Power distribution system secure access communication system and method

• US 8,351,606 B2
• Filed: 12/10/2007
• Issued: 01/08/2013
• Est. Priority Date: 01/08/2007
• Status: Active Grant

• Current Assignee: S&C Electric Company
• Original Assignee: S&C Electric Company
• Inventors: Harris, Laurence N., Berkowitz, Donald S.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): SHAIFER HARRIMAN, DANT B
• Application Number:
  US12/001,166
• Publication Number:
  US 20080205649A1
• Time in Patent Office: 1,856 Days
• Field of Search: 713/156, 713/168, 713/171, 713/178, 380247-250, 380277-278, 380/283, 380/285
• US Class Current: 380/270
• CPC Class Codes: H04L 2463/121 Timestamp cryptographic mechanisms or cryptographic arrangements involving time stamps H04L9/3297
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A power distribution system may have source, switching and load components, wherein at least one of the source, switching and load components has a wireless communication capability such that it is operable to act as a wireless communication access point. A mobile station seeking to associate with the one component may use a secure access protocol to gain such access. The secure access protocol may provide for receiving at the one component a management message from the mobile station. From the management message the component may obtain mobile identification information used to verify the identity of the mobile station and to initiate communication by sending an association message. Until after successful verification of the mobile station identity the component remains radio silent.

Claims

1. In a communication system having at least one component with a wireless communication capability such that it is operable to act as a wireless communication access point, and a mobile station seeking to associate with the at least one component, a secure access protocol, the protocol comprising:

receiving at the one component a management message from the mobile station;

obtaining mobile identification information from the management message;

obtaining an encryption key from a memory, the encryption key being associated with the mobile station based upon the mobile identification information;

decrypting a portion of the management message using the encryption key to obtain decrypted information;

verifying an identity of the mobile based upon the decrypted information;

communicating an association message to the mobile station confirming an association, the association message only being communicated to the mobile station subsequent to verification of the identity of the mobile station based upon the decrypted information; and

not sending any messages in response to the management message upon the failure to verify the identity of the mobile station.

2. The protocol of claim 1, wherein the management message contains identification information of the one component.

3. The protocol of claim 1, wherein the association message further contains a session key.

4. The protocol of claim 3, comprising encrypting the session key using a private key associated with the mobile station obtained from the memory.

5. The protocol of claim 4, wherein the encryption key comprises a public key associated with the mobile station obtained from the memory.

6. The protocol of claim 1, wherein the failure to verify the mobile station comprises failing to successfully complete any portion of the secure access protocol.

7. The protocol of claim 1, wherein receiving the management message comprises receiving a sequence of management message portions.

8. The protocol of claim 1, the management message containing a time stamp and verifying comprises checking the time stamp against a list of previously successfully used time stamps to prevent re-use.

9. The protocol of claim 1, the management message containing a random number, and verifying comprises checking the number against a list of previously successfully used random numbers to prevent re-use without reference to actual time.

10. A method of associating a mobile station with an access point of a communication or data network, the method comprising:

maintaining the access point radio silent;

receiving at the access point a management message from the mobile station seeking to associate with the access point;

verifying an identity of the mobile station based upon a data portion of the management message;

communicating an association message to the mobile station only after a successful verification of the mobile station identity based upon the data portion of the management message, the association message only being communicated to the mobile station subsequent to the verification of the mobile station identity; and

comprising not sending any messages in response to the management message upon the failure to verify the identity of the mobile station.

11. The method of claim 10, wherein verifying the identity of the mobile station comprises obtaining mobile identification information from a memory accessibly by the access point.

12. The method of claim 10, wherein the management message contains identification information of the access point.

13. The method of claim 10, wherein the association message further contains a session key.

14. The method of claim 10, comprising encrypting the session key using a private key associated with the mobile station obtained from a memory accessible by the access point.

15. The method of claim 14, wherein the encryption key comprises a public key associated with the mobile station obtained from the memory.

16. The method of claim 10, wherein the failure to verify the mobile station comprises failing to successfully complete any portion of the verification protocol.

17. The method of claim 10, wherein receiving the management message comprises receiving a sequence of management message portions.

18. The method of claim 10, the management message containing a time stamp and verifying comprises checking the time stamp.

19. In a power distribution protection system having source, switching and load components, wherein at least one of the source, switching and load components has a wireless communication capability such that it is operable to act as a wireless communication access point, and a mobile station seeking to associate with the one component, a secure access protocol, the protocol comprising:

receiving at the one component a management message from the mobile station;

obtaining mobile identification information from the management message;

obtaining an encryption key from a memory, the encryption key being associated with the mobile station based upon the mobile identification information;

decrypting a portion of the management message using the encryption key to obtain decrypted information;

verifying an identity of the mobile based upon the decrypted information;

communicating an association message to the mobile station confirming an association, the association message only being communicated to the mobile station subsequent to verification of the identity of the mobile station based upon the decrypted information; and

comprising not sending any messages in response to the management message upon the failure to verify the identity of the mobile station.

20. The protocol of claim 19, wherein the management message contains identification information of the one component.

21. The protocol of claim 19, wherein the association message further contains a session key.

22. The protocol of claim 21, comprising encrypting the session key using a private key associated with the mobile station obtained from the memory.

23. The protocol of claim 22, wherein the encryption key comprises a public key associated with the mobile station obtained from the memory.

24. The protocol of claim 19, wherein the failure to verify the mobile station comprises failing to successfully complete any portion of the secure access protocol.

25. The protocol of claim 19, wherein receiving the management message comprises receiving a sequence of management message portions.

26. The protocol of claim 19, the management message containing a time stamp and verifying comprises checking the time stamp against a list of previously successfully used time stamps to prevent re-use.

27. The protocol of claim 19, the management message containing a random number, and verifying comprises checking the number against a list of previously successfully used random numbers to prevent re-use without reference to actual time.