IEC 61162-460-2024.docx
IECIEC61162-460Edition3.02024-04INTERNATIONA1.STANDARDMaritimenavigationandradiocommunicationequipmentandsystems-Digita1.interfaces-Part460:Mu1.tip1.eta1.kersandmu1.tip1.e1.isteners-Ethernetinterconnection-SafetyandsecurityATHISPUB1.ICATIONISCOPYRIGHTPROTECTEDCoPyright©2024IEC1Geneva,Switzer1.andAJ1.rightsreset伯d.UnteesO1.herWigespecified,nopartofthisPUb1.iCabonmaybereproducedoruti1.izedinanyformOfAanymeans,e1.ectronicormeca11<ca1.,inc1.udingpoxx>opyigandmcro1.m,WAhOSpermissioninwntngfromeitherIECofIECmemberNationa1.Committeeinthecountryoftherequester.IfycuhaveanyquestionsaboutIECcopyrighthaveanenquiryaboutOb1.aningancona1.rightStothsPUbtCagn.pte-ascontacttheaddressM11oryour1.oca1.IECmc11crNatKXI霖COmn1.inC«f<xfurtheri11formatkx.IECSeaeiariaiTd.:412291902113.ruedeVarembe,M<*cchCH-1211Geneva20*ww.iec.chSWtZedBndAbouttheIECTheInternabona1.tectrotech11>ca1.Commtsskxi(IEC)isth©1.eadinggot>a1.organizationthatpreparesandpunishes1.n½f11abona1.Standards1.ota1.1.e1.ectricai.Gectronicandre1.atedIechnoksgies.AboutIECpub1.icationsThetechnica1.contortdIECpub1.ications»$keptunderconstantreviewbyIbCIECP1.cascmakesurothatyouhavethe1.atestedition,a<xrendumoranamendmentfnhthavebeenpuUed.IECpub1.icationssearchwcbstorc.icc.chadvscarchformTheadvancedsearchenab1.estofindIECpub1.icationst>yaIafteCyotcriteria(referencenumber,texttechnica1.oommitt<jo.1.Kateogivesinformabo11onprojects,rep1.acedarriw!hdrav,npub1.ications.IECJustPub1.ished-webstore.iec.ch,Justpub1.tshedStayuptodaU?onoi1.nowIECPUbhaItiOns.JUStPuMshodde1.atea1.1.newpub1.>cat3reteased.Avai1.ab1.eon1.ineandCnCeamonthbyemai1.IECCustomerServiceCentre-webstore.1.ec.chescIfyouwhtogrveuyourfeedbackonthispub1.icationorneedfurtherasstsia11,p1.easecontacttheCustomerServiceCnure.sates©»ec.ch.IECProducts&ServicesPor1.a1.products.icc.chDiscoverourPCWCrfU1.sarcengineandrc<×Jfree1.ya1.1.thePubMa1.ton§previews,graphica1.symbo1.sandthegrossary.Wi1.hasubscriptionyouw1.a1.wayshaveacoo&$IopIodatecontentIatocedk>yourneeds.E1.ec1.ropcdui-www.c1.cc1ropcdia.orgIhexx1(fseadngon1.inedcoaryone1.ectrotechno1.ogy,containingmorethan22500termrioksgicaientriesinEngishandFrench.Wi1.heoutvtfe1.terms25addf1.kxa1.1.anguages.AJsoknownastheInternationa1.Ekjcirotcchnica1.VocabUary(IEV)on1.ne.IEC61162-460Edition3.0202404INTERNATIONA1.STANDARDco1.ourinsideMaritimenavigationandradiocommunicationequipmentandsystems-Digita1.interfaces-Part460:Mu1.tip1.eta1.kersandmu1.tip1.e1.isteners-Ethernetinterconnection一SafetyandsecurityInternatkdna1.E1.ECTROTECHNICA1.COMMISSIONICS47.020.70ISBN9782832282755Warning!Makesurethatyouobtainedthispub1.icationfromanauthorizeddistributor.RcoaC<8HadWTUrt1.aro8ccoMirJCc4rn½ixCONTENTSFOREWORD61 Scope82 Normativereferences83 Termsanddefinitions94 High-Ievo1.toqu三rcrwn1.s164.1 Overview.164.2 Description164.3 Genera1.requirements164.3.Equipmentandsystemrequirements16432Ppositionrequirements1743.3positionrequirements174.4 Pponentrequirements17441450-Nod.17442460-Node18443460SWMh184.4.4 460-Forwarder184.4.5 460-Gatewayand460-Wire1.essgateway194.5 1.ogica1.mpo11en1requrements194.5.4 Networkmonitoringfunction194.5.5 Systemmanagementfunction194.6 Systemdocumentationrequirements194.7 Securearearequirements205Networktrafficmanagementrequirements205.1 460-Noderequirements2052460Svitchrequirements201.1.1 Resourcea1.1.ocation205221.pprevention215.3 460Forwarderrequirements215.3.1 Trafficseparation215.3.2 Resourcea1.1.ocation225.3.3 Trafficprioritization225.4 Systemdesignrequire11ets235.4. Documentation23542Traffic23543ConnectionsbetweenSoCUroandnonsecureareas236Securityrequirements246.1 Securityscenarios246.1.1 Threatscenarios246.1.2 Interna1.threats246.1.3 Externa1.threats2462Interna1.securityrequirements256.2.1 Genera1.256.2.2 Denia1.Gserviceprotection25623REDSsecurity256.2.4 Accesst1.266.2.5 Executab1.eandnonexecutab1.e(esecurity286.2.6 Rerdingofdevicemanagementactivities296.2.7 3Externa1.securityrequirements306.3.1 Overview306.3.2 Firewa1.1.s306.3.3 Directmmunication316.3.4 Ntoderequirementsfordirectcommunication326.3.5 460-Gateway336.3.6 460-Wire1.essgateway346.4Additiona1.securityissues3565Onboardsoftwaremaintenance366.5.1 Genera1.366.5.2 Ro1.1.backtoprevioussafeconfiguration366.5.3 Softwaremaintenanceinmaintenancemode376.5.4 Semiautomaticsoftwaremaintenancebythecrewonboardthevsse376.5.5 Remotesoftwaremaintenance386.6SecuresoftwareIifecyc1.emanagement397Redundancyrequirements397.1 Genera1.requirements397.1.1 Genera1.397.1.2 Interfaceredundancy397.1.3 Deviceredundancy4072460-Noderequirements4073460Swi1.chreqir<wcnts407.44FonAarderrequirements4075460Gate
