IED Auto-Discovery for Secure MKA Links Across Power Switches
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Establishing a secure communication link between intelligent electronic devices (IEDs) in an electric power distribution system is challenging due to switches that do not enable the configuration of media access control security key agreements (MKA) connectivity associations, requiring manual user intervention for device settings adjustment.
Innovation Solution
The IEDs operate in an auto-discovery mode, transmitting two data frames to a switch to automatically determine and establish a suitable MKA connectivity association, allowing secure communication without manual configuration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual user intervention is used to configure MKA connectivity associations, then device security can be ensured, but system complexity and operational difficulty increase
Solution Approach 1:
The IEDs automatically discover and establish MKA connectivity associations by transmitting data frames and detecting switch transmission behavior, eliminating the need for manual user configuration while maintaining security through automatic key agreement protocol
2Reliability
If switches are designed to enable MKA configuration, then secure communication is improved, but device complexity increases
Solution Approach 1:
The IEDs act as intermediaries that adapt to different switch capabilities by transmitting multiple data frames and detecting which ones are transmitted by the switch, allowing secure MKA establishment without requiring complex switch configuration capabilities
Solution Approach 2:
The system changes the approach by transmitting different types of data frames (first and second data frames with different characteristics) and using the switch's transmission behavior as the determining parameter to establish the appropriate MKA connectivity association
3Ease of operation
If auto-discovery mode is implemented, then ease of operation is improved, but communication time increases
Solution Approach 1:
The IEDs prepare multiple data frames in advance with different transmission characteristics before initiating communication, so that when the auto-discovery process starts, the frames are already ready to be transmitted and the switch's transmission behavior can be immediately detected without time-consuming configuration
Data Source
AI summary
An intelligent electronic device (IED) of an electric power distribution system includes processing circuitry and a memory that includes instructions. The instructions, when executed by the processing circuitry, are configured to cause the processing circuitry to transmit a first data frame and a second data frame to a switch of the electric power distribution system, determine whether the switch transmits the first data frame and not the second data frame, and establish a media access control security key agreement (MKA) based on a determination of whether the switch transmits the first frame and not the second data frame.