SYSTEM AND METHOD FOR COMMUNICATION IN A NETWORK

• US 20130086635A1
• Filed: 09/30/2011
• Published: 04/04/2013
• Est. Priority Date: 09/30/2011
• Status: Abandoned Application

• Current Assignee: General Electric Company
• Original Assignee: General Electric Company
• Inventors: Hershey, John Erik, Barnett, Bruce Gordon, Dell'Anno, Michael Joseph, Thanos, Daniel
• Application Number:
  US13/249,346
• Publication Number:
  US 20130086635A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A method for providing secure communication in an electrical power distribution network includes detecting an enhanced threat level in the electrical power distribution network. A plurality of configuration command messages including information related to a common configuration command are received. The common configuration commands are certified if the plurality of configuration command messages have originated from a threshold number of command sites. The method further includes executing the certified configuration command.

Claims

1. A method for providing secure communications in an electrical power distribution network, the method comprising:

detecting a threat level in the electrical power distribution network;

receiving a plurality of configuration command messages including information related to a common configuration command shared by a plurality of command sites over a communication network;

certifying the common configuration command if the plurality of configuration command messages have originated from a threshold number of command sites and have same data; and

executing the certified configuration command.

2. The method of claim 1, wherein detecting the threat level comprises monitoring and testing the electrical power distribution network for a hacker attack.

3. The method of claim 1, wherein information related to a common configuration command comprises a common configuration command and a hash value of the common configuration command.

4. The method of claim 3 wherein the common configuration command includes an action to be performed and steps of performing the action.

5. The method of claim 1, wherein the threshold number for command sites is determined apriori.

6. The method of claim 1, wherein the threshold number for command sites is determined by at least one of a threat response module or the command sites or a host device.

7. The method of claim 1, wherein the common configuration command comprises a verified common configuration command.

8. The method of claim 7, wherein the verified common configuration command is obtained by verifying the authenticity of the common configuration command by the threshold number of command sites.

9. The method of claim 8, wherein verifying the authenticity of the common configuration command includes checking the presence of the common configuration commands in data stores of the threshold number of command sites.

10. The method of claim 7, wherein the verified common configuration command is obtained by verifying the authenticity of the common configuration command by a threat response module in consultation with a central coordinator.

11. A communication system for an electrical power distribution network, comprising:

a threat response module for detecting a threat level in the electrical power distribution network;

a plurality of command sites for transmitting a plurality of configuration command messages including information related to a common configuration command shared by a plurality of command sites to a host device over a communication network;

wherein the host device is configured to;

certify the common configuration command if the plurality of configuration command messages have originated from a threshold number of command sites and have same data; and

execute the certified configuration command.

12. The communication system of claim 11, wherein host devices comprise utility meters associated with utility customers, relays, reclosers, line switches, capacitor banks or honeypots.

13. The communication system of claim 11, wherein the threat response module includes active or passive programs to probe the electrical power distribution network for vulnerability to cyber threats from hacker.

14. The communication system of claim 11, wherein the common configuration command comprises a verified common configuration command.

15. The communication system of claim 14, wherein the verified common configuration command is obtained by verifying the authenticity of the common configuration command by a threshold number of command sites.

16. The communication system of claim 14, wherein the verified common configuration command is obtained by verifying the authenticity of the common configuration command by the threat response module in consultation with a central coordinator.

17. The communication system of claim 11, wherein the information related to a common configuration command comprises a common configuration command and a hash value of the common configuration command.

19. The communication system of claim 11, wherein the threshold number for command sites is determined by the threat response module or the command sites or the host device.

18. (canceled)

20. An apparatus for providing secure communications, the apparatus comprising:

at least one memory that stores computer-executable instructions; and

at least one processor configured to access the at least one memory, wherein the at least one processor is configured to execute the computer-executable instructions to;

detect a threat level in an electrical power distribution network;

receive a plurality of configuration command messages including information related to a common configuration command shared by a plurality of command sites;

certify the common configuration command if the plurality of configuration command messages have originated from a threshold number of command sites and have same data; and

execute the certified configuration command.

21. The apparatus of claim 20, wherein the threshold number for command sites is determined apriori.