Physical system like
Energy Resource Aggregation Business system
is our research interest. So, CCRC has done its
related research, partnering with the institutions
in U.S., EU, and ASEAN,
Dr. David Farber:Left
the Internet Hall of Fame
Fellow, the American Association for the Advancement of Science〔AAAS〕
Dr. Jun Murai:Right
the Internet Hall of Fame
Special Advisor to the Cabinet
Copyright © 2008 Keio University ｜4

SOI Asia platform•

SOI Asia is the university alliance, connecting leading Asian-wide universities by the highspeed network configuring satellite communication and the internet.
• Dr. Jun Murai, the father of the internet, has addressed SOI Asia in 1996 that is one year
after when the internet was commercialized.

13 Mbps UDL

Policy Routing Mechanism

Sharing Real-time Classes &Course content mirroring by
IPv6 Multicast

Gateway Site @ Keio Univ.
USM
Malaysia

Internet

High quality Digital Video
Communication DVTS siteOR
Portable IPv6 tunneling site

128kbps～1.5Mbps

Bangladesh University ofEngineering and Technology
Bangladesh

Using existing connectivity
as a return path (UDLR)
Institute of Technology,
Bandung, Indonesia

SOI Asia Student Sites @Asian Partner Universities

Lecturer Sites@ various places

5

SGAM Plane by ”SMART GRID STANDARDIZATION ROADMAP”
by SRD63097 in IEC SyC

ERAB enables the new relation between People and Energy
 Energy Resource Aggregation Business (ERAB) is a new businessframework controlling distributed energy resources at a demand side likeEV, a station battery, a fuel cell, and an air conditioner.
Hydropower
Wind farm

Image of ERAB

Power

Electricity
SystemUtility-scale
Aggregator solar PV

ThermalPower
Factories

Micro
CHP
Shops

EV and EVPS

Stationary
battery system

Heat pump

Aggregators provide grid
operators with energy
services The system is torestrain or elevate thedemand according to
the request byretailers and a grid
distributor and toprovide the electricity
traded in a supply anda demand adjustment
market.
66Companies that have entered or shown interests in ERAB in Japan

77

Sample of ERAB system: remotely control DERs at a customer premise DER is a small-scale power generation source, located close to where
electricity is used (e.g., homes or businesses), have the potential toprovide an alternative to the traditional electric power grid.
Area EPS
Retailer

Distributer
Grid Network

Web-socket andHTMLOpen ADR Protocol
ISO/IEC62746-10-1

Resource
Aggregator
SystemAggregator

xEMS

ERAB
Controller

IoT-Gateway [EMS Controller]

ECHONET Lite
ProtocolR5（deviceprotocol）
ISO/IEC14543-4-3
e.g. IEC14543-4-3[ECHONET
Lite], Matter

ERAB
SystemDER &Smart Voltampere meter

Smart
Volt-Ampere
Meter

PV

Battery

Heat
pomp

Fuel
Sell

Air
Conditio
ner

Light

EVPS/
EVSE

Light & Air conditioningPV

ECHONET Lite Devices

8Activity towards SRD 63443: in SyC-SE
Title : Distributed Energy Resource Aggregation Business System: Architecture and Service scenario
The decentralized generation of electrical power as well as spread of energy storage and controllable
loads becomes more and more important. The management of these Distributed Energy Resources[DERs] and Controllable Loads [CLs] at the customer premise near to the final customer offers
economic and ecological benefits. In addition, information of Advanced Metering Infrastructure [AMI]
provides a customer with the method measuring the value of aggregating these resources.
This activity aims to describe a distributed Energy Resource Aggregation Business （ERAB） in spotlighting abusiness & function layer on SGAM in SRD63097. Currently, we defined ERAB as:
Energy Resource Aggregation Business [ ERAB] restrain or elevate power generations of DERs anddemands of CLs in accordance to the performance measurement by the information of AMI and the requests
by TSO/DSO, Electricity Supplier, and Energy Exchange.
MarketLevel5: Market Operations, e.g. Balancing Market

Enterprise

Level4: Utility Operational Grid Management,
e.g. TSO/DSO, Energy Supplier[Retailer]

Level2: Facility DER Management,
e.g. ERAB Controller, EEMS

StationOperation

Level3: Third Parties,
e.g. ERAB

ERAB case is compatible with BUCs
shown at IEC TR 63097:2017 SMART
GRID STANDARDIZATION ROADMAP

Utility Grid
Transmission/Distribution

CircuitBreaker

Electric
Vehicle Power
StationBattery
Storage
Controller

Fuel Cell
Controller

Air
Conditioner
Controller

PV
Equipment

Electric
VehicleBattery

Fuel Cell
Generator

Air
Conditioner

ECP

ECP

ECP

ECP

Distributed Energy Resources

Project Leader: JP
With experts from France, Canada, U.S. India,
Korea, Australia

