Secure tokens for controlling access to a resource in a resource distribution network

1. A method, comprising:

sending, by a headend system, provisioning data to a meter via at least a mesh network, wherein the provisioning data is configured to cause the meter to operate in a mode for accepting time-based tokens, and wherein the meter is installed at a geographical location and configured to control a connection of premises associated with the meter to a resource distribution network;

receiving, by the headend system, a request to generate a time-based token for the meter with a time duration;

generating, by the headend system, the time-based token based on an identifier of the meter and the time duration; and

transmitting, by the headend system, the time-based token to the meter over at least the mesh network, wherein the time-based token is usable by the meter to connect or disconnect the premises from the resource distribution network based on the time duration associated with the time-based token.

2. The method of claim 1 , wherein the time-based token further comprises an integrity field generated by encrypting at least an identifier of the meter, wherein the integrity field is useable by the meter to validate the time-based token.

3. The method of claim 2 , further comprising generating a serial number for the time-based token and including at least a portion of the serial number in the time-based token, wherein

the integrity field of the time-based token is further generated by encrypting at least the serial number of the time-based token and the identifier of the meter.

4. The method of claim 1 , further comprising:

in response to receiving an event message from the meter that comprises a particular time-based token, verifying that the particular time-based token specified in the event message was generated by the headend system; and

in response to determining that the particular time-based token was not generated by the headend system, transmitting to the meter a notification indicating that the time-based token was not generated by the headend system, wherein the notification causes the meter to connect or disconnect the premises from the resource distribution network based on a balance associated with the meter.

5. The method of claim 1 , further comprising:

receiving a response from the meter, wherein the response comprises one or more of the time-based token, a status of the time-based token, or a status of the meter, wherein the status of the time-based token comprises an accepted status or a rejected status, and wherein the status of the meter comprises a disconnected status or a connected status.

6. The method of claim 1 , wherein the meter connecting or disconnecting the premises from the resource distribution network based on the time duration associated with the time-based token comprises:

validating the time-based token by determining whether the time-based token is generated for the meter based on information related to an identifier of the meter; and

in response to determining that the time-based token is valid, connecting, by the meter, premises associated with the meter to a resource distribution network for at least a time duration specified in the time-based token.

7. The method of claim 1 , wherein the meter connecting or disconnecting the premises from the resource distribution network based on the time duration associated with the time-based token comprises:

in response to determining that the time duration associated with the time-based token has passed, determining a balance associated with the meter; and

disconnecting the premises associated with the meter from the resource distribution network in response to determining that the balance associated with the meter is below a threshold value.

8. A system, comprising:

a processor; and

a non-transitory computer-readable medium storing instructions which are executable by the processor to cause the processor to perform operations comprising:

sending provisioning data to a meter via at least a mesh network, wherein the provisioning data is configured to cause the meter to operate in a mode for accepting time-based tokens, and wherein the meter is installed at a geographical location and configured to control a connection of premises associated with the meter to a resource distribution network;

receiving a request to generate a time-based token for the meter with a time duration;

generating the time-based token based on an identifier of the meter and the time duration; and

transmitting the time-based token to the meter over at least the mesh network,

wherein the time-based token is usable by the meter to connect or disconnect the premises from the resource distribution network based on the time duration associated with the time-based token.

9. The system of claim 8 , wherein the time-based token further comprises an integrity field generated by encrypting at least an identifier of the meter, wherein the integrity field is useable by the meter to validate the time-based token.

10. The system of claim 9 , further comprising generating a serial number for the time-based token and including at least a portion of the serial number in the time-based token, wherein

the integrity field of the time-based token is further generated by encrypting at least the serial number of the time-based token and the identifier of the meter.

11. The system of claim 8 , further comprising:

in response to receiving an event message from the meter that comprises a particular time-based token, verifying that the particular time-based token specified in the event message was generated by a headend system; and

in response to determining that the particular time-based token was not generated by the headend system, transmitting to the meter a notification indicating that the time-based token was not generated by the headend system, wherein the notification causes the meter to connect or disconnect the premises from the resource distribution network based on a balance associated with the meter.

12. The system of claim 8 , further comprising:

receiving a response from the meter, wherein the response comprises one or more of the time-based token, a status of the time-based token, or a status of the meter, wherein the status of the time-based token comprises an accepted status or a rejected status, and wherein the status of the meter comprises a disconnected status or a connected status.

13. The system of claim 8 , wherein the meter connecting or disconnecting the premises from the resource distribution network based on the time duration associated with the time-based token comprises:

validating the time-based token by determining whether the time-based token is generated for the meter based on information related to an identifier of the meter; and

in response to determining that the time-based token is valid, connecting, by the meter, premises associated with the meter to a resource distribution network for at least a time duration specified in the time-based token.

14. The system of claim 8 , wherein the meter connecting or disconnecting the premises from the resource distribution network based on the time duration associated with the time-based token comprises:

in response to determining that the time duration associated with the time-based token has passed, determining a balance associated with the meter; and

disconnecting the premises associated with the meter from the resource distribution network in response to determining that the balance associated with the meter is below a threshold value.

15. A non-transitory computer-readable medium storing instructions which are executable by a processor to cause the processor to perform operations comprising:

sending provisioning data to a meter via at least a mesh network, wherein the provisioning data is configured to cause the meter to operate in a mode for accepting time-based tokens, and wherein the meter is installed at a geographical location and configured to control a connection of premises associated with the meter to a resource distribution network;

receiving a request to generate a time-based token for the meter with a time duration;

generating the time-based token based on an identifier of the meter and the time duration; and

transmitting the time-based token to the meter over at least the mesh network, wherein the time-based token is usable by the meter to connect or disconnect the premises from the resource distribution network based on the time duration associated with the time-based token.

16. The non-transitory computer-readable medium of claim 15 , wherein the time-based token further comprises an integrity field generated by encrypting at least an identifier of the meter, wherein the integrity field is useable by the meter to validate the time-based token.

17. The non-transitory computer-readable medium of claim 16 , further comprising generating a serial number for the time-based token and including at least a portion of the serial number in the time-based token, wherein

the integrity field of the time-based token is further generated by encrypting at least the serial number of the time-based token and the identifier of the meter.

18. The non-transitory computer-readable medium of claim 15 , further comprising:

in response to receiving an event message from the meter that comprises a particular time-based token, verifying that the particular time-based token specified in the event message was generated by a headend system; and

in response to determining that the particular time-based token was not generated by the headend system, transmitting to the meter a notification indicating that the time-based token was not generated by the headend system, wherein the notification causes the meter to connect or disconnect the premises from the resource distribution network based on a balance associated with the meter.

19. The non-transitory computer-readable medium of claim 15 , further comprising:

receiving a response from the meter, wherein the response comprises one or more of the time-based token, a status of the time-based token, or a status of the meter, wherein the status of the time-based token comprises an accepted status or a rejected status, and wherein the status of the meter comprises a disconnected status or a connected status.

20. The non-transitory computer-readable medium of claim 15 , wherein the meter connecting or disconnecting the premises from the resource distribution network based on the time duration associated with the time-based token comprises:

validating the time-based token by determining whether the time-based token is generated for the meter based on information related to an identifier of the meter; and

in response to determining that the time-based token is valid, connecting, by the meter, premises associated with the meter to a resource distribution network for at least a time duration specified in the time-based token.