KR102110382B1 - Method for Performing Authentication of Data Concentration Unit for AMI - Google Patents

Abstract

According to the present invention, a method for performing authentication of a data concentrator for an advanced metering infrastructure (AMI) allows a control unit built into a data concentrator to have a function to turn on/off the power of a unit differentiated by function or to forcibly block network access, so that the control unit cuts off the power or network connection of a specific unit to fundamentally prevent risks such as hacking when the unit installed in the data concentrator fails to authenticate separately, thereby greatly contributing to improving the security of the data concentrator.

Description

Method for Performing Authentication of Data Concentration Unit for AMI}

The present invention relates to a method for performing authentication of a data concentrator for AMI, and more specifically, by proposing a new method for authenticating each unit detached from the data concentrator, greatly securing the security of the data concentrator. It relates to a method of performing authentication of an AMI data concentrator that can contribute.

The smart grid is a next-generation power grid that combines information technology (IT) with the power grid, enabling power providers and consumers to optimize energy efficiency through interactive information exchange and create new added value.

Smart Grid, which integrates all electrical energy-based systems around energy and communication infrastructure, controls the interaction of facilities and devices through intelligent automation functions, allowing the entire system to operate as one organic system.

Meanwhile, a smart meter can measure power consumption in real time and deliver it to a consumer. The infrastructure for communication of these smart meters is called an advanced metering infrastructure (AMI).

However, a smart meter forming a conventional AMI system is installed in the home of an ordinary customer, and a data concentration unit (DCU) is generally installed in a periphery, a security system for security and device authentication of these devices There was a problem exposed to various security threats due to absence.

In addition, the data concentrator consists of a number of units that can be attached and detached for each function, so security and device authentication for each unit is required, but since there is no specific method or procedure for this, unauthorized data concentrator There is a problem in that it is impossible to exclude the possibility of accessing the AMI system through an unauthorized unit or maliciously operating each unit by connecting.

Republic of Korea Registered Patent Publication No. 10-1326732

The present invention has been devised to solve the above-mentioned problems, so that the control unit built in the data concentrator has a function to turn on / off the power of other units differentiated for each function or to forcibly block network access. When a specific unit installed in the concentrator fails authentication, the control unit cuts off the power or network connection of the unit to prevent risks such as hacking, thereby contributing to enhancing the security of the data concentrator. It is to provide a method for performing authentication of a data concentrator.

In order to achieve the above object, the method for performing authentication of the data concentrator for AMI of the present invention is (A) The control unit mounted on the data concentrator identifies other units mounted on the data concentrator, and then starts authentication to these units. A first step of transmitting an instruction to; (B) a second step of requesting an authentication from the control unit based on the certificate of the unit that has received the authentication start command; (C) The security agent of the control unit is based on the authentication request from the unit. The third step is to determine whether the unit has been authenticated or is a new unit requesting authentication. The security agent sends a message that the authentication is successful to the unit so that the unit can operate normally, or if it is a new unit requesting authentication, the security agent of the control unit and the external security server are mutually related to the unit. And a fourth step of ending the authentication process of the unit by transmitting the result to the corresponding unit after performing the authentication procedure.

In the first step, the method for the control unit to identify another unit mounted on the data concentrator may include the step of checking and grasping the Power on Trap message of the corresponding unit.

In the third step, the step of identifying the unit that has been authenticated may include the step of identifying the unit that has successfully authenticated in the previous operation.

In the fourth step, if the unit fails authentication, the control unit may include a step of disconnecting power or network connection of the corresponding unit.

In addition, the control unit may include the step of detecting the network traffic of the data concentrator and cutting off the power supply or network connection of the unit generating abnormal traffic.

According to the method for performing the authentication of the AMI data concentrator of the present invention as described above, the control unit built in the data concentrator can turn on / off the power of other units differentiated by function or forcibly block network access. In order to have the function, and if a specific unit attached to the data concentrator fails authentication, the control unit cuts off the power or network connection of the unit to prevent the risk of hacking, thereby securing the security of the data concentrator. There is an effect that can greatly contribute to.

