System and method for federated security in a energy management system

• US 20050131583A1
• Filed: 11/29/2004
• Published: 06/16/2005
• Est. Priority Date: 12/30/1994
• Status: Active Grant

• Current Assignee: Power Measurement Ltd. (Schneider Electric SE)
• Original Assignee: Power Measurement Ltd. (Schneider Electric SE)
• Inventors: Ransom, Douglas S.
• Granted Patent: US 7,127,328 B2
• Time in Patent Office: Days
• US Class Current: 700/295
• CPC Class Codes: H02J 13/00028 involving the use of Internet protocols
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/68 Special signature format, e.g. XML format
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: Y02E 60/00 Enabling technologies; Technologies with a potential or indirect contribution to GHG emissions mitigation
• CPC Class Codes: Y04S 10/18 using switches, relays or circuit breakers, e.g. intelligent electronic devices [IED]
• CPC Class Codes: Y04S 40/128 involving the use of Internet protocol
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A system and method are disclosed for providing authentication of data source and integrity between applications and users in different Non Affiliated Entities/organizations while limiting access to resources between private networks of energy management devices. A Non Affiliated Entity (“NAE”) is an organization, individual or group of entities that may share some information with each other but are not closely tied, such as a group of competitor utilities. In conducting their operations, two or more applications or organizations (NAEs) may not fully trust one another, but wish to share some EM data and resources. These NAEs identify users, such as EM devices, using a “federated security” scheme that may be based on Kerberos, described above, which allows users from one NAE to be identified to another NAE. Web service security can be combined with federated security based authentication and access control to provide for secure exchange of EM data between users of different NAEs. Federation is a technology and business agreement whereby users (including non-human users such as EM devices and EM software) that are part of a single or separate organization are able to interact through a system of authentication that allows for distributed processing, data sharing and resource sharing.

Claims

1. An energy management system for managing an energy distribution system, the energy management system comprising:

first and second energy management devices, the first energy management device being affiliated with a first entity and the second energy management device being affiliated with a second entity different from the first entity;

wherein at least the second energy management device includes;

an energy distribution system interface operative to couple the second energy management device with at least a portion of the energy distribution system;

a processor coupled with the energy distribution system interface and operative to generate energy management data therefrom; and

a security device coupled with the processor and operative to provide access data identifying entities and affiliates thereof, unaffiliated with the second entity, which are permitted to access the energy management data;

the energy management system further comprising;

a network coupled with the first and second energy management devices and operative to facilitate communications therebetween; and

wherein the first energy management device is operative to request at least a portion of the energy management data from the second energy management device via the network, the request including an assertion of authorization to access the energy management data, the processor being operative to validate the assertion via the access data provided by the security device and limit access to the energy management data based thereon.

2. The energy management system of claim 1, wherein the security device is external to the second energy management device.

3. The energy management system of claim 2, wherein the security device is coupled with the network.

4. The energy management system of claim 1, wherein the second energy management device is further operative to access the access data in the security device to validate the assertion.

5. The energy management system of claim 1, wherein the first energy management device is further operative to access the access data in the security device to validate the assertion and provide the validation to the second energy management device with the request.

6. The energy management system of claim 1, wherein the security device is further operative to intercept the request, validate the request and provide the validation to the second energy management device.

7. The energy management system of claim 1, wherein the security device is affiliated with a third entity different from the first and second entities.

8. The energy management system of claim 1, wherein the security device is affiliated with the first entity.

9. The energy management system of claim 1, wherein the assertion comprises an assertion of identity of the first energy management device.

10. The energy management device of claim 1, wherein the first energy management device is operated by a plurality of users, the access data further identifying which of the plurality of users are permitted to access the energy management data, the request comprising identity of a particular user of the plurality of users which generated the request and the assertion further comprising an assertion of authorization to access the energy management data by the particular user.

11. The energy management system of claim 1, wherein the energy management data comprises first and second portions, the access data further identifying entities and affiliates thereof, unaffiliated with the second entity, which are permitted to access the first portion, the second portion or a combination thereof.

12. The energy management system of claim 1, wherein the energy management data comprises billing data.

13. The energy management system of claim 1, wherein the energy management data comprises energy data

14. The energy management system of claim 1, wherein the access data provided by the security device is implemented using Kerberos.

15. The energy management system of claim 1, wherein the access data provided by the security device is implemented using Microsoft Passport.

16. The energy management system of claim 1, wherein the access data provided by the security device is implemented using Security Assertion Markup Language.

17. The energy management system of claim 1, wherein an affiliate of an entity comprises a human user of the first energy management device.

