IP Library › Granted Patent US 12,289,344
Granted Patent B2
US 12,289,344 · App. 18/046,671 · Granted Apr 29, 2025

Cybersecurity in electric power systems

Inventors: Gregary C. Zweigle (Pullman, WA); Eric J. Hewitt (Moscow, ID); Matthew J. Halladay (Moscow, ID)
Assignee: Schweitzer Engineering Laboratories, Inc.
H04L63/20H04L63/105H04L63/164
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,289,344
App. No.
18/046,671
Granted
Apr 29, 2025
Kind
B2
Abstract

Disclosed herein are systems, devices, and methods for improving cybersecurity in electric power systems. In one embodiment, a local controller configured for use in an electric power system may include a measurement subsystem to receive a plurality of conditions related to electrical conditions in a microgrid. A communication subsystem may communicate a set of data related to conditions in the microgrid to a remote controller; and receive a plurality of requests for control actions from the remote controller. An analysis subsystem may generate an assessment of the plurality of requests for control actions in relation to the plurality of conditions related to electrical conditions in the microgrid and identify a subset of the plurality of requests for control actions from the remote controller for execution based on the assessment. A control action subsystem may then issue a control action to an asset in the microgrid.

Claims (34)

1. A local controller system configured for use in an electric power system, comprising:

a measurement subsystem to receive a plurality of conditions related to electrical conditions in a microgrid;

a communication subsystem to:

transmit a set of data related to conditions in the microgrid to a remote controller using a data diode connected to the local controller system to allow the transfer of data in only one direction such that the data diode physically ensures that communication from the local controller system to the remote controller includes no possibility of a hidden alternate path back to the local controller system through a downstream path; and

receive a plurality of requests in a non-routable fixed format for control actions from the remote controller;

an analysis subsystem to:

generate an assessment of the plurality of requests for control actions in relation to the plurality of conditions related to electrical conditions in the microgrid; and

identify a subset of the plurality of requests for control actions from the remote controller for execution based on the assessment; and

a control action subsystem to issue a control action to an asset in the microgrid corresponding to the subset of the plurality of requests for control actions from the remote controller.

2. The local controller system of claim 1 , wherein the local controller is configured to treat the plurality of requests for control actions from the remote controller as an untrusted stream of requests.

3. The local controller system of claim 1 , wherein the local controller system is configured to communicate with the remote controller via a non-routable communication protocol.

4. The local controller system of claim 3 , wherein the non-routable communication protocol comprises a plurality of fixed format data values.

5. The local controller system of claim 4 , wherein the non-routable communication protocol is configured to be transmitted via a serial data connection.

6. The local controller system of claim 1 , wherein the communication subsystem is configured to interface with an IT security and communication device.

7. The local controller system of claim 6 , wherein the IT security and communication device is configured to connect to the Internet.

8. The local controller system of claim 1 , wherein the communication subsystem comprises a data diode.

9. The local controller system of claim 8 , wherein the data diode comprises a plurality of logic gates coupled to a plurality of data storage elements.

10. The local controller system of claim 9 , wherein the plurality of data storage elements comprises a disable feature accessible to an operator.

11. A method of controlling a microgrid using a local controller system, comprising:

receiving, using a measurement subsystem, a plurality of conditions related to electrical conditions in a microgrid;

transmitting, using a communication subsystem, a set of data related to conditions in the microgrid to a remote controller using a data diode connected to the local controller system to allow the transfer of data in only one direction such that the data diode physically ensures that communication from the local controller system to the remote controller includes no possibility of a hidden alternate path back to the local controller system through a downstream path;

receiving, using the communication subsystem, a plurality of requests for control actions from the remote controller;

generating, using an analysis subsystem, an assessment of the plurality of requests for control actions in relation to the plurality of conditions related to electrical conditions in the microgrid;

identifying, using the analysis subsystem, a subset of the plurality of requests for control actions from the remote controller for execution based on the assessment; and

selectively implementing, using a control action subsystem, a subset of the plurality of requests for control actions from the remote controller based on the assessment.

