Back to results
US 12,225,133 B2Granted
Configurable network security for networked energy resources, and associated systems and methods
AssigneeOperant Networks
InventorsRandall King, Roger L. Jungerman, Mayank Saxena
Life of this patent
Estimating the term…
Abstract
Secure communication between users and resources of an electrical infrastructure and associated systems and methods. A representative secure distributed energy resource (DER) communication system provides for the creation of trust rules that govern the permitted communications between users and resources of an electrical infrastructure system, and the enforcement of the trust rules.
Claims20
A method, performed by a computing system, to secure access to utility infrastructure, the method comprising:
- maintaining, at the computing system, a trust policy comprised of a plurality of trust rules, wherein each trust rule comprises an origin identifier, a target identifier, and an action identifier;
- generating an Information Centric Networking (ICN) command message based on a trust rule selected from the plurality of trust rules, wherein the origin identifier of the selected trust rule corresponds to a utility infrastructure user, the action identifier of the selected trust rule corresponds to a command in the ICN command message, and the target identifier of the selected trust rule corresponds to a utility infrastructure resource;
- publishing, on a communication channel, the ICN command message, wherein publishing the ICN command message causes an enforcement computing system, on the communication channel and associated with the utility infrastructure resource, to maintain authorization information characterized by the origin identifier, target identifier, and action identifier of the selected trust rule;
- and
- cryptographically signing a certificate associated with the utility infrastructure user, wherein the certificate includes a utility infrastructure user name defined in an ICN hierarchical namespace and a utility infrastructure user public key;
- wherein the enforcement computing system associated with the utility infrastructure resource, in response to subscribing to the ICN command message:
- determines, from the ICN command message, the target identifier and the action identifier of the ICN command message, wherein the target identifier of the ICN command message corresponds to the utility infrastructure resource;
- and
- determines whether the utility infrastructure user of the ICN command message, associated with the utility infrastructure user name of the certificate, is authorized to perform an action, corresponding to the action identifier of the ICN command message, on the utility infrastructure resource, based on the maintained authorization information.
6 more elements
A method, performed by a computing system, to secure access to utility infrastructure, the method comprising:
- maintaining, at the computing system, a trust policy comprised of a plurality of trust rules, wherein each trust rule comprises an origin identifier, a target identifier, and an action identifier;
- generating an Information Centric Networking (ICN) response message based on a trust rule selected from the plurality of trust rules, wherein the origin identifier of the selected trust rule corresponds to a utility infrastructure resource, the action identifier of the selected trust rule corresponds to a response in the ICN response message, and the target identifier of the selected trust rule corresponds to a utility infrastructure user;
- publishing, on a communication channel, the ICN response message, wherein publishing the ICN response message causes an enforcement computing system, on the communication channel and associated with the utility infrastructure user, to maintain authorization information characterized by the origin identifier, target identifier, and action identifier of the selected trust rule;
- and
- cryptographically signing a certificate associated with the utility infrastructure resource, wherein the certificate includes a utility infrastructure resource name defined in an ICN hierarchical namespace and a utility infrastructure resource public key;
- wherein the enforcement computing system associated with the utility infrastructure user, in response to subscribing to the ICN response message:
- determines, from the ICN response message, the target identifier and the action identifier of the ICN response message, wherein the target identifier of the ICN response message corresponds to the utility infrastructure user;
- and
- determines whether the utility infrastructure resource of the ICN response message, associated with the utility infrastructure resource name of the certificate, is authorized to respond, corresponding to the action identifier of the ICN response message, to the utility infrastructure user, based on the maintained authorization information.
6 more elements
Dependencies are inferred from the claim text.