Virtualized Relay Licensing via Configuration Parameter Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The adoption of virtualized relays in substations poses challenges due to software license authorization issues, particularly when specific hardware components are cloned or emulated, and the need for a reliable internet connection for license servers, which can compromise safety and lead to potential substation failures.
Innovation Solution
A licensing module that verifies consistency between actual and licensed configuration parameters, blocking operation until verification is successful, and using cryptographic proofs and secure hardware to ensure operation in an anticipated environment, independent of internet connectivity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If virtualized relays are used in substations, then flexibility and ease of deployment are improved, but license authorization security deteriorates due to hardware cloning and emulation
Solution Approach 1:
The patent changes the licensing parameter from hardware-dependent identifiers (which can be cloned) to software configuration parameters (which are unique and controllable). The licensing module verifies configuration parameters such as substation ID, relay ID, and communication settings instead of relying on hardware identifiers, thereby maintaining security while enabling virtualization.
Solution Approach 2:
The patent introduces a licensing module as an intermediary between the virtualized relay software and the licensing verification process. This module independently verifies configuration parameters and manages license validation, separating the licensing function from both hardware and external license servers, thus securing authorization against hardware cloning while maintaining flexibility.
2Ease of operation
If a license server is used to authorize virtualized relays, then license management is improved, but system complexity and dependency on external infrastructure worsen
Solution Approach 1:
The patent merges the licensing module directly into the virtualized relay software package. The licensing verification functionality is combined with the relay operations, eliminating the need for a separate license server infrastructure. This integration simplifies the system by removing external dependencies while maintaining license management capabilities.
Solution Approach 2:
The virtualized relay performs self-verification of its configuration parameters against licensed parameters using the integrated licensing module. The system serves its own licensing needs independently without requiring external license servers, thereby reducing system complexity and eliminating dependency on external infrastructure while maintaining ease of operation.
3Reliability
If internet connection is required for license server operation, then license verification is improved, but reliability in remote locations deteriorates
Solution Approach 1:
The patent extracts the license verification process from the external license server and embeds it within the virtualized relay software through the licensing module. By taking out the dependency on external internet connectivity and implementing local verification of configuration parameters, the system achieves reliable license verification while maintaining operational independence in remote locations.
4Ease of manufacture
If hardware components are cloned for virtualization, then ease of deployment is improved, but security against unauthorized manipulation deteriorates
Solution Approach 1:
The patent changes the basis of authorization from immutable hardware identifiers (which can be cloned) to configurable software parameters (which provide security). By verifying software configuration parameters such as substation ID, relay ID, and communication settings, the system maintains security against unauthorized manipulation while enabling easy deployment through virtualization and hardware cloning.
Data Source
Figure 1~2
Figure 3
AI summary
This disclosure provides a substation (10) having a virtualized relay (200) for operating the substation (10) with a set of actual configuration parameters (210), and a licensing module (300) being configured for: verifying a consistency between the set of actual configuration parameters (210) and a set of licensed configuration parameters (310), blocking operation of the virtualized relay (200) with the set of actual configuration parameters; and releasing operation of the virtualized relay (200) with the set of actual configuration parameters upon successful verification of the consistency. Further, this disclosure provides a method for operating a substation and the use of a licensing module according to the disclosure in a substation.