System and method for grid based cyber security
A method and system for providing a secure communication network using an electrical distribution grid is disclosed. A device connected to the electrical distribution grid initiates a request for a secured key token by signaling an intelligent communicating device residing at or near an edge of the grid. The intelligent communicating device forwards the request to a receiver at a distribution substation on the electrical grid. This receiver enhances the properties of the request such that a grid location for the request can be inferred. The enhanced request is forwarded to a server at the distribution substation, which compares the request grid location to a Grid Map and Policies of known secure grid locations. Any inconsistencies between the grid location inferred from the enhanced request and the Grid Map and Policies locations are considered evidence of tampering, and the server rejects the request.
1. A method for obtaining a decryption key for use in a secure communication session, comprising:
receiving, by an intelligent communicating device (ICD) via an electrical distribution grid on a low voltage side of a transformer, a first request from a computing device coupled to the electrical distribution grid via an electrical outlet for a decryption key for use in the secure communication session;
sending, via the electrical distribution grid to a receiver coupled to the electrical distribution grid on a high voltage side of the transformer, a second request for the decryption key;
receiving, from a transmitter coupled to the electrical distribution grid on the high voltage side of the transformer, the decryption key; and
sending the decryption key to the computing device via the electrical distribution grid.
2. The method of claim 1 wherein the second request includes a unique identifier (ID) that uniquely identifies the ICD from a plurality of other ICDs coupled to the electrical distribution grid.
3. The method of claim 1 wherein receiving the decryption key comprises receiving the decryption key and a first response ID;
further comprising receiving, prior to sending the decryption key to the computing device, a third request from the computing device for the decryption key, the third request including a second response ID; and
based on determining that the second response ID matches the first response ID, sending the decryption key to the computing device via the electrical distribution grid.
4. The method of claim 1 further comprising:
receiving, from the computing device via the electrical distribution grid, a message indicating the secure communication session has completed; and
notifying, via the electrical distribution grid, the receiver that the secure communication session has completed.
5. An intelligent communicating device (ICD) for obtaining a decryption key for use in a secure communication session, comprising:
a communication interface configured to be coupled to a low voltage side of an electrical distribution grid;
a processor device coupled to the communication interface and configured to:
receive, via the electrical distribution grid, a first request from a computing device coupled to the electrical distribution grid via an electrical outlet for a decryption key for use in the secure communication session;
send, via the electrical distribution grid to a receiver coupled to the electrical distribution grid on a high voltage side of the transformer, a second request for the decryption key;
receive, from a transmitter coupled to the electrical distribution grid on the high voltage side of the transformer, the decryption key; and
send the decryption key to the computing device via the electrical distribution grid.
6. The ICD of claim 5 wherein the second request includes a unique identifier (ID) that uniquely identifies the ICD from a plurality of other ICDs coupled to the electrical distribution grid.
7. The ICD of claim 5 wherein to receive the decryption key the processor device is further configured to receive the decryption key and a first response ID;
wherein the processor device is further configured to receive, prior to sending the decryption key to the computing device, a third request from the computing device for the decryption key, the third request including a second response ID; and
wherein the processor device is further configured to send, based on determining that the second response ID matches the first response ID, the decryption key to the computing device via the electrical distribution grid.
8. The ICD of claim 5 wherein the processor device is further configured to:
receive, from the computing device via the electrical distribution grid, a message indicating the secure communication session has completed; and
notify, via the electrical distribution grid, the receiver that the secure communication session has completed.