WO 04-0025, Use of Encryption Software for Electronic Transmission of Safeguards Information

Use of Encryption Software for Electronic Transmission of Safeguards Information

ML041410438
Person / Time
Site:	Wolf Creek
Issue date:	05/13/2004
From:	Jacobs D Wolf Creek
To:	Document Control Desk, Office of Nuclear Reactor Regulation
References
WO 04-0025
Download: ML041410438 (2)

Text

-WOLF-CREEKS 'NUCLEAR OPERATING CORPORATION Donna Jacobs .. -32004 Vice President Operations and Plant Manager . I WO 04-0025 U. S. Nuclear Regulatory Commission ATTN: Document Control Desk Washington, DC 20555

Reference:

Letter dated August 28, 2002, from USNRC to WCNOC - RIS 2002-15

Subject:

Docket No. 50-482: Use of Encryption Software for Electronic Transmission of Safeguards Information Gentlemen:

Pursuant to the requirements of 10 CFR 73.21(g)(3), Wolf Creek Nuclear Operating Corporation requests approval to process and transmit Safeguards Information (SGI) using PGP Software (Enterprise, Corporate, or Personal) Desktop Version 8.0 or the latest validated version, developed with PGP SDK 3.0.3. National Institute of Standards and Technology Certificate 394 validates compliance of this SDK with FIPS 140-2 requirements.

An information protection system for SGI that-meets the requirements of 10 CFR 73.21(b) through (i) has been established and is being maintained. Prior to the first use of encryption software for SGI material, written procedures shall be in place to describe, as a minimum:

access controls; where and when encrypted communications can be made; how encryption keys, codes and passwords will be protected from compromise; actions to be taken if the encryption keys, codes or passwords are, or are suspected to have been, compromised (for example, notification of all authorized users); and how the identity and access authorization of the recipient will be verified.-

Wolf Creek intends to exchange SGI with the NRC, Nuclear Energy Institute (NEI), and other SGI holders who have received NRC approval to use PGP software. Scott Good, Security Administrative Coordinator is responsible for the overall implementation of the SGI encryption program at Wolf Creek. Scott Good, Security Administrative Coordinator is responsible for collecting, safeguarding, and disseminating the software tools needed for encryption and decryption of SGI.

Pursuant to 10 CFR 73.21(g)(3),-the transmission of encrypted material to other authorized SGI holders, who have received NRC approval to use PGP software, would be considered a protected telecommunications system. The transmission and dissemination of unencrypted SGI is subject to the provisions of 10 CFR-73.21(g)(1) and (2).

P.O. Box 411 ! Burlington, KS 66839/ Phone: (620) 364-8831 An Equal Opportunity Employer M/FHCNVET

~' I

"'U',

-WO 04-0025

• Page 2of 2 if you have any questions concer-ning this' matter', please contact me at (620) 364-42-46, -or-Mr.

Kevin Moles, Manager Regulatory Affairs at (620) 364-4126. - --

.- w.. Very truly yours, Jacobs DJ/rig cc: J. N. Donohew (NRC)

D. N. Graves (NRC)

Louis Grosman (NRC/OCIO)

-B. S. Mallett (NRC)

-- Scott Morris NRC/NISR Senior Resident Inspector (NRC).

Lynn Silvious (NRC/NSIR)

James Davis (NEI)