LR-N04-0222, Stations, Use of Encryption Software for Electronic Transmission of Safeguards Information

Stations, Use of Encryption Software for Electronic Transmission of Safeguards Information

ML041810507
Person / Time
Site:	Salem, Hope Creek
Issue date:	06/21/2004
From:	Mannon S Public Service Enterprise Group
To:	Document Control Desk, Office of Nuclear Security and Incident Response
References
LR-N04-0222
Download: ML041810507 (2)

Text

PSEG Nuclear TLC P.O. Box 236, Hancocks Bridge, New Jersey 08038-0236 JUN 2 1 2004 LR-N04-0222 0 SE Nuclear rTC U. S. Nuclear Regulatory Commission Attention: Document Control Desk Washington, DC 20555-0001 USE OF ENCRYPTION SOFTWARE FOR ELECTRONIC TRANSMISSION OF SAFEGUARDS INFORMATION SALEM AND HOPE CREEK GENERATING STATIONS DOCKET NOS. 50-272,60-311, AND 50-354

References:

1. 10 CFR 73.21

2. NRC Regulatory Issue Summary 2002-15 Pursuant to the requirements of 10 CFR 73.21 (g)(3), PSEG Nuclear, LLC, requests approval to process and transmit Safeguards Information (SGI) using PGP Software (Enterprise, Corporate, or Personal) Desktop Version 8.0 or the latest validated version, developed with PGP SDK 3.0.3. National Institute of Standards and Technology Certificate 394 validates compliance of this SDK with FIPS 140-2 requirements.

An information protection system for SGI that meets the requirements of 10 CFR 73.21 (b) through (i) has been established and is being maintained. Prior to the first use of encryption software for SGI material, written procedures shall be in place to describe, as a minimum: access controls; where and when encrypted communications can be made; how encryption keys, codes and passwords will be protected from compromise; actions to be taken if the encryption keys, codes or passwords are, or are suspected to have been, compromised (for example, notification of all authorized users); and how the identity and access authorization of the recipient will be verified.

PSEG Nuclear, LLC, intends to exchange SGI with the NRC, Nuclear Energy Institute (NEI), and other SGI holders who have received NRC approval to use PGP software.

Mike Ivanick, Security Operations Supervisor, is responsible for the overall implementation of the SGI encryption program at PSEG Nuclear, LLC and for collecting, safeguarding, and disseminating the software tools needed for encryption and decryption of SGI.

, S01 95-2168 REV. 7199

Document Control Desk 2 LR-N04-0222 JUN 2 1 2004 Pursuant to 10 CFR 73.21 (g)(3), the transmission of encrypted material to other authorized SGI holders, who have received NRC approval to use PGP software, would be considered a protected telecommunications system. The transmission and dissemination of unencrypted SGI is subject to the provisions of 10 CFR 73.21 (g)(1) and (2).

Should you have any questions or require additional information, please contact Ted Straub at 856 339-2244.

Sincerely, Steven R. Mannon Nuclear Safety and Licensing Manager C Scott Morris, NRC/NISR Lynn Silvious, NRC/NSIR Louis Grosman, NRC/OCIO James Davis, NEI Hubert J. Miller, Administrator - Region I USNRC Senior Resident Inspector - Hope Creek USNRC Senior Resident Inspector - Salem Kent Tosch, Manager IV, Bureau of Nuclear Engineering