Process

Meter at
PCC

PV
Controller

Field

Level1:DER systems

ECP
CustomerPremises9

Standardization giving to DER interface at a customer premise
It reduces the cost of configuring multiple DERs

10

A current condition in Japan surrounding ERAB system is that DERs speak a single language called
ECHONET Lite. Japanese Government and Industry liaison has proposed ISO/IEC14543-4-3, to be
the enabler of the demand side management, around HEMS. Internet of Things over thisinternational standard, ECHONET Lite in Japan, has provided a common language for 100s ofdevices: home appliances, power meter, EV, and PVECHONET Lite
• Specifies OSI Layer 5 - 7• Communication Address is“MAC Address” or “IP Address”.
OSI
Layer

Layer
5-7

Layer
1-4

Application
ECHONET Lite Communication
Processing Block
IP Address
MAC Address
Lower Communication Block（IEEE802.15.4 etc.）
Transmission Medium
ECHONET CONSORTIUM

ECHONET Lite devices: Approx. 138 millions in 2022

million130

11

126,308,965

120

113,139,526

110

Air Conditioner

100

OthersPower Meter

95,113,331

90
77,332,741

80
70

57,993,921

60
50
37,526,873

40
30

19,973,397

20
10

4,671,414

9,893,648

0
Y2013

Y2014

Y2015

Y2016

Y2017

Y2018

Y2019

Y2020

Y2021

11

12

Lineup of DERs with ECHONET Lite In general, 30-40 Kw electricity is necessary for running a grocery store.
– Lawson at SFC has the 12Kw solar power generation on the roof and the 5.6 Kw EV battery charger
outside, connecting with EV which carries over 50Kwh battery.

※DER=Distributed Energy Resources

5.6 kw for storage

12 kw for generation

30-40 kw for usage
such as Air ConditioningNext-gen power meter released in 2025

13

 Everyone’ｓ Mob App can access the electricity usage data: The ambitious nationwide project startingin 2025 in Japan

Smart phone
Air conditioner
In 2025, a smart
electricity meter inJapan starts to
speak a common
language over
IPv6 on WI-Fi.

Wi-Fi
AP

AI speaker&EMS
Controller

Home
Area
Network

Soler Power• The Japanese smart meter has twointerfaces; B-root connects the meterwith a user-owned device, complying
with ECHONET Lite over an IPv6
single stack. A-root connects themeter with the utility company.
• New meter speaks a common
language over IPv6 Link Local
Address on Wi-Fi and Ethernet,
covering nationwide users which isApprox. 90 millions

EV

13

ECHONET Lite communication

state of operation ?

Get a state

Controller

GET: EPC=0x80
OFF UDP, Port 3610

Air
conditioner–

GET_RES: EPC=0x80, EDT=0x31

 Basic commands: GET,SET and INF

set the state of operation to ON

Set a state

Controller

SETC: EPC=0x80, EDT=0x30
Ack

Multicast address: 224.0.23.0

Airconditioner–

GET: Get property value–

SET: Set property value–

INF: Inform property value

 Every item is defined bybinary data

SET_RES: EPC=0x80

14ECHONET Lite Data Frame
Source EL
ObjectEL Header

EHD(2)

EL Property
Code

EL Service

TID
(2)

SEOJ DEOJ ESV
(3)
(3)
(1)

OPC
(1)

Transaction
ID

Destination
EL Object

Operation
Count

EPC
(1)

EL Data

PDC
(1)

EDT
(n)

EPC PDC EDTProperty
Data Count

EOJ: EL Object

ESV: EL Service

EPC: EL Property Code

EDT: EL Property Data

0x013001: Air conditioner
0x029001: Lighting
0x05FF01: Controller
0x0EF001: Node profile

0x60: SETI
0x61: SETC
0x62: GET
0x71: SET_RES
0x72: GET_RES
0x73: INF

EPCs of Air conditioer
0x80: Operation status
0xB0: Operating mode
0xB3: Target temperature

Ex: Air conditioner
EPC=0x80
EDT=0x30: ON
EDT=0x31: OFF

EPCs of Lighting
0x80: Operation status
0xB0: Brightness
0xB6: Lighting mode
0xC0: RGB value

EPC=0xB0
EDT=0x41: Auto
EDT=0x42: Coolingrefer section 2 of thestandard

EPC=0xB3:
EDT=0x16: 22 Celsius
15Device discovery on ECHONET Lite

A controller searches ECHONET Lite devices
Destination IP=224.0.23.0, DEOJ=0x0EF01, ESV=Get, EPC=0xD6

