ML041560071

From kanterella
Jump to navigation Jump to search
Nuclear Management Co., LLC, Use of Encryption Software for Electronic Transmission of Safeguards Information
ML041560071
Person / Time
Site: Monticello, Palisades, Kewaunee, Point Beach, Prairie Island, Duane Arnold  
Issue date: 06/03/2004
From: Weinkam E
Nuclear Management Co
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
+sispmjr200506, -RFPFR, FOIA/PA-2005-0236, RIS-02-015
Download: ML041560071 (2)


Text

June 3,2904 U.S. Nuclear Regulatory Commission Document Corrtrol Desk Washington, DC 295550001 Duane Arnold Energy Center Dockets 50-331 and 72-32 License No. DPR49 Kewaunee Nudear Power Plant Docket 50-305 License No. DPR-43 Palisades Nudear Plant Dockets 50-255 and 72-7 L i i m NO. DPR-20 Monticello Nudear Generating Plant Docket 50-263 License No. DPR-22 10 CFR 73.21 Point Beach Nuclear Power Plant Units I and 2 Dockets 50-266,50-301 and 72-5 License Nos. DPR-24 and DPR-27 Prairie Island Nuclear Generating Plant Units 1 and 2 Dockets 50-282.50306 and 72-1 0 License Nos. DPR-42, DPR-60 and SNM-2506

References:

1) 10 CFR 73.21
2) NRC Regulatory Issue Summary 2002-15
3) NMC Letter, dated May 7,2004 Use of Encrvption Sofhnrare fo r El&

nic Transmission of Safeau ards Information Pursuant to the requirements of 10 CFR 73.21 (g)(3), Nuclear Management Company, LLC (NMC) requests approval to process and transmit Safeguards Information (SGI) using PGP Software (Enterprise. Corporate, or Personal) Desktop Version 8.0 or the latest validated version, developed with PGP SDK 3.0.3 for the Duane Arnold Energy Center, Kewaunee Nuclear Plant, Monticello Nuclear Generating Plant, Palisades Nuclear Plant, Point Beach Power Plant, Prairie Island Nuclear Generating Plant and the NMC corporate headquarters in Hudson, WI. National Institute of Standards and Technology Certificate 394 validates compliance of this SDK with FlPS 140-2 requirements.

An information protection system for SGI that meets the requirements of 10 CFR 73.21 (b) through (i) has been established and is being maintained. Prior to the first use of encryption software for SGI material, written procedures shall be in place to describe, as a minimum: access controls; where and when encrypted communications can be made: how encryption keys, codes and passwords will be protected from compromise; actions to be taken if the encryption keys, codes or passwords are, or are suspected to have been, compromised (for example, notifcation of all authorized users); and how the identity and access authorization of the recipient will be verified.

Page 2 Document control NMC intends to exchange SGI with the NRC, Nuclear Energy Institute (NEI), and other SGI holders who have received WRC approval to use PGP software. The NMC I/T Distributed Architecture Manager, is responsible for the overall implementation of the SGI encryption ptogram at N W. The NMC Security Director (corporate) and the Security Manager at each site will be responsible for collecting, safeguarding, and dissemination the software tools needed for encryption and disseminating the sdvmre tools needed for encryption and decryptiin of SGI.

Pursuant to I 0 CFR 73.21 @)(3), the iransmission of encrypted material to other authorized SGI hotders, who have receivexl NRC approval to use BOP software, would be conddered a pmtected tekommunicatlons system. The tran. and dlmination of unencrypted SGI is subject to the provisions of I 0 This Me r inoludes the license (as appropriate) and docket numbers for the NMC Independent Spent Fuel Storage Instalktions (IS Is) and @uupereedss NMCs earlier requast dated May 7,2004.

2WCV and (2).

This letter mnbins no new commitments and no revisions to exlsting commitments.

Should you have any questions or require additional information, please CMltaCt David Axt at 71 5-377-3341.

Nuelear Management Company, LLC m:

Scott Mortls, NRC/NISR Lynn Sibbus, NRC/NSLR Louis Grosman, NRC,ocIO J a m Davis, NEI Jim Creed, NRC Rlll