AMI Certificate Revocation via RSA Accumulator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing advanced metering infrastructure (AMI) networks face challenges in efficiently managing certificate revocation due to the overhead of maintaining symmetric keys and the large size of certificate revocation lists (CRLs), which impacts the performance and reliability of power grid communication systems.
Innovation Solution
The implementation of a cryptographic accumulator system, specifically using RSA accumulators, to accumulate CRL information into a single accumulator value and proof, allowing smart meters to verify the revocation status without accessing remote servers, thus reducing communication and computational overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional CRL distribution methods are used, then certificate revocation can be managed, but communication overhead and computational load increase significantly
Solution Approach 1:
The patent combines multiple CRL checks into a single cryptographic accumulator operation. Instead of distributing and processing separate CRL files for each certificate, the system accumulates revocation information into a single compact structure that can be verified efficiently, reducing communication bandwidth and computational overhead while maintaining revocation management reliability
Solution Approach 2:
The patent uses cryptographic accumulators to create a compressed representation of revocation information. The accumulator stores revocation status information in a condensed form that can be verified without transferring the full CRL data, effectively copying essential revocation information in a space-efficient manner
2Reliability
If full CRL lists are distributed to smart meters, then revocation status can be verified, but storage requirements and data size increase
Solution Approach 1:
The patent merges revocation information from multiple certificates into a single accumulator structure. This consolidation reduces the total data size that needs to be stored and processed, while still enabling verification of revocation status for individual certificates through the accumulator's cryptographic properties
Solution Approach 2:
The patent creates a compressed copy of revocation information through cryptographic accumulation. The accumulator provides a compact representation that contains revocation status information for multiple certificates in a space-efficient manner, reducing storage requirements while maintaining verification capability
3Ease of operation
If symmetric key cryptography is used for authentication, then authentication can be performed, but key management overhead increases
Solution Approach 1:
The patent transitions from symmetric key cryptography to asymmetric key cryptography using PKI and digital certificates. This asymmetric approach eliminates the need for shared secret keys between devices, simplifying key management while maintaining authentication capability. Each device has its own key pair, and certificates provide verified identification without requiring key distribution management
Data Source
AI summary
Systems and methods for certificate revocation management for advanced metering infrastructure networks are provided. An accumulation manager can be used to accumulate certificate revocation list (CRL) information and determine an accumulator value and a proof value based on the accumulated CRL information using a plurality of functions. These values can be sent on to smart meters, which can then use them for authentication purposes.