System and method for securing energy management systems

• US 20040193329A1
• Filed: 01/05/2004
• Published: 09/30/2004
• Est. Priority Date: 12/30/1994
• Status: Active Grant

• Current Assignee: Power Measurement Ltd. (Schneider Electric SE)
• Original Assignee: Power Measurement Ltd. (Schneider Electric SE)
• Inventors: Yeo, Jeffery W., Forth, J. Bradford, Chivers, David A., Ransom, Douglas S., Teachman, Michael E., Ki, Chuen Shan Simon, Giles, David W.
• Granted Patent: US 7,188,003 B2
• Time in Patent Office: Days
• US Class Current: 700/286
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A power management architecture for an electrical power distribution system, or portion thereof, is disclosed. The architecture includes multiple intelligent electronic devices (“IED'"'"'s”) distributed throughout the power distribution system to manage the flow and consumption of power from the system. The IED'"'"'s are linked via a network to back-end servers. Power management application software and/or hardware components operate on the IED'"'"'s and the back-end servers and inter-operate via the network to implement a power management application. The architecture provides a scalable and cost effective framework of hardware and software upon which such power management applications can operate to manage the distribution and consumption of electrical power by one or more utilities/suppliers and/or customers which provide and utilize the power distribution system. Security mechanisms are further provided which protect and otherwise ensure the authenticity of communications transmitted via the network in furtherance of the management of the distribution and consumption of electrical power by the architecture.

Claims

1. An energy management device for use in an energy management architecture for managing an energy distribution system, said energy management architecture comprising a network, said energy management device comprising:

an energy distribution system interface operative to couple said energy management device with at least a portion of said energy distribution system;

a network interface operative to couple said energy management device with said network for transmitting outbound communications to said network and receiving inbound communications from said network, said inbound communications comprising first energy management data and said outbound communications comprising second energy management data;

a processor coupled with said network interface and said energy distribution system interface, said processor operative to perform at least one energy management function on said at least said portion of said energy distribution network via said energy distribution system interface, said processor further operative to process said first energy management data and generate said second energy management data as a function of said energy management function;

wherein at least one of said inbound communications comprises a secured inbound communications, said network interface further comprising a security module operative to secure said outbound communications and validate said at least one secured inbound communications.

2. The energy management device of claim 1, wherein said at least one secured inbound communication is at least encrypted, said security module further operative to at least one of:

a. selectively encrypt said outbound communications; and

b. decrypt said at least one secured inbound communication.

3. The energy management device of claim 2, wherein said security module is capable of encrypting and decrypting using at least one of Secure Multipurpose Internet Mail Extensions (“

S/MIME”

), Extensible Markup Language (“

XML”

) Encryption, Secure Sockets Layers (“

SSL”

), and Pretty Good Privacy (“

PGP”

).

4. The energy management device of claim 2, wherein said security module is capable of selectively encrypting said outbound communication for decryption only by an intended recipient of said outbound communication.

5. The energy management device of claim 2, wherein said security module is capable of selectively encrypting said outbound communication for transmission over a portion of said network.

6. The energy management device of claim 2, wherein said at least one secured inbound communication is further at least signed, said security module further operative to at least one of:

a. selectively sign said outbound communications prior to encryption;

b. selectively sign said encrypted outbound communications;

c. authenticate said at least one secured inbound communication prior to decrypting; and

d. authenticate said at least one secured inbound communication after decrypting.

7. The energy management device of claim 6, wherein said signed encrypted outbound communications comprises at least one of a public key, a Public Key Infrastructure (“

PKI”

) certificate, a message digest and an Extensible Markup Language (“

XML”

) signature.

8. The energy management device of claim 6, further comprising a memory coupled with said processor and storing a private key, wherein said security module is further operative to retrieve a first public key of a recipient of said outbound communication via said network if not already obtained, said security module is further operative to one of:

a. encrypt said outbound communications based on said first public key and sign said encrypted outbound communications based on said private key; and

b. sign said outbound communications with said private key and encrypt said signed outbound communications with said public key; and

further wherein said security module is further operative to retrieve a second public key of a sender of said inbound communication via said network if not already obtained, said security module being further operative to one of;

c. decrypt said at least one secured inbound communications based on said private key and authenticate said decrypted at least one secured inbound communications based on said second public key; and

d. authenticate said at least one secured inbound communications based on said second public key and decrypt said authenticated at least one secured inbound communications based on said private key.