12. The method of claim 11 , further comprising the local controller system treating the plurality of requests for control actions from the remote controller as an untrusted stream of requests.

13. The method of claim 11 , further comprising communicating the set of data related to conditions in the microgrid to a remote controller and the plurality of requests for control actions from the remote controller using a non-routable communication protocol.

14. The method of claim 13 , wherein the non-routable communication protocol comprises a plurality of fixed format data values.

15. The method of claim 14 , further comprising transmitting the non-routable communication protocol via a serial data connection.

16. The method of claim 11 , further comprising interfacing the communication subsystem with an IT security and communication device.

17. The method of claim 16 , wherein the IT security and communication device is configured to connect to the Internet.

18. The method of claim 11 , wherein the communication subsystem comprises a data diode.

19. The method of claim 18 , wherein the data diode comprises a plurality of logic gates coupled to a plurality of data storage elements.

20. The method of claim 19 , wherein the plurality of data storage elements comprises a disable feature accessible to an operator.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 14, 2022
From: ZWEIGLE, GREGARY C.; HEWITT, ERIC J.; HALLADAY, MATTHEW J.
To: SCHWEITZER ENGINEERING LABORATORIES, INC.
Reel/Frame 061427/0279 →
Continuity (1)
Related Publication 20240129339A1 · Apr 18, 2024
References Cited (54)
US 9406094B2 · Kearns · 2016 [cited by applicant]
US 9917442B2 · Beauregard · 2018 [cited by applicant]
US 10021072B2 · Ishigaki · 2018 [cited by examiner]
US 11518255B2 · Kohn · 2022 [cited by examiner]
US 20150311721A1 · Uppal · 2015 [cited by applicant]
US 20200371540A1 · Kearns · 2020 [cited by applicant]
Chee-Wooi Ten, Govindarasu Manimaran, Chen-Ching Liu, “Cybersecurity for Critical Infastructures: Attack and Defense Modeling” IEEE Transactions on Systems, Man, and Cybemetics—Part A: Systems and Humans, vol. 40, No. 4… [cited by applicant]
Peter Firstbrook, et. al. “Top Trends in Cybersecurity 2022” Gartner. Feb. 18, 2022. [cited by applicant]
“The Future of Electric Power in the United States” National Academies of Sciences, Engineering, and Medicine., The National Academies Press. 2021. https://doi.org/10.17226/25968. [cited by applicant]
22nd Annual Global Automative Executive Survey 2021. KPMG. Nov. 2021. [cited by applicant]
Joe Loughry, David A. Umphress “Information Leakage from Optical Emanations” ACM Transactions on Information and System Security, vol. 5, No. 3, Aug. 2002. [cited by applicant]
IEEE Draft Guide for Distributed Energy Resources Management Systems (DERMS) Functional Specification. IEEE. Feb. 2021. [cited by applicant]
Western Energy Imbalance Market Benefits Report First Quarter 2022. California ISO, Apr. 2022. [cited by applicant]
Mirrored Bits® Communications, Schweitzer Engineering Laboratories, Inc. Jun. 2018. [cited by applicant]
Mehul Joshi, et al. “Integrated Power Management and Protection System for a Remotely Located Islanded Facility” Presented at the 48th Annual Western Protective Relay Conference Oct. 2021. [cited by applicant]
Kendall E. Nygard, et al. “Decision Support Independence in a Smart Grid” Energy 2012: The Second International Conference on Smart Grids, Green Communications and IT Energy-Aware Technologies, Mar. 2012, pp. 69-74, IAR… [cited by applicant]
