Distributed Key Server Network for Power Grid Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional power utility networks rely on dedicated key servers for cryptographic key management, which creates a single point of failure and is burdensome to manage, leading to potential security risks and interruptions in secure communications.
Innovation Solution
Implementing a key sharing technique among multiple key servers connected over a communication network, where each key server generates and stores cryptographic keys, acts as a proxy for other key servers to share and provide keys to device groups for authentication, encryption, and integrity checking, either directly or through a central key server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a dedicated key server is used to distribute cryptographic keys, then key management is simple, but the system creates a single point of failure that interrupts secure communications
Solution Approach 1:
The patent divides the centralized key server function into multiple distributed key servers. Each key server can independently generate and distribute cryptographic keys to IEDs in its service area. This segmentation eliminates the single point of failure while maintaining key management functionality through distributed operation.
Solution Approach 2:
The patent introduces a key sharing mechanism where key servers act as intermediaries to share cryptographic keys with each other. When an IED needs a key from another key server's domain, the local key server requests and receives the key through secure key sharing protocols, enabling cross-domain secure communication without direct IED-to-IED key exchange.
2Reliability
If multiple key servers are deployed to eliminate single point of failure, then reliability improves, but management complexity and configuration burden increase
Solution Approach 1:
The patent implements universal key sharing protocols that allow any key server to perform the same functions regardless of location or domain. Each key server can generate keys, distribute keys to local IEDs, and share keys with other key servers using standardized procedures. This multi-functionality simplifies management by making all key servers interchangeable and equally capable.
Solution Approach 2:
The patent changes the operational parameters of key servers from static, dedicated configurations to dynamic, adaptive configurations. Key servers can dynamically request and share keys based on communication needs, and IEDs can dynamically obtain keys from any key server in the network. This parameter change from fixed to flexible operation reduces management complexity.
3Object-affected harmful factors
If cryptographic keys are distributed to enable secure communications, then security is maintained, but key distribution interruptions occur when key server or communication links fail
Solution Approach 1:
The patent implements key caching and pre-sharing mechanisms where key servers maintain copies of cryptographic keys and can provide them immediately without requiring real-time communication with the original key generating server. This beforehand preparation cushions against communication link failures and ensures continuous key distribution capability.
Solution Approach 2:
The patent establishes preliminary key sharing agreements and secure communication channels between key servers before actual IED communication needs arise. Key servers pre-exchange cryptographic materials and establish trust relationships in advance, so that when IEDs need to communicate across domains, the key infrastructure is already in place and operational.
Data Source
AI summary
A technique for key sharing among multiple key servers connected to one another over a communication network is provided herein. Each key sever of the multiple key servers stores respective cryptographic keys, and provides the keys to a local device group connected with the key server, to enable the device group to encrypt messages with the keys. Each key server acts as a proxy for the other key servers in order to receive other keys from the other key servers over the network, and provide the other keys to the device group for use to decrypt messages received from other local device groups respectively connected with the other key servers that were encrypted with the other keys and to check message integrity. The multiple key servers may share keys with each other directly, or alternatively, indirectly through a central key server, as needed to support secure communications between their respective device groups.