Media access control security (macsec) application cryptographic fingerprinting
AssigneeSchweitzer Engineering Laboratories, Inc.
InventorsColin Gordon, Sai Krishna Raghupathula, Jason A. Dearien
Life of this patent
Estimating the term…
Abstract
A software defined network (SDN) switch of a communication network includes a memory and a processor operatively coupled to the memory. The SDN switch receives a media access control security (MACsec) frame of power system data. The SDN switch detects an SDN flow match based at least in part on a port identifier of the MACsec frame. The SDN switch performs an action based on the SDN flow match.
Claims20
A software defined network (SDN) switch of a communication network, comprising:
- a memory;
- and
- a processor operatively coupled to the memory, wherein the processor is configured to execute instructions stored on the memory to cause operations comprising:
- receive a media access control security (MACsec) frame of power system data;
- detect an SDN flow match based at least in part on a port identifier of the MACsec frame;
- and
- perform an action based on the SDN flow match.
A software defined network (SDN) controller of a communication network, comprising:
- a memory;
- and
- a processor operatively coupled to the memory, wherein the processor is configured to execute instructions stored on the memory to cause operations comprising:
- obtain one or more rules indicating a port identifier and an action, wherein the action is performed upon matching the port identifier of the one or more rules to a port identifier of a media access control security (MACsec) frame;
- and
- sending the one or more rules to an SDN switch to allow the SDN switch to perform the action upon matching the port identifier of the MACsec frame to the port identifier of the one or more rules.
A method, comprising:
- receiving, at a software defined network (SDN) switch, one or more rules indicating a port identifier and an action to perform, from an (SDN) controller;
- receiving, at the SDN switch, a media access control security (MACsec) frame from a first intelligent electronic device (IED) of a power system;
- detecting, via the SDN switch, an SDN flow match by matching a port identifier of the MACsec frame to the port identifier of the one or more rules;
- and
- performing, via the SDN switch, the action.
Dependencies are inferred from the claim text.