1 is a block diagram showing an AMI data concentrator according to the present invention,
Figure 2 is an actual illustration showing an AMI data concentrator according to the present invention,
3 is a view showing a data concentration device and a security server according to the present invention,
4 is a flowchart for explaining an authentication process through an AMI data concentrator according to the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings in order to enable those skilled in the art to easily implement the present invention.

First, AMI (Advanced Metering Infrastructure) refers to a total solution that starts from measuring and collecting information on power use from smart meters installed in consumers, and uses it after real-time transmission, storage, and analysis.

One of the key facilities of the AMI system is a Data Concentration Unit (DCU), which periodically collects various power information stored in the consumer's smart meter and transmits it to a remote AMI server system.

Since AMI is a communication infrastructure that is the basis of the smart grid, strict security application is required.

The Act on the Promotion and Utilization of Intelligent Power Grids (Act No. 12154), Guidelines on the Protection Measures for Intelligent Power Grid Information (No. 2012-129 by the Ministry of Knowledge Economy, etc.) provide guidelines for security matters that AMI must comply with. As it is being done, security policy, that is, device authentication procedure or encryption / decryption communication, should be applied from the smart meter at the end to the AMI server system at the top.

As KEPCO's AMI construction project progresses, the data concentration unit, which is a core facility, continues to evolve, and new data concentrators capable of attaching and detaching differentiated units for each function to suit the purpose of use will become popular. Is expected.

As shown in FIGS. 1 and 2, the units mounted on the new data concentrator are largely a power unit that generates power required for the operation of the data concentrator, a control unit that controls the overall operation of the data concentrator, and a communication method. It consists of one or more modem units per unit and a transformer monitoring unit that monitors the load of the distribution transformer.

The power unit is a unit that generates DC power required for operation of each unit inside the data concentration device from an AC commercial power source outside the data concentration device, and corresponds to an AC / DC conversion device.

The control unit is a unit composed of a microprocessor, memory, network switch element, etc., and executes various software (S / W) necessary for operation of the data concentrator. If a security agent exists in the form of a hardware module, it provides an interface with it. do.

The modem unit is a unit for wired / wireless communication between the data concentrator and the smart meter, and one or more corresponding modems are installed depending on the supported communication method.

Typically, a combination of ISO / IEC12139-1 standard PLC modem unit, HPGP (HomePlug GreenPHY) modem unit, Wi-SUN modem unit, Zigbee modem unit, LoRa modem unit, etc. is made according to the communication method used by the data concentrator. It is equipped with one or more.

The transformer monitoring unit is a unit that measures load current / voltage / power / power factor, etc. for monitoring the status of the pole transformer of the substation where the data concentrator is installed, and is equipped to be detachable depending on whether or not the function is used or not.

In addition, the control unit includes a networking function for linking each unit and communicating with a remote AMI server.

Separately, inside the data concentrator, an additional device including a connection unit for connecting external probes and units, an auxiliary power supply battery for preparing for a power outage, and an antenna mounted on a communication modem is further included.

In addition, every unit embedded in the data concentrator is injected with a unique security certificate during production, and the security certificate is generated based on a unique key.

As shown in FIG. 3, the control unit includes a security agent and a network switch that supports a function to access a security server through a WAN or communicate with each unit through a LAN.

In addition, the control unit has a function to turn on / off the power of each unit and forcibly cut off the network connection.

For example, when a Power over Ethernet (PoE) interface is applied to a connection between a control unit and each unit, power ON / OFF for each unit or network connection blocking may be implemented according to a conventional method.

 The control unit is equipped with a security agent that performs security authentication and encryption communication, and the security agent can be configured in the form of software or a single hardware module.

The security agent and security server of the control unit perform security authentication and encryption communication using a conventional security authentication and encryption processing method, for example, TLS (Transport Layer Security) method.

In order to perform authentication in the AMI data concentrator configured as described above, first, when power is applied to the control unit, the control unit determines whether or not its own authentication.

If the control unit is not authenticated, the security agent and the security server of the control unit perform a mutual authentication procedure, and the procedure at this time follows the normal TLS method.

