Smart Meter Memory Initialization via Security Module Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing smart meter systems lack secure and trustworthy methods for initializing memory areas, which are crucial for secure communication between smart meters and authorized market participants, leading to potential misuse of energy consumption data and unauthorized access.

Innovation Solution

A method for initializing a memory area assigned to a smart meter involves establishing secure communication channels through authentication with a security module using cryptographic protocols and certificates, ensuring only trustworthy entities can access and manage the data, thereby ensuring secure and authorized data transmission and access control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If secure authentication protocols and cryptographic procedures are implemented for initializing memory areas in smart meters, then data protection and trustworthiness are improved, but device complexity and initialization time increase

Engineering Contradiction:
Improvedata protectionVSAvoidinitialization process
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by pre-configuring the security module with authentication credentials and cryptographic keys before the smart meter becomes operational. The initialization process establishes secure communication channels and authenticates market participants in advance, so that when the smart meter enters service, the security infrastructure is already in place and verified, reducing operational complexity while maintaining high security standards

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces a security module as an intermediary component between the smart meter's memory area and external market participants. This security module handles all authentication and cryptographic operations, acting as a mediator that simplifies the overall system architecture by centralizing security functions and isolating the complex cryptographic procedures from the main smart meter control logic

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If authentication and secure transmission procedures are implemented during memory area initialization, then unauthorized access is prevented, but initialization time and processing overhead increase

Engineering Contradiction:
Improveaccess controlVSAvoidinitialization time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent performs authentication and secure channel establishment as preliminary actions during the initialization phase, before the smart meter begins normal operations. By completing these time-consuming security procedures upfront, the system ensures that once initialized, subsequent data transmissions can proceed more efficiently with pre-verified security contexts and established cryptographic sessions

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements optimized cryptographic procedures that rush through the essential authentication steps by utilizing pre-configured security parameters and cached cryptographic materials. The security module skips redundant verification steps when possible, using previously established trust relationships to accelerate the initialization process while maintaining security integrity

Inventive Principle:
Principle #21Skipping (Rushing through)

Data Source

PatentEP2812840B1Method for initializing a memory area that is associated with a smart meter
Publication Date: 2019.03.13 BUNDESDRUCKEREI GMBH
  • EP2812840B1 patent drawingFigure 1
  • EP2812840B1 patent drawingFigure 2
  • EP2812840B1 patent drawingFigure 3

AI summary

The invention relates to a method for initializing a memory area (136), the memory area (136) being associated with a smart meter (142; 144; 146; 148), and the method comprising the steps of: establishing a first communication channel between a first computer system (150) and a security module (100), the security module (100) being associated with the memory area (136); authenticating the first computer system (150) with respect to the security module (100); once the first computer system (150) has been successfully authenticated with respect to the security module (100), the security module (100) receiving data from the first computer system (150) by way of secure transmission and storage of the data in the memory area (136) in order to initialize the memory area (136).