ML041590392

Use of Encryption Software for Electronic Transmission of Safeguards Information

ML041590392
Person / Time
Site:	Oconee, Mcguire, Catawba, McGuire
Issue date:	05/26/2004
From:	Barron H Duke Power Co
To:	Document Control Desk, Office of Nuclear Reactor Regulation
References
Download: ML041590392 (5)

Text

Duke HENRY B. BARRON (hPowere Group VP, Nuclear Generation and A Duke Energy Company Duke Power EC07H / 526 South Church Street Charlotte, NC 28202-1802 May 26, 2004 Mailing Address:

PO Box 1006 EC07H U.S. Nuclear Regulatory Commission Charlotte, NC 28201-1006 ATTN: Document Control Desk 704 382 2200 Washington, DC 20555-0001 704 382 6056 fax hbarron@duke-energy.com

References:

1. 10 CFR 73.21

2. NRC Regulatory Issue Summary 2002-15

Subject:

Duke Energy Corporation Oconee Nuclear Station, Units 1, 2, and 3 NRC Docket Nos. 50-269, 50-270, 50-287 McGuire Nuclear Station, Units 1 and 2 NRC Docket Nos. 50-369, 50-370 Catawba Nuclear Station, Units 1 and 2 NRC Docket Nos. 50-413, 50-414 Use of Encryption Software for Electronic Transmission of Safeguards Information Pursuant to the requirements of 10 CFR 73.21(g)(3), Duke Energy Corporation ("Duke")

requests approval to process and transmit Safeguards Information (SGI) using PGP Software (Enterprise, Corporate, or Personal) Desktop Version 8.0 or the latest validated version, developed with PGP SDK 3.0.3. National Institute of Standards and Technology Certificate 394 validates compliance of this SDK with Federal Information Processing Standard (FIPS) 140-2 requirements.

An information protection system for SGI that meets the requirements of 10 CFR 73.21(b) through (i) has been established and is being maintained. Prior to the first use of encryption software for SGI material, written procedures shall be in place to describe, as a minimum: access controls; where and when encrypted communications can be made; how encryption keys, codes and passwords will be protected from compromise; actions to be taken if the encryption keys, codes or passwords are, or are suspected to have been, compromised (for example, notification of all authorized users); and how the identity and access authorization of the recipient will be verified.

Duke intends to exchange SGI with the NRC, Nuclear Energy Institute (NEI), and other SGI holders who have received NRC approval to use PGP software. Dana Boies, Nuclear Security Compliance Coordinator is responsible for the overall implementation of the SGI encryption program at Duke. Dana Boies, Nuclear Security Compliance Coordinator is responsible for collecting, safeguarding, and disseminating the software tools needed for encryption and decryption of SGI.

www. duke power. corn 6wue

U.S. Nuclear Regulatory Commission May 26,2004 Page 2 Pursuant to 10 CFR 73.21(g)(3), the transmission of encrypted material to other authorized SGI holders, who have received NRC approval to use PGP software, would be considered a protected telecommunications system. The transmission and dissemination of unencrypted SGI is subject to the provisions of 10 CFR 73.21(g)(1) and (2).

Should you have any questions or require additional information, please contact Dana Boies at (704) 382-1694.

Sincerely, H. B. Barron Executive Vice President Chief Nuclear Officer

U.S. Nuclear Regulatory Commission May 26,2004 Page 3 xc:

Scott Morris E. F. Guthrie Reactor Security Section Chief NRC Senior Resident Inspector U. S. Nuclear Regulatory Commission Catawba Nuclear Station Mail Stop 4 D6 Washington, DC 20555-0001 Lynn Silvious J. B. Brady Information Security Section Chief NRC Senior Resident Inspector U. S. Nuclear Regulatory Commission McGuire Nuclear Station Mail Stop 2 D15 Washington, DC 20555-0001 Louis Grosman James Davis Program Management, Policy Development, Nuclear Energy Institute and Analysis Staff Chief 1776 I Street, Suite 400 U. S. Nuclear Regulatory Commission Washington, DC 20006-3708 Mail Stop 6 D2 Washington, DC 20555-0001 L. A. Reyes, Regional Administrator U. S. Nuclear Regulatory Commission, Region II Sam Nunn Atlanta Federal Center 61 Forsyth St., SW, Suite 23T85 Atlanta, GA 30303-8931 L. N. Olshan (addressee only)