9. The energy management device of claim 2, wherein said outbound communications comprises at least one electronic mail message.

10. The energy management device of claim 1, wherein said at least one secured inbound communication is at least signed, said security module further operative to at least one of:

a. selectively sign said outbound communications; and

b. authenticate said at least one secured inbound communication.

11. The energy management device of claim 10, wherein said security module is capable of at least one of signing and authenticating using at least one of PGP, S/MIME, XML Signature, and SSL protocols.

12. The energy management device of claim 10, wherein said second energy management data is arranged as a plurality of data sets, each of said data sets including at least one data element, said security module being further operative to selectively sign each of said plurality of data sets.

13. The energy management device of claim 10, wherein said second energy management data comprises a plurality of data elements, said security module being further operative to selectively sign each of said plurality of data elements.

14. The energy management device of claim 10, wherein said security module is further operative to periodically re-authenticate said at least one secured inbound communication after receipt.

15. The energy management device of claim 10, wherein said outbound communication comprises Extensible Hypertext Markup Language (“

XHTML”

) data, said security module further comprising an XHTML module operative to sign said outbound communication using XML signing.

16. The energy management device of claim 10, wherein said security module is further operative to exchange certificates with the sender of the at least one secured communication prior to said signing.

17. The energy management device of claim 1, wherein said at least one secured inbound communication is at least compressed, said security module being further operative to decompress said at least one secured inbound communication after validation thereof.

18. The energy management device of claim 1, wherein said security module is further operative to compress said outbound communications prior to the securing thereof.

19. The energy management device of claim 1, wherein said processor is further operative to generate a first portion of said second energy management data prior to generating a second portion of said second energy management data, said network interface being further operative to generate a first portion of said outbound communication including said first portion of said second energy management data prior to generating a second portion of said outbound communication including said second portion of said second energy management data, and said security module being further operative to secure said first portion of said outbound communication prior to securing said second portion of said outbound communication.

20. The energy management device of claim 19, wherein said network interface is further operative to transmit said secured first portion of said outbound communication independent of transmitting said secured second portion of said outbound communication.

21. The energy management device of claim 1, wherein said network interface is further operative to generate and store said outbound communications when said second energy management data is generated and secure and transmit said outbound communications when said energy management device is not performing said at least one energy management function.

22. The energy management device of claim 1, wherein said secured outbound communications are capable of being received by a first recipient and retransmitted to a subsequent recipient without compromising authentication by said subsequent recipient.

23. The energy management device of claim 22, wherein said first recipient may alter the format of said outbound communications for retransmission and retransmit said reformatted outbound communications to said subsequent recipient without compromising authentication by said subsequent recipient.

24. The energy management device of claim 1, further comprising a memory coupled with said processor, said memory storing a key value and program code executed by said processor to implement said at least one energy management function, said stored program code further being associated with said key value, wherein said processor is further operative to validate said stored program code based on said stored key value.

25. A method of communicating by an energy management device, said energy management device for use in an energy management architecture for managing an energy distribution system, said energy management architecture comprising a network, said method comprising:

coupling said energy management device with at least a portion of said energy distribution system;

coupling said energy management device with said network wherein said energy management device is capable of transmitting outbound communications to said network and receiving inbound communications from said network, said inbound communications comprising first energy management data and said outbound communications comprising second energy management data, wherein at least one of said inbound communications comprises a secured inbound communications;

performing at least one energy management function on said at least said portion of said energy distribution network via said energy distribution system interface, processing said first energy management data and generating said second energy management data as a function of said energy management function; and

securing said outbound communications and validating said at least one secured inbound communications.

26. The method of claim 25, wherein said at least one secured inbound communication is at least encrypted, said method further comprising at least one of:

encrypting, selectively, said outbound communications; and

decrypting said at least one secured inbound communication.

27. The method of claim 26, wherein said encrypting and decrypting further comprises using at least one of Secure Multipurpose Internet Mail Extensions (“

S/MIME”

), Extensible Markup Language (“

XML”

) Encryption, Secure Sockets Layers (“

SSL”

), and Pretty Good Privacy (“

PGP”

).

28. The method of claim 26, wherein said encrypting further comprises encrypting said outbound communication for decryption only by an intended recipient of said outbound communication.

29. The method of claim 26, wherein said encrypting further comprises selectively encrypting said outbound communication for transmission over a portion of said network.

