Smart Meter Command Signing for Operation Identifier Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing smart meter management systems face security vulnerabilities where command identifiers can be altered during transmission, leading to unintended operations due to insufficient protection of command attributes and identifiers by the COSEM specifications.
Innovation Solution
A method is introduced where a descriptor of the operation to be performed is copied into metadata and protected by a digital signature, ensuring that the operation intended by the management device is verified upon receipt by the smart meter, using asymmetric encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If COSEM data protection object is used to protect command attributes, then attribute alteration is prevented, but command identifier alteration remains vulnerable
Solution Approach 1:
The operation descriptor is copied into the metadata section of the command structure. This copy is then covered by the digital signature, creating a redundant protected version of the operation identifier that prevents alteration attacks on the primary descriptor.
Solution Approach 2:
The invention merges the operation descriptor protection with the metadata signature coverage. By including the operation descriptor within the signed metadata section, the command identifier becomes part of the cryptographic protection scope, combining attribute protection and identifier protection into a unified security mechanism.
2Manufacturing precision
If digital signature is applied only to attributes, then attribute integrity is ensured, but operation descriptor integrity is compromised
Solution Approach 1:
The operation descriptor is preliminarily included in the metadata section before the digital signature is applied. This preliminary positioning ensures that the descriptor is captured within the signature's protection scope before transmission, preventing any subsequent alteration of the operation identifier.
3Adaptability or versatility
If command structure follows COSEM specifications, then standardization is achieved, but security against identifier alteration is insufficient
Solution Approach 1:
The invention adds a new dimensional layer to the command structure by utilizing the metadata section as an additional protection dimension. The operation descriptor is placed in this metadata dimension, which is then covered by the digital signature, creating a multi-layered security approach that maintains COSEM compatibility while enhancing protection.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach enhances the security of command transmission by ensuring that smart meters perform the intended operations, preventing alterations of command identifiers and maintaining operational integrity.
Implementation Method 1
generates a first signature on a set of data formed by the input attributes of the operation to be performed and the metadata associated with the command
Data Source
Figure 1~2
Figure 3~4
Figure 5
AI summary
A management device in an automated system remotely managing smart meters transmits a secure command by: performing a security operation (502) that generates a signature on a set of data consisting of attributes to be applied as input to an operation to be performed and metadata associated with the command, and transmitting (504) to the smart meter in question the command with a descriptor of the operation to be performed, the attributes to be applied as input to the operation to be performed, the associated metadata, and the first generated signature. The management device includes (501) in the metadata a copy of the descriptor of the operation to be performed, so that the signature also applies to the copy of the descriptor of the operation to be performed in order to allow verification upon receipt that the command has not been altered.