ML041420095
| ML041420095 | |
| Person / Time | |
|---|---|
| Site: | Browns Ferry, Watts Bar, Sequoyah  |
| Issue date: | 05/19/2004 |
| From: | Burzynski M Tennessee Valley Authority |
| To: | Document Control Desk, Office of Nuclear Reactor Regulation |
| References | |
| Download: ML041420095 (3) | |
Text
Tennessee Valley Authority, 1101 Market Street, Chattanooga, Tennessee 37402-2801 MAY 1 9 2004 10 CFR 73.21 U.S. Nuclear Regulatory Commission ATTN:
Document Control Desk Washington, D.C. 20555-0001 Gentlemen:
In the Matter of
)
Docket Nos.
50-259 50-390 Tennessee Valley Authority
)
50-260 50-391 50-296 50-327 50-328 NUCLEAR REGULATORY COMMISSION (NRC)
USE OF ENCRYPTION SOFTWARE FOR ELECTRONIC TRANSMISSION OF SAFEGUARDS INFORMATION (SGI) FOR BROWNS FERRY, SEQUOYAH, AND WATTS BAR NUCLEAR PLANTS Pursuant to the requirements of 10 CFR 73.21(g)(3), Tennessee Valley Authority (TVA) requests approval to process and transmit SGI using PGP Software (Enterprise, Corporate, or Personal) Desktop Version 8.0 or the latest validated version, developed with PGP SDK 3.0.3.
National Institute of Standards and Technology Certificate 394 validates compliance of this SDK with FIPS 140-2 requirements.
An information protection system for SGI that meets the requirements of 10 CFR 73.21(b) through (i) has been established and is being maintained.
Prior to the first use of encryption software for SGI material, written procedures shall be in place to describe, as a minimum:
access controls; where and when encrypted communications can be made; how encryption keys, codes and passwords will be protected from compromise; actions to be taken if the encryption keys, codes or passwords are, or are suspected to have been, compromised (e.g., notification of all authorized users); and how the identity and access authorization of the recipient will be verified.
Pnmed cn Badt pwe
U.S. Nuclear Regulatory Commission Page 2 MAY 1 9 2004 TVA intends to exchange SGI with the NRC, Nuclear Energy Institute, and other SGI holders who have received NRC approval to use PGP software.
Bonnie A. Schnetzler, Manager of Nuclear Security, is responsible for the overall implementation of the SGI encryption program at TVA.
Ms. Schnetzler is also responsible for collecting, safeguarding, and disseminating the software tools needed for encryption and decryption of SGI.
Pursuant to 10 CFR 73.21(g)(3), the transmission of encrypted material to other authorized SGI holders who have received NRC approval to use PGP software would be considered a protected telecommunications system.
The transmission and dissemination of unencrypted SGI is subject to the provisions of 10 CFR 73.21(g)(1) and (2).
If you have any questions or require additional information, please contact Bonnie A. Schnetzler at (423)751-4969.
Sincerely, Mark (J.
Burz ki Manag'r Nuclear Licensing cc:
Mr. Louis Grosman U.S. Nuclear Regulatory Commission MS 06D2 Two White Flint North 11545 Rockville Pike Rockville, Maryland 20852-2738 Mr. Scott Morris U.S. Nuclear Regulatory Commission MS 04D6 Two White Flint North 11545 Rockville Pike Rockville, Maryland 20852-2738 cc:
Continued on page 3
U.S. Nuclear Regulatory Commission Page 3 SWAY 1 9 2004 CC:
Mr. Luis Reyes, Regional Administrator U.S. Nuclear Regulatory Commission Region II Sam Nunn Atlanta Federal Center 61 Forsyth Street, SW, Suite 23T85 Atlanta, Georgia 30303-8931 Ms. A. Lynn Silvious U.S. Nuclear Regulatory Commission MS 02D15 One White Flint North 11555 Rockville Pike Rockville, Maryland 20852-2738 Mr. James Davis Director, Operations Nuclear Generation Nuclear Energy Institute 1776 I Street, NW Suite 400 Washington, D.C. 20006-3708