30. The method of claim 26, wherein said at least one secured inbound communication is further at least signed, said method further comprising at least one of:

signing, selectively, said encrypted outbound communications;

signing, selectively, said outbound communications prior to encryption;

authenticating said at least one secured inbound communication prior to said decrypting; and

authenticating said at least one secured inbound communication after decryption.

31. The method of claim 30, wherein said signed encrypted outbound communications comprises at least one of a public key, a Public Key Infrastructure (“

PKI”

) certificate, a message digest and an Extensible Markup Language (“

XML”

) signature.

32. The method of claim 30, further comprising at least one of:

retrieving a first public key of a recipient of said outbound communication via said network if not already obtained;

encrypting said outbound communication based on said first public key and signing said encrypted outbound communication based on a stored private key;

signing said outbound communication based on said stored private key and encrypting said signed outbound communication based on said first public key;

retrieving a second public key of a sender of said inbound communication via said network if not already obtained;

decrypting said inbound communication based on said second public key and authenticating said decrypted inbound communication based on said stored private key; and

authenticating said inbound communication based on said stored private key and decrypting said authenticated inbound communication based on said second public key.

33. The method of claim 36, wherein said outbound communications comprises at least one electronic mail message.

34. The method of claim 25, wherein said at least one secured inbound communication is at least signed, said method further comprising at least one of:

signing, selectively, said outbound communications; and

authenticating said at least one secured inbound communication.

35. The method of claim 34, wherein said signing and authenticating further comprise signing and authenticating using at least one of PGP, S/MIME, XML Signature, and SSL protocols.

36. The method of claim 34,wherein said second energy management data is arranged as a plurality of data sets, each of said data sets including at least one data element, said method further comprising:

signing, selectively, each of said plurality of data sets.

37. The method of claim 34, wherein said second energy management data comprises a plurality of data elements, said method further comprising:

signing, selectively, each of said plurality of data elements.

38. The method of claim 34, wherein said outbound communication comprises Extensible Hypertext Markup Language (“

XHTML”

) data, said method further comprising signing said outbound communication using Extensible Markup Language (“

XML”

) signing.

39. The method of claim 34, further comprising:

re-authenticating, periodically, said at least one secured inbound communication.

40. The method of claim 34 further comprising:

exchanging certificates with the sender of the at least one secured communication prior to said signing.

41. The method of claim 25, wherein said at least one secured inbound communication is at least compressed, said method further comprising decompressing said at least one secured inbound communication after validation thereof.

42. The method of claim 25, said method further comprising compressing said outbound communications prior to the securing thereof.

43. The method of claim 25, said method further comprising:

generating a first portion of said second energy management data prior to generating a second portion of said second energy management data;

generating a first portion of said outbound communication including said first portion of said second energy management data prior to generating a second portion of said outbound communication including said second portion of said second energy management data; and

securing said first portion of said outbound communication prior to securing said second portion of said outbound communication.

44. The method of claim 43, said method further comprising transmitting said secured first portion of said outbound communication independent of transmitting said secured second portion of said outbound communication.

45. The method of claim 25, said method further comprising generating and storing said outbound communications when said second energy management data is generated and securing and transmitting said outbound communications when said energy management device is not performing said at least one energy management function.

46. The method of claim 25, wherein said secured outbound communications are capable of being received by a first recipient and retransmitted to a subsequent recipient without compromising authentication by said subsequent recipient.

47. The method of claim 46, further comprising:

altering the format of said outbound communications by said first recipient for retransmission and retransmitting said reformatted outbound communications to said subsequent recipient without compromising authentication by said subsequent recipient.

48. The method of claim 25, further comprising

storing a key value;

storing program code associated with said key value and executable to implement said at least one energy management function;

validating, periodically, said stored program code based on said stored key value.

49. An energy management device for use in an energy management architecture for managing an energy distribution system, said energy management architecture comprising a network, said energy management device comprising:

an energy distribution system interface means for coupling said energy management device with at least a portion of said energy distribution system;

a network interface means for coupling said energy management device with said network for transmitting outbound communications to said network and receiving inbound communications from said network, said inbound communications comprising first energy management data and said outbound communications comprising second energy management data;

a processor means, coupled with said network interface and said energy distribution system interface, for performing at least one energy management function on said at least said portion of said energy distribution network via said energy distribution system interface, processing said first energy management data and generating said second energy management data as a function of said energy management function;

wherein at least one of said inbound communications comprises a secured inbound communications, said network interface means further comprising a security module means for securing said outbound communications and validating said at least one secured inbound communications.