Quantum Key Distribution for SCADA Message Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional SCADA communication protocols in utility systems lack integrated security measures, making them vulnerable to cyberattacks, especially when communicating over public networks, and existing cryptographic solutions face challenges with computational resource limitations.

Innovation Solution

Implement a quantum key distribution (QKD) system to securely share quantum-based secret keys between devices, using quantum random number generators to create initialization vectors and challenges for message authentication, enabling secure transmission and verification over public networks without encryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional cryptographic solutions are used for authentication, then security is improved, but computational resource consumption increases

Engineering Contradiction:

ImprovesecurityVSAvoidcomputational resource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent extracts the computationally intensive encryption operations from the authentication process. Instead of encrypting messages with heavy cryptographic algorithms, the system uses quantum key distribution to generate secure keys, then employs lightweight authentication protocols that verify messages using these keys without requiring intensive computational resources for encryption/decryption.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent replaces conventional mechanical/computational cryptographic systems with quantum mechanical principles. Quantum key distribution uses quantum states (photon polarization, entanglement) to establish secure keys, fundamentally substituting classical computational security with quantum physical security, which requires minimal computational processing at the application layer.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If quantum key distribution is implemented, then authentication security is improved, but device complexity increases

Engineering Contradiction:

Improveauthentication securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the quantum security system into distinct functional modules: a quantum key distribution module for key generation, a key management module for storage and distribution, and an authentication module for verification. This segmentation allows each component to be optimized independently and integrated into existing SCADA infrastructure without requiring complete system replacement.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces a quantum key distribution intermediary that bridges the classical SCADA communication infrastructure and quantum security requirements. This intermediary handles quantum key generation and distribution while maintaining compatibility with existing classical communication protocols, thereby reducing the complexity impact on the overall system.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If quantum random number generators are used, then key generation security is improved, but device cost increases

Engineering Contradiction:

Improvekey generation securityVSAvoiddevice cost

Core Design Contradiction:

ReliabilityVSEase of manufacture

Solution Approach 1:

The patent applies quantum random number generation locally only at critical key generation points in the system, rather than throughout the entire SCADA infrastructure. This localized application ensures high-security key generation where needed while avoiding the cost of quantum hardware in all system components, thereby balancing security requirements with cost constraints.

Inventive Principle:

Principle #3Local quality

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Enhances the security of SCADA system communications by providing efficient and robust authentication of messages, reducing the risk of cyberattacks, while avoiding the need for computational resource-intensive encryption methods.

Implementation Method 1

a quantum key distribution (QKD) system configured to share a plurality of quantum-based secret keys between the first device and the second device

Methodology Applied

Scientific EffectQuantum key distribution:

Implementation Method 2

a quantum-random number generator (QRND) configured to generate a plurality of quantum-based random numbers

Methodology Applied

Scientific EffectQuantum random number generation:

Data Source

PatentUS12425202B2Authentication of smart grid communications using quantum key distribution

Publication Date: 2025.09.23 UT BATTELLE LLC

AI summary

Systems, methods, and computer-readable programs are provided for authentication of unencrypted message(s) transmitted between two devices of a power grid over a public communications network are provided. The authentication uses a quantum-based secret key and an initialization vector generated from a quantum random number to generate a payload for a transmission packet. The quantum-based secret key is shared between the transmitting device and the receiving device. When the receiving device receives the packet, the receiving device uses the shared quantum-based secret key and the initialization vector to verify whether the payload in the packet is authentic.