A METHOD, A SERVER AND A CLIENT PROVIDING SECURED COMMUNICATION IN A POWER DISTRIBUTION COMMUNICATION NETWORK

• US 20160112436A1
• Filed: 06/05/2014
• Published: 04/21/2016
• Est. Priority Date: 06/19/2013
• Status: Active Grant

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: KOPP, Dieter, STOCKER, Klaus, RAEHMER, Silke
• Granted Patent: US 9,923,903 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0809 Plug-and-play configuration
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: Y04S 40/00 Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A technique is provided that addresses how to provide secured communication in a power distribution communication network. Specifically, upon receipt of a request for an insertion of a new device to the power distribution communication network, checking a unique identifier of the new device received in the request against a list of stored new devices or suppliers stored in a data storage. Upon finding a matching entry, evaluating a predetermined device or supplier certificate against a certificate of the new device received in the request. Upon validation of the received certificate, checking to determine if the new device will fit into a predetermined network topology or relation table that indicates which messages are authorized messages. Configuring the power distribution communication network to include the new device in case the new device fits into the predetermined network topology or the relation table.

Claims

1. A method for providing secured communication in a power distribution communication network, comprising:

upon receipt of a request for an insertion of a new device to the power distribution communication network, checking a unique identifier of the new device received in the request against a list of stored new devices or suppliers stored in a data storage;

upon finding a matching entry, evaluating a predetermined device or supplier certificate against a certificate of the new device received in the request;

upon validation of the received certificate, checking to determine if the new device will fit into a predetermined network topology or a relation table that indicates which messages are authorized messages, wherein to determine if the new device will fit into the predetermined network topology or relation table, the identity of the new device is checked for consistency with the predetermined network topology; and

configuring the power distribution communication network to include the new device in case the new device fits into the predetermined network topology or the relation table.

2. The method according to claim 1, further comprising updating a stored network topology to define relations and rules for the devices, to define the communication and relation table, and to download the relation tables and processing rules to the new device and the other devices.

3. The method according to claim 1, further comprising looking up device specific information in the data storage and automatic rule based evaluation of the device specific information.

4. The method according to claim 1, further comprising rejecting the new device by sending respective information to other devices or by quietly ignoring the request.

5. The method according to claim 1, further comprising generating a log file comprising information about a request and the result of the checks.

6. The method according to claim 1, further comprising rejecting the new device if a time limit is exceeded.

7. The method according to claim 1, further comprising sending an alarm to a client in case any of the checks fails.

8. A server for providing secured communication in a power distribution communication network, comprising:

a receiver adapted to receive a request for an insertion of a new device to the power distribution communication network;

a processor adapted to, upon receipt of the request, check a unique identifier of the new device received in the request against a list of new devices or suppliers stored in a data storage;

the processor adapted to upon finding a matching entry, evaluate a predetermined device or supplier certificate against a certificate of the new device received in the request;

the processor adapted to, upon validation of the received certificate, check to determine if the new device will fit into a predetermined network topology or a relation table adapted to indicate which messages are authorized messages, wherein to determine if the new device will fit into the predetermined network topology or relation table, the identity of the new device is checked for consistency with the predetermined network topology; and

a sender adapted to configure the power distribution communication network to include the new device in case the new device fits into the predetermined network topology or the relation table.

9. The server according to claim 8, wherein the sender is adapted to update a stored network topology, to define relations and rules for the devices, to define the communication and relation table, and to download the relation tables and processing rules to the new device and the other devices.

10. The server according to claim 8, wherein the processor is adapted to look up device specific information in the data storage and perform automatic rule based evaluation of the device specific information.

11. The server according to claim 8, wherein the sender is adapted to reject the new device by sending respective information to other devices or by quietly ignoring the request.

12. The server according to claim 8, wherein the processor is adapted to generate a log file comprising information about a request and the result of the checks.

13. The server according to claim 8, wherein the sender is adapted to reject the new device if a time limit is exceeded.

14. The server according to claim 8, wherein the sender is adapted to send an alarm to a client in case any of the checks fails.

15. A client for providing secured communication in a power distribution communication network, comprising:

a sender adapted to send a request for an insertion of a new device to the power distribution communication network, including a unique identifier of the new device and a certificate of the new device;

a receiver adapted to receive a configuration of the power distribution communication network including the new device, indicating which messages are authorized messages; and

a processor adapted to store the information into a predetermined network topology or a relation table.