Encrypted Smart Meter Gateway Connection via Display Service Unit
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for establishing an encrypted connection between a user end device and a smart meter gateway are complex for end users, particularly due to security requirements and the need for direct Ethernet access, which undermines user convenience and security when accessing HAN interface data, and centralizing data transmission compromises decentralized protection.
Innovation Solution
A method involving a display service unit, client unit, and smart meter gateway to set up an encrypted end-to-end connection using multiple certificates for secure authentication and data transfer, allowing user end devices to access HAN interface data securely via sub-addresses while maintaining the security structure of the smart meter gateway, using TLS or SSH connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If direct Ethernet connection and static IP configuration are required for HAN interface access, then security is maintained, but user convenience and ease of operation deteriorate
Solution Approach 1:
The patent introduces a display service unit as an intermediary component that mediates between the user's terminal device and the smart meter gateway's HAN interface. This intermediary handles the complex authentication and connection establishment, allowing users to access meter data through a simplified process while maintaining the security requirements of direct HAN interface access. The display service unit acts as a bridge that translates user-friendly access requests into secure authenticated connections.
2Ease of operation
If all meter readings are transmitted to a central portal, then user convenience is improved, but data security and decentralized protection deteriorate
Solution Approach 1:
The patent segments the data access architecture into multiple components: the smart meter gateway that collects and securely stores data, the display service unit that provides user interface functionality, and the user's terminal device. This segmentation allows the system to maintain decentralized secure storage at the gateway while providing convenient centralized-like access through the display service unit. The segmentation prevents complete centralization that would compromise security while still achieving user convenience.
3Reliability
If multiple certificates and encrypted connections are implemented, then data security is improved, but system complexity increases
Solution Approach 1:
The patent extracts the certificate management and encryption complexity from the user's terminal device and concentrates it in the display service unit and smart meter gateway. The display service unit handles certificate verification and encrypted connection establishment, while the user's device only needs to communicate with this intermediary. This extraction of complexity to specific components maintains high security through multiple certificates and encrypted connections while keeping the overall system usable by shielding users from the complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for establishing an encrypted connection between a user-side terminal and a smart meter gateway with a WAN interface and a HAN interface, wherein a display service unit and a client unit are provided, the units being configured to establish an encrypted end-to-end connection, comprising the following steps: Registering the user-side terminal for an encrypted connection with the display service unit, wherein the display service unit has a first certificate (DISP_Z); identifying at least one associated smart meter gateway for the user-side terminal; establishing an encrypted connection from the identified smart meter gateway to the display service unit and to the client unit, respectively, wherein a second certificate (EMT_Z) is used for the display service unit and a third certificate (CLS_Z) is used for the client unit.Generating a sub-address in the domain of the first certificate for use by the user's terminal device, where the sub-address points to the display service unit; requests from the user's terminal device to the sub-address are routed via the encrypted connections between the display service unit, smart meter gateway, and client unit; receiving the request at the client unit; forwarding the request to the HAN interface of the smart meter gateway and establishing another encrypted connection at the HAN interface of the smart meter gateway, where the smart meter gateway provides a fourth certificate (SMGW_HAN_Z) for the HAN interface for the connection; and responding to the user's terminal device's requests to the HAN interface via the encrypted connections between the display service unit, smart meter gateway, and client unit.