Securing Smart Metering applications in Untrusted Clouds with the SecureCloud Platform

Abstract

Data security in smart metering applications is important not only to secure the customer privacy but also to protect the power utility against fraud attempts. Usual deployment of metering applications rely on the power utility infrastructure, assuming its Advanced Metering Infrastructure (AMI) as trustworthy. This paper describes the design and deployment of a smart metering system focusing on the security of the AMI (smart meters, data aggregator on the field, Metering Data Collection system and metering database) considering the data processing on untrusted clouds. We discuss one use case of the SecureCloud project, an ongoing project that investigates how security and privacy requirements of smart grid applications can be met with a secure cloud platform based on Intel SGX enclaves. The paper describes the components of the advanced metering system as well as the security approach adopted to meet its requirements. A smart metering application has been prototyped in the SecureCloud platform and the integration challenges are discussed from the perspectives of security, privacy and scalability.

A Proteção De Dados Pessoais No Contexto Da Rede Elétrica Inteligente

“…Baek et al (2015) propõem um framework de gerenciamento seguro, baseado em uma estrutura hierárquica de computação em nuvem e com criptografia baseada em identidade (identity-based encryption) para fornecer diferentes tipos de análise big-data, ao qual denominam "Smart-Frame". Riella et al (2018) discute um caso de uso do projeto SecureCloud que utiliza hardware específico para processamento seguro de dados (IntelSGX) e acesso baseado em função (role-based access) para assegurar que somente os dados necessários para a realização de determinada função sejam acessados. Ferrag et al (2016)…”

Managing confidentiality leaks through private algorithms on Software Guard eXtensions (SGX) enclaves

“…Much of the current research [9,14,31,34,41,44,48,51] is to keep data confidential in a Trusted Execution Environment (TEE). The novelty of our work is that, in addition to the input values and constant values used in an algorithm, we are adding algorithm secrecy.…”

“…In the context of SecureCloud, the dependability 6 notion includes confidentiality, but this applies to data only. The SecureCloud solutions [9,14,31,44,51] focus on processing confidential data via public algorithms in an untrusted cloud. There is no concern about keeping the algorithms secret in SecureCloud projects.…”