AMI/AMR%20Security - PowerPoint PPT Presentation

About This Presentation
Title:

AMI/AMR%20Security

Description:

AMI/AMR Security Advanced Meter Infrastructure / Automatic Meter Reading Security Outline Wireless Comes of Age Emerging Technology - AMI/AMR Vulnerabilities ... – PowerPoint PPT presentation

Number of Views:457
Avg rating:3.0/5.0
Slides: 17
Provided by: Bupp
Learn more at: http://cs.uccs.edu
Category:

less

Transcript and Presenter's Notes

Title: AMI/AMR%20Security


1
AMI/AMR Security
  • Advanced Meter Infrastructure /
  • Automatic Meter Reading Security

2
Outline
  • Wireless Comes of Age
  • Emerging Technology - AMI/AMR
  • Vulnerabilities
  • Vulnerabilities Ignored
  • Regulation and Management
  • Secure Smart Meters
  • Secure the Smart Grid
  • Selected Smart Solutions
  • Conclusion

3
AMI/AMR Security
  • Advanced Meter Infrastructure
  • Automatic Meter Reading
  • Security is critical

4
Coming of Age
  • Human meter readers were relatively cheap
    quick and easy to install rugged and extremely
    reliable over long periods of use
  • Multiple types of AMR techniques and technologies
  • Wireless emerged - new problems including
    security, range limitations, spectrum
    interference and reliability issues
  • Financial concerns about future operational and
    support costs
  • Advanced AMR networks would provide the best
    solution to the cash flow delay typically
    30-90 days
  • 25 of water meters in the United States are now
    equipped with AMR
  • Over 4 million gas and electric meters installed
    12/1/09

5
AMI/AMR
  • Emerging Technology
  • Inherent risks
  • Security problems

6
AMI/AMR Scope
7
AMI/AMR Vulnerabilities
  • Meters provide gateway to Smart Grid
  • Notorious memcpy, strcpy, strcat used in OS
  • Physical access to meters not protected
  • No authentication
  • No encryption
  • Retrofitted PLC specs readily available
  • Easy to hack

8
Vulnerabilities Ignored
  • President Obamas stimulus package
  • Billions up for grab
  • Specifies security measures be implemented
  • Meters installed despite buggy SW
  • Retrofit costs may be as high as 60 times the
    regular cost
  • Stimulus causes vendors to clam up

9
Securing Smart Meters
10
Securing Smart Meters
  • Regulation and Management
  • Examples Railroad, telecom, Internet
  • New guidelines adopted
  • Vendors boast about solutions
  • New innovative ideas

11
Secure the Smart Grid
  • Secure Development Lifecycle (SDL)
  • Authentication
  • Encryption
  • Radio frequency hopping
  • Controllers, collection points, meters all
    enabled with best security practices
  • Train Staff

12
Selected Solutions
  • Itron OpenWay Collection Engine with Enhanced
    Security
  • Texas Instruments Smart Meters with Secure
    Pre-Payment
  • MBUS3 fully compliant Open Metering System (OMS)

13
Secure Smart Grid Solution
14
TI Secure Smart Meters with Pre-Payment
  • Triple DES, SHA-1 crypto-algorithms, ANSI
    X9.63 session key
  • Mutual authentication authorized tag
    and reader complete transaction 
  • Flexible and configurable memory
  • Supports up to five applications on one card or
    token
  • ISO/IEC 14443 with ISO/IEC 7816 command set
    support

15
MBUS3
  • Supports S1, S2, T1 and T2 modes
  • AES-128 encryption
  • Battery lifetimes in excess of 14 years
  • Master module - support up to 64 slaveswith
    unique encryption keys
  • Unique auto-message generation feature
  • Message mailboxes supports individual
    communication with several slaves in parallel
  • Autonomous repeater that will store and
    retransmit slave messages

16
Smart Infrastructure Implementation Percentages
17
Conclusion
  • US playing catch-up to the International
    community
  • Stimulus package worth billions causing
    vulnerabilities to be ignored
  • Existing installations require retrofit
  • Regulatory agencies adopt guidelines
  • Security is critical to protect against Internet
    based common vulnerabilities
  • Vendors boast secure solutions
  • Secure installations begin
  • Questions?

18
References
  • 1 http//www.itron.com/pages/
    news_press_individual.asp?
    iditr_016976.xml
  • 2 http//loftyperch.com/index/use_lang/EN/page/4
    08.html
  • 3 http//www.theregister.co.uk/
    2009/06/12/smart_grid_security_risks/
  • 4 http//earth2tech.files.wordpress.com/
    2009/10/sgigselections_category1.pdf
  • 5 http//www.ensec.org/index.php?option
    com_contentviewarticleid 218making-a-secure-s
    mart-grid-a-realitycatid100issuecontentItemid
    352
  • 6 http//www.metering.com/node/16162
  • 7 http//www.ti.com/rfid/shtml/apps-smartmeterin
    g.shtml
Write a Comment
User Comments (0)
About PowerShow.com