A. Arulampalam et al. “Control of power electronic interfaces in distributed generation Microgrids.” Journal. Sep. 2004. pp. 503-523. vol. 91. Taylor & Francis Ltd. [cited by applicant]
Advenica. “SecuriCDS Zone Guard Platform.” Informational Sheet. Oct. 2017.Advenica AB. [cited by applicant]
Waterfall. “Flip.” Product Brochure. Jul. 2018. Waterfall Security Solutions Ltd. [cited by applicant]
Opswat. “Security Gateway Solutions Powering Risk-Free IT-OT Communications.” Jan. 2022. OPSWAT Inc. [cited by applicant]
Arbit. “Arbit Trust Gateway.” Paper. May 20, 2019. pp. 1-4. Whitepaper. [cited by applicant]
Infodas. “SDoT Security Gateway & Security Gateway Express.” retrieved on Dec. 30, 2022 from https://www.infodas.com/en/products/sdot_cross_domain_solutions/security-gateway-ieg-guard/. [cited by applicant]
Binary Armor. “SCADA Network Guard Info Sheet.” Dec. 2020. Sierra Nevada Corporation. [cited by applicant]
Terafence. “TF MBsecure+.” Terafence Ltd. Retrieved on Feb. 24, 2022 from https://terafence.com/product/terafence-mbsecure/#. [cited by applicant]
Trimark. “Trimark SCADA integration.” Jul. 2019. Information Sheet. Trimark Associates, Inc. [cited by applicant]
Transmission and Distribution Committee of the IEEE Power and Energy Society. “IEEE Guide for Distributed Energy Resources Management Systems (DERMS) Functional Specification.” Apr. 29, 2021. The Institute of Electrical… [cited by applicant]
Mark Apperley, et al. “Grid-Lite: A Network Integrated Semi-autonomous Local Area Electricity System” Proceedings of the Fouth International Conference on Green IT Solutions, Jul. 6, 2015, pp. 27-33, SCITEPRESS—Science … [cited by applicant]
S. Sridhar, A. Hahn, and M. Govindarasu, “Cyber-Physical System Security for the Electric Power Grid,” in Proceedings of the IEEE, vol. 100, No. 1, pp. 210-224, Jan. 2012. [cited by applicant]
L. Piètre-Cambacédès, M. Tritschler and G. N. Ericsson, “Cybersecurity Myths on Power Control Systems: 21 Misconceptions and False Beliefs,” in IEEE Transactions on Power Delivery, vol. 26, No. 1, pp. 161-172, Jan. 2011. [cited by applicant]
S. McLaughlin et al., “The Cybersecurity Landscape in Industrial Control Systems,” in Proceedings of the IEEE, vol. 104, No. 5, pp. 1039-1057, May 2016. [cited by applicant]
S. V. Kartalopoulos, “NIS03-2: Optical Network Security: Sensing Eavesdropper Intervention,” IEEE Globecom 2006. [cited by applicant]
Quan Zhou, et al.“Cross-Layer Distributed Control Strategy for Cyber Resilient Microgrids,” IEEE Transactions on Smart Grids, 2021. [cited by applicant]
Mohammadreza F.M. Arani, et al “Modeling and Simulation of the Aurora Attack on Microgrid Point of Common Coupling,” 2019 7th Workshop on Modeling and Simulation of Cyber-Physical Energy Systems. [cited by applicant]
Ahmed Saad, et al “On the Implementation of IoT-Based Digital Twin for Networked Microgrids Resiliency Against Cyber Attacks,” IEEE Transactions on Smart Grids, vol. 11, No. 6, Nov. 2020. [cited by applicant]
Suman Rath, et al “A Cyber-Secure Distributed Control Architecture for Autonomous AC Microgrid,” IEEE Systems Journal, vol. 15, No. 3, Sep. 2021. [cited by applicant]
Zhiyi Li, Mohammad Shahidehpour, Farrokh Aminifar , “Cybersecurity in Distributed Power Systems,” Proceedings of the IEEE, vol. 105, No. 7, Jul. 2017. [cited by applicant]
Hal Berghel, “A Farewell to Air Gaps, Part 1,” Computer, IEEE Computer Society, vol. 48, No. 6, pp. 64-68, Jun. 2015. [cited by applicant]
Hal Berghel, “A Farewell to Air Gaps, Part 2,” Computer, IEEE Computer Society, vol. 48, No. 7, pp. 59-63, Jul. 2015. [cited by applicant]
