ML041470307

Use of Encryption Software for Electronic Transmission of Safeguards Information

ML041470307
Person / Time
Site:	Cook
Issue date:	05/19/2004
From:	Zwolinski J Indiana Michigan Power Co
To:	Document Control Desk, Office of Nuclear Reactor Regulation
References
AEP-NRC-4073, RIS-02-015
Download: ML041470307 (2)

Text

Indiana Michigan Power Company 500 Circle Drive Buchanan, Ml 49107 1373 INDIANA MICHIGAN POWER May 19,2004 AEP:NRC:4073 10 CFR 73.21 NRC Regulatory Issue Summary 2002-15 Docket Nos: 50-315 50-3 16 U. S. Nuclear Regulatory Commission ATTN: Document Control Desk Mail Stop O-PI-17 Washington, DC 20555-0001 Donald C. Cook Nuclear Plant Units 1 and 2 USE OF ENCRYPTION SOFTWARE FOR ELECTRONIC TRANSMISSION OF SAFEGUARDS INFORMATION Pursuant to the requirements of 10 CFR 73.21(g)(3), Donald C. Cook Nuclear Plant (CNP) requests approval to process and transmit Safeguards Information (SGI) using PGP Software (Enterprise, Corporate, or Personal) Desktop Version 8.0, or the latest validated version, developed with PGP software development kit (SDK) 3.0.3. National Institute of Standards and Technology Certificate 394 validates compliance of this SDK with Federal Information Processing Standards 140-2 requirements.

An information protection system for SGI that meets the requirements of 10 CFR 73.21(b) through (i) has been established and is being maintained. Prior to the first use of encryption software for SGI material, written procedures shall be in place to describe, as a minimum: access controls; where and when encrypted communications can be made; how encryption keys, codes, and passwords will be protected from compromise; actions to be taken if the encryption keys, codes, or passwords are, or are suspected to have been, compromised (for example, notification of all authorized users); and how the identity and access authorization of the recipient will be verified.

CNP intends to exchange SGI with the Nuclear Regulatory Commission (NRC),

Nuclear Energy Institute (NEI), and other SGI holders who have received NRC approval to use PGP software. Mr. Robert E. Smith, Information Technology Manager at CNP, is responsible for the overall implementation of the SGI encryption program at CNP. Mr. Agapito Rodriguez, Security Manager, is responsible for collecting, safeguarding, and disseminating the software tools needed for encryption and decryption of SGI.

I-U. S. Nuclear Regulatory Commission AEP:NRC:4073 Page 2 Pursuant to 10 CFR 73.21(g)(3), the transmission of encrypted material to other authorized SGI holders, who have received NRC approval to use PGP software, would be considered a protected telecommunications system. The transmission and dissemination of unencrypted SGI is subject to the provisions of 10 CFR 73.21(g)(1) and (2).

There are no new commitments in this submittal. Should you have any questions or require additional information, please contact Mr. Michael K.

Scarpello, Supervisor of Nuclear Licensing, at (269) 697-5020.

Sincerely, Jo A. Zwolinski Director of Design Engineering and Regulatory Affairs c: J. L. Caldwell, NRC Region III K. D. Curry, Ft. Wayne AEP James Davis, NEI Louis Grosman, NRC/OCIO J. T. King, MPSC J. G. Lamb, NRC Washington DC MDEQ - WHMD/HWRPS Scott Morris, NRC/NISR NRC Resident Inspector Lynn Silvious, NRC/NSIR