Go To Content Go To Menu

Smart Metering

BDEW Web API Cryptography for Suppliers, Grid Operators, and MSBs

The BDEW Web API has been implemented in the MTG CryptoController (MCC BDEW-API). The system thus enables MaLo-ID queries (API0003) for the LFW24 as well as the secure transmission of switching commands (API0001/API0002) from suppliers and grid operators to the MSB. Future Web API services will be made available centrally in a timely manner.

We are happy to assist you by phone:

+49 6151 8000-0
Call us now Call us now
Book Consultation Book Consultation

Get your free consultation with one of our experts!

Request Appointment
Request Info Request Info

Get in touch and receive more information personalized to your
own solution!

Contact us now
MTG CryptoController (MCC)

MCC BDEW-API for suppliers, grid operators, and MSBs

Scenario for on-premises operation of the MCC BDEW API – also available as a service at DARZ  (© MTG AG)

Scenario for on-premises operation of the MCC BDEW API – also available as a service at DARZ (© MTG AG)

Operating Models: On-Premises and Managed Service

The solution offers maximum flexibility in deployment and adapts to the individual infrastructure and security requirements of market participants:

On-Premises Operation

For customers – such as grid operators – who prefer to operate and control the MTG CryptoController (MCC) and its associated components within their own IT infrastructure.

 

Managed Service (energy@Web-API Services at DARZ)

Alternatively, the BDEW Web API is available as a full-service solution. Operations take place in the highly secure data center of our long-standing partner, DARZ GmbH. This approach minimizes the customer’s own operational and maintenance efforts while ensuring maximum regulatory compliance.

BDEW Web API Identifiers API 0001, API 0002, and API 0003

In accordance with Federal Network Agency specification BK6-22-128, the BDEW has specified a Web API and a directory service. The goal is to standardize the exchange of information in the energy sector in a manner that complies with data protection regulations and ensures interoperability. Communication is based on certificates from the Smart Metering PKI (SM-PKI) in accordance with the requirements of the corresponding Certificate Policy (CP).

The MTG CryptoController (MCC BDEW-API) fully implements these regulatory requirements and extends the system and its interfaces to meet new market demands.

Core Functional Components of the Web API

The MCC extension covers the key energy industry processes and API identifiers:

  • API0003 (LFW24): Secure retrieval of the MaLo ID as part of the accelerated 24-hour supplier switch.
  • API0001 & API0002: Secure and compliant transmission of switching commands by suppliers and grid operators to the responsible metering point operator (MSB) in accordance with the universal processes (BK6-22-128).
  • Future-proof: API identifiers and extensions specified by the BDEW in the future can be flexibly integrated into the MCC platform.

Architecture and Integration Concept

The MCC’s architectural approach is based on a strict separation of the application and security layers. All cryptographic and regulatory requirements are centrally encapsulated by the MCC middleware.

MCC in the OSI Reference Model according to BSI TR-03109 in the BDEW Web API (© MTG AG)

MCC in the OSI Reference Model according to BSI TR-03109 in the BDEW Web API (© MTG AG)

Advantages of this architecture

  • Low complexity: Existing applications (e.g., ERP systems for supplier switching or grid control center and management applications) connect to the MCC via simple, standardized interfaces.

  • Focus on process logic: Line-of-business applications do not need to implement complex SM-PKI functionalities or security mechanisms themselves.

  • Centralized security: The MCC handles TLS-secured communication, certificate validation, signature verification, and the necessary encryption and decryption processes in accordance with BDEW specifications and the Smart Meter PKI Certificate Policy.

Flexibility in the Directory Service

The MCC’s integrated directory service ensures that market participants can manage and retrieve the address and certificate data required for interoperable information exchange in compliance with the BDEW API. The architecture offers maximum flexibility for different IT infrastructures and service scenarios:

Integrated BDEW API Directory Service

The MCC provides the associated directory service, which resolves requests for API identifiers from external market participants and maps them to the corresponding web service. If the API identifier is not registered locally, the request is forwarded to the relevant BDEW API directory service.

Support for Third-Party Systems (External Services)

The middleware is not limited to the internal directory service. It can optionally be operated seamlessly with existing external directory services from third-party providers.

Intelligent Redirection (Redirect Function)

Requests to the directory service can be dynamically redirected to external systems or higher-level directories.

Multi-provider scenarios for market partners

Market partners can use separate services or service providers for different application IDs. The MCC controls the routing of requests with a high degree of flexibility – for example, the MaLo ID query (API0003) can be processed via a different directory service than the transmission of switching commands (API0001/API0002).

What can we do for you?

For further information feel free to contact us!

Lädt …