Ralph Langner, “Stuxnet: Dissecting a Cyberwarfare Weapon,” in IEEE Computer and Reliability Societies vol. 9, No. 3, pp. 49-51, May-Jun. 2011. [cited by applicant]
Mordechai Guri, Boris Zadov, and Yuval Elovici, “Odini: Escaping sensitive data from faraday-caged, air-gapped computers via magnetic fields,” IEEE Transactions on Information Forensics and Security, vol. 15, 2020. [cited by applicant]
Prashanth Krishnamurthy, et al., “Process-aware covert channels using physical instrumentation in cyber-physical systems,” IEEE Transactions on Information Forensics and Security, vol. 13, No. 11, pp. 2761-2771, Nov. 20… [cited by applicant]
J. Hu, S. You, M. Lind, and J. Østergaard, “Coordinated Charging of Electric Vehicles for Congestion Prevention In the Distribution Grid,” in IEEE Transactions on Smart Grid, vol. 5, No. 2, pp. 703-711, Mar. 2014. [cited by applicant]
Xinghuo Yu and Yusheng Xue, “Smart Grids: A Cyber-Physical Systems Perspective,” in Proceedings of the EEE, vol. 104, No. 5, pp. 1058-1070, May 2016. [cited by applicant]
D. Pliatsios, P. Sarigiannidis, T. Lagkas and A. G. Sarigiannidis, “A Survey on SCADA Systems: Secure Protocols, Incidents, Threats and Tactics,” in IEEE Communications Surveys & Tutorials, vol. 22, No. 3, pp. 1942-1976… [cited by applicant]
R. W. Waldele, “Tales of Power System Failures: A Look at the Unusual, Strange, and Downright Bizarre Causes,” in IEEE Power and Energy Magazine, vol. 14, No. 6, pp. 18-23, Nov.-Dec. 2016. [cited by applicant]
X. Li, X. Liang, R. Lu, X. Shen, X. Lin, and H. Zhu, “Securing smart grid: cyber-attacks, countermeasures, and challenges,” in IEEE Communications Magazine, vol. 50, No. 8, pp. 38-45, Aug. 2012. [cited by applicant]
L. Williams, G. McGraw, and S. Migues, “Engineering Security Vulnerability Prevention, Detection, and Response,” in IEEE Software, vol. 35, No. 5, pp. 76-80, Sep./Oct. 2018. [cited by applicant]
K. G. Ravikumar, T. Alghamdi, J. Bugshan, S. Manson and S. K. Raghupathula, “Complete power management system for an industrial refinery,” 2015 IEEE Petroleum and Chemical Industry Committee Conference (PCIC), 2015. [cited by applicant]
Z. Li, M. Shahidehpour, F. Aminifar, A. Alabdulwahab and Y. Al-Turki, “Networked Microgrids for Enhancing the Power System Resilience,” in Proceedings of the IEEE, vol. 105, No. 7, pp. 1289-1310, Jul. 2017. [cited by applicant]
M. Shahidehpour, Z. Li, S. Bahramirad, Z. Li and W. Tian, “Networked Microgrids: Exploring the Possibilities of the IIT-Bronzeville Grid,” in IEEE Power and Energy Magazine, vol. 15, No. 4, pp. 63-71, Jul.-Aug. 2017. [cited by applicant]
E. Harmon, U. Ozgur, M. H. Cintuglu, R. De Azevedo, K. Akkaya and O. A. Mohammed, “The Internet of Microgrids: A Cloud-Based Framework for Wide Area Networked Microgrids,” in IEEE Transactions on Industrial Informatics,… [cited by applicant]
Haibo You, V. Vittal and Zhong Yang, “Self-healing in power systems: an approach using islanding and rate of frequency decline-based load shedding,” in IEEE Transactions on Power Systems, vol. 18, No. 1, pp. 174-181, Fe… [cited by applicant]
F. Katiraei, C. Abbey, S. Tang, and M. Gauthier, “Planned islanding on rural feeders—utility perspective,” 2008 IEEE Power and Energy Society General Meeting—Conversion and Delivery of Electrical Energy in the 21st Cent… [cited by applicant]
B. Jeon and J. Na, “A study of cyber security policy in industrial control system using data diodes,” 2016 18th International Conference on Advanced Communication Technology (ICACT), 2016, pp. 314-317. [cited by applicant]