System and method for seal tamper detection for intelligent electronic devices

• US 7,644,290 B2
• Filed: 03/30/2004
• Issued: 01/05/2010
• Est. Priority Date: 03/31/2003
• Status: Active Grant

• Current Assignee: Power Measurement Ltd. (Schneider Electric SE)
• Original Assignee: Power Measurement Ltd. (Schneider Electric SE)
• Inventors: Etheridge, Hal E., Köster, Theresa M., Ransom, Douglas S., Harding, Stewart J., Hirschbold, Markus F., Lightbody, Simon H.
• Primary Examiner(s): Moazzami; Nasser G
• Assistant Examiner(s): Louie; Oscar A.
• Application Number:
  US10/813,369
• Publication Number:
  US 20050039040A1
• Time in Patent Office: 2,107 Days
• Field of Search: 713/194, 713/189, 713/193, 726/2, 726/16, 726/26, 726/27, 726 34- 36, 380/59, 705/63, 340/500, 340540-542, 3405451-5459, 340547-552, 340555-557, 340561-567, 3405681-5683, 340/568.4, 340/568.8
• US Class Current: 713/194
• CPC Class Codes: G01R 22/066 Arrangements for avoiding or indicating fraudulent use
• CPC Class Codes: G06F 21/87 by means of encapsulation, e.g. for integrated circuits
• CPC Class Codes: G06Q 50/06 Energy or water supply
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A system and method for detecting and responding to device tampering in an Energy Management (“EM”) device is disclosed. The EM device is provided with mechanisms to detect and indicate unauthorized tampering with the device. Further, in response to detected unauthorized tampering, the device may take actions to protect the integrity of data generated by the device as well as protect any confidential data stored within the device. Such actions may include preventing further device operation, generating warnings to the device owner/user, marking subsequently generated data as suspect, destroying stored confidential data, etc.

Claims

1. An energy management device used in an energy management architecture for managing an energy distribution system, said energy management architecture including a network, said energy management device comprising:

an energy distribution system interface configured to couple said energy management device with at least a portion of said energy distribution system;

a network interface configured to couple said energy management device with said network for transmitting outbound communications to said network, said outbound communications comprising energy management data;

a processor coupled with said network interface and said energy distribution system interface, configured to generate said energy management data;

an enclosure which surrounds said energy management device and protects said energy management device from tampering;

a tamper prevention seal coupled with said enclosure, which detects unauthorized access to said enclosure;

a seal tamper detection unit coupled with said processor and said tamper prevention seal and configured to detect when said tamper prevention seal indicates that unauthorized access has occurred; and

a memory coupled with said processor, said memory configured to store confidential data, wherein said confidential data comprises a private key configured to sign said energy management data,

wherein said processor is further configured to maintain said energy management data, but prevent said transmitting of said energy management data through said network interface, when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

2. The energy management device of claim 1, wherein said tamper seal comprises a revenue seal.

3. The energy management device of claim 1, wherein said tamper seal comprises a metering point id seal.

4. The energy management device of claim 1, wherein said processor is further configured to prevent access to said confidential data when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

5. The energy management device of claim 1, wherein said processor is further configured to send a message warning that said tamper prevention seal has been tampered with through said network interface when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred, and to sign said message with said private key.

6. The energy management device of claim 1, wherein said confidential data further comprises a certificate configured to sign said energy management data.

7. The energy management device of claim 1, wherein said processor is further configured to prevent said transmitting of signed energy management data through said network interface when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

8. The energy management device of claim 1, wherein said processor is further configured to send a message warning that said tamper prevention seal has been tampered with through said network interface when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

9. The energy management device of claim 1, wherein said processor is further configured to block external access to said energy management device when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

10. The energy management device of claim 1, wherein said processor is further configured to create an audit log when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

11. The energy management device of claim 10, wherein said processor is further configured to at least one of hashing and encrypting said audit log.

12. The energy management device of claim 1, wherein said processor is further configured to set off a security alarm when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

13. The energy management device of claim 1, further comprising a display coupled with said processor and configured to visually display text, and wherein said processor is further configured to place a warning message on said display when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

14. The energy management device of claim 1, wherein said seal tamper detection unit further comprises a sensor configured to detect that said tamper prevention seal is broken.

15. The energy management device of claim 14, wherein said sensor comprises a limit switch.

16. The energy management device of claim 14, wherein said sensor comprises a proximity sensor.

17. The energy management device of claim 16, wherein said proximity sensor comprises at least one of a pin, an optical proximity sensor, an optical motion detector, a grounding tab, an ultrasonic sensor, an electro-magnetic sensor and a gyroscope.

18. The energy management device of claim 14, wherein said sensor comprises at least one of a camera and a video camera.

19. The energy management device of claim 1, further comprising an energy storage device coupled with said seal tamper detection unit and configured to provide power to said seal tamper detection unit in power outage situations.

20. The energy management device of claim 1, wherein said processor is further configured to perform at least one energy management function on said at least a portion of said energy distribution system via said energy distribution system interface, said processor further configured to generate said energy management data as a function of said energy management function.

21. The energy management device of claim 1, further comprising:

an enclosure defining an interior and an exterior and configured to enclose said energy management device within said interior and to limit access to said energy management device, and further wherein said tamper prevention seal is coupled with said enclosure and configured to deter unauthorized access to said interior of said enclosure and indicate any such access.

