System and method for assuring utility network security and reliability

• US 9,099,858 B2
• Filed: 03/31/2011
• Issued: 08/04/2015
• Est. Priority Date: 03/31/2011
• Status: Active Grant

• Current Assignee: GE Digital Holdings LLC (GE Vernova, Inc.)
• Original Assignee: General Electric Company
• Inventors: Bush, Stephen Francis, Mahony, Michael Joseph
• Primary Examiner(s): Bugg, George
• Assistant Examiner(s): Akhter, Sharmin
• Application Number:
  US13/077,680
• Publication Number:
  US 20120249286A1
• Time in Patent Office: 1,587 Days
• Field of Search: 340/3.43, 340/3.44, 455/452.2, 455/67.13, 455/135, 455/160.1, 455/277.2, 700/292, 700/295, 370/332, 370/333
• US Class Current: 1/1
• CPC Class Codes: H02H 1/0061 concerning transmission of signals transmission of measured quantities or switching orders; sectionalised protection involving signal transmission between at least two stations H02H7/261; comparison of the voltage or current values at two spaced portions of a single system H02H3/28; transferring the output of a sensing member to another variable G01D5/00; electrical measuring arrangements using modulation of electromagnetic waves, e.g. light beams G01R15/24, G01R15/26
• CPC Class Codes: H02H 7/261 involving signal transmission between at least two stations transmission of signals in general H02H1/0061
• CPC Class Codes: H02J 13/00022 using wireless data transmission
• CPC Class Codes: H02J 13/00034 the elements or equipment being or involving an electric power substation
• CPC Class Codes: H02J 13/0004 involved in a protection system
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: Y02E 60/00 Enabling technologies; Technologies with a potential or indirect contribution to GHG emissions mitigation
• CPC Class Codes: Y04S 10/18 using switches, relays or circuit breakers, e.g. intelligent electronic devices [IED]
• CPC Class Codes: Y04S 10/20 using protection elements, arrangements or systems
• CPC Class Codes: Y04S 40/126 using wireless data transmission
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A system and method for detecting a utility network threat based on the quality of communications received at devices in the utility network. The quality of a communication signal received by a device in the utility network is determined and a threat to the utility network is determined based on the signal quality. Threat information is output to devices on the utility network.

Claims

1. A method, comprising:

receiving, at an intelligent electronic device, a communication from at least one of a plurality of other intelligent electronic devices in a utility network, wherein each intelligent electronic device comprises a recloser;

determining a signal quality of the communication;

detecting a threat to the utility network based on the signal quality of the communication; and

outputting threat information to one or more of the intelligent electronic devices on the utility network.

2. The method of claim 1, wherein determining the signal quality of the communication comprises:

comparing one or more communication parameters of the communication with at least one of respective thresholds or respective operating conditions; and

detecting a change in the signal quality when one or more of the communication parameters exceeds the respective thresholds or extends outside of the respective operating ranges.

3. The method of claim 2, wherein detecting a threat to the utility network comprises:

determining existence of the threat based on detecting the change in the signal quality of the communication.

4. The method of claim 1, wherein determining the signal quality of the communication comprises:

comparing one or more channel characteristics of a communication channel associated with the communication to at least one of respective thresholds or repsective operating ranges; and

detecting a change in the signal quality when one or more of the channel characteristics exceeds the respective thresholds or extends outside of the respective operating ranges.

5. The method of claim 4, wherein the channel characteristics comprises at least one of propagation delay, multipath, bit error rate, frequency, noise, interference, and embedded GPS coordinates.

6. The method of claim 4, wherein detecting a threat to the utility network comprises:

determining existence of the threat based on detecting the change in the signal quality of the communication.

7. The method of claim 1, wherein the threat comprises a cyber threat event, and wherein the cyber threat comprises spoofing.

8. The method of claim 7, wherein the weather event is lightning strike.

9. The method of claim 1, further comprising:

determining that the threat to the utility network is a weather event based on the signal quality of the communication;

communicating with other devices in the utility network to estimate location of the weather event;

predicting a path of the weather event; and

outputting predicted path information to one or more devices in the utility network.

10. The method of claim 1, further comprising:

receiving threat information from one or more devices in the utility network; and

adjusting protective system settings in response to the threat information.

11. The method of claim 10, wherein the utility is a power distribution utility.

12. The method of claim 1, wherein communication in the utility network is wireless communication comprising at least one of private and public wireless communication networks, electric utility radio links-or combinations thereof.

21. The method of claim 4, wherein the channel characteristics comprises signal strength.

22. The method of claim 1, wherein the threat comprises a weather event.

13. A non-transitory computer-readable medium comprising computer-readable instructions of a computer program that, when executed by a processor, cause

the processor to perform a method, the method comprising:

receiving, at an intelligent electronic device, a communication from at least one of a plurality of other intelligent electronic devices in a utility network, wherein each intelligent electronic device comprises a recloser;

determining a signal quality of the communication;

detecting a threat to the utility network based on the signal quality of the communication; and

outputting threat information to one or more of the intelligent electronic devices on the utility network.

14. The non-transitory computer-readable medium of claim 13, the method further comprising:

comparing one or more communication parameters of the communication with at least one of respective thresholds or respective operating conditions; and

detecting a change in the signal quality when one or more of the communication parameters exceeds the respective thresholds or extends outside of the respective operating ranges.

15. The non-transitory computer-readable medium of claim 13, the method further comprising:

comparing one or more channel characteristics of a communication channel associated with the communication to at least one of respective thresholds or repsective operating ranges; and

detecting a change in the signal quality when one or more of the channel characteristics exceeds the respective thresholds or extends outside of the respective operating ranges.

16. The non-transitory computer-readable medium of claim 13, the method further comprising:

determining that the threat to the utility network is a weather event based on the signal quality of the communication;

communicating with other devices in the utility network to estimate location of the weather event;

predicting a path of the weather event; and

outputting predicted path information to one or more devices in the utility network.

17. A system, comprising:

an intelligent electronic device connected in a utility network, the intelligent electronic device receiving a communication from a plurality of other intelligent electronic devices in the utility network, wherein the intelligent electronic device is a recloser and comprises;

a communication quality module to analyze the communication and determine a quality of the communication; and

a utility threat assessment module to determine whether the received communication represents a threat to the utility network based on the quality of the communication.

18. The system of claim 17, further comprising:

a database coupled to the utility threat assessment device to store utility threat data.

19. The system of claim 17, wherein the communication quality module is configured to:

compare one or more channel characteristics of a communication channel associated with the communication to at least one of respective thresholds or repsective operating ranges; and

detect a change in the signal quality when one or more of the channel characteristics exceeds the respective thresholds or extends outside of the respective operating ranges.

20. The system of claim 17, wherein the utility threat assessment module is configured to:

determine that the threat to the utility network is a weather event based on the signal quality of the communication;

communicate with the other intellegent electronic devices in the utility network to estimate location of the weather event;

predict a path of the weather event; and

output predicted path information to one or more of the other intellegent electronic devices in the utility network.