Smart energy network configuration using link key database

• US 8,990,256 B2
• Filed: 12/21/2012
• Issued: 03/24/2015
• Est. Priority Date: 06/03/2010
• Status: Active Grant

• Current Assignee: Digi International Inc.
• Original Assignee: Digi International Inc.
• Inventors: Young, Joel K.
• Primary Examiner(s): Woo, Isaac M
• Application Number:
  US13/725,499
• Publication Number:
  US 20130110996A1
• Time in Patent Office: 823 Days
• Field of Search: 707600-899
• US Class Current: 707/791
• CPC Class Codes: G06F 15/177 Initialisation or configuration control processor initialisation G06F9/4405
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

Various embodiments include a method and system for configuring a smart energy network using a link key database. An energy services interface, on the smart energy network, extracts a unique identifier associated with a smart energy device from a communication with the smart energy device. The energy services interface may then use the unique identifier to receive information associated with the smart energy device from the link key database.

Claims

1. An energy services interface (ESI) capable of communicating with a SE device and a link key database, the ESI configured to:

extract a key value from an unencrypted portion of an encrypted communication from the SE device to join a SE network;

retrieve a link key associated with the SE device from the link key database using the key value, wherein the link key is used to both encrypt and decrypt the encrypted SE device communication;

extract a unique identifier from a communication with the SE device; and

load a portion of information associated with the SE device from the link key database using the unique identifier.

2. The ESI of claim 1, wherein the portion of information is a driver for the SE device.

3. The ESI of claim 1, wherein the unique identifier is a media access control (MAC) address of the SE device.

4. The ESI of claim 1, wherein the key value is a media access control (MAC) address of the SE device.

5. The ESI of claim 1, wherein the ESI is configured to:

decrypt the encrypted SE device communication using the link key; and

join the SE device to the SE network.

6. In a system having an energy services interface (ESI) capable of communicating with a smart energy (SE) device and a link key database, a computer-implemented method of configuring the ESI, the method comprising:

extracting, using the ESI, a key value associated with the SE device from an unencrypted portion of an encrypted communication from the SE device;

retrieving a link key associated with the SE device from the link key database using the key value, wherein the link key is used to both encrypt and decrypt the encrypted communication;

receiving, at the ESI, a communication from the SE device;

extracting, using the ESI, a unique identifier associated with the SE device from the communication; and

loading a portion of information associated with the SE device to the ESI from the link key database using the unique identifier.

7. The method of claim 6, wherein the portion of the information is a driver for the SE device.

8. The method of claim 6, wherein the unique identifier is a media access control (MAC) address of the SE device.

9. The method of claim 6, wherein the key value is a media access control (MAC) address of the SE device.

10. The method of claim 6, further including:

decrypting the encrypted communication with the link key; and

joining the SE device to the SE network.

11. In a system having an energy services interface (ESI) capable of communicating with a smart energy (SE) device and a link key database, a computer-implemented method of provisioning the SE device, the method comprising:

transmitting an encrypted join communication from the SE device to the ESI, wherein the encrypted join communication includes information needed to join the SE device to an SE network;

extracting, using the ESI, a key value associated with the SE device from an unencrypted portion of the encrypted join communication;

retrieving a link key associated with the SE device from the link key database using the key value;

joining the SE device to the SE network using the ESI, wherein joining includes transferring information between the SE device and the ESI, wherein the information is encrypted using the link key;

extracting, using the ESI, a unique identifier from a communication with the SE device; and

loading, by the ESI, a portion of information associated with the SE device from the link key database using the unique identifier.

12. The method of claim 11, wherein the unique identifier is a media access control (MAC) address of the ESI.