NRC Senior Project Manager (ONS)

U. S. Nuclear Regulatory Commission Mail Stop 0-8 H12 Washington, DC 20555-0001 J.J. Shea (addressee only)

NRC Senior Project Manager (MNS)

U. S. Nuclear Regulatory Commission Mail Stop 0-8 H12 Washington, DC 20555-0001 S.E. Peters (addressee only)

NRC Project Manager (CNS)

U. S. Nuclear Regulatory Commission Mail Stop 0-8 H12 Washington, DC 20555-0001 M. C. Shannon NRC Senior Resident Inspector Oconee Nuclear Station

U.S. Nuclear Regulatory Commission May 26,2004 Page 4 xbc:

J. J. Fisicaro - EC05R R. L. Gill - EC05P C.E. Robinson - EC09B B. G. Davenport- ON03RC C. J. Thomas - MGO1RC L. A. Keller- CNO1RC L. E. Nicholson - ONO1VP J. A. Kammer- MGOIVP R. L. Sweigart - CNOISA T. W. King - ONO1SC D. G. Black-MGO1SC W. T. Byers - CNOISC P. R. Fowler - EC03P T. Shafeek-Horton - PBO5 L. F. Vaughn - PBO5 ONS Master File - ON03DM (File OS 801.01)

MNS Master File - MGO1DM CNS Master File - CNO 1DM ELL

VERIFY HARD COPY AGAINST WEB SITE IMMEDIATELY PRIOR TO EACH USE Nuclear Policy Manual - Volume 2 NSD 227 APPENDIX A.227. NRC CORRESPONDENCE RECORD OF REVIEW NRC CORRESPONDENCE RECORD OF REVIEW Applicable Site(s) 41/

Submittal Title/Subject [l I6o-P rEAQ liy A r )kkt, k 4th- C -TdSouSS a ( S( *1C Scheduled Submittal Date £ 2. 6Co 4 Mandatory? fL (Y/N)

Regulatory Compliance Submittal Lead 3a0- 3oa es (Name)

Technical Lead/Contributor IIe ~ b jr Division/Seetionltr/krr iiso/etin (Name)

Reviewer Name Comments? (Y/N) Resolved? (Y/N)

Lead Technical Reviewer E)X/DeS k Jc J_

Lead Technical Mgr. (QJ IP  : dv -

Compliance Mgr. 'bL 1)_ )_

Affected Group/Div Mgr. OAV 'S ve t t; Safety Assurance Mgr. DIIISJIIIII Independ. Tech. Reviewer WA .

Cross-Discipline Reviewer Te Ftu PA _k_ _ _,_

Cross-Discipline Reviewer ______________

Cross-Discipline Reviewer 3 /A_

Commitment Coordinator iLJ~ @  ; hz Other Knowledgeable Person(s) /A PORC, NSRB Review per NSD_ _2217 K_ _ _ _ _

CONCURRENCE ON CONTENT, INCLUD CONIMITMENTS, IAS BEEN RECEIVED BY TIIE LISTED REVIEWERS AND COMMENTS HAVE BEEN RESOLVED. 7[IIS NUBMITTAL IS OtEE AND ACCURATE TO THE BEST OF MY KNOWLEDGE. I D// __

6 Submittal Technical Lead Y_ Date (Sigpat THIS SUBMrITTAL HAS BEEN PREPARED ACCORDI G 9 UIDELINE 2 TIIIS SUBBII4L IS READY TO BE SENT TO TIIE NRC. ,I Regulatory Compliance (or NRIA) Lead Date '/ +

(Signature) 01 MAY 2001 9 VERIFY HARD COPY AGAINST WEB SITE IMMEDIATELY PRIOR TO EACH USE

. _1