If the control unit fails to authenticate (including a certain number of re-authentication attempts), the control unit's power supply or network connection is immediately cut off, thereby preventing the risk of hacking or the like.

 Subsequently, if the control unit inside the data concentrator succeeds in authentication, the control unit identifies another unit mounted in the data concentrator and sends a command to start authentication to the other unit.

 Here, as a method for the control unit to identify another unit mounted on the data concentrator, there is a method for checking the Power on Trap message (notifying the unit that the unit has been booted) of the corresponding unit, and transmitting an authentication request start command The order is determined by the order of receiving Power on Trap messages.

Subsequently, the unit that has received the authentication start command requests authentication to the control unit based on its own certificate.

The security agent of the control unit determines whether the unit has been authenticated or is a new unit requesting authentication based on the authentication request of the corresponding unit.

If the unit has been authenticated, the security agent of the control unit immediately sends a message that the authentication is successful to the corresponding unit, so that the corresponding unit can operate normally.

That is, the data concentration device itself completes the authentication process of the corresponding unit.

For reference, the data concentrator can turn on / off the power for each unit at any time, depending on the specific purpose. The unit that has been authenticated means that the unit has been successfully authenticated in the previous operation.

In addition, if the unit is newly requesting authentication, the security agent of the control unit and the security server perform a mutual authentication procedure for the corresponding unit, and transmits the result to the corresponding unit, thereby completing the authentication process of each unit.

That is, the authentication procedure for each unit is performed by the security agent of the control unit.

On the other hand, when a specific unit fails authentication (including a certain number of re-authentication attempts), the control unit immediately prevents the risk of hacking or the like by immediately cutting off the power or network connection of the unit.

In addition, since each unit is connected to a network, the data concentration device cannot perform a normal operation when a unit generating excessive traffic due to a failure exists.

Therefore, in order to prevent this, the control unit of the data concentrator detects network traffic, and cuts off the power supply or network connection of the unit generating abnormal traffic, thereby allowing the data concentrator to operate normally, and the corresponding action The event of occurrence can be transmitted to the security server.

According to the method for performing authentication of the data concentrator for AMI of the present invention as described above, the control unit built in the data concentrator can turn ON / OFF the power of the unit differentiated by function or forcibly block network access. When the specific unit installed in the data concentrator fails authentication, the control unit cuts off the power or network connection of the unit to prevent the risk of hacking, thereby securing the security of the data concentrator. There is an effect that can greatly contribute.

In the above description, a preferred embodiment of the present invention has been presented and described, but the present invention is not necessarily limited thereto, and a person skilled in the art to which the present invention pertains does not depart from the technical spirit of the present invention. It will be readily apparent that various substitutions, modifications and variations are possible.

Claims (5)

(A) After the control unit mounted on the data concentrator recognizes another unit mounted on the data concentrator, a first step of sending a command to start authentication to these units;
(B) a second step of requesting an authentication from the control unit based on the certificate of the unit receiving the authentication start command;
(C) a third step of determining whether the security agent of the control unit is a unit that has completed authentication or a unit that newly requests authentication based on an authentication request received from the unit; And
(D) If the unit has been authenticated, the security agent of the control unit sends a message that the authentication is successful to the unit, and if the unit is a new request for authentication, the security agent of the control unit and the external security server are connected to the unit. Including a fourth step of completing the authentication by performing a mutual authentication procedure and passing the result to the corresponding unit;
In the first step, the method of determining the other unit mounted on the data concentrator by the control unit includes a step of checking and grasping the Power on Trap message of the unit to perform authentication of the data concentrator for AMI. . delete The method according to claim 1, In the third step, the step of identifying the unit that has been authenticated includes the step of identifying the unit that has successfully authenticated in the previous operation. The method according to claim 1, In the fourth step, if the unit fails authentication, the control unit comprises a step of cutting off the power or network connection of the unit, the method of performing authentication of the data concentrator for AMI. The method according to claim 1, wherein the control unit comprises the steps of sensing the network traffic of the data concentrator and cutting off the power supply or network connection of the unit generating abnormal traffic.

Images