LAN
IP: 192.168.0.10

Node profile
EOJ=0x0EF001
Controller
EOJ=0x05FF01

IP: 192.168.0.12

IP: 192.168.0.15

IP: 192.168.0.21

Node profile
EOJ=0x0EF001
EPC:0xD6
EDT: 0x01013001

Node profile
EOJ=0x0EF001
EPC:0xD6
EDT: 0x01013001

Node profile
EOJ=0x0EF001
EPC:0xD6
EDT: 0x01029001

Air conditioner
EOJ = 0x013001

Air conditioner
EOJ = 0x013001

Lighting
EOJ = 0x029001

Source IP=192.168.0.12, SEOJ=0x0EF01, ESV=Get_Res, EPC=0xD6, EDT=0x01013001
Source IP=192.168.0.15, SEOJ=0x0EF01, ESV=Get_Res, EPC=0xD6, EDT=0x01013001

EDT: 01 01 30 01
numberof EOJs

EOJ list

Source IP=192.168.0.21, SEOJ=0x0EF01, ESV=Get_Res, EPC=0xD6, EDT=0x01029001

Node profile EPC=0xD6:16instance list S

Examples of communication protocols for Distributed Energy
Resources● Matter will enable communication across smart homedevices, mobile app, and cloud services, and define a
specific set of IP-based networking technologies fordevice certification.

● CSA in charge of Matter is the standard body for interconnected devices created by the formerly Zigbee
alliance. The membership has covered with: Amazon,Apple, COMCAST, Google, Huawei, IKEA, and so on Japanese Government and Industry liaison has
proposed ISO/IEC14543-4-3, to be the enablerof the demand side management, aroundHEMS. Internet of Things over thisinternational standard, ECHONET Lite in Japan,
has provided a common language for 100s ofdevices: home appliances, power meter, EV,
and PV.
17

Proceed with risk management
 Ppoceed with risk management that considers three-layer model andsix elements in CPSF, citing ISO 31000:2018 and ISO/IEC
27001:2013.

Source: The Ministry of Economy, Trade and Industry、Japan(2019)Cyber/Physical Security Framework18

A penetration test-bed on the common network design at a customer premise19

DER and Loadspeaking ISO/IEC14543-4-3[ECHONET Lite]

controller

AP/
RouterCloud

operation
Test operation

Digital oscilloscope
Log acquisition

IP packet monitor
IP packet
communication log acquisition

20

National Advanced
IPv6 Centre
Universiti Sains Malaysia

A Brief Introduction

Copyright © 2008 Keio University

20

21

Background2005 - National Advanced
IPv6 Centre of Excellence(NAv6) in Malaysia toimplement IPv6 agenda
1992 - Network ResearchGroup (NRG)

21

2008 - National Advanced
IPv6 Centre (NAv6) as acenter of excellence under
the Senate USM.

22

R&D Areas
High Impact Publication •Cutting Edge Experiments •Local & International Grants •Local & International Collaboration •Experimental Campus Testbed •

40%

20%

Research

Consultancy• Training/certification Programs• Contract-out Services• Work with commercialization arm

Focus
Areas
MSc and PhD Supervision •MSc Cybersecurity •Short Courses on Emerging Tech •

30%

10%

Academic

Community
Engagement• Local & International Internship• Staff Exchange Program• Industrial Collaboration• Community Outreach Programs

23

Focus Areas

Digitalization of DER Ecosystem

24

Digitalization of DER Ecosystem●

Increased Visibility and Control: Digitalization offers real-time

visibility, aiding DER owners in better asset management and optimization.
● Improved Efficiency: Digital tools automate tasks like scheduling andmaintenance, enhancing operational efficiency for DER owners.
● New Revenue Opportunities: Digitalization opens avenues forgenerating revenue through grid services like frequency regulation andvoltage support using DERs.
● Reduced Costs: Digital tools optimize energy consumption and cut
waste, leading to cost reductions for DER owners.
● Enhanced Customer Experience: Digitalization allows for morecustomer interaction, offering real-time insights into energy usage andpersonalized energy management services.

25

IOT Gateway: a controller to facilitate DERs
● A DER gateway system, like an IoT gateway, collects and aggregates data from various DERs.
● The gateway bridges communication between DERs, IoT devices, sensors, other equipment and the cloud.
By systematically connecting the field and the cloud, the gateway offers local processing and storage
capabilities as well as the ability to autonomously control DERs based on data sensor input.

a Physical IoT GW (left),b Cloud-based IoT GW (right)

26

27

28

Physical On-Premise Gateway

Advantages• Low latency: Data processed locally, reducing
latency for critical applications.

• Privacy and data control: Data stays withinorganization's infrastructure, providing greater
control and compliance.

