ML110600705

ISFSI, McGuire, Units 1 & 2, Catawba, Units 1 & 2, William States Lee III, Units 1 & 2 - Use of Encryption Software for Electronic Transmission of Safeguards Information

ML110600705
Person / Time
Site:	Oconee, Mcguire, Catawba, McGuire, Lee
Issue date:	02/24/2011
From:	Glover R Duke Energy Carolinas
To:	Document Control Desk, Office of Nuclear Reactor Regulation, Office of Nuclear Material Safety and Safeguards, Office of Nuclear Security and Incident Response
References
Download: ML110600705 (3)

Text

Duke Energy R. Michael Glover GeneralManager, Nuclear Support Pdkov~ergyNuclear Generation Duke Energy Corporation 526 South Church Street Charlotte, NC 28202 Mailing Address:

P. O. Box 1006 ECO7H Charlotte, NC 28201-1006 704-382-6108 Mike.Glover@duke-energy.com February 24, 2011 U. S. Nuclear Regulatory Commission ATTN: Document Control Desk Washington, DC 20555-0001

Subject:

Duke Energy Carolinas, LLC (Duke Energy)

Oconee Nuclear Station, Units 1, 2, and 3 Docket Nos. 50-269, 50-270, 50-287 Oconee Independent Spent Fuel Storage Installation Docket No.72-004 McGuire Nuclear Station, Units 1 and 2 Docket Nos. 50-369, 50-370 Catawba Nuclear Station, Units 1 and 2 Docket Nos. 50-413, 50-414 William States Lee III Nuclear Station, Units 1 and 2 Docket Nos.52-018, 52-019 Use of Encryption Software for Electronic Transmission of Safeguards Information

Reference:

NRC Letter Dated June 16, 2004 to Mr. Henry B. Barron, Vice President, Nuclear Generation and Chief Nuclear Officer, Duke Power, a Duke Energy Company, Authorizing the Use of PGP 8.0 Pursuant to 10 CFR 73.22(f)(3) and the guidance provided in Regulatory Issue Summary 2002-15, Revision 1, "NRC Approval of Commercial Data Encryption Products for the Electronic Transmission of Safeguards Information", Duke Energy requests NRC approval to replace the current version of encryption product in use for encryption of sensitive unclassified Safeguards Information. Current NRC approval (Reference) authorizes Duke Energy to use of Pretty Good Privacy (PGP) Software Corporate Desktop Version 8.0. Because this version is no longer supported by the PGP Corporation, Duke Energy requests NRC approval to replace PGP Software Corporate Desktop Version 8.0 with PGP Desktop Email Version 10.0.0. This replacement version of encryption product was developed with PGP Software Developer's Kit (SDK) 4.0.0 and complies with Federal Information Processing Standard (FIPS) 140-2 as validated by the National Institute of Standards and Technology (NIST) Certificate Number 1325.

Furthermore, Duke Energy requests NRC approval for the William States Lee III Nuclear Station to also use the PGP Desktop Email Version 10.0.0 encryption product as described above.

Duke Energy has and continues to maintain an information protection system that meets the requirements of 10 CFR 73.21. Written procedures are in place which describe: access controls; where and when encrypted communications can be made; how encryption keys, codes and passwords are protected from compromise; actions to be taken if encryption keys, codes, or passwords are, or are suspected to have been, compromised; and how the identity and access authorization of the recipient is verified.

S00

.fSl0 ki

U. S. Nuclear Regulatory Commission February 24, 2011 Page 2 Processing Safeguards Information on electronic systems is performed in accordance with the provisions of 10 CFR 73.22(g). Each Duke Energy nuclear station and the Nuclear General Office maintain a single (one) public key named with the following syntax:

LastNameFirstNameSiteName.asc. This represents the organizational point of contact indicated as owning the key-pair. Duke Energy controls each private key as Safeguards Information. Duke Energy exchanges encrypted Safeguards Information only with the Nuclear Regulatory Commission, Nuclear Energy Institute (NEI), and other Safeguards Information holders that have received NRC approval to use PGP software. Tim Wadsworth, Senior Security Specialist is responsible for the overall implementation of the Safeguards Information encryption program for Duke Energy and is also responsible for collecting, safeguarding, and disseminating the software tools needed for encryption and decryption of Safeguards Information.

Duke Energy requests approval to replace the current version of PGP encryption product at Oconee Nuclear Station, McGuire Nuclear Station, Catawba Nuclear Station and the Nuclear General Office and initial approval for the William States Lee III Nuclear Station to use the PGP Desktop Email Version 10.0.0 encryption product within 30 days.

This letter contains no new commitments.

Should you have any questions or require additional information please contact Tim Wadsworth, Senior Security Specialist at (704) 382-5836 or email to: timothy.wadsworth*,duke-eneroqy.com Sincerely, R. Michael Glover General Manager, Nuclear Support

U. S. Nuclear Regulatory Commission February 24, 2011 Page 3 xc:

V. M. McCree, Regional Administrator U.S. Nuclear Regulatory Commission - Region II Marquis One Tower 245 Peachtree Center Ave., NE Suite 1200 Atlanta, Georgia 30303-1257 Craig Erlanger, Branch Chief Integrated Security Coordination & Policy U.S. Nuclear Regulatory Commission 11555 Rockville Pike Rockville, MD 20852-2738 J. H. Thompson, Project Manager (CNS & MNS)

U.S. Nuclear Regulatory Commission 11555 Rockville Pike Mail Stop 0-8 H 4A Rockville, MD 20852-2738 J. F. Stang, Jr., Senior Project Manager (ONS)

U.S. Nuclear Regulatory Commission 11555 Rockville Pike Mail Stop 0-8 H 4A Rockville, MD 20852-2738 G. A. Hutto NRC Senior Resident Inspector Oconee Nuclear Station J. B. Brady NRC Senior Resident Inspector McGuire Nuclear Station A. T. Sabisch NRC Senior Resident Inspector Catawba Nuclear Station