Systems and methods for communicating data securely for an electric power delivery system
AssigneeSchweitzer Engineering Laboratories, Inc.
InventorColin Gordon
Life of this patent
Estimating the term…
Abstract
A system includes a parallel redundancy protocol (PRP) link redundancy entity (LRE) configured to receive data and copy the data to create a first copy of the data and a second copy of the data for transmission and a switch configured to cause operation between a first PRP media access control security (MACsec) mode and a second PRP MACsec mode to encrypt the data. The first PRP MACsec mode includes performing MACsec encryption on the data received by the PRP LRE prior to the data being copied by the PRP LRE, and the second PRP MACsec mode includes performing the MACsec encryption on the first copy of the data and the second copy of the data after the data has been copied by the PRP LRE.
Claims20
A system, comprising:
- a parallel redundancy protocol (PRP) link redundancy entity (LRE) configured to receive data and copy the data to create a first copy of the data and a second copy of the data for transmission;
- and
- a switch configured to cause an operation of a first PRP media access control security (MACsec) mode and a second PRP MACsec mode to encrypt the data, wherein the first PRP MACsec mode comprises performing MACsec encryption on the data received by the PRP LRE prior to the data being copied by the PRP LRE, and the second PRP MACsec mode comprises performing the MACsec encryption on the first copy of the data and the second copy of the data after the data has been copied by the PRP LRE.
A non-transitory computer-readable medium comprising a memory or disk comprising instructions, wherein the instructions, when executed by processing circuitry, are configured to cause the processing circuitry to perform operations comprising:
- receiving first data from an intelligent electronic device (IED) of an electric power delivery system;
- determining a parallel redundancy protocol (PRP) media access control security (MACsec) mode used to encrypt the first data received from the IED;
- determining second data to be transmitted to the IED;
- and
- causing operation in the PRP MACsec mode to encrypt the second data to be transmitted to the IED.
A first intelligent electronic device (IED), comprising:
- a switch configured to perform operations comprising:
- determining a second IED configured to receive data transmitted by the first IED;
- identifying, based on the second IED, a parallel redundancy protocol (PRP) media access control security (MACsec) mode to encrypt the data transmitted by the first IED to the second IED;
- and
- operating in accordance with the PRP MACsec mode.
Dependencies are inferred from the claim text.