Smart grid secure communications method and apparatus

• US 10,284,373 B2
• Filed: 12/12/2014
• Issued: 05/07/2019
• Est. Priority Date: 12/13/2013
• Status: Active Grant

• Current Assignee: University of North Dakota (North Dakota University System)
• Original Assignee: University of North Dakota (North Dakota University System)
• Inventors: Faruque, Saleh, Ranganathan, Prakash
• Primary Examiner(s): Hoffman, Brandon S
• Assistant Examiner(s): Anderson, Michael D
• Application Number:
  US15/103,910
• Publication Number:
  US 20160315774A1
• Time in Patent Office: 1,607 Days
• Field of Search: 713181
• CPC Class Codes: H04K 1/003 by varying carrier frequency at or within predetermined or random intervals H04K1/04 takes precedence
• CPC Class Codes: H04K 2203/18 for wireless local area networks or WLAN
• CPC Class Codes: H04K 3/25 based on characteristics of target signal or of transmission as countermeasure against surveillance H04K3/827, e.g. using direct sequence spread spectrum or fast frequency hopping spread spectrum techniques H04B1/69
• CPC Class Codes: H04K 3/827 using characteristics of target signal or of transmission as countermeasure against jamming H04K3/25, e.g. using direct sequence spread spectrum or fast frequency hopping spread spectrum techniques H04B1/69
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

Apparatus and methods performing secure communications in an energy delivery system. Energy delivery systems may include phasor measurement units (PMU), phasor data concentrators (PDC) along with power generation, transmission and consumption equipment. The PMU and PDC may communicate in a grid network over secured wired or wireless communication protocols. Embodiments may include utilizing spread spectrum communication between PMU devices and PDC devices to sustain energy delivery functionality during a communications attack. Communications security may include a cryptographic key management scheme for secure PMU and PDC communication and identification. Embodiments may include clustering of PMU and PDC data for analysis and real-time presentation to grid operators. Embodiments may include clustering of PMU devices in a hexagonal geometry to provide for frequency reuse among devices with directional antenna.

Claims

1. A secure communication system comprising:

a plurality of phasor measurement units (PMUs) coupled to a power grid, the PMUs being configured to collect a plurality of data parameters from the power grid;

a first radio including a directional antenna coupled to each one of the plurality of PMUs;

a phasor data concentrator (PDC) configured to receive and analyze the plurality of data parameters; and

a second radio coupled to the PDC, the second radio being configured to receive the plurality of data parameters from the first radio and provide the plurality of data parameters to the PDC;

wherein the first radio and the second radio are spread spectrum radios configured to communicate over secure channels, the secure channels utilizing a passcode configured in the first radio and the second radio; and

the plurality of PMUs are organized in a hexagonal geometry to provide for frequency reuse among the individual PMU devices.

2. The secure communication system of claim 1, wherein the first radio and the second radio are anti-jam (AJ) and low probability of intercept (LPI) spread spectrum radios.

3. The secure communication system of claim 1, wherein the first radio and the second radio are frequency hopping radios.

4. The secure communication system of claim 1, wherein the PDU and the PDC both include a cipher based message authentication code, and exchange the cipher based message authentication code as part of a handshake protocol before providing or receiving the plurality of data parameters.

5. The secure communication system of claim 4, wherein the PDU and the PDC are configured to ignore communications that do not include the cipher based message authentication code.

6. A method comprising:

receiving, at a phasor data concentrator (PDC), sensor measurements from a plurality of phasor measurement units (PMUs) in a power grid, the PMUs each including a directional antenna and being configured to collect a plurality of data parameters from the power grid;

sorting the plurality of data parameters based on individual PMUs in the plurality of PMUs;

sorting the plurality of data parameters based on an individual parameter; and

displaying a status of one or more grid equipment monitored by the plurality of PMUs;

wherein the PMUs are organized in a hexagonal geometry to provide for frequency reuse among the PMU devices.

7. The method of claim 6, wherein, the PMUs each individually collect the plurality of data parameters from separate devices in the power grid.

8. The method of claim 6, wherein, the plurality of data parameters include at least one of:

a voltage, a frequency, or a phase angle.

9. The method of claim 6, further comprising:

analyzing the plurality of data parameters based on location information of grid equipment monitored by an individual PMU.

10. The method of claim 6, further comprising:

determining an equipment status by of one or more grid equipment monitored by the plurality of PMUs based on a density based clustering analysis of the data parameters.

11. The method of claim 10, wherein the equipment status includes a unit circle diagram depicting three phi voltage phasors.

12. The method of claim 10, further comprising:

displaying a three-dimensional representation of the data parameters based on the density clustering analysis of the data parameters.

13. At least one machine readable storage medium comprising a plurality of instructions that when executed by a computing device cause the computing device to:

receive, at a phasor data concentrator (PDC), sensor measurements from a plurality of phasor measurement units (PMUs) in a power grid, the PMUs each including a directional antenna and being configured to collect a plurality of data parameters from the power grid;

sort the plurality of data parameters based on individual PMUs in the plurality of PMUs;

sort the plurality of data parameters based on an individual parameter; and

display a status of one or more grid equipment monitored by the plurality of PMUs;

wherein the PMUs are organized in a hexagonal geometry to provide for frequency reuse among the PMU devices.

14. The machine readable storage medium of claim 13, wherein, the PMUs each individually collect the plurality of data parameters from separate devices in the power grid.

15. The machine readable storage medium of claim 13, wherein, the plurality of data parameters include at least one of:

a voltage, a frequency, or a phase angle.

16. The machine readable storage medium of claim 13, further comprising instructions that when executed by the computing device cause the computing device to:

analyze the plurality of data parameters based on location information of grid equipment monitored by an individual PMU.

17. The machine readable storage medium of claim 13, further comprising instructions that when executed by the computing device cause the computing device to:

determine an equipment status by of one or more grid equipment monitored by the plurality of PMUs based on a density based spatial clustering analysis of the data parameters.

18. The machine readable storage medium of claim 13, wherein the equipment status includes a unit circle diagram depicting three phi voltage phasors.

19. The machine readable storage medium of claim 13, further comprising instructions that when executed by the computing device cause the computing device to:

display a three-dimensional representation of the data parameters based on the density clustering analysis of the data parameters.

20. An electrical power grid monitoring system comprising:

a plurality of phasor measurement units (PMUs) each including a directional antenna and being configured to collect a plurality of data parameters from equipment in the electrical power grid;

a phasor data concentrator (PDC) wirelessly coupled to the plurality of PMUs by a secure network connection, such that the PDC receives the plurality of data parameters from the PMUs over the secure network connection, the PDC configured to;

collect the plurality of data parameters from each PMU;

sort the plurality of data parameters based on individual PMUs in the plurality of PMUs;

sort the plurality of data parameters based on an individual parameter;

monitor the secure network connection for communications that lack an identifier that is determined to correspond to at least one of the plurality of PMUs;

perform a density based spatial clustering of the data parameters;

wherein the PMUs are organized in a hexagonal geometry to provide for frequency reuse among the PMU devices.

21. The system of claim 20, wherein the plurality of data parameters include at least one of:

a voltage, a frequency, or a phase angle.

22. The system of claim 20, wherein the PDC is further configured to:

determine an equipment status based on the density based spatial clustering analysis of the data parameters.