18. The energy management system of claim 1, wherein at least one of the first and second energy management devices comprises an intelligent electronic device.

19. The energy management system of claim 1, wherein the energy management data comprises authenticatable data.

20. The energy management system of claim 1, wherein the energy management data comprises encrypted data.

21. The energy management system of claim 1, wherein the energy management data comprises non-repudiatable data.

22. The energy management system of claim 1, wherein the energy management data comprises private data.

23. The energy management system of claim 1, wherein the energy management system is operative to process energy management data in a secure manner between the first and second energy management devices.

24. The energy management system of claim 1, wherein the first and second energy management devices communicate over the network using an XML web service.

25. A method of managing an energy distribution system, the system comprising first and second energy management devices and a network coupled with the first and second energy management devices and operative to facilitate communications therebetween, the first energy management device being affiliated with a first entity and the second energy management device being affiliated with a second entity different from the first entity, wherein at least the second energy management device includes an energy distribution system interface operative to couple the second energy management device with at least a portion of the energy distribution system and a processor coupled with the energy distribution system interface and operative to generate energy management data therefrom, the method comprising:

providing access data identifying entities and affiliates thereof, unaffiliated with the second entity, which are permitted to access the energy management data;

requesting by the first energy management device at least a portion of the energy management data from the second energy management device via the network, the request including an assertion of authorization to access the energy management data; and

validating, by the processor, the assertion via the provided access data and limiting access to the energy management data based thereon.

26. The method of claim 25, wherein the providing further comprises providing the access data from a source external to the second energy management device.

27. The method of claim 26, wherein the providing further comprises providing the access data via the network.

28. The method of claim 25, wherein the validating further comprises accessing, by the second energy management device, the access data to validate the assertion.

29. The method of claim 25, further comprising accessing, by the first energy management device, the access data to validate the assertion and providing the validation to the second energy management device with the request.

30. The method of claim 25, further comprising intercepting the request, validating the request and providing the validation to the second energy management device.

31. The method of claim 25, wherein the access data is provided by a third entity different from the first and second entities.

32. The method of claim 25, wherein the access data is provided by the first entity.

33. The method of claim 25, wherein the assertion comprises an assertion of identity of the first energy management device.

34. The method of claim 25, wherein the first energy management device is operated by a plurality of users, the access data further identifying which of the plurality of users are permitted to access the energy management data, the request comprising identity of a particular user of the plurality of users which generated the request and the assertion further comprising an assertion of authorization to access the energy management data by the particular user.

35. The method of claim 25, wherein the energy management data comprises first and second portions, the access data further identifying entities and affiliates thereof, unaffiliated with the second entity, which are permitted to access the first portion, the second portion or a combination thereof.

36. The method of claim 25, wherein the energy management data comprises billing data.

37. The method of claim 25, wherein the energy management data comprises energy data

38. The method of claim 25, wherein the access data provided by the security device is implemented using Kerberos.

39. The method of claim 25, wherein the access data provided by the security device is implemented using Microsoft Passport.

40. The method of claim 25, wherein the access data provided by the security device is implemented using Security Assertion Markup Language.

41. The method of claim 25, wherein an affiliate of an entity comprises a human user of the first energy management device.

42. The method of claim 25, wherein at least one of the first and second energy management devices comprises an intelligent electronic device.

43. The method of claim 25, wherein the energy management data comprises authenticatable data.

44. The method of claim 25, wherein the energy management data comprises encrypted data.

45. The method of claim 25, wherein the energy management data comprises non-repudiatable data.

46. The method of claim 25, wherein the energy management data comprises private data.

47. The method of claim 25, wherein the energy management system is operative to process energy management data in a secure manner between the first and second energy management devices.

48. The method of claim 25, wherein the first and second energy management devices communicate over the network using an XML web service.

49. An energy management system for managing an energy distribution system, the energy management system comprising:

first and second energy management devices, the first energy management device being affiliated with a first entity and the second energy management device being affiliated with a second entity different from the first entity;

wherein at least the second energy management device includes;

means for interfacing the second energy management device with at least a portion of the energy distribution system;

means for generating energy management data therefrom; and

means for providing access data identifying entities and affiliates thereof, unaffiliated with the second entity, which are permitted to access the energy management data;

the energy management system further comprising;

network means coupled with the first and second energy management devices for facilitating communications therebetween; and

wherein the first energy management device is operative to request at least a portion of the energy management data from the second energy management device via the network, the request including an assertion of authorization to access the energy management data, the second energy management device further comprising means for validating the assertion via the access data provided and limiting access to the energy management data based thereon.