Disadvantages● Limited processing power: May not be able tohandle complex analytics.

● Maintenance overhead: Organizations

responsible for maintaining and updating hardware
and software.

• Reliability: Can continue to function without● Initial setup: More complex than cloud-based• Scalability: Can be scaled to meet specific● Scaling challenges: Can be difficult to scale as• Security: Additional layer of security as data

● Single point of failure: If gateway fails, entire IoTInternet or cloud service disruption.

needs without relying on cloud resources.

doesn't travel over public Internet.

• Cost-effectiveness: Cost-effective for large-

scale deployments as reduces data transmission
costs.

solutions.

IoT ecosystem grows.

system may be disrupted.

● Limited remote access: Access to data andcontrol may be restricted.

● Cost of ownership: Higher initialhardware and ongoing maintenance costs
than cloud-based alternatives.

Security Advantages

1. Centralized Security Management: DER gateways centralize security management, simplifying policy
implementation and enforcement.
2. Enhanced Visibility: They offer improved visibility into the DER system, enabling faster detection andresponse to security incidents.
3. Comprehensive Security Features: DER gateways include authentication, authorization, encryption, andintrusion detection, fortifying the DER system against unauthorized access and cyberattacks.

29

30

Security Issues

Biggest security risks associated with
DER gateway systems is that they
are a single point of failure.
● Attacker could use the gateway
●

–

–

●

to inject malicious code into the DER
system.
to disrupt the communication between
the DER system and the grid.

Vulnerable to a number of common
cyberattacks, such as malware
attacks, denial-of-service attacks,
and phishing attacks.

•

•

•

•

Auth & Auth Weaknesses: DER
gateways must authenticate andauthorize users/devices. Failure here
can lead to unauthorized access.
Encryption Weaknesses: Proper
encryption is vital to protect data intransit/at rest. Inadequate
implementation risks data theft.
Software Weaknesses: Softwarebased DER gateways need regular
patching. Neglect can lead to exploits
and gateway control.
Physical Security: Often remote,physical security lapses can grant
attackers access, compromising the
gateway.

Cloud-based Gateway

31● Cloud-based: Entire controller function in the cloud.
● Edge and fog integration: Edge processes data at the source, fog

distributes across edge, fog, and cloud based on criticality.

● Edge computing: Decentralized data processing at the edge,

minimizes network traffic, enables near real-time analysis.

● Fog computing: Supports latency-sensitive apps with scalable, multi-

tiered systems.

● Complex deployment: Integrating edge, fog, and cloud adds

complexity, requires careful consideration of data processing
locations.

32

33

Cloud-based Gateway

Advantages• Scalability: Easily scale to accommodate
large-scale deployments.

• Cost-efficiency: Lower upfront costs, pay forcloud resources used.

• Flexibility: Adapt to changing requirements
and updates seamlessly.

• Easy deployment: Faster than deploying
physical hardware.

• High availability: Built-in failover
mechanisms and data replication.

Disadvantages● Latency: May introduce latency for real-time
applications.

● Data privacy concerns: Storing sensitive
data in the cloud may raise privacy andcompliance issues.

● Data transmission costs: Sending large
volumes of data to the cloud can be costly.

● Connectivity dependency: Relies on

Internet connectivity, which can be a problem inremote environments.

• Advanced analytics: Take advantage of● Security risks: Data transmitted to the cloud• Advanced security: Advanced analytics and● Vendor lock-in: Organizations may become

cloud-based analytics and machine learning.

up-to-date threat intelligence can prevent future
threats.

may be at risk of security breaches.

dependent on a specific cloud provider.

● Regulatory compliance: Meeting

regulatory compliance requirements can becomplex.

Security Advantages

●
●
●
●
●
●

Strong security from cloud providers: Cloud providers invest in security

infrastructure and tools to protect against cyber threats.

Automatic security updates: Cloud providers automatically update theirinfrastructure and software, reducing security risks.

High availability and redundancy: Cloud platforms have multiple data

centers and redundancy features to ensure continuous service.

Advanced security monitoring and analytics: Cloud providers offer tools

to detect and respond to security threats in real time.

Secure user and device access: Cloud platforms provide tools to control andmanage user and device access.

Data encryption: Data transmitted to and from the cloud-based IoT

gateway is encrypted using strong encryption protocols.

34Security Issues●

Data privacy: Storing sensitive data in the cloud can raise privacy andcompliance risks.
● Latency: Data transmission to and from the cloud can introduce latency,
which can be a problem for real-time apps.
● Data transmission security: Securing data transmission is crucial.
Vulnerabilities can be exploited by attackers.
● Vendor lock-in: Organizations may become dependent on a specific cloudprovider.
● Access control: Strong access control and authentication are essential toprevent unauthorized access.
● Compliance: Organizations must comply with industry standards andregulations when deploying cloud-based IoT solutions.
● DDoS attacks: Cloud services are susceptible to DDoS attacks. Mitigation
strategies and controls are essential.

