Systems and methods for revocation management in an AMI network
View Patent ↗Systems and methods for certificate revocation management for advanced metering infrastructure networks are provided. An accumulation manager can be used to accumulate certificate revocation list (CRL) information and determine an accumulator value and a proof value based on the accumulated CRL information using a plurality of functions. These values can be sent on to smart meters, which can then use them for authentication purposes.
1. A system for revocation management for an advanced metering infrastructure (AMI) network, the system comprising:
a plurality of smart meters;
a head-end system (HES) collecting power data from the plurality of smart meters;
a gateway in communication with the plurality of smart meters and the head-end system;
a certificate revocation list (CRL) collector collecting CRLs from certificate authorities (CAs);
an accumulation manager in communication with the CRL collector and receiving CRL information from the CRL collector, the CRL information being based on the collected CRLs; and
a head-end management server (HMS) in communication with the accumulation manager and the HES,
the accumulation manager further accumulating the CRL information and determine an accumulator value (A) and a proof value (nr proof ) based on the accumulated CRL information using a plurality of functions,
the HMS receiving the accumulator value and the proof value from the accumulation manager and send the accumulator value and the proof value to the HES for distribution to the plurality of smart meters,
the accumulator value and the proof value being used by the plurality of smart meters to verify that communication should be accepted,
the determining of A and nr proof comprising using a prime representative for each certificate serial number in the CRL information as inputs for the plurality of functions,
the determining of A comprising using the following equation
= g y 1 , . . . ,y n (mod ),
where N=pq, where p and q are strong primes, where Y={y 1 , . . . , y n } is a set of the prime representatives, and where q is an exponentiation function, and
the determining of nr proof comprising using an initial proof value created by a utility company and updating the initial proof value based on a set of revoked certificates and a value of A.
2. The system according to claim 1 , the accumulation manager being a Rivest-Shamir-Adleman (RSA) accumulator.
3. The system according to claim 1 , the CRLs collected from the CAs comprising serial numbers of revoked certificates and corresponding revocation dates of the revoked certificates.
4. The system according to claim 1 , the accumulation manager sending signals only to the HMS and not to any other device.
5. The system according to claim 1 , the HES communicating with the plurality of smart meters via the gateway by first communicating with the gateway over a wireless network.
6. The system according to claim 5 , the wireless network being a long term evolution (LTE) network.
7. The system according to claim 1 , the CRL collector sending signals only to the accumulation manager and not to any other device.
8. The system according to claim 1 , the CRLs comprising at least one of full CRLs and delta CRLs that include only changes from a previous CRL.
9. The system according to claim 1 , the plurality of functions comprising a Setup( ) function, a ComputeAcc( ) function, a ComputeNonRevokedProof( ) function, an UpdateAcc( ) function, and an UpdateNonRevokedProof( ) function.
10. A method for revocation management for an advanced metering infrastructure (AMI) network, the method comprising:
collecting, by a certificate revocation list (CRL) collector, CRLs from certificate authorities (CAs);
sending, by the CRL collector, CRL information to an accumulation manager, the CRL information being based on the collected CRLs;
accumulating, by the accumulation manager the CRL information;
determining, by the accumulation manager, an accumulator value (A) and a proof value (nr proof ) based on the accumulated CRL information using a plurality of functions;
sending, by the accumulation manager, the accumulator value and the proof value to a head-end management server (HMS);
sending, by the HMS, the accumulator value and the proof value to a head-end system (HES);
distributing, by the HES, the accumulator value and the proof value to a plurality of smart meters; and
using, by the plurality of smart meters, the accumulator value and the proof value to verify that communication should be accepted,
the CRLs collected from the CAs comprising serial numbers of revoked certificates,
the determining of A and nr proof comprising using a prime representative for each serial number of revoked certificates in the CRL information as inputs for the plurality of functions,
the determining of A comprising using the following equation
= g y 1 , . . . ,y n (mod ),
where N=pq, where p and q are strong primes, where Y={y 1 , . . . , y n } is a set of the prime representatives, and where q is an exponentiation function, and
the determining of nr proof comprising using an initial proof value created by a utility company and updating the initial proof value based on a set of revoked certificates and a value of A.
11. The method according to claim 10 , the accumulation manager being a Rivest-Shamir-Adleman (RSA) accumulator.
12. The method according to claim 10 , the accumulation manager sending signals only to the HMS and not to any other device.
13. The method according to claim 10 , the CRL collector sending signals only to the accumulation manager and not to any other device.
14. The method according to claim 10 , the plurality of functions comprising a Setup( ) function, a ComputeAcc( ) function, a ComputeNonRevokedProof( ) function, an UpdateAcc( ) function, and an UpdateNonRevokedProof( ) function.
15. The method according to claim 10 , the CRLs comprising at least one of full CRLs and delta CRLs that include only changes from a previous CRL.
16. A system for revocation management for an advanced metering infrastructure (AMI) network, the system comprising:
a plurality of smart meters;
a head-end system (HES) collecting power data from the plurality of smart meters;
a gateway in communication with the plurality of smart meters and the head-end system;
a certificate revocation list (CRL) collector collecting CRLs from certificate authorities (CAs);
an accumulation manager in communication with the CRL collector and receiving CRL information from the CRL collector, the CRL information being based on the collected CRLs; and
a head-end management server (HMS) in communication with the accumulation manager and the HES,
the accumulation manager further accumulating the CRL information and determine an accumulator value (A) and a proof value (nr proof ) based on the accumulated CRL information using a plurality of functions,
the HMS receiving the accumulator value and the proof value from the accumulation manager and send the accumulator value and the proof value to the HES for distribution to the plurality of smart meters,
the accumulator value and the proof value being used by the plurality of smart meters to verify that communication should be accepted,
the accumulation manager being a Rivest-Shamir-Adleman (RSA) accumulator,
the CRLs collected from the CAs comprising serial numbers of revoked certificates and corresponding revocation dates of the revoked certificates,
the accumulation manager sending signals only to the HMS and not to any other device,
the HES communicating with the plurality of smart meters via the gateway by first communicating with the gateway over a wireless network,
the wireless network being a long term evolution (LTE) network,
the CRL collector sending signals only to the accumulation manager and not to any other device,
the CRLs comprising full CRLs and delta CRLs that include only changes from a previous CRL,
the plurality of functions comprising a Setup( ) function, a ComputeAcc( ) function, a ComputeNonRevokedProof( ) function, an UpdateAcc( ) function, and an UpdateNonRevokedProof( ) function,
the determining of A and nr proof comprising using a prime representative for each certificate serial number in the CRL information as inputs for the plurality of functions,
the determining of A comprising using the following equation
= g y 1 , . . . ,y n (mod ),
where N=pq, where p and q are strong primes, where Y={y 1 , . . . , y n } is a set of the prime representatives, and where g is an exponentiation function, and
the determining of nr proof comprising using an initial proof value created by a utility company and updating the initial proof value based on a set of revoked certificates and a value of A.