Key management device, system and method having a rekey mechanism
View Patent ↗According to some embodiments, a key management apparatus for deploying in a smart grid system adapted to receive metering data from smart meters connected to at least one relay via a network, includes: a key control mechanism that derives a key array of individual purpose specific keys from one master key such that the purpose specific key in the key array are each independent cryptographic keys for each specific usage in an application or for each application if there is only one specific usage in an application.
1. A rekey method for a communication device, comprising:
configuring a microprocessor to provide a key control mechanism to derive two or more purpose specific key array from one master key where the purpose specific key in each of the derived purpose specific key array are cryptographically independent of each other;
using one of the two or more purpose specific key array for one of the two or more specific purposes in an application and using other one of the two or more purpose specific key array for other one of the two or more specific purposes in said same application in such a way so that each of the two or more specific purposes in said same application uses different purpose specific key array; and
using one purpose specific key array for an application that has only one specific purpose, wherein only one purpose specific key in the key array is effective at same time, and when an effective purpose specific key need to rekey, the key control mechanism stores an array index value corresponding to the effective purpose specific key as used and uses one of unused purpose specific key from the key array as new effective purpose specific key.
2. The method of claim 1 , wherein said key control mechanism derives an application master key from one master key for every application, and derives the key array from the application master key.
3. The method of claim 1 , wherein the key control mechanism uses purpose specific key that has an index value being equal to the stored array index value plus one as new effective purpose specific key.
4. The method of claim 1 , wherein said key control mechanism sets an array size of the key array to a value proportional to frequency of updating the purpose key.
5. The method of claim 1 , wherein the key control mechanism determines an array size of the key array by negotiating a use of a control message of the application used the purpose specific key.
6. The method of claim 1 , wherein each of application messages includes an array index value corresponding to the purpose specific key used with encryption.
7. The method of claim 6 , wherein the key control mechanism informs rekey of an opposite entity, when an effective purpose specific key need to rekey, by an application message including an array index value of a new effective purpose specific key.
8. The method of claim 6 , wherein the key control mechanism informs rekey of an opposite entity, when an effective purpose specific key need to rekey, by a control message including an array index value of a new effective purpose specific key.
9. The method of claim 1 , wherein: said communication device is a smart meter.
10. The method of claim 9 , wherein said smart meter is for metering in relation to use of electric vehicles, home appliances, photovoltaics, rechargeable batteries or other devices.
11. The method of claim 10 , wherein said smart meter meters consumption or use information and communicates that information via a communication network back to a provider for monitoring and billing.
12. A communication device configured to receive data from a plurality of metering devices connected to relays distributed in a power grid network, comprising:
a microprocessor, and
said microprocessor configured to run a key control mechanism to derive two or more purpose specific key array from one master key where the purpose specific key in each of the derived purpose specific key array are cryptographically independent of each other and using one of the two or more purpose specific key array for one of the two or more specific purposes in an application and using other one of the two or more purpose specific key array for other one of the two or more specific purposes in said same application in such a way so that each of the two or more specific purposes in said same application uses different purpose specific key array; and using one purpose specific key array for an application that has only one specific purpose, wherein only one purpose specific key in the key array is effective at same time, and when an effective purpose specific key need to rekey, the key control mechanism stores an array index value corresponding to the effective purpose specific key as used and uses one of unused purpose specific key from the key array as new effective purpose specific key.
13. The communication device of claim 12 , wherein: said device is a meter data management server.
14. The communication device of claim 12 , wherein each of said plurality of metering devices is a smart meter for metering in relation to use of electric vehicles, home appliances, photovoltaics, rechargeable batteries or other devices.