35

Fragmented Landscape36Hybrid Gateway

37

Hybrid gateways combine on-premises and cloud-based benefits, processing
sensitive data locally and non-sensitive data in the cloud.
The choice between on-premises, cloud-based, or hybrid IoT gateways depends on
specific needs. On-premises prioritizes security and compliance, cloud-based focuseson cost and ease, while hybrid offers a balance.
According to a recent PTC survey, 45% of organizations use on-premises IoT
gateways, 35% opt for cloud-based, and 20% favor hybrid gateways, indicating apreference for on-premises with growing interest in cloud-based solutions.
The adoption of hybrid gateways is expected to increase as organizations seek abalanced approach, aiming to combine the strengths of both on-premises
and cloud-based solutions.

Hybrid Gateway● Integration: Combines on-prem and cloud processing forflexibility.
● Latency: Reduces latency for real-time apps, sends non-time-

sensitive data to cloud.
● Privacy: Keeps sensitive data on-prem for privacy andcompliance.
● Scalability: Handles growing number of devices, cost-effective.
● Complexity: Implementing and managing can be complex,

requires expertise.

38

39

Hybrid Gateway

Advantages• Low latency: Processes data locally forreal-time response.

Disadvantages● Complexity: Requires expertise, more

• Privacy: Sensitive data processed onprem for compliance and control.

●• Scalability: Handles growing number ofdevices, cost-effective.

●• High availability: Local processing
ensures continued functionality.

• Security: Data transmitted within●organization's network, reducing threats.
●●complex than on-prem or cloud-based
solutions.
Initial setup: Learning curve, may require
additional integration.
Maintenance overhead: Increased
maintenance workload for both on-premand cloud components.
Hybrid integration challenges: Seamlessintegration can be challenging, requires
careful design and monitoring.
Resource management: Complex tomanage resources between on-prem andcloud environments.
Data routing: Complex decision-making
process to determine data direction.

Security Advantages

●

●

●

●

Enhanced Security: Hybrid gateways offer robust security byprocessing sensitive data on-premise and less sensitive data in thecloud, reducing the attack surface.

Improved Data Protection: They enhance data protection througha mix of on-premises and cloud-based security measures, including
encryption and restricted access.

Advanced Visibility and Control: Hybrid gateways boost visibility

and control over IoT data and traffic, enabling quicker threat detection
and response.

Streamlined Compliance: They aid in compliance with data privacy

and security regulations by enabling on-premise storage and processingof sensitive data.

40

Security Issues●

Complexity: Hybrid gateways are more complex to configure andmanage than standalone options, posing challenges for effective
security implementation.
● Security Vulnerabilities: They may face security vulnerabilities
in both on-premise and cloud components, increasing the risk to
the gateway and processed data.
● Security Gaps: Poor integration between on-premise and cloudcomponents can create exploitable security gaps.
● Data Leakage: Inadequate data protection at both levels can leadto potential data leakage risks.

41

Why Hybrid Approach?

● Performance: Processes data locally for real-time response, critical for low-latency

applications.

● Privacy: Sensitive data kept on-premise for control and compliance.
● Scalability: Leverages cloud resources for non-time-sensitive tasks, cost-effective.
● Resilience: Local processing ensures high availability, even with internet outages.
● Security: Minimal attack surface by processing sensitive data on-premise.
● Customization: Organizations can tailor the model to their needs.
● Compliance: Meets data sovereignty laws by keeping data within geographicalboundaries.

● Traffic optimization: Reduces network congestion by sending only relevant data to thecloud.

42

Moving Forward..

●

●
●
●
●
●

●

Leverage Hybrid Controllers: Use a hybrid controller approach to combine on-premises

and cloud-based controllers for benefits like IoT communication using physical controllers
and cloud-based virtual controllers.
Address Security Risks: Mitigate security risks associated with hybrid controllers throughstrong encryption and access control measures.
Consider Specific Needs: When designing your hybrid controller architecture, consider
data types, latency requirements, and budget to tailor it to your needs.
Choose Reputable Vendors: Select a secure, scalable, and manageable hybrid controller
solution from a reputable vendor.
Simplify Integration: Opt for a single cloud platform for your hybrid controller to simplify
integration and management.
Utilize Managed Service Providers: Consider using managed service providers (MSPs)
for implementing and managing your hybrid controller solution, especially if you lack inhouse expertise.
Regularly Review Architecture: Periodically review your hybrid controller architecture
to ensure it meets evolving needs, keeping up with technology trends and best practices.

