SYSTEM AND METHOD FOR GRID BASED CYBER SECURITY

• US 20160112378A1
• Filed: 05/23/2015
• Published: 04/21/2016
• Est. Priority Date: 06/09/2011
• Status: Active Grant

• Current Assignee: Dominion Enterprises (Landmark Media Enterprises LLC), TRC Companies Incorporated
• Original Assignee: Dominion Enterprises (Landmark Media Enterprises LLC), Astrolink International Llc (Qurate Retail Group (f/k/a Liberty Interactive Corporation))
• Inventors: Bernheim, Henrik F., Martin, Marcia Reid, Berens, Steven J., Loporto, John J., Niemann, Theodore V.
• Granted Patent: US 9,647,994 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G05F 1/66 Regulating electric power
• CPC Class Codes: H04B 2203/5433 Remote metering
• CPC Class Codes: H04B 3/54 Systems for transmission via power distribution lines
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A method and system for providing a secure communication network using an electrical distribution grid is disclosed. A device connected to the electrical distribution grid initiates a request for a secured key token by signaling an intelligent communicating device residing at or near an edge of the grid. The intelligent communicating device forwards the request to a receiver at a distribution substation on the electrical grid. This receiver enhances the properties of the request such that a grid location for the request can be inferred. The enhanced request is forwarded to a server at the distribution substation, which compares the request grid location to a Grid Map and Policies of known secure grid locations. Any inconsistencies between the grid location inferred from the enhanced request and the Grid Map and Policies locations are considered evidence of tampering, and the server rejects the request.

Claims

1-64. -64. (canceled)

65. A system for the establishment and maintenance of secure communications paths, comprising:

an electrical distribution grid comprising at least one distribution substation;

an intelligent communicating device located at or near the edge of an electrical distribution grid, wherein the intelligent communicating device uses at least the electrical distribution grid as a transmission medium;

a server located at the distribution substation;

a receiver connected to the server at the substation; and

a device associated with the intelligent communicating device, wherein a location of the device on the electrical distribution grid is determined inferred by a receiver at the distribution substation.