22. An energy management device used in an energy management architecture for managing an energy distribution system, said energy management architecture including a network, said energy management device comprising:

an energy distribution system interface configured to couple said energy management device with at least a portion of said energy distribution system;

a network interface configured to couple said energy management device with said network for transmitting outbound communications to said network, said outbound communications comprising energy management data;

a processor coupled with said network interface and said energy distribution system interface, configured to generate said energy management data;

an enclosure which surrounds said energy management device and protects said energy management device from tampering;

a tamper prevention seal coupled with said enclosure, which detects unauthorized access to said enclosure;

a seal tamper detection unit coupled with said processor and said tamper prevention seal and configured to detect when said tamper prevention seal indicates that unauthorized access has occurred; and

a memory coupled with said processor, said memory configured to store confidential data, wherein said confidential data comprises a private key configured to sign said energy management data,

wherein said processor is further configured to maintain said energy management data, but configured to mark said energy management data as unreliable, when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

23. The energy management device of claim 22, wherein said tamper seal comprises a revenue seal.

24. The energy management device of claim 22, wherein said tamper seal comprises a metering point id seal.

25. The energy management device of claim 22, wherein said processor is further configured to prevent access to said confidential data when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

26. The energy management device of claim 22, wherein said processor is further configured to send a message warning that said tamper prevention seal has been tampered with through said network interface when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred, and to sign said message with said private key.

27. The energy management device of claim 22, wherein said confidential data further comprises a certificate configured to sign said energy management data.

28. The energy management device of claim 22, wherein said processor is further configured to prevent said transmitting of signed energy management data through said network interface when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

29. The energy management device of claim 22, wherein said processor is further configured to send a message warning that said tamper prevention seal has been tampered with through said network interface when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

30. The energy management device of claim 22, wherein said processor is further configured to block external access to said energy management device when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

31. The energy management device of claim 22, further comprising an energy storage device coupled with said seal tamper detection unit and configured to provide power to said seal tamper detection unit in power outage situations.

32. An energy management device used in an energy management architecture for managing an energy distribution system, said energy management architecture including a network, said energy management device comprising:

an energy distribution system interface configured to couple said energy management device with at least a portion of said energy distribution system;

a network interface configured to couple said energy management device with said network for transmitting outbound communications to said network, said outbound communications comprising energy management data;

a processor coupled with said network interface and said energy distribution system interface, configured to generate said energy management data;

an enclosure which surrounds said energy management device and protects said energy management device from tampering;

a tamper prevention seal coupled with said enclosure, which detects unauthorized access to said enclosure;

a seal tamper detection unit coupled with said processor and said tamper prevention seal and configured to detect when said tamper prevention seal indicates that unauthorized access has occurred; and

a memory coupled with said processor and configured to store at least one device setting, wherein information of said at least one device setting is preserved when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred,

wherein said processor is further configured to appear to make a change to said at least one device setting after said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred, but is configured to maintain a first copy of said at least one device setting as if no change was made and further operative to maintain a second copy of said at least one device setting based on a change.

33. The energy management device of claim 32, wherein said processor is further configured to prevent changes to said at least one device setting after said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

34. The energy management device of claim 32, wherein said processor is further configured to permit changes to said at least one device setting, and further is configured to send a message warning that said device setting has been changed through said network interface after said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

35. The energy management device of claim 32, wherein said tamper seal comprises a revenue seal.

36. The energy management device of claim 32, wherein said tamper seal comprises a metering point id seal.

37. An energy management device used in an energy management architecture for managing an energy distribution system, said energy management architecture including a network, said energy management device comprising:

an energy distribution system interface configured to couple said energy management device with at least a portion of said energy distribution system;

a network interface configured to couple said energy management device with said network for transmitting outbound communications to said network, said outbound communications comprising energy management data;

a processor coupled with said network interface and said energy distribution system interface, configured to generate said energy management data;

an enclosure which surrounds said energy management device and protects said energy management device from tampering;

a tamper prevention seal coupled with said enclosure, which detects unauthorized access to said enclosure; and

a seal tamper detection unit coupled with said processor and said tamper prevention seal and configured to detect when said tamper prevention seal indicates that unauthorized access has occurred,

wherein said processor is further configured to maintain said energy management data, but prevent said transmitting of said energy management data through said network interface, when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred, and

wherein said processor is further configured to prevent said transmitting of signed energy management data through said network interface when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.

38. An energy management device used in an energy management architecture for managing an energy distribution system, said energy management architecture including a network, said energy management device comprising:

an energy distribution system interface configured to couple said energy management device with at least a portion of said energy distribution system;

a network interface configured to couple said energy management device with said network for transmitting outbound communications to said network, said outbound communications comprising energy management data;

a processor coupled with said network interface and said energy distribution system interface, configured to generate said energy management data;

an enclosure which surrounds said energy management device and protects said energy management device from tampering;

a tamper prevention seal coupled with said enclosure, which detects unauthorized access to said enclosure; and

a seal tamper detection unit coupled with said processor and said tamper prevention seal and configured to detect when said tamper prevention seal indicates that unauthorized access has occurred,

wherein said processor is further configured to maintain said energy management data, but configured to mark said energy management data as unreliable, when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred, and

wherein said processor is further configured to prevent said transmitting of signed energy management data through said network interface when said seal tamper detection unit detects that said tamper prevention seal indicates that unauthorized access has occurred.