43

Cyber Physical System

 Cyberspace and Physical space will be highly integrated– Two spaces interacting with each other increase the impact of the damages on
physical space.
– It has caused that points of cyberattack drastically expand

Source: The Ministry of Economy, Trade and Industry、Japan(2019)Cyber/Physical Security Framework

44Security implementation example
ERAB case in Japan
Y2023

47

The security triangle of Energy Resource Aggregation Business

PDCA
ERAB Cyber Security Training Program ICSCoE, IPA

Framework and Standards

Refer

The Cyber/Physical Security
Framework by METI
Cyber Security Framework by
NIST
IS and SRD at ISO/IEC

Regulation Level

Refer

Refer

Act, Enforcement article, Guideline bya ministry

Implementation Level

Refer Japaneseaggregatorsdevelop security
countermeasures,referring CCRC
Technical Report.
 In Japan, a good
coordinatedtriangle exists
from
implementation to
the high-level
framework.

Assessment and Countermeasures in align with theregulations in the strategic level, citing the internationalframeworks and stadards
48

The Cyber/Physical Security Framework [CPSF] by METI, Japanese Government
 In “Society 5.0” which is realized by IoT and AI, supply chain is transforming from traditional
linear style to non-linear style where various kinds of connections exist. The Cyber/Physical
Security Framework grasps the industrial society where value is created as Three Layers
composed of Six Elements.
The Third Layer(Data circulation)• Trustworthiness of data that freely circulate andare processed or created to produce services

Data

Data

Cyber Space

Data
Data

The Second Layer(Cyber to physical/Physical to cyber)correct• Trustworthiness of function for “correct transcription”
transcription
from cyber to physical / from physical to cyber form

• Trustworthiness of each organization based on
appropriate management

Data

Data
Data

The First Layer(Relationship among Organizations)

Data

Data

Data

Data

correcttranscription

correcttranscription

Component

Organization C

Component

Organization A

Component

Physical Space

Organization B◆ Six Elements: Organization, people, component, data, procedure, system
Source: The Ministry of Economy, Trade and Industry、Japan(2019)Cyber/Physical Security Framework49
49

Six elements in CPSF
 It is necessary to grasp fixed business assets. In the CPSF, the elements are shown by 6
elements: the organization, the people, the components, the data, the procedure, and thesystemSource: The Ministry of Economy, Trade and Industry、Japan(2019)Cyber/Physical Security Framework

50Compatibility between CPSF in JP and CSF in U.SCyber/Physical Security Framework in J.P– The Cyber/Physical Security Framework (meti.go.jp)

Cybersecurity Framework Version 1.1 in U.S.
– https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf

Category names in CPSF
Asset Management
Business Environment
GovernanceRisk Assessment
Risk Management Strategy
Supply Chain Risk Management
Identity Management, Authentication, and Access Control

Acronym
CPSF.AM
CPSF.BECPSF.GVCPSF.RACPSF.RM
CPSF.SC
CPSF.AC

Related category names in CSF
ID.AM (Asset Management)
ID.BE (Business Environment)
ID.GV (Governance)
ID.RA (Risk Assessment)
ID.RM (Risk Management Strategy)
ID.SC (Supply Chain Risk Management)
PR.AC (Identity Management and Access Control)

Awareness and Training
Data Security

CPSF.ATCPSF.DS

PR.AT (Awareness and Training)
PR.DS (Data Security)
PR.IP (Information Protection Processes and Procedures)

Information Protection Processes and Procedures

CPSF.IP

MaintenanceProtective Technology
Anomalies and Events
Security Continuous Monitoring
Detection Processes

CPSF.MA
CPSF.PT
CPSF.AECPSF.CM
CPSF.DPResponse Planning

CPSF.RP

Communications

CPSF.COAnalysis
Mitigation

CPSF.ANCPSF.MI

Improvements

CPSF.IM

PR.MA (Maintenance）
PR.PT (Protective Technology)
DE.AE (Anomalies and Events)
DE.CM (Security Continuous Monitoring)
DE.DP (Detection Processes)
RS.RP (Response Planning)
RC.RP (Recovery Planning)
RS.CO (Communications)
RC.CO (Communications)
RS.AN (Analysis)
RS.MI (Mitigation)
RS.IM (Improvements)
RC.IM (Improvements)

Source: The Ministry of Economy, Trade and Industry、Japan(2019)Cyber/Physical Security Framework

51

Mapping Energy Resource Aggregation Business [ERAB] System on CPSF
◆ Six Elements: Organization, people, component, data, procedure, system
Server for incentive
processing at AC
Request and reportfor electricity
consumption and generation control

Server for
VEN

R1

Server for RA
control at AC
Data about incentive

R3

Order and Report
Data about authentication

System for smart
meter’s data
management

Server for
VTN

The Third
Layer

Data about
power
generationPowergenerating
systemServer for DR
control at RA
Requestfor electricity
consumption andgeneration control

Data about supply
and demand

Data aboutauthentication

TSO
systemElectricity
consumption data
Data frommeter reading

R4

Server for user/
deviceAuthentication
at RA

Weather
information

Power generation facility(Control unit etc.)

Smart
meter

• Trustworthiness of data that freely circulate andare processed or created to produce services

Server for incentive
processing
at RA

The Second Layer(Cyber to physical/Physical to cyber)

R4

IoT GW/
EMS
Controller

R5Server for
weather
information

Data about
incentives

Data frommeter reading

The Second
Layer

The Third Layer(Data circulation)

Server for RA
Authentication
at AC• Trustworthiness of function for “correcttranscription” from cyber to physical / fromphysical to cyber form

R5

R5Power generation
facility (Generator)
electricity

The
First
Layer

Production
facilities, etc.
power
transmission
facility

Electric power suppliercompany

Lighting, airconditioning,
etc.

Batteries,
etc.

User owning devices

Sens
ing
devi
ces

The First Layer(Relationship among Organizations)Aggregator

Information
provider• Trustworthiness of each organization based on
appropriate management

Source: The Ministry of Economy, Trade and Industry、Japan(2019)Cyber/Physical Security Framework52

First Layer in CPSF
 The First Layer (Relationship among Organizations)– The first layer aims to ensure trust in the management of an organization. It
has been adopted to achieve security across supply chains.

•Certification programs such as
ISMS (based on ISO/IEC 27001)
focus on confirming trust incompany management•The first layer in CPSF aims toachieve shared and certified
security policies as a basis forpromoting trust.

Data

Data

Cyber Space

Data

Data

Data
Data
Data

Data
Data

Data

Data

correct

correct•In Cyber-Physical system, wheretranscription
transcription
correct
cyber and physical space are
Component
transcription
integrated, it is impossible toComponent
Organization C
ensure trust throughout the entire Organization A
Component
value creation process only by
Physical Space
Organization B
security implementation in thefirst layer.
Source: The Ministry of Economy, Trade and Industry、Japan(2019)Cyber/Physical Security Framework

54Second Layer in CPSF
 The Second Layer (connections between cyberspace and physicalspace)– Unreliable interactions between cyberspace and physical space could cause
uncertainty throughout industrial society.

•The second layer is based on theaccuracy and trustworthiness ofdata transcription and transfer(including accurate translation)
between cyberspace and physicalspace.
•Certification programs such as
ISO/IEC 27036 focus onconfirming trustworthiness intranscription•It is impossible to ensure trust
throughout the entire value
creation process only by ISO/IEC
27036.

Data

Data

Cyber Space

Data

Data

Data

Data

Data

Data

Data

Data
correcttranscriptionData

correcttranscription

correcttranscription

Component

Organization C

Component

Organization A

Component

Physical Space

Organization B

Source: The Ministry of Economy, Trade and Industry、Japan(2019)Cyber/Physical Security Framework

55

Third Layer in CPSF
 The Third Layer (connections in cyberspace)– security measures need to be implemented in the third layer for data
distribution and storage and appropriate editing and processing•Certification programs such as
ISO/IEC 27017 focus onconfirming trustworthiness incloud data storage•It is impossible to ensure trust
throughout the entire value
creation process only by ISO/IEC
27017.

Data

Data

Cyber Space

Data

Data

Data

Data

Data

Data

Data

Data
correcttranscriptionData

correcttranscription

correcttranscription

Component

Organization C

Component

Organization A

Component

Physical Space

Organization B

Source: The Ministry of Economy, Trade and Industry、Japan(2019)Cyber/Physical Security Framework

56

Mapping Energy Resource Aggregation Business [ERAB] System on CPSF
◆ Six Elements: Organization, people, component, data, procedure, system
Server for incentive
processing at AC
Request and reportfor electricity
consumption and generation control

Server for
VEN

R1

Server for RA
control at AC
Data about incentive

R3

Order and Report
Data about authentication

System for smart
meter’s data
management

Server for
VTN

The Third
Layer

Data about
power
generationPowergenerating
systemServer for DR
control at RA
Requestfor electricity
consumption andgeneration control

Data about supply
and demand

Data aboutauthentication

TSO
systemElectricity
consumption data
Data frommeter reading

R4

Server for user/
deviceAuthentication
at RA

Weather
information

Power generation facility(Control unit etc.)

Smart
meter

• Trustworthiness of data that freely circulate andare processed or created to produce services

Server for incentive
processing
at RA

The Second Layer(Cyber to physical/Physical to cyber)

R4

IoT GW/
EMS
Controller

R5Server for
weather
information

Data about
incentives

Data frommeter reading

The Second
Layer

The Third Layer(Data circulation)

Server for RA
Authentication
at AC• Trustworthiness of function for “correcttranscription” from cyber to physical / fromphysical to cyber form

R5

R5Power generation
facility (Generator)
electricity

The
First
Layer

Production
facilities, etc.
power
transmission
facility

Electric power suppliercompany

Lighting, airconditioning,
etc.

Batteries,
etc.

User owning devices

Sens
ing
devi
ces

The First Layer(Relationship among Organizations)Aggregator

Information
provider• Trustworthiness of each organization based on
appropriate management

Source: The Ministry of Economy, Trade and Industry、Japan(2019)Cyber/Physical Security Framework

57

Cybersecurity Guideline for Energy Resource Aggregation Business ver.2.0
 Agency for Natural Resources and Energy and Information-technology Promotion Agency [IPA] provide
the guideline showing the cybersecurity measures that businesses participants in ERAB should take.

• Japanese original version is available at:• https://www.meti.go.jp/english/pre
ss/2019/1227_005.html• English translation with a research
purpose is available at:• https://www.enecho.meti.go.jp/en/
category/vpp_dr/data/cybersecurity_guidelines_for_erab.pdf

58Japan case: Cybersecurity Guideline for Energy Resource
Aggregation Business Ver. 2.0
 Article 3.6 defines the design on cybersecurity measures for ERAB
systemProcess

Content

Step1

Clarify the overall system configuration and responsibility demarcation point ofintended IoT product or service.

Step2

Clarify the information, function and assets for protection in the system

Strep3Clarify the possible threat for the information, function and assets for protection

Step4

Clarify countermeasures (best practice) against threat

Step5

Select measures to implement considering threat level, damage level, cost, etc.

Step6

Verify the implementation of countermeasures that the mandatory items areprioritized through third-party audits (including certification), educational
programs.

Step7

Design, operate and train the way to respond to accidents

Source: Agency for Natural Resources and Energy Information-technology Promotion Agency(2019) Cybersecurity Guideline for Energy
Resource Aggregation Business Ver. 2.059

CCRC CONTRIBUTES TO DESIGNERAB SYSTEM SECURITY• In 2021, CCRC published the technical report
on “Security Recommendations for Distributed
Energy System Aggregators, Based on METI
Cyber and Physical Security Framework”,
showing 51 recommendations to be
countermeasures to the major vulnerabilities of
ERAB system.
• The report is backed by 5 years experience ofrunning a prototype system• The full report is available at• https://www.ccrc.keio.ac.jp/ccrc-technicalreport-202109/
60

ERAB Cyber Security Training Program ICSCoE, IPA• Industrial Cyber Security Center of Excellence in IPA (ICSCoE) has provided a training program tohelp aggregators have an appropriate security design about an electricity aggregation system.
• The program has complied with “Cybersecurity Guideline for Energy Resource Aggregation BusinessVer. 2.0” published in Agency for Natural Resources and Energy in Japanese Government and IPA,
referring “The Cyber/Physical Security Framework” in METI and CCRC Technical Report“Distributed Energy System Aggregators, Based on METI Cyber and Physical Security Framework”
published in Keio University

The training program has the threecomponents:
 Learn the related regulations andbibliographies
 Exercise a risk assessment
 Experience multiple hazards on ademo system

61

Common Criteria: ISO/IEC 15408 is the standard toensure IT product security at a customer premise• ISO/IEC 15408 as it were Common Criteria (CC) is thestandard dealing with product safety.

 The basis for evaluation of security properties of IT products.
 Globally recognized certification.
 Malaysia and Japan have partnered as the Certificate
Authorizing Member6262As per CPSF, Japanese and Malaysian security experts have launchedempirical study applying the security triangle of Energy Resource
Aggregation Business to the emerging market in Malaysia.

PDCA
Framework and Standards

Refer

The Cyber/Physical Security
Framework by METIERAB Cyber Security Training Program

Cyber Security Framework by
NIST
IS and SRD at ISO/IEC

Regulation Level

Refer

Refer

Act, Enforcement article, Guideline bya ministry

Implementation Level

Refer

The SFC Forum has been
selected to conduct the survey
for "Industrial Control Systems
Cybersecurity Training for
Indo-Pacific Region" for Japan
International Cooperation
Agency （JICA）
The details is at:press release_en _20230900(sfc-forum.or.jp)

Assessment and Countermeasures in align with theregulations in the strategic level, citing the internationalframeworks and stadards
63