Smart Meter Command Verification Using Signed Operation Descriptors
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing smart meter management systems face vulnerabilities where command alterations can lead to unintended and potentially harmful operations due to insufficient protection of command identifiers, despite the use of COSEM data-protection objects.
Innovation Solution
Implementing a method that generates a signature on a set of data including a descriptor of the operation to be performed and associated metadata, with a copy of the descriptor included in the metadata, to ensure the operation is not altered during transmission, and verifying this on reception.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If COSEM data-protection objects are used to protect command attributes, then attribute protection is improved, but command identifier protection remains insufficient
Solution Approach 1:
The command structure is segmented into protected attributes (using COSEM data-protection objects) and protected identifiers (using separate signature mechanism). This segmentation allows each component to be protected independently, with the identifier protection adding an additional layer without completely redesigning the entire protection system.
Solution Approach 2:
A signature mechanism acts as an intermediary between the command identifier and the execution process. This signature verifies the integrity and authenticity of the command identifier separately from the attribute protection, ensuring that the identifier has not been altered during transmission.
2Object-affected harmful factors
If command attributes are protected using asymmetric encryption, then data security is improved, but vulnerability to identifier alteration persists
Solution Approach 1:
The signature mechanism is applied in advance to the command identifier before transmission, creating a preliminary protective measure. This allows the system to detect and prevent identifier alteration attempts before they can affect operation accuracy, by verifying the signature upon reception.
Solution Approach 2:
The signature verification process provides feedback about the integrity of the command identifier. Upon receiving a command, the system verifies the signature and can detect alterations, providing immediate feedback that prevents execution of altered commands and maintains operational reliability.
Data Source
AI summary
A management device in an automated management system remotely managing the smart meters transmits a secure command while: implementing a protection that generates a signature on a set of data formed by attributes to be applied at the input of an operation to be performed and metadata associated with the command, and transmitting, to the smart meter in question, the command with the descriptor of the operation to be performed, the input attributes of the operation to be performed, the metadata associated with the command and the first signature generated. The management device includes in the metadata a copy of the descriptor of the operation to be performed, so that the signature also applies to the copy of the descriptor of the operation to be performed in order to make it possible, on reception